v2.1.3-rc2

What's Changed

• [Feat]: Support for AWS ECR Authentication with Temporary Tokens by @tamilhce in #2907
• feat(sync): add tag excludeRegex filter by @vooon in #2906
• chore: fix dependabot alerts by @rchincha in #2922
• fix(sync): fixed harbor authentication issues on _catalog endpoint by @eusebiu-constantin-petu-dbk in #2891
• redis driver for blob cache information and metadb by @andaaron in #2865

New Contributors

• @tamilhce made their first contribution in #2907
• @vooon made their first contribution in #2906

Full Changelog: v2.1.3-rc1...v2.1.3-rc2

v2.1.3-rc1

What's Changed

• chore: fix dependabot alerts by @rchincha in #2904
• docs: fix ratelimit example by @rchincha in #2905
• fix(dynamodb): properly handle ResourceInUseException for existing tables by @andaaron in #2909

Full Changelog: v2.1.2...v2.1.3-rc1

v2.1.2

What's Changed

• fix(gc): gc now removes blob uploads which have not changed within the gc delay interval by @andaaron in #2599
• chore: fix dependabot alerts by @rchincha in #2594
• fix(authn): make hashing/encryption keys used to secure cookies by @eusebiu-constantin-petu-dbk in #2536
• chore: update go.mod deps by @rchincha in #2609
• chore: update go.mod deps by @rchincha in #2610
• chore: update UI version by @andaaron in #2611
• chore: fix dependencies by @rchincha in #2621
• chore: fix dependabot alerts by @rchincha in #2630
• chore: fix dependabot alerts by @rchincha in #2645
• fix: work around AWS S3 limits by @rchincha in #2629
• chore: fix dependabot alerts by @rchincha in #2648
• chore: fix dependabot alerts by @rchincha in #2664
• chore: fix dependabot alerts by @rchincha in #2670
• chore: fix dependabot alerts by @rchincha in #2681
• chore: upgrade trivy to v0.55.2 and update the logic of waiting for zot to start in some jobs by @andaaron in #2685
• ci: stop using the non-free 4-core runners by @rchincha in #2695
• chore: fix dependabot alerts by @rchincha in #2684
• fix(delete manifest): distinct behaviors for delete by tag vb delete by digest by @andaaron in #2626
• fix(metrics): update storage metrics on gc by @eusebiu-constantin-petu-dbk in #2698
• feat(graphql): Add LastPullTimestamp and PushTimestamp in ImageSummar… by @eusebiu-constantin-petu-dbk in #2699
• fix(s3): fix check in dedupe logic by @eusebiu-constantin-petu-dbk in #2700
• chore: fix dependabot alerts by @rchincha in #2709
• test: add more tests for GCing indexes referencing other indexes referencing manifests by @andaaron in #2716
• chore: reduce number of spurious log messages produced by GetNextDigestWithBlobPaths by @andaaron in #2727
• chore: fix dependabot alerts by @rchincha in #2729
• fix: max wait time on dynamodb by @vanhtuan0409 in #2730
• fix: issues with nested index processing in CVE and metaDB code by @andaaron in #2732
• chore: fix dependabot alerts by @rchincha in #2742
• chore: less confusing warning message when unexpected media type is found in index manifest list by @andaaron in #2746
• fix: improve output of zot verify by @andaaron in #2745
• fix: enable TLS based on URL scheme for sync extension by @evanebb in #2747
• chore: fix dependabot alerts by @rchincha in #2750
• feat: add support for docker images by @rchincha in #2714
• chore: fix dependabot alerts by @rchincha in #2753
• chore: update go tests to use our hosted trivy-db and trivy-java-db images by @andaaron in #2754
• fix: prevent releases of helm chart with pre-releases of zot by @Andreea-Lupu in #2755
• chore: update Trivy and Trivy dependencies by @andaaron in #2763
• build: migrate to golang 1.23.x by @rchincha in #2701
• chore: fix dependabot alerts by @rchincha in #2770
• chore: use go1.23 in the build environment of zot container images by @andaaron in #2773
• chore: fix dependabot alerts by @rchincha in #2780
• chore: fix search for 'no digests left, finished' in nightly job by @andaaron in #2784
• build(deps): bump github.com/notaryproject/notation-go from 1.1.1 to 1.2.1 by @Andreea-Lupu in #2785
• chore: fix dependabot alerts by @rchincha in #2783
• chore: fix dependabot alerts by @rchincha in #2800
• chore: fix dependabot alerts by @rchincha in #2810
• chore: fix dependabot alerts by @rchincha in #2825
• chore: update ui version by @rchincha in #2827
• chore: fix dependabot alerts by @rchincha in #2837
• ci: fix nightly runs by @rchincha in #2838
• Catalog content discovery by @eusebiu-constantin-petu-dbk in #2782
• ci: fix sync job after oras/ubuntu upgrade by @rchincha in #2839
• ci: stacker runs best on ubuntu-22.04 by @rchincha in #2840
• chore: fix dependabot alerts by @rchincha in #2851
• chore: update zui version by @rchincha in #2852
• chore: fix dependabot alerts by @rchincha in #2861
• chore: fix dependabot alerts by @rchincha in #2869
• chore: fix dependabot alerts by @rchincha in #2881
• fix(headers): set Cross-Origin-Resource-Policy header for UI requests by @andaaron in #2883
• minor metadb fixes for dynamo and bolt by @andaaron in #2884
• ci: nightly ci now uses ubuntu 24.04+ by @rchincha in #2886
• chore: fix dependabot alerts by @rchincha in #2889
• ci: reenable test calling stacker by @andaaron in #2890

