v2.1.2-rc1

What's Changed

• fix(gc): gc now removes blob uploads which have not changed within the gc delay interval by @andaaron in #2599
• chore: fix dependabot alerts by @rchincha in #2594
• fix(authn): make hashing/encryption keys used to secure cookies by @peusebiu in #2536
• chore: update go.mod deps by @rchincha in #2609
• chore: update go.mod deps by @rchincha in #2610
• chore: update UI version by @andaaron in #2611
• chore: fix dependencies by @rchincha in #2621
• chore: fix dependabot alerts by @rchincha in #2630
• chore: fix dependabot alerts by @rchincha in #2645
• fix: work around AWS S3 limits by @rchincha in #2629
• chore: fix dependabot alerts by @rchincha in #2648

Full Changelog: v2.1.1...v2.1.2-rc1

v2.1.1

What's Changed

• Fix sync extension logging by @AndersBennedsgaard in #2537
• chore: fix dependabot alerts by @rchincha in #2551
• Add license scan report and status by @fossabot in #2450
• fix: minor visual issues in readme/badges by @andaaron in #2552
• misc: make update_licenses.sh faster by @jkroepke in #2553
• fix(digests): do not mandate sha256 as the only algorithm used for hashing blobs by @andaaron in #2075
• ci: use smaller runners for CI pipelines by @rchincha in #2566
• ci: use more cores for the extensions test by @rchincha in #2568
• chore: fix dependabot alerts by @rchincha in #2569
• ci(deps): bump minio test dependency by @jkroepke in #2555
• fix: various lint issues by @andaaron in #2571
• ci(deps): upgrade golangci-lint by @jkroepke in #2556
• chore: fix dependabot alerts by @rchincha in #2580
• build(go.mod): reformat require blocks by @jkroepke in #2582
• build(deps): bump all dependencies by @jkroepke in #2532
• chore: Update github.com/zitadel/oidc v1 to v3 by @andaaron in #2585

New Contributors

• @AndersBennedsgaard made their first contribution in #2537
• @fossabot made their first contribution in #2450
• @jkroepke made their first contribution in #2553

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424
• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432
• chore: fix dependabot alerts by @rchincha in #2462
• chore: fix dependabot alerts by @rchincha in #2471
• fix(ui): fix image details view by @peusebiu in #2470
• chore: fix dependabot alerts by @rchincha in #2474
• chore: fix dependabot alerts by @rchincha in #2486
• chore: fix dependabot alerts by @rchincha in #2499
• chore: fix dependabot alerts by @rchincha in #2504
• fix(storage): handle dedupe disabled in GetAllDedupeReposCandidates() by @peusebiu in #2533
• chore: fix dependabot alerts by @rchincha in #2531

Full Changelog: v2.0.4...v2.1.0

v2.1.0-rc2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432

Full Changelog: v2.1.0-rc1...v2.1.0-rc2

v2.1.0-rc1

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424

Full Changelog: v2.0.4...v2.1.0-rc1

v2.0.4

What's Changed

• ci: add description field to our published images by @rchincha in #2354
• chore: fix dependabot alerts by @rchincha in #2366
• chore: fix dependabot alerts by @rchincha in #2377
• fix(cli/server): serve command expected positional args by @ralgozino in #2382
• ci: update zap scan docker image location by @rchincha in #2391
• chore: fix dependabot alerts by @rchincha in #2393
• ci: upgrade localstack to v3.3.0 by @rchincha in #2390
• chore: disable content trust check for localstack image by @rchincha in #2398
• ci: fix localstack docker uri by @rchincha in #2400
• chore: fix dependabot alerts by @rchincha in #2399
• fix: additional input validation for CVE graphQL query by @rchincha in #2408

New Contributors

• @ralgozino made their first contribution in #2382

Full Changelog: v2.0.3...v2.0.4

v2.0.3

What's Changed

• Add OSSF scorecard and update support matrix by @rchamarthy in #2320
• chore: fix dependabot alerts by @rchincha in #2331
• chore: update to go 1.22 by @andaaron in #2330
• Add a job to check zot config examples (and fix existing examples) by @andaaron in #2322
• ci: add a ML model artifact test case by @rchincha in #2332
• feat: show brief package list in image CVE listings by @vrajashkr in #2338
• feat(ui): new signature UX by @andaaron in #2339
• chore: fix dependabot alerts by @rchincha in #2348
• fix: Allow GET requests on repositories not found in metadb by @andaaron in #2351
• chore: fix dependabot alerts by @rchincha in #2352

