v2.0.0-rc3

What's Changed

• fix(test): update the zot tests not to use test/data as rootDir (use … by @nicoldr in #1162
• docs(graphql): rewrote search.md by @andaaron in #1130
• ci(cache): split go build cache from go modules cache by @andaaron in #1169
• test: avoid running trivy tests if search build label is missing by @andaaron in #1172
• test: refactor CVE tests in CLI package by @andaaron in #1170
• chore(deps): fix dependabot alerts by @rchincha in #1179
• test: show the execution times of the tests by @andaaron in #1163
• ci: Revert "test: show the execution times of the tests (#1163)" by @andaaron in #1186
• refactor(cve): improve CVE test time by mocking trivy by @andaaron in #1184
• feat(ui): package zui within zot binary by @andaaron in #1161
• onDemand check for updated manifest by @marxus in #1190
• fix: call notation-go libs instead of using notation binary by @Andreea-Lupu in #1104
• chore(go.mod): fix dependabot alerts by @rchincha in #1194
• feat(ui): use a Makefile variable to download a pre-existing zui build by @andaaron in #1196
• fix: set GC delay defaults for storage subPaths by @rchincha in #1189
• perf: update the ImageList queries to return PaginatedImagesResult by @nicoldr in #1182
• feat(scheduler): use an worker pool for scheduler by @peusebiu in #1146
• Centralise extensions config entries by @bogdanbiv in #1177
• chore: add/sync golang 1.20.x images by @rchincha in #1200
• ci(golang): fix syncing build image golang 1.20 by @andaaron in #1205
• chore(go.mod): fix dependabot alerts by @rchincha in #1210
• chore(codecov): use a token to authenticate to codecov by @andaaron in #1212
• chore(go.mod): fix dependabot alerts by @rchincha in #1218
• build(ui): the ui is now included in the zot binary by default by @andaaron in #1202
• chore(go.mod): fix dependabot alerts by @rchincha in #1222

New Contributors

• @marxus made their first contribution in #1190

Full Changelog: v2.0.0-rc2...v2.0.0-rc3

v2.0.0-rc2

What's Changed

• refactor: Cleanup/simplify testcases in /pkg/extensions by @nicoldr in #1116
• test(refactor): cleanup/simplify testcases by @nicoldr in #1124
• feat(cve): the cve related calls to use repodb and add pagination on image results by @andaaron in #1118
• feat(repodb): implement pagination for ImageList and integrate it with RepoDB by @andaaron in #1129
• feat(cve): graphql: paginate returned CVEs for a given image by @andaaron in #1136
• fix: Sort tags returned by ExpendedRepoInfo in the Images property with the newest first by @andaaron in #1137
• chore(deps): fix dependabot alerts by @rchincha in #1131
• fix(referrers): annotation key is incorrect by @rchincha in #1139
• feat(repodb): DerivedImageList and BaseImageList make use of RepoDB by @andaaron in #1135
• fix(referrers): fix some conformance issues by @rchincha in #1134
• chore: update the version of go-lru we use to the latest available by @andaaron in #1141
• chore(deps): fix dependabot alerts by @rchincha in #1143
• test(exporter): add unit test to cover cli pkg by @rchincha in #1148
• removed references to old dist-spec by @aokirisaki in #1128
• chore(deps): fix dependabot alerts by @rchincha in #1153