New Contributors

• @vanhtuan0409 made their first contribution in #2730
• @evanebb made their first contribution in #2747

Full Changelog: v2.1.1...v2.1.2

v2.1.2-rc5

What's Changed

• chore: fix dependabot alerts by @rchincha in #2851
• chore: update zui version by @rchincha in #2852
• chore: fix dependabot alerts by @rchincha in #2861
• chore: fix dependabot alerts by @rchincha in #2869
• chore: fix dependabot alerts by @rchincha in #2881
• fix(headers): set Cross-Origin-Resource-Policy header for UI requests by @andaaron in #2883
• minor metadb fixes for dynamo and bolt by @andaaron in #2884
• ci: nightly ci now uses ubuntu 24.04+ by @rchincha in #2886

Full Changelog: v2.1.2-rc4...v2.1.2-rc5

v2.1.2-rc4

What's Changed

• chore: update go tests to use our hosted trivy-db and trivy-java-db images by @andaaron in #2754
• fix: prevent releases of helm chart with pre-releases of zot by @Andreea-Lupu in #2755
• chore: update Trivy and Trivy dependencies by @andaaron in #2763
• build: migrate to golang 1.23.x by @rchincha in #2701
• chore: fix dependabot alerts by @rchincha in #2770
• chore: use go1.23 in the build environment of zot container images by @andaaron in #2773
• chore: fix dependabot alerts by @rchincha in #2780
• chore: fix search for 'no digests left, finished' in nightly job by @andaaron in #2784
• build(deps): bump github.com/notaryproject/notation-go from 1.1.1 to 1.2.1 by @Andreea-Lupu in #2785
• chore: fix dependabot alerts by @rchincha in #2783
• chore: fix dependabot alerts by @rchincha in #2800
• chore: fix dependabot alerts by @rchincha in #2810
• chore: fix dependabot alerts by @rchincha in #2825
• chore: update ui version by @rchincha in #2827
• chore: fix dependabot alerts by @rchincha in #2837
• ci: fix nightly runs by @rchincha in #2838
• Catalog content discovery by @eusebiu-constantin-petu-dbk in #2782
• ci: fix sync job after oras/ubuntu upgrade by @rchincha in #2839
• ci: stacker runs best on ubuntu-22.04 by @rchincha in #2840

Full Changelog: v2.1.2-rc3...v2.1.2-rc4

v2.1.2-rc3

What's Changed

• chore: fix dependabot alerts by @rchincha in #2709
• test: add more tests for GCing indexes referencing other indexes referencing manifests by @andaaron in #2716
• chore: reduce number of spurious log messages produced by GetNextDigestWithBlobPaths by @andaaron in #2727
• chore: fix dependabot alerts by @rchincha in #2729
• fix: max wait time on dynamodb by @vanhtuan0409 in #2730
• fix: issues with nested index processing in CVE and metaDB code by @andaaron in #2732
• chore: fix dependabot alerts by @rchincha in #2742
• chore: less confusing warning message when unexpected media type is found in index manifest list by @andaaron in #2746
• fix: improve output of zot verify by @andaaron in #2745
• fix: enable TLS based on URL scheme for sync extension by @evanebb in #2747
• chore: fix dependabot alerts by @rchincha in #2750
• feat: add support for docker images by @rchincha in #2714
• chore: fix dependabot alerts by @rchincha in #2753

