Cut a v0.10 release

[jdolitsky]

Currently using --image-refs flag, and causing issues for developers instructed to install ko.

Is there are holdup on cutting a release with this feature?

[imjasonh]

+1 from me. I think we had hoped to get more SBOM options and maybe signing in before the next release, but this is already so jam-packed I think we can just bump those to v0.11.

@jonjohnsonjr any concerns?

[imjasonh]

Looking at open PRs:

• Validate KO_CONFIG_PATH  #471 - needs rebase @tcnghia
• Include cred helpers in keychain #581 - I'd like to get in

Other than that, I think we're good to go?

[mattmoor]

+1 from me 🤩

The lack of release here came up with me encouraging Karpenter to use --image-refs and get free SBOMs.

[jdolitsky]

RELEASE THE KRAKEN

[imjasonh]

I'd like to! I think the only thing we're really waiting on is #586 which depends on awslabs/amazon-ecr-credential-helper#309

[mattmoor]

I think we are waiting on an ECR patch worth linking here

[imjasonh]

This is cut: https://github.com/google/ko/releases/tag/v0.10.0

All the goreleaser automation is currently ongoing: https://github.com/google/ko/runs/5236665242?check_suite_focus=true