Full Changelog: v2.0.0-rc1...v2.0.0-rc2

v2.0.0-rc1

What's Changed

• chore(deps): fix dependabot alerts by @rchincha in #1048
• fix(test): consolidate flaky scrub test by @peusebiu in #1042
• ci: remove superfluous parts of github workflows by @rchincha in #1050
• fix(sync): syncing OCI artifacts with distribution package fails by @peusebiu in #1013
• fix: queries with images without a reference should return an error by @alexstan12 in #1040
• feat(scrub): add scrub logic for ImageIndex media type by @Andreea-Lupu in #1031
• fix(swagger): update docs.go - fix typo by @arukiidou in #1055
• chore(deps): fix dependabot alerts by @rchincha in #1060
• docs: add pkg.go.dev badge by @rchincha in #1061
• refactor: Cleanup/simplify test cases by @nicoldr in #1041
• fix(sync): fix sync on demand with docker library by @peusebiu in #1065
• chore(deps): fix dependabot alerts by @rchincha in #1074
• chore(deps): fix dependabot alerts by @rchincha in #1077
• chore(deps): fix dependabot alerts by @rchincha in #1080
• docs: update README.md by @rchincha in #1078
• refactor: Cleanup/simplify tests: uploads by @nicoldr in #1082
• fix(sync): also add docker v2 mediatype as supported in sync by @peusebiu in #1084
• cleanup: replaced resty client with http client in sync and moved to … by @aokirisaki in #1016
• ci: start localstack container only if needed by @peusebiu in #1086
• chore(deps): fix dependabot alerts by @rchincha in #1090
• fix(test): use correct aws region for dynamodb by @peusebiu in #1093
• feat(repodb): Implement RepoDB for image specific information using boltdb/dynamodb by @laurentiuNiculae in #979
• fix: error message when CVE search is disabled by @aokirisaki in #1100
• docs: fix CNCF related documentation by @rchincha in #1099
• chore(deps): fix dependabot alerts by @rchincha in #1098
• fix: add stacker to .gitignore by @rchamarthy in #1091
• fix: added error message for missing CVEs by @aokirisaki in #1085
• ci(trivy): copy trivydb oci artefact to project-zot repo by @andaaron in #1106
• fix(ci): fix path to trivy-db copy under project-zot by @andaaron in #1108
• ci: also allow manual workflow triggers by @rchincha in #1109
• fix(ci): do not build zot container image for the annotation tests by @andaaron in #1110
• Fixes for DynamoDB driver tests by @andaaron in #1111
• refactor: Cleanup/simplify testcases in /pkg/cli by @nicoldr in #1103
• chore(deps): fix dependabot alerts by @rchincha in #1115
• feat(cve): cache trivy results for an image:tag by @andaaron in #1101
• feat(repodb): add pagination for ImageListForDigest and implement FilterTags by @andaaron in #1102
• docs: fix copyright related info for cncf onboarding by @rchincha in #1117
• chore(trivy): update trivy version and enforce OCI compliant repo names in local image storage by @andaaron in #1068
• Test downloading trivy-db from alternate location by @andaaron in #1107
• feat(repodb): add PageInfo to GlobalSearch and RepoListWithNewestImage results by @andaaron in #1121

