v2.3.1

Bug Fixes

• Fix #592: Referrers tag index is not updated when all referrers are removed and GC is skipped
• Fix #600: sibling() is copying a sync.Mutex
• Fix #552: OnCopySkipped is called unexpectedly on root node when using oras.Copy

Other Changes

• Update the Go support window to [1.20, 1.21] (#587)
• Upgrade image-spec to v1.1.0-rc5 (#615)
• Backport #618: Optimize the authentication workflow for Repository.Manifests().Delete() (#623)

Detailed Commits

• Add SECURITY.md file by @TerryHowe in #579
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #585
• build: bump go version by @Wwwsylvia in #587
• fix: push an empty index when deleting the last referrer with SkipReferrersGC by @Wwwsylvia in #593
• fix: Avoid a copy of sync.Mutex in Repository by @ktarplee in #603
• fix: correctly handle OnCopySkipped by @Wwwsylvia in #609
• build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 by @dependabot in #611
• build: bump github.com/opencontainers/image-spec to v1.1.0-rc5 by @Wwwsylvia in #615
• perf: reduce auth request count for manifest delete by @Wwwsylvia in #618

New Contributors

• @ktarplee made their first contribution in #603

Full Changelog: v2.3.0...v2.3.1