dependabot[bot]
8d89d6c06d
build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.3 to 4.31.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.31.3...v4.31.10 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-13 04:49:11 +00:00
João Pereira
4b93a06238
Add Cloudfleet Container Registry to adopters ( #4765 )
2026-01-09 17:08:18 +00:00
Cloudfleet Technology Team
31a6333370
Add Cloudfleet Container Registry to adopters
...
Signed-off-by: Cloudfleet Technology Team <187966520+cloudfleet-tech@users.noreply.github.com >
2026-01-09 11:08:13 +01:00
Milos Gajdos
814452f20b
Expose useFIPSEndpoint for S3 ( #4764 )
2026-01-08 07:34:42 -08:00
Raghav Mahajan
33dab3939e
Expose useFIPSEndpoint for S3
...
Signed-off-by: Raghav Mahajan <rmahajan@palantir.com >
2026-01-07 21:01:26 +05:30
Milos Gajdos
f61aa941b3
Add boolean parsing util ( #4763 )
2026-01-07 07:23:28 -08:00
Raghav Mahajan
75a14d4d31
Add boolean parsing util
...
Signed-off-by: Raghav Mahajan <rmahajan@palantir.com >
2026-01-07 17:04:02 +05:30
Milos Gajdos
47c426cf2e
fix: Logging regression for manifest HEAD requests ( #4756 )
2026-01-06 09:03:21 -08:00
Thomas Cuthbert
1ad03da687
fix: Logging regression for manifest HEAD requests
...
Since version 3.0.0, the response completed log line is no longer
present for HEAD requests to manifests that return 200.
The regression is caused by the implicit handling of manifest HEAD
responses that bypass the logging middleware when returning from
`GetManifest`.
This change ensures that the logging middleware handles responses for
manifest HEAD requests by explicitly writing `StatusOK` into the
response header before returning from `GetManifest`.
Closes: https://github.com/distribution/distribution/issues/4733
Signed-off-by: Thomas Cuthbert <tom.cuthbert@elastic.co >
2026-01-07 00:09:07 +08:00
Milos Gajdos
2b2e2f4759
build(deps): bump peter-evans/dockerhub-description from 4 to 5 ( #4707 )
2026-01-05 06:50:41 -08:00
Milos Gajdos
1b2f7efbd0
build(deps): bump actions/checkout from 5.0.1 to 6.0.0 ( #4745 )
2026-01-05 06:47:17 -08:00
Milos Gajdos
0e23b5375f
Add return error when list object ( #4753 )
2026-01-05 06:47:03 -08:00
tranthang2404
f1e4ae3de7
add return error when list object
...
Signed-off-by: tranthang2404 <tranthang.mda@gmail.com >
2025-12-19 08:24:50 +07:00
João Pereira
1796e65db9
Incorrect warning hint ( #4708 )
2025-12-13 08:52:46 +00:00
dependabot[bot]
d2b3a1fe7f
build(deps): bump actions/checkout from 5.0.1 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v5.0.1...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 01:08:39 +00:00
Milos Gajdos
10e4312e62
build(deps): bump actions/checkout from 5 to 6 ( #4744 )
2025-11-21 15:26:23 +00:00
Wang Yan
abad58b9b1
"should" -> "must" regarding redis eviction policy ( #4742 )
2025-11-21 15:59:57 +08:00
dependabot[bot]
f7d659916c
build(deps): bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 01:07:12 +00:00
Dave Pedu
c7da31eb4a
"should" -> "must" regarding redis eviction policy
...
Signed-off-by: Dave Pedu <dave@davepedu.com >
2025-11-20 16:14:46 -05:00
Milos Gajdos
d1218cefd0
refactor: remove redundant variable declarations in for loops ( #4741 )
2025-11-19 23:34:18 +00:00
efcking
64f4511a27
refactor: remove redundant variable declarations in for loops
...
Signed-off-by: efcking <efcking@outlook.com >
2025-11-19 12:01:28 +08:00
João Pereira
c360968eb5
build(deps): bump github/codeql-action from 4.30.9 to 4.31.3 ( #4735 )
2025-11-14 08:48:23 +00:00
dependabot[bot]
e0cb1712f8
build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.9 to 4.31.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.30.9...v4.31.3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-14 01:09:32 +00:00
Milos Gajdos
c287c7755b
build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 ( #4722 )
2025-10-20 08:42:43 -07:00
Milos Gajdos
41681617f2
fix(registry): Correct log formatting for upstream challenge ( #4721 )
2025-10-20 07:05:32 -07:00
Sumedh Vats
f1323c5bc7
fix(proxy): sanitize challenge URL logs using Redacted()
...
The log message "Challenge established with upstream" was using
an incorrect format specifier (%s) when logging the challenge structs,
causing garbled output. This commit updates the format specifier to %+v
and removes the unnecessary challenge manager log. URLs are now
Redacted() to prevent leaking credentials.
Fixes : #4697
Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com >
Signed-off-by: Sumedh Vats <sumedhvats2004@gmail.com >
2025-10-20 18:45:10 +05:30
dependabot[bot]
6f719029ea
build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.8 to 4.30.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.30.8...v4.30.9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.30.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-20 01:10:25 +00:00
João Pereira
4d613f771f
feat(registry): Make graceful shutdown test robust ( #4720 )
2025-10-19 15:09:29 +01:00
Sumedh Vats
edde36cd9e
feat(registry): Make graceful shutdown test robust
...
