some bug fixes

What's Changed

• sync: fix inconsistent test by @peusebiu in #415
• tls: restrict tls cipher suites by @rchincha in #435
• CVE-2022-23649: fix dependabot alert by @rchincha in #431
• remove linger go.sum entries to fix dependabot alert by @rchincha in #437

Full Changelog: v1.3.8...v1.3.9

some bug fixes and improvements

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407
• dependabot-alert: update 'github.com/open-policy-agent/opa' by @rchincha in #408
• fix security alerts by @rchincha in #410
• sync: pull only missing images, not everything, closes #335 by @peusebiu in #340
• gc: add a gcDelay param by @rchincha in #404
• update README.md by @rchincha in #388
• ci/cd: add a workflow to detect/close stale PRs and issues by @rchincha in #414
• codecov: upgrade from v1 to v2 by @rchincha in #428

Full Changelog: v1.3.7...v1.3.8

v1.3.8-rc3

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407
• dependabot-alert: update 'github.com/open-policy-agent/opa' by @rchincha in #408
• fix security alerts by @rchincha in #410
• sync: pull only missing images, not everything, closes #335 by @peusebiu in #340
• gc: add a gcDelay param by @rchincha in #404

Full Changelog: v1.3.7...v1.3.8-rc3

v1.3.8-rc2

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407

Full Changelog: v1.3.7...v1.3.8-rc2

some bug fixes and performance improvements

What's Changed

• Disable sync periodically polling when pollInterval is not configured by @peusebiu in #254
• ci/cd: fix github workflow to upload release binaries by @rchincha in #333
• Fix negative WaitGroup counter at runtime by @peusebiu in #338
• ci/cd: upgrade golangci-lint by @rchincha in #269
• Install notation as prerequisite for test Makefile target by @adodon2go in #326
• lint: some more linter-related cleanup by @rchincha in #346
• storage: use sha256-simd from minio by @rchincha in #347

Full Changelog: v1.3.6...v1.3.7

add a 'zot scrub' cmd to check integrity

What's Changed

• ci/cd: fix arch builds to pick correct file by @rchincha in #328
• Implement "scrub" to check manifest/blob integrity by @Andreea-Lupu in #236

New Contributors

• @Andreea-Lupu made their first contribution in #236

Full Changelog: v1.3.5...v1.3.6

make sync aware of storage subpaths and some bugfixes

What's Changed

• ci/cd: build for arm64 arch by @rchincha in #305
• move references to zotregistry.io and project-zot by @rchincha in #309
• sync: allow for saving to a subpath, closes #307 by @peusebiu in #312
• build: fix build artifacts in binary by @rchincha in #324
• fix Dependabot alert about GHSA-v95c-p5hm-xq8f by @rchincha in #325
• Fix race detected in sync test, closes #302 by @peusebiu in #304

Full Changelog: v1.3.4...v1.3.5

support for image signatures and some bugfixes

What's Changed

• revert release workflow by @rchincha in #276
• Fix data races in tests, closes #255 by @adodon2go in #274
• go.mod: upgrade module deps by @rchincha in #277
• ci/cd: update badges link to refer to main branch by @shimish2 in #284
• dependabot: fix dependabot alerts by @rchincha in #287
• go.mod: tidy go.mod by @rchincha in #289
• go.mod: fix another dependabot alert by @rchincha in #290
• routes: fix CheckManifest to return content length by @rchincha in #288
• sync: skip tls verify on /v2/_catalog when a registry is configured w… by @peusebiu in #285
• Sync prefix can be an exact match or a glob pattern, closes #297 by @peusebiu in #298
• ci/cd: unit test hangs for a long time intermittently closes #286 by @adodon2go in #291
• ci/cd: keep docker and stacker builds files consistent by @rchincha in #301
• artifacts: initial support for artifacts spec by @rchincha in #265

Full Changelog: v1.3.3...v1.3.4

add s3 support, fix sync extension bug

What's Changed

• storage: add s3 backend support (without GC and dedupe) by @peusebiu in #216
• sync: copy to a local cache first instead of writing over http by @peusebiu in #262

Full Changelog: v1.3.2...v1.3.3

metrics support, image search improvements and some bug fixes

What's Changed

• go.mod: update umoci dep by @rchincha in #228
• doc: add documentation for comparison with well-known registries by @rchincha in #227
• go.mod: update deps to address dependabot alerts by @rchincha in #229
• added graphql api to return repository list with latest tag by @shimish2 in #172
• go.mod: update go.mod to fix dependabot alert by @rchincha in #235
• Clean blob uploads when clients interrupts uploading, closes #225 by @peusebiu in #231
• Added storage interface by @peusebiu in #234
• search: update trivy by @shimish2 in #238
• docs: improve docs coverage by @rchincha in #239
• dco: add workflow for DCO check by @rchincha in #240
• ci/cd: update golang to 1.16 by @rchincha in #245
• Added new extension "sync" by @peusebiu in #203
• workflows: change "master" to "main" by @rchincha in #250
• swagger: rename 'docs/' to 'swagger/' by @rchincha in #248
• Fix data race in sync tests by @peusebiu in #252
• Fixing ValidateHardLink, closes #256 by @adodon2go in #257
• Added a timeout option in db cache lock by @adodon2go in #249
• version: fix commit version in binary by @rchincha in #260
• release: add github action to automatically generate changelog by @rchincha in #272
• Implement an API for performance monitoring by @adodon2go in #243

New Contributors

• @adodon2go made their first contribution in #257

Full Changelog: v1.3.1...v1.3.2