ghcr-cleanup-manager 1.1.1 → 1.1.3

package/CHANGELOG.md

@@ -7,6 +7,23 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [v1.1.3] - 2026-07-01
+
+### Changed
+
+- Digest-tag helper edges now ignore self-references from a digest-tagged artifact back to its own manifest.
+- The visualizer details view now shows `sha256-*` tags. These tags are still hidden in the graph itself.
+
+### Fixed
+
+- Visualizer docs and package-name references now consistently use `ghcr-cleanup-manager-visualizer`.
+
+## [v1.1.2] - 2026-06-14
+
+### Changed
+
+- Reissued v1.1.1 as v1.1.2 after a partial publish to npmjs.com.
+
 ## [v1.1.1] - 2026-06-14
 
 ### Changed

package/README.md

@@ -9,14 +9,14 @@ GHCR Cleanup Manager is a GHCR cleanup action for GitHub Container Registry pack
 
 GHCR Cleanup Manager is a GitHub Action for:
 
-- clean GHCR packages: including tagged and untagged images
-- preview cleanup: with `dry-run` before making changes
-- scan GHCR packages: into SQLite database artifacts
-- visualize GHCR package graphs: and their changes with the
-  [ghcr-cleanup-manager-visualizer](https://github.com/ghcr-manager/ghcr-cleanup-manager/blob/main/visualizer/README.md)
+- clean GHCR packages including tagged and untagged images
+- preview cleanup with `dry-run` before making changes
+- scan GHCR packages into SQLite database artifacts
+- visualize GHCR package graphs and their changes with the
+  [visualizer](https://github.com/ghcr-manager/ghcr-cleanup-manager/blob/main/visualizer/README.md)
 
-It is built for safe GHCR cleanup on real OCI package graphs, including multi-arch images, attestations, cosign
-signatures, and other referrers that simpler GHCR cleanup actions often mishandle.
+It is built for safe GHCR cleanup on OCI package graphs, including multi-arch images, attestations, cosign signatures,
+and other referrers that simpler GHCR cleanup actions often mishandle.
 
 [![Example compare view: red-bordered manifests are present in the older scan and removed in the newer one.](https://raw.githubusercontent.com/ghcr-manager/ghcr-cleanup-manager/main/docs/images/visualizer/graph-2images-cosign--wide.png "Example compare view: red-bordered manifests are present in the older scan and removed in the newer one.")](https://github.com/ghcr-manager/ghcr-cleanup-manager/blob/main/docs/images/visualizer/graph-2images-cosign--wide.png)
 
@@ -41,7 +41,7 @@ jobs:
 
       - name: Preview GHCR cleanup
         id: ghcr-cleanup-manager
-        uses: ghcr-manager/ghcr-cleanup-manager@v1.1.1
+        uses: ghcr-manager/ghcr-cleanup-manager@v1.1.3
         with:
           command: cleanup
           token: ${{ github.token }}
@@ -49,7 +49,7 @@ jobs:
           package: PACKAGE
           dry-run: true
           delete-untagged: true
-          keep-n-tagged: "10"
+          keep-n-tagged: 10
           exclude-tags: |
             latest
           upload-artifacts: true
@@ -84,7 +84,7 @@ The action supports two commands:
 ### Preview cleanup
 
 ```yaml
-- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.1
+- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.3
   with:
     command: cleanup
     token: ${{ github.token }}
@@ -95,7 +95,7 @@ The action supports two commands:
       pr-.*
     use-regex: true
     older-than: 30 days
-    keep-n-tagged: "5"
+    keep-n-tagged: 5
     exclude-tags: |
       latest
       stable
@@ -105,14 +105,14 @@ The action supports two commands:
 ### Apply cleanup
 
 ```yaml
-- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.1
+- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.3
   with:
     command: cleanup
     token: ${{ github.token }}
     owner: OWNER
     package: PACKAGE
     delete-untagged: true
-    keep-n-tagged: "10"
+    keep-n-tagged: 10
     upload-artifacts: true
     scan-after-cleanup: true
 ```
@@ -127,7 +127,7 @@ off `dry-run`.
 ### Scan one package
 
