v2.1.2-rc4

What's Changed

• chore: update go tests to use our hosted trivy-db and trivy-java-db images by @andaaron in #2754
• fix: prevent releases of helm chart with pre-releases of zot by @Andreea-Lupu in #2755
• chore: update Trivy and Trivy dependencies by @andaaron in #2763
• build: migrate to golang 1.23.x by @rchincha in #2701
• chore: fix dependabot alerts by @rchincha in #2770
• chore: use go1.23 in the build environment of zot container images by @andaaron in #2773
• chore: fix dependabot alerts by @rchincha in #2780
• chore: fix search for 'no digests left, finished' in nightly job by @andaaron in #2784
• build(deps): bump github.com/notaryproject/notation-go from 1.1.1 to 1.2.1 by @Andreea-Lupu in #2785
• chore: fix dependabot alerts by @rchincha in #2783
• chore: fix dependabot alerts by @rchincha in #2800
• chore: fix dependabot alerts by @rchincha in #2810
• chore: fix dependabot alerts by @rchincha in #2825
• chore: update ui version by @rchincha in #2827
• chore: fix dependabot alerts by @rchincha in #2837
• ci: fix nightly runs by @rchincha in #2838
• Catalog content discovery by @eusebiu-constantin-petu-dbk in #2782
• ci: fix sync job after oras/ubuntu upgrade by @rchincha in #2839
• ci: stacker runs best on ubuntu-22.04 by @rchincha in #2840

Full Changelog: v2.1.2-rc3...v2.1.2-rc4

v2.1.2-rc3

What's Changed

• chore: fix dependabot alerts by @rchincha in #2709
• test: add more tests for GCing indexes referencing other indexes referencing manifests by @andaaron in #2716
• chore: reduce number of spurious log messages produced by GetNextDigestWithBlobPaths by @andaaron in #2727
• chore: fix dependabot alerts by @rchincha in #2729
• fix: max wait time on dynamodb by @vanhtuan0409 in #2730
• fix: issues with nested index processing in CVE and metaDB code by @andaaron in #2732
• chore: fix dependabot alerts by @rchincha in #2742
• chore: less confusing warning message when unexpected media type is found in index manifest list by @andaaron in #2746
• fix: improve output of zot verify by @andaaron in #2745
• fix: enable TLS based on URL scheme for sync extension by @evanebb in #2747
• chore: fix dependabot alerts by @rchincha in #2750
• feat: add support for docker images by @rchincha in #2714
• chore: fix dependabot alerts by @rchincha in #2753

New Contributors

• @vanhtuan0409 made their first contribution in #2730
• @evanebb made their first contribution in #2747

Full Changelog: v2.1.2-rc2...v2.1.2-rc3

v2.1.2-rc2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2664
• chore: fix dependabot alerts by @rchincha in #2670
• chore: fix dependabot alerts by @rchincha in #2681
• chore: upgrade trivy to v0.55.2 and update the logic of waiting for zot to start in some jobs by @andaaron in #2685
• ci: stop using the non-free 4-core runners by @rchincha in #2695
• chore: fix dependabot alerts by @rchincha in #2684
• fix(delete manifest): distinct behaviors for delete by tag vb delete by digest by @andaaron in #2626
• fix(metrics): update storage metrics on gc by @eusebiu-constantin-petu-dbk in #2698
• feat(graphql): Add LastPullTimestamp and PushTimestamp in ImageSummar… by @eusebiu-constantin-petu-dbk in #2699
• fix(s3): fix check in dedupe logic by @eusebiu-constantin-petu-dbk in #2700

Full Changelog: v2.1.2-rc1...v2.1.2-rc2

v2.1.2-rc1

What's Changed

• fix(gc): gc now removes blob uploads which have not changed within the gc delay interval by @andaaron in #2599
• chore: fix dependabot alerts by @rchincha in #2594
• fix(authn): make hashing/encryption keys used to secure cookies by @peusebiu in #2536
• chore: update go.mod deps by @rchincha in #2609
• chore: update go.mod deps by @rchincha in #2610
• chore: update UI version by @andaaron in #2611
• chore: fix dependencies by @rchincha in #2621
• chore: fix dependabot alerts by @rchincha in #2630
• chore: fix dependabot alerts by @rchincha in #2645
• fix: work around AWS S3 limits by @rchincha in #2629
• chore: fix dependabot alerts by @rchincha in #2648

