Bump github.com/buildpacks/lifecycle from 0.17.2 to 0.20.0

[dependabot]

Bumps github.com/buildpacks/lifecycle from 0.17.2 to 0.20.0.

Release notes

Sourced from github.com/buildpacks/lifecycle's releases.

lifecycle v0.20.0

Welcome to v0.20.0, a release of the Cloud Native Buildpacks Lifecycle.

Prerequisites

The lifecycle runs as a normal user in a series of unprivileged containers. To export images and cache image layers, it requires access to a Docker (compatible) daemon or an OCI registry.

Install

Extract the .tgz file and copy the lifecycle binaries into a build image. The build image can then be orchestrated by a platform implementation such as the pack CLI or tekton.

Lifecycle Image

An OCI image containing the lifecycle binaries is available at buildpacksio/lifecycle:0.20.0.

Features

• The lifecycle, when encountering cache metadata for a layer that does not exist in the cache, will skip over the layer instead of failing the build (#1381 by @​joeybrown-sf)
• When using Platform API 0.14 or greater, the restorer restores cached launch layers even if they are not found in the previous image (#1346 by @​pbusko)
• When using Platform API 0.14 or greater, the restorer ensures read access to the run image selected by extensions (#1364 by @​pbusko)
• The lifecycle surfaces the error from the registry (when it fails to verify image permissions) as an error instead of a debug message (#1376 by @​natalieparellano)
• Bumps dependencies (#1375 and #1373)
• Updates go to version 1.22.5

Bugfixes

• The lifecycle, when populating target data for older platforms, populates OS & architecture as well as distro information (#1374 by @​natalieparellano)

Full Changelog: buildpacks/lifecycle@v0.19.7...release/0.20.0

Contributors

We'd like to acknowledge that this release wouldn't be as good without the help of the following amazing contributors:

@​edmorley, @​jabrown85, @​joeybrown-sf, @​natalieparellano, @​pbusko

lifecycle v0.19.7

Welcome to v0.19.7, a release of the Cloud Native Buildpacks Lifecycle.

Prerequisites

The lifecycle runs as a normal user in a series of unprivileged containers. To export images and cache image layers, it requires access to a Docker (compatible) daemon or an OCI registry.

Install

Extract the .tgz file and copy the lifecycle binaries into a build image. The build image can then be orchestrated by a platform implementation such as the pack CLI or tekton.

Lifecycle Image

... (truncated)

Commits

• df6be88 Recover corrupted cache (#1381)
• a87e12e Surface registry error (#1376)
• 12e2de8 Bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#1375)
• 4c40dca Bump the go-dependencies group across 1 directory with 6 updates (#1373)
• 04f1ad1 Fix CNB_TARGET_* env vars on older Platform API (#1374)
• f2a3bd7 Restore cached launch layers not found in appLayers (#1346)
• a02be03 Ensure read access to the run image selected by extensions (#1364)
• 7b5a8ec Bump the go-dependencies group across 1 directory with 5 updates (#1360)
• 36c0af0 Bump imgutil to pick up fixes for containerd and podman (#1361)
• 85b745c Bump azure/docker-login from 1 to 2 (#1359)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1703.