The `TestGracefulShutdown` test was failing intermittently, especially
with stricter HTTP handling in newer Go versions (e.g., 1.25). This was
caused by sending an incomplete HTTP request in two separate writes,
creating a race condition where the server could shut down before
receiving the full request.
This commit fixes the test's flakiness by sending a single, complete,
and valid HTTP/1.1 request before triggering the shutdown. This ensures
the test accurately verifies the intended behavior: that a valid,
in-flight request is fully processed while new connections are rejected.
Fixes:#4696
Signed-off-by: Sumedh Vats <sumedhvats2004@gmail.com >
2025-10-18 00:35:54 +05:30
João Pereira
76fe617052
client: add Accept headers to Exists() HEAD ( #4715 )
2025-10-16 08:25:37 +01:00
Milos Gajdos
8ce8219982
chore: labeler: add area/client mapping for internal/client/** ( #4716 )
2025-10-15 08:59:39 -07:00
Artem Tkachuk
0e77b28593
chore: labeler: add area/client mapping for internal/client/**
...
Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com >
2025-10-14 12:10:04 -07:00
Artem Tkachuk
2f1a51dc72
client: add Accept headers to Exists() HEAD
...
The manifest Exists() client call issued a HEAD without any Accept
headers. Some OCI-focused registries require an explicit Accept for
manifest content negotiation, causing HEAD to fail (404/406) even
when the manifest exists. The Get() path already sets Accept;
Exists() did not.
This change adds all supported manifest media types from
distribution.ManifestMediaTypes() as Accept headers to the Exists()
HEAD request, aligning behavior with Get() and improving OCI
interoperability.
Tests:
- Regression: Exists() returns true when Accept is present and
false when stripped (negative path), mirroring real-world
behavior.
Risk/compatibility:
- Low. Registries that ignore Accept on HEAD continue to work.
- Redirect handling is unchanged; existing CheckRedirect preserves
Accept.
Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com >
2025-10-13 23:52:12 -07:00
Milos Gajdos
283bd92b78
build(deps): bump github/codeql-action from 4.30.7 to 4.30.8 ( #4714 )
2025-10-13 10:38:34 -07:00
dependabot[bot]
ad5d9994df
build(deps): bump github/codeql-action from 4.30.7 to 4.30.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.7 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.30.7...v4.30.8 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.30.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-13 01:09:49 +00:00
João Pereira
7d4be412e9
build(deps): bump github/codeql-action from 3.26.5 to 4.30.7 ( #4710 )
2025-10-08 07:16:29 +01:00
dependabot[bot]
6d7645869a
build(deps): bump github/codeql-action from 3.26.5 to 4.30.7
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.5 to 4.30.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.26.5...v4.30.7 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.30.7
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-08 01:09:36 +00:00
nkaaf
b1c0fc5530
Incorrect warning hint
...
* Fix incorrect (old) warning hint
Signed-off-by: nkaaf <nkaaf@protonmail.com >
2025-10-04 00:42:14 +02:00
dependabot[bot]
864a32122f
build(deps): bump peter-evans/dockerhub-description from 4 to 5
...
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description ) from 4 to 5.
- [Release notes](https://github.com/peter-evans/dockerhub-description/releases )
- [Commits](https://github.com/peter-evans/dockerhub-description/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: peter-evans/dockerhub-description
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-02 01:07:38 +00:00
João Pereira
d595e0a170
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 ( #4706 )
2025-10-01 07:59:10 +01:00
dependabot[bot]
11519e6d92
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](05b42c6244...4eaacf0543 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 01:11:01 +00:00
Milos Gajdos
4ead5a1085
build(deps): bump actions/upload-pages-artifact from 3 to 4 ( #4691 )
2025-09-16 22:52:56 -07:00
João Pereira
cf6a5ce346
build(deps): bump actions/setup-go from 5 to 6 ( #4693 )
2025-09-05 09:17:48 +01:00
João Pereira
6de7cd9d0d
build(deps): bump actions/labeler from 5 to 6 ( #4694 )
2025-09-05 09:17:10 +01:00
dependabot[bot]
99c47b61cc
build(deps): bump actions/labeler from 5 to 6
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 5 to 6.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](https://github.com/actions/labeler/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-05 01:07:42 +00:00
dependabot[bot]
e1e5d05113
build(deps): bump actions/setup-go from 5 to 6
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-05 01:07:37 +00:00
Milos Gajdos
979a07472e
fix(registry/handlers/app): redis CAs ( #4668 )
2025-09-03 07:06:09 -07:00
dependabot[bot]
f5512709bf
build(deps): bump actions/upload-pages-artifact from 3 to 4
...
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact ) from 3 to 4.
- [Release notes](https://github.com/actions/upload-pages-artifact/releases )
- [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/upload-pages-artifact
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-25 02:21:26 +00:00
João Pereira
412a8ae033
Fix broken link to Docker Hub fair use policy ( #4688 )
2025-08-13 22:09:25 +01:00
Andy Castille
0fb77d6a75
Fix broken link to Docker Hub fair use policy
...
Signed-off-by: Andy Castille <me@andycc.dev >
2025-08-13 12:23:30 -07:00