Full Changelog: v2.1.1...v2.1.2-rc1

v2.1.1

What's Changed

• Fix sync extension logging by @AndersBennedsgaard in #2537
• chore: fix dependabot alerts by @rchincha in #2551
• Add license scan report and status by @fossabot in #2450
• fix: minor visual issues in readme/badges by @andaaron in #2552
• misc: make update_licenses.sh faster by @jkroepke in #2553
• fix(digests): do not mandate sha256 as the only algorithm used for hashing blobs by @andaaron in #2075
• ci: use smaller runners for CI pipelines by @rchincha in #2566
• ci: use more cores for the extensions test by @rchincha in #2568
• chore: fix dependabot alerts by @rchincha in #2569
• ci(deps): bump minio test dependency by @jkroepke in #2555
• fix: various lint issues by @andaaron in #2571
• ci(deps): upgrade golangci-lint by @jkroepke in #2556
• chore: fix dependabot alerts by @rchincha in #2580
• build(go.mod): reformat require blocks by @jkroepke in #2582
• build(deps): bump all dependencies by @jkroepke in #2532
• chore: Update github.com/zitadel/oidc v1 to v3 by @andaaron in #2585

New Contributors

• @AndersBennedsgaard made their first contribution in #2537
• @fossabot made their first contribution in #2450
• @jkroepke made their first contribution in #2553

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424
• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432
• chore: fix dependabot alerts by @rchincha in #2462
• chore: fix dependabot alerts by @rchincha in #2471
• fix(ui): fix image details view by @peusebiu in #2470
• chore: fix dependabot alerts by @rchincha in #2474
• chore: fix dependabot alerts by @rchincha in #2486
• chore: fix dependabot alerts by @rchincha in #2499
• chore: fix dependabot alerts by @rchincha in #2504
• fix(storage): handle dedupe disabled in GetAllDedupeReposCandidates() by @peusebiu in #2533
• chore: fix dependabot alerts by @rchincha in #2531

Full Changelog: v2.0.4...v2.1.0

v2.1.0-rc2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432

Full Changelog: v2.1.0-rc1...v2.1.0-rc2

v2.1.0-rc1

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424

Full Changelog: v2.0.4...v2.1.0-rc1

v2.0.4

What's Changed

• ci: add description field to our published images by @rchincha in #2354
• chore: fix dependabot alerts by @rchincha in #2366
• chore: fix dependabot alerts by @rchincha in #2377
• fix(cli/server): serve command expected positional args by @ralgozino in #2382
• ci: update zap scan docker image location by @rchincha in #2391
• chore: fix dependabot alerts by @rchincha in #2393
• ci: upgrade localstack to v3.3.0 by @rchincha in #2390
• chore: disable content trust check for localstack image by @rchincha in #2398
• ci: fix localstack docker uri by @rchincha in #2400
• chore: fix dependabot alerts by @rchincha in #2399
• fix: additional input validation for CVE graphQL query by @rchincha in #2408

New Contributors

• @ralgozino made their first contribution in #2382

Full Changelog: v2.0.3...v2.0.4

v2.0.3

What's Changed

• Add OSSF scorecard and update support matrix by @rchamarthy in #2320
• chore: fix dependabot alerts by @rchincha in #2331
• chore: update to go 1.22 by @andaaron in #2330
• Add a job to check zot config examples (and fix existing examples) by @andaaron in #2322
• ci: add a ML model artifact test case by @rchincha in #2332
• feat: show brief package list in image CVE listings by @vrajashkr in #2338
• feat(ui): new signature UX by @andaaron in #2339
• chore: fix dependabot alerts by @rchincha in #2348
• fix: Allow GET requests on repositories not found in metadb by @andaaron in #2351
• chore: fix dependabot alerts by @rchincha in #2352

Full Changelog: v2.0.2...v2.0.3