New Contributors

• @vanhtuan0409 made their first contribution in #2730
• @evanebb made their first contribution in #2747

Full Changelog: v2.1.2-rc2...v2.1.2-rc3

v2.1.2-rc2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2664
• chore: fix dependabot alerts by @rchincha in #2670
• chore: fix dependabot alerts by @rchincha in #2681
• chore: upgrade trivy to v0.55.2 and update the logic of waiting for zot to start in some jobs by @andaaron in #2685
• ci: stop using the non-free 4-core runners by @rchincha in #2695
• chore: fix dependabot alerts by @rchincha in #2684
• fix(delete manifest): distinct behaviors for delete by tag vb delete by digest by @andaaron in #2626
• fix(metrics): update storage metrics on gc by @eusebiu-constantin-petu-dbk in #2698
• feat(graphql): Add LastPullTimestamp and PushTimestamp in ImageSummar… by @eusebiu-constantin-petu-dbk in #2699
• fix(s3): fix check in dedupe logic by @eusebiu-constantin-petu-dbk in #2700

Full Changelog: v2.1.2-rc1...v2.1.2-rc2

v2.1.2-rc1

What's Changed

• fix(gc): gc now removes blob uploads which have not changed within the gc delay interval by @andaaron in #2599
• chore: fix dependabot alerts by @rchincha in #2594
• fix(authn): make hashing/encryption keys used to secure cookies by @peusebiu in #2536
• chore: update go.mod deps by @rchincha in #2609
• chore: update go.mod deps by @rchincha in #2610
• chore: update UI version by @andaaron in #2611
• chore: fix dependencies by @rchincha in #2621
• chore: fix dependabot alerts by @rchincha in #2630
• chore: fix dependabot alerts by @rchincha in #2645
• fix: work around AWS S3 limits by @rchincha in #2629
• chore: fix dependabot alerts by @rchincha in #2648

Full Changelog: v2.1.1...v2.1.2-rc1

v2.1.1

What's Changed

• Fix sync extension logging by @AndersBennedsgaard in #2537
• chore: fix dependabot alerts by @rchincha in #2551
• Add license scan report and status by @fossabot in #2450
• fix: minor visual issues in readme/badges by @andaaron in #2552
• misc: make update_licenses.sh faster by @jkroepke in #2553
• fix(digests): do not mandate sha256 as the only algorithm used for hashing blobs by @andaaron in #2075
• ci: use smaller runners for CI pipelines by @rchincha in #2566
• ci: use more cores for the extensions test by @rchincha in #2568
• chore: fix dependabot alerts by @rchincha in #2569
• ci(deps): bump minio test dependency by @jkroepke in #2555
• fix: various lint issues by @andaaron in #2571
• ci(deps): upgrade golangci-lint by @jkroepke in #2556
• chore: fix dependabot alerts by @rchincha in #2580
• build(go.mod): reformat require blocks by @jkroepke in #2582
• build(deps): bump all dependencies by @jkroepke in #2532
• chore: Update github.com/zitadel/oidc v1 to v3 by @andaaron in #2585

New Contributors

• @AndersBennedsgaard made their first contribution in #2537
• @fossabot made their first contribution in #2450
• @jkroepke made their first contribution in #2553

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424
• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432
• chore: fix dependabot alerts by @rchincha in #2462
• chore: fix dependabot alerts by @rchincha in #2471
• fix(ui): fix image details view by @peusebiu in #2470
• chore: fix dependabot alerts by @rchincha in #2474
• chore: fix dependabot alerts by @rchincha in #2486
• chore: fix dependabot alerts by @rchincha in #2499
• chore: fix dependabot alerts by @rchincha in #2504
• fix(storage): handle dedupe disabled in GetAllDedupeReposCandidates() by @peusebiu in #2533
• chore: fix dependabot alerts by @rchincha in #2531

Full Changelog: v2.0.4...v2.1.0