Update oras

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

Author: prabhu

pyproject.toml

@@ -52,8 +52,8 @@ dev = [
     "pytest",
     "pytest-cov",
 ]
-oras = ["oras==0.1.30"]
-all = ["oras==0.1.30"]
+oras = ["oras>=0.2.25"]
+all = ["oras>=0.2.25"]
 
 [tool.setuptools]
 packages = ["vdb", "vdb.lib", "vdb.lib.cve_model"]

uv.lock

@@ -2,45 +2,16 @@
 import tarfile
 
 import oras.client
-import oras.provider
 from oras.logger import setup_logger
 
-
 setup_logger(quiet=True, debug=False)
 
 
-class VdbDistributionRegistry(oras.provider.Registry):
-    """
-    We override the default registry to make things compatible with ghcr. Without this, the below error is thrown.
-
-    jsonschema.exceptions.ValidationError: Additional properties are not allowed ('artifactType' was unexpected)
-    """
-
-    def get_manifest(self, container, allowed_media_type=None, refresh_headers=True):
-        """
-        Retrieve a manifest for a package.
-
-        :param container:  parsed container URI
-        :type container: oras.container.Container or str
-        :param allowed_media_type: one or more allowed media types
-        :type allowed_media_type: str
-        """
-        if not allowed_media_type:
-            allowed_media_type = [oras.defaults.default_manifest_media_type]
-        headers = {"Accept": ";".join(allowed_media_type)}
-
-        get_manifest = f"{self.prefix}://{container.manifest_url()}"  # type: ignore
-        response = self.do_request(get_manifest, "GET", headers=headers)
-        self._check_200_response(response)
-        manifest = response.json()
-        return manifest
-
-
 def download_image(target, outdir):
     """
     Method to download vdb files from a oci registry
     """
-    oras_client = oras.client.OrasClient(registry=VdbDistributionRegistry())
+    oras_client = oras.client.OrasClient()
     paths_list = oras_client.pull(
         target=target,
         outdir=outdir,