[ANNOUNCE] Release 4.4

[Jan Kiszka]

Hi all,

A new release 4.4 is available. A big thanks to all contributors:
Christopher Larson, Felix Moessbauer, Jan Kiszka, Marek Vasut

Highlights in 4.4
- kas: Auto-import runner-provided .gitconfig also inside GitLab-CI
- kas: Auto-inject git credentials on gitlab ci
- kas: Add --keep-config-unchanged to preserve repos and configs on actions
- kas: Fix --skip'ing multiple steps
- kas: List --skip'able steps in --help
- kas: Add support for shallow clones
- kas: Add support to create provenance build attestations
- kas: Add config key to describe build artifacts (used by attestation)
- kas: Add option to dump-plugin to include VCS info of local repos
- kas-container: Handle missing extra argument in subcommands gracefully
- kas-container: improve container reproduction using git commit date
- docs: Several format improvements
- docs: Add simple examples

Don't be surprised to find CI for the master branch broken. There is
some glitch for release builds, practically not affecting the released
images. Will get fixed before the next version.

Thanks,
Jan

PS: Note that I'm using a fresh PGP key
(004C647D7572CF7D72BDB4FB699D850A9F417BD8) for signing.

https://github.com/siemens/kas/releases/tag/4.4
(cfb13725fb2f16472dac103c29f02ee676a45a23)
https://github.com/orgs/siemens/packages/container/package/kas%2Fkas
(ghcr.io/siemens/kas/kas:4.4@sha256:0bd8643166f22ad154d8a1cf9e56e9fb94fc08f6e03f42bba0110da8860b554f)
https://github.com/orgs/siemens/packages/container/package/kas%2Fkas-isar
(ghcr.io/siemens/kas/kas-isar:4.4@sha256:4b171b10964f8094430f9ba92db3d084e551a20e7f3509b75abf3a707f277ef3)


Christopher Larson (7):
fix(setup_parser_common_args): fix the --skip type
show steps for the --skip argument in --help
split adding the -k arg into a common function
avoid the need for runtime handling of -k
build: add the --keep-config-unchanged arg
for-all-repos: add the --keep-config-unchanged arg
tests: add simple initial test for the -k arg

Felix Moessbauer (37):
docs: major refactoring of document structure
docs: make man pages more standard
use private homedir in tests
use decoupled but minimal git env in tests
repos: try to resolve url and commit of local repos
repos: add property to check if repo is dirty
dump-plugin: add option to include VCS info of local repos
add tests for resolving of local repos
add artifacts key to describe build artifacts
add test for artifacts logic
refactor: move MissingModuleError to kasusererror.py
add support to create provenance build attestations
add test for provenance attestation
kas-container: forward provenance argument to kas
attestation: improve warning message on no artifacts
attestation: document provenance=true as well
only warn about artifact timestamp on attestation
do not always require artifacts to be generated
docs(attestation): add references to sigstore
ci: upload to current project registry
ci: update buildkit-cache-dance action to v3.1.0
ci: add build attestations for container images
document how to inject git credentials in common CI systems
use .gitconfig in well-known CI systems
auto-inject git credentials on gitlab ci
add test for gitlab-ci git rewrite logic
docs: correct spelling of GitHub and GitLab
ci: pin debian container based on commit date
ci: redact non-reproducible annotations of container
ci: drop buildkit provenance attestations
drop conditional parts from getting-started guide
make image-test project config less minimal
use image tests as full-blown examples
git: only fetch requested tag
ci: enable shallow-cloning for container tests
tests: remove unused refspec config
reduce test execution time by using shallow clones

Jan Kiszka (6):
docs: Improve section headline for plugins
kas-container: Handle missing extra argument in subcommands gracefully
tests: Update poky and isar references
kas-container: Move default variable initialization up in file
scripts: Include commit and container SHAs in release email
Release 4.4

Marek Vasut (1):
repos: Add KAS_CLONE_DEPTH to implement git shallow clone/fetch


--
Siemens AG, Technology
Linux Expert Center

[Jan Kiszka]

OK, signing this email was a nice idea but cannot work: The list mangles
the message, appending a footer and, thus, invalidating my signature.

Anyway, the tag is signed, and anyone should be able to bit-identically
reproduce the containers.

Jan