Commit Graph

5727 Commits

Author SHA1 Message Date
dependabot[bot]
8d89d6c06d build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.3 to 4.31.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.31.3...v4.31.10)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-13 04:49:11 +00:00
João Pereira
4b93a06238 Add Cloudfleet Container Registry to adopters (#4765) 2026-01-09 17:08:18 +00:00
Cloudfleet Technology Team
31a6333370 Add Cloudfleet Container Registry to adopters
Signed-off-by: Cloudfleet Technology Team <187966520+cloudfleet-tech@users.noreply.github.com>
2026-01-09 11:08:13 +01:00
Milos Gajdos
814452f20b Expose useFIPSEndpoint for S3 (#4764) 2026-01-08 07:34:42 -08:00
Raghav Mahajan
33dab3939e Expose useFIPSEndpoint for S3
Signed-off-by: Raghav Mahajan <rmahajan@palantir.com>
2026-01-07 21:01:26 +05:30
Milos Gajdos
f61aa941b3 Add boolean parsing util (#4763) 2026-01-07 07:23:28 -08:00
Raghav Mahajan
75a14d4d31 Add boolean parsing util
Signed-off-by: Raghav Mahajan <rmahajan@palantir.com>
2026-01-07 17:04:02 +05:30
Milos Gajdos
47c426cf2e fix: Logging regression for manifest HEAD requests (#4756) 2026-01-06 09:03:21 -08:00
Thomas Cuthbert
1ad03da687 fix: Logging regression for manifest HEAD requests
Since version 3.0.0, the response completed log line is no longer
present for HEAD requests to manifests that return 200.

The regression is caused by the implicit handling of manifest HEAD
responses that bypass the logging middleware when returning from
`GetManifest`.

This change ensures that the logging middleware handles responses for
manifest HEAD requests by explicitly writing `StatusOK` into the
response header before returning from `GetManifest`.

Closes: https://github.com/distribution/distribution/issues/4733
Signed-off-by: Thomas Cuthbert <tom.cuthbert@elastic.co>
2026-01-07 00:09:07 +08:00
Milos Gajdos
2b2e2f4759 build(deps): bump peter-evans/dockerhub-description from 4 to 5 (#4707) 2026-01-05 06:50:41 -08:00
Milos Gajdos
1b2f7efbd0 build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4745) 2026-01-05 06:47:17 -08:00
Milos Gajdos
0e23b5375f Add return error when list object (#4753) 2026-01-05 06:47:03 -08:00
tranthang2404
f1e4ae3de7 add return error when list object
Signed-off-by: tranthang2404 <tranthang.mda@gmail.com>
2025-12-19 08:24:50 +07:00
João Pereira
1796e65db9 Incorrect warning hint (#4708) 2025-12-13 08:52:46 +00:00
dependabot[bot]
d2b3a1fe7f build(deps): bump actions/checkout from 5.0.1 to 6.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v5.0.1...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 01:08:39 +00:00
Milos Gajdos
10e4312e62 build(deps): bump actions/checkout from 5 to 6 (#4744) 2025-11-21 15:26:23 +00:00
Wang Yan
abad58b9b1 "should" -> "must" regarding redis eviction policy (#4742) 2025-11-21 15:59:57 +08:00
dependabot[bot]
f7d659916c build(deps): bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-21 01:07:12 +00:00
Dave Pedu
c7da31eb4a "should" -> "must" regarding redis eviction policy
Signed-off-by: Dave Pedu <dave@davepedu.com>
2025-11-20 16:14:46 -05:00
Milos Gajdos
d1218cefd0 refactor: remove redundant variable declarations in for loops (#4741) 2025-11-19 23:34:18 +00:00
efcking
64f4511a27 refactor: remove redundant variable declarations in for loops
Signed-off-by: efcking <efcking@outlook.com>
2025-11-19 12:01:28 +08:00
João Pereira
c360968eb5 build(deps): bump github/codeql-action from 4.30.9 to 4.31.3 (#4735) 2025-11-14 08:48:23 +00:00
dependabot[bot]
e0cb1712f8 build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.9 to 4.31.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.30.9...v4.31.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-14 01:09:32 +00:00
Milos Gajdos
c287c7755b build(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#4722) 2025-10-20 08:42:43 -07:00
Milos Gajdos
41681617f2 fix(registry): Correct log formatting for upstream challenge (#4721) 2025-10-20 07:05:32 -07:00
Sumedh Vats
f1323c5bc7 fix(proxy): sanitize challenge URL logs using Redacted()
The log message "Challenge established with upstream" was using
an incorrect format specifier (%s) when logging the challenge structs,
causing garbled output. This commit updates the format specifier to %+v
and removes the unnecessary challenge manager log. URLs are now
Redacted() to prevent leaking credentials.