 ```yaml
-- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.1
+- uses: ghcr-manager/ghcr-cleanup-manager@v1.1.3
   with:
     command: scan
     token: ${{ github.token }}

package/dist/db/_manifest-reachability.js

@@ -9,7 +9,8 @@ export function rebuildManifestReachability(database, scanId) {
         parentDigestsByChild.set(digest, new Set());
         neighborDigestsByDigest.set(digest, new Set());
     }
-    for (const manifestEdge of _loadManifestEdges(database, scanId)) {
+    const manifestEdges = _loadManifestEdges(database, scanId);
+    for (const manifestEdge of manifestEdges) {
         childDigestsByParent.get(manifestEdge.parent_digest)?.add(manifestEdge.child_digest);
         parentDigestsByChild.get(manifestEdge.child_digest)?.add(manifestEdge.parent_digest);
         neighborDigestsByDigest.get(manifestEdge.parent_digest)?.add(manifestEdge.child_digest);
@@ -55,7 +56,7 @@ export function rebuildManifestReachability(database, scanId) {
         }
     }
     if (descendantDistancesByDigest.size !== manifestDigests.length) {
-        throw new Error("manifest reachability build detected a cycle in manifest_edges");
+        throw new Error(_buildCycleErrorMessage(manifestDigests, remainingChildrenCount, manifestEdges));
     }
     const insertRow = database.prepare(`
       INSERT OR REPLACE INTO manifest_reachability(
@@ -131,6 +132,7 @@ function _refreshDigestTagEdges(database, scanId) {
          AND child_manifest.digest = 'sha256:' || SUBSTR(t.tag, 8, 64)
         WHERE t.scan_id = ?
           AND t.is_digest_tag = 1
+          AND m.digest != child_manifest.digest
       `)
         .run(scanId);
 }
@@ -143,13 +145,23 @@ function _loadManifestDigests(database, scanId) {
 function _loadManifestEdges(database, scanId) {
     return database
         .prepare(`
-        SELECT DISTINCT parent_digest, child_digest
+        SELECT DISTINCT parent_digest, child_digest, edge_kind
         FROM manifest_edges
         WHERE scan_id = ?
-        ORDER BY parent_digest, child_digest
+        ORDER BY parent_digest, child_digest, edge_kind
       `)
         .all(scanId);
 }
+function _buildCycleErrorMessage(manifestDigests, remainingChildrenCount, manifestEdges) {
+    const unresolvedDigests = new Set(manifestDigests.filter((digest) => (remainingChildrenCount.get(digest) ?? 0) > 0));
+    const unresolvedDigestList = Array.from(unresolvedDigests).join(", ");
+    for (const edge of manifestEdges) {
+        if (unresolvedDigests.has(edge.parent_digest) && unresolvedDigests.has(edge.child_digest)) {
+            return `manifest reachability build detected a cycle in manifest_edges; example unresolved edge: ${edge.parent_digest} --${edge.edge_kind}--> ${edge.child_digest}; unresolved digests: ${unresolvedDigestList}`;
+        }
+    }
+    return `manifest reachability build detected a cycle in manifest_edges; unresolved digests: ${unresolvedDigestList}`;
+}
 function _setMinDistance(distances, digest, distance) {
     const currentDistance = distances.get(digest);
     if (currentDistance === undefined || distance < currentDistance) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "ghcr-cleanup-manager",
   "description": "GHCR Cleanup Manager: GitHub Action and CLI for safe GitHub Container Registry cleanup and inspection.",
   "homepage": "https://github.com/ghcr-manager/ghcr-cleanup-manager#readme",
-  "version": "v1.1.1",
+  "version": "v1.1.3",
   "license": "MIT",
   "type": "module",
   "keywords": [
@@ -68,7 +68,7 @@
     "eslint": "^10.2.1",
     "eslint-plugin-yml": "^3.4.0",
     "globals": "^17.5.0",
-    "markdownlint-cli2": "^0.22.1",
+    "markdownlint-cli2": "^0.23.0",
     "prettier": "^3.8.3",
     "tsx": "^4.20.6",
     "typescript": "^6.0.3",