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2208
• feat(search): search for a specific tag cross-repo by @andaaron in #2211
• feat(ui): update zui version by @Andreea-Lupu in #2216
• refactor: rename go module from zotregistry.io/zot to zotregistry.dev/zot by @andaaron in #2187
• fix(scheduler): the session cleanup generator is reset too often by @andaaron in #2220
• ci: stabilize ecosystem client tools workflow by @andaaron in #2224
• ci: add script to build/publish a zot multiarch image by @andaaron in #2214
• chore(deps): fix dependabot alerts by @andaaron in #2232
• ci: release a checksums file with SHA256 hashes for release assets by @vrajashkr in #2227
• feat(ui): show more information about CVEs by @andaaron in #2233
• build(go): switch to go 1.21 by @andaaron in #2049
• test(blackbox): fix the scrub test sometimes deleting the image manifest from the layout by @andaaron in #2236
• fix(tests): fixed inconsistent sync test by @peusebiu in #2237
• ci(nightly): update go version used for prometheus tests by @andaaron in #2239
• style(metadb): use type aliases for metadb types to be easier to read by @laurentiuNiculae in #2043
• feat(graphql): filter CVEs by severity by @Andreea-Lupu in #2246
• chore(go.mod): fix dependabot alerts by @andaaron in #2247
• feat: Get the image LastUpdated timestamp from annotations by @andaaron in #2240
• fix(sync): added bearer client for sync by @peusebiu in #2222
• feat(ui): update zui version by @Andreea-Lupu in #2248
• test: add test images build instructions and stacker.yamls by @andaaron in #2249
• feat: Include PackagePath information in CVE results for image by @vrajashkr in #2241
• feat(ui): update zui version by @Andreea-Lupu in #2251
• fix(npe): handle case where os.Stat returns different error types in DirExists by @andaaron in #2253
• test: fix flacky coverage in cookiestore cleanup tests by @andaaron in #2257
• feat(ui): introduce API key management in ZUI by @andaaron in #2256
• chore: update image-spec and dist spec to 1.1.0 by @andaaron in #2255
• chore: fix dependabot alerts by @rchincha in #2268
• chore: fix dependabot alerts by @rchincha in #2283
• feat(ui): show CVE package path by @andaaron in #2286
• fix(sync): better blobs cleanup by @peusebiu in #2273
• fix(sync): sync generator now backs off on errors by @peusebiu in #2272
• chore: fix dependabort alerts by @rchincha in #2295
• feat(cve): cli cve diff by @laurentiuNiculae in #2242
• fix(oras)!: remove ORAS artifact references support by @rchincha in #2294
• chore: fix dependabot alerts by @rchincha in #2302
• test(blackbox): add multi-arch index creation and image attributes modification by @ossfellow in #2306
• chore: fix dependabot alerts by @rchincha in #2317
• feat: add verbose mode for cves for image listing by @vrajashkr in #2308
• fix: ignore metadb errors if tag not found by @rchincha in #2301
• chore: update zui version by @rchincha in #2319

New Contributors

• @vrajashkr made their first contribution in #2227
• @ossfellow made their first contribution in #2306

Full Changelog: v2.0.1...v2.0.2

v2.0.2-rc3

What's Changed

• fix(sync): sync generator now backs off on errors by @peusebiu in #2272
• chore: fix dependabort alerts by @rchincha in #2295
• feat(cve): cli cve diff by @laurentiuNiculae in #2242
• fix(oras)!: remove ORAS artifact references support by @rchincha in #2294
• chore: fix dependabot alerts by @rchincha in #2302
• test(blackbox): add multi-arch index creation and image attributes modification by @ossfellow in #2306
• chore: fix dependabot alerts by @rchincha in #2317
• feat: add verbose mode for cves for image listing by @vrajashkr in #2308
• fix: ignore metadb errors if tag not found by @rchincha in #2301
• chore: update zui version by @rchincha in #2319

New Contributors

• @ossfellow made their first contribution in #2306

Full Changelog: v2.0.2-rc2...v2.0.2-rc3

v2.0.2-rc2

What's Changed

• build(go): switch to go 1.21 by @andaaron in #2049
• test(blackbox): fix the scrub test sometimes deleting the image manifest from the layout by @andaaron in #2236
• fix(tests): fixed inconsistent sync test by @peusebiu in #2237
• ci(nightly): update go version used for prometheus tests by @andaaron in #2239
• style(metadb): use type aliases for metadb types to be easier to read by @laurentiuNiculae in #2043
• feat(graphql): filter CVEs by severity by @Andreea-Lupu in #2246
• chore(go.mod): fix dependabot alerts by @andaaron in #2247
• feat: Get the image LastUpdated timestamp from annotations by @andaaron in #2240
• fix(sync): added bearer client for sync by @peusebiu in #2222
• feat(ui): update zui version by @Andreea-Lupu in #2248
• test: add test images build instructions and stacker.yamls by @andaaron in #2249
• feat: Include PackagePath information in CVE results for image by @vrajashkr in #2241
• feat(ui): update zui version by @Andreea-Lupu in #2251
• fix(npe): handle case where os.Stat returns different error types in DirExists by @andaaron in #2253
• test: fix flacky coverage in cookiestore cleanup tests by @andaaron in #2257
• feat(ui): introduce API key management in ZUI by @andaaron in #2256
• chore: update image-spec and dist spec to 1.1.0 by @andaaron in #2255
• chore: fix dependabot alerts by @rchincha in #2268
• chore: fix dependabot alerts by @rchincha in #2283
• feat(ui): show CVE package path by @andaaron in #2286
• fix(sync): better blobs cleanup by @peusebiu in #2273

Full Changelog: v2.0.2-rc1...v2.0.2-rc2