Fixes: #4697

Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
Signed-off-by: Sumedh Vats <sumedhvats2004@gmail.com>
2025-10-20 18:45:10 +05:30
dependabot[bot]
6f719029ea build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.30.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.30.8...v4.30.9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 01:10:25 +00:00
João Pereira
4d613f771f feat(registry): Make graceful shutdown test robust (#4720) 2025-10-19 15:09:29 +01:00
Sumedh Vats
edde36cd9e feat(registry): Make graceful shutdown test robust
The `TestGracefulShutdown` test was failing intermittently, especially
with stricter HTTP handling in newer Go versions (e.g., 1.25). This was
caused by sending an incomplete HTTP request in two separate writes,
creating a race condition where the server could shut down before
receiving the full request.

This commit fixes the test's flakiness by sending a single, complete,
and valid HTTP/1.1 request before triggering the shutdown. This ensures
the test accurately verifies the intended behavior: that a valid,
in-flight request is fully processed while new connections are rejected.

Fixes:#4696
Signed-off-by: Sumedh Vats <sumedhvats2004@gmail.com>
2025-10-18 00:35:54 +05:30
João Pereira
76fe617052 client: add Accept headers to Exists() HEAD (#4715) 2025-10-16 08:25:37 +01:00
Milos Gajdos
8ce8219982 chore: labeler: add area/client mapping for internal/client/** (#4716) 2025-10-15 08:59:39 -07:00
Artem Tkachuk
0e77b28593 chore: labeler: add area/client mapping for internal/client/**
Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
2025-10-14 12:10:04 -07:00
Artem Tkachuk
2f1a51dc72 client: add Accept headers to Exists() HEAD
The manifest Exists() client call issued a HEAD without any Accept
headers. Some OCI-focused registries require an explicit Accept for
manifest content negotiation, causing HEAD to fail (404/406) even
when the manifest exists. The Get() path already sets Accept;
Exists() did not.

This change adds all supported manifest media types from
distribution.ManifestMediaTypes() as Accept headers to the Exists()
HEAD request, aligning behavior with Get() and improving OCI
interoperability.

Tests:
- Regression: Exists() returns true when Accept is present and
  false when stripped (negative path), mirroring real-world
  behavior.

Risk/compatibility:
- Low. Registries that ignore Accept on HEAD continue to work.
- Redirect handling is unchanged; existing CheckRedirect preserves
  Accept.

Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
2025-10-13 23:52:12 -07:00
Milos Gajdos
283bd92b78 build(deps): bump github/codeql-action from 4.30.7 to 4.30.8 (#4714) 2025-10-13 10:38:34 -07:00
dependabot[bot]
ad5d9994df build(deps): bump github/codeql-action from 4.30.7 to 4.30.8
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.7 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v4.30.7...v4.30.8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 01:09:49 +00:00
João Pereira
7d4be412e9 build(deps): bump github/codeql-action from 3.26.5 to 4.30.7 (#4710) 2025-10-08 07:16:29 +01:00
dependabot[bot]
6d7645869a build(deps): bump github/codeql-action from 3.26.5 to 4.30.7
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 4.30.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.26.5...v4.30.7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 01:09:36 +00:00
nkaaf
b1c0fc5530 Incorrect warning hint
* Fix incorrect (old) warning hint

Signed-off-by: nkaaf <nkaaf@protonmail.com>
2025-10-04 00:42:14 +02:00
dependabot[bot]
864a32122f build(deps): bump peter-evans/dockerhub-description from 4 to 5
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 4 to 5.
- [Release notes](https://github.com/peter-evans/dockerhub-description/releases)
- [Commits](https://github.com/peter-evans/dockerhub-description/compare/v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/dockerhub-description
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-02 01:07:38 +00:00
João Pereira
d595e0a170 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#4706) 2025-10-01 07:59:10 +01:00
dependabot[bot]
11519e6d92 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](05b42c6244...4eaacf0543)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 01:11:01 +00:00
Milos Gajdos
4ead5a1085 build(deps): bump actions/upload-pages-artifact from 3 to 4 (#4691) 2025-09-16 22:52:56 -07:00
João Pereira
cf6a5ce346 build(deps): bump actions/setup-go from 5 to 6 (#4693) 2025-09-05 09:17:48 +01:00
João Pereira
6de7cd9d0d build(deps): bump actions/labeler from 5 to 6 (#4694) 2025-09-05 09:17:10 +01:00
dependabot[bot]
99c47b61cc build(deps): bump actions/labeler from 5 to 6
Bumps [actions/labeler](https://github.com/actions/labeler) from 5 to 6.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-05 01:07:42 +00:00
dependabot[bot]
e1e5d05113 build(deps): bump actions/setup-go from 5 to 6
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-05 01:07:37 +00:00
Milos Gajdos
979a07472e fix(registry/handlers/app): redis CAs (#4668) 2025-09-03 07:06:09 -07:00
dependabot[bot]
f5512709bf build(deps): bump actions/upload-pages-artifact from 3 to 4
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 4.
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/upload-pages-artifact
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-25 02:21:26 +00:00
João Pereira
412a8ae033 Fix broken link to Docker Hub fair use policy (#4688) 2025-08-13 22:09:25 +01:00
Andy Castille
0fb77d6a75 Fix broken link to Docker Hub fair use policy
Signed-off-by: Andy Castille <me@andycc.dev>
2025-08-13 12:23:30 -07:00