New Contributors

• @arukiidou made their first contribution in #1055

Full Changelog: v1.4.3...v2.0.0-rc1

v1.4.3

What's Changed

• graphql: Populate ImageSummary missing fields: by @peusebiu in #787
• update presentation links by @rchincha in #804
• fix dependabot alerts by @rchincha in #795
• update ImageSummary to return the history of an image by @alexstan12 in #784
• fix dependabot alerts by @rchincha in #808
• fix dependabot alerts by @rchincha in #809
• dco: enable DCO checks only on PRs by @rchincha in #812
• list all images that have all layers of the base image included (2) by @andaaron in #813
• Adding a task scheduler for background tasks by @Andreea-Lupu in #700
• zli: fix http client transport by @rchincha in #802
• list all images that have are derived from the given image by @aokirisaki in #713
• add debug flag for zli commands by @aokirisaki in #785
• Validate Annotations present in image manifest and fallback to annota… by @nicoldr in #790
• Fix logger race condition by @laurentiuNiculae in #817
• also sync golang 1.19 by @rchincha in #826
• Add enable/disable option for scrub extension by @Andreea-Lupu in #827
• add sponsors info by @rchincha in #828
• Include image vulnerability information in ImageSummary by @andaaron in #798
• Remove forking logger by @laurentiuNiculae in #825
• Add graphql query for retrieving imgSummary based on repo:tag image id by @bogdanbiv in #814
• storage: Move common code in helper functions, closes #730 by @peusebiu in #820
• style(ci/cd): add a commit msg style checker by @rchincha in #796
• build(swagger): removed swagger requirement from binary-minimal and binary by @chofnar in #838
• chore(deps): update dependabot dependency update alerts by @rchincha in #845
• fix(ci/cd): update the commit msg checker settings by @rchincha in #846
• fix(license-check): also account for another result condition by @rchincha in #848
• Update go version to 1.19 by @nicoldr in #829
• fix(sync): revert code which removed image destination feature by @peusebiu in #840
• feat(GraphQL): playground, served by zot in specific binary by @chofnar in #753
• fix(sync): also sync image index mediatype by @peusebiu in #847
• ci(workflows): changed workflow to generate introspection json when gql schema changed by @chofnar in #810
• fix: incorrect path for playground template by @chofnar in #858
• test(authz): add an extra test for authz by @andaaron in #859
• build(tags): remove redundant build tag ui_base by @andaaron in #857
• chore(deps): fix dependabot alerts by @rchincha in #868
• fix(lastUpdated): fix image lastUpdated timestamp logic by @andaaron in #863
• fix: images command not truncating image name/tag by @aokirisaki in #851
• build: add commit hash to Config at build for proper discovery readme by @chofnar in #854
• fix(storage): resolve cache/storage inconsistencies on HEAD request by @peusebiu in #794
• ci: fix image build/release workflow by @rchincha in #874
• fix(workflow): gql introspection - run only at release, resulting json in downloadable files by @chofnar in #873
• chore(deps): fix dependabot alerts by @rchincha in #885
• refactor(tests): remove hardcoded digests by @chofnar in #871
• chore: rename search route prefix by @peusebiu in #887
• test: Build images with annotations by @nicoldr in #872
• fix(tests): consolidate routes tests by @peusebiu in #892
• fix: zli images show if signed instead of signature by @aokirisaki in #886
• fix(s3): remove tracking multipart uploads by @peusebiu in #883
• chore(lint): gci to separate zot from other imports by @andaaron in #870
• fix(config): make all extension config consistent by @rchincha in #888
• fix: flaky scheduler coverage by @chofnar in #893
• fix: replace time.sleep() with checking logs by @aokirisaki in #899
• fix(sync): fixed broken logic to get tags for repo by @peusebiu in #900
• refactor(digests): standardise representation of digests to digest.Digest by @andaaron in #898
• fix(cli): do not show signatures and fix tls verification client side by @andaaron in #904
• feat(cve): better distinguish max severity on an image by @andaaron in #918
• chore(deps): fix dependabot alerts by @rchincha in #919
• refactor(tests): removed globals from digest test, more hardcoded digests by @chofnar in #923
• fix(sync): also sync on demand digests, not only tags, closes #902 by @peusebiu in #932
• test: Add cosign and notations bats tests by @nicoldr in #929
• chore(deps): fix dependabot alerts by @rchincha in #945
• refactor: changed github issue templates to yml form by @chofnar in #949
• test(bats): added regclient artifact commands by @peusebiu in #938
• refactor(cache): Add database interface for blob paths + refactor BoltDB to use interface by @chofnar in #667
• bug: fixed image size not counting config and manifest sizes by @aokirisaki in #937
• feat(artifact): add OCI references support by @rchincha in #936
• chore(deps): fix dependabot alerts by @rchincha in #965
• chore(deps): fix dependabot alerts by @rchincha in #977
• build: move build artifacts into build/ by @rchincha in #986
• ImageSummary should have author information by @aokirisaki in #976
• fix(ci): fix releasing zot minimal image by @peusebiu in #990
• fix(ci): set correct arch/os for published container images by @rchincha in #991
• test(swagger): increase coverage using fault injection by @rchincha in #993
• chore(deps): fix dependabot alerts by @rchincha in #1000
• doc: update README with minimal image and urls by @rchincha in #1001
• feat(sync,s3): added s3 logic for ORAS and OCI artifacts by @peusebiu in #985
• fix: signatures now show correctly if signed or not by @aokirisaki in #954
• fix(storage): deleting manifests with identical digests by @peusebiu in #951
• test(sync): added blackbox tests for sync by @peusebiu in #1008
• fix(storage): fix locks when uploading image by @peusebiu in #1003
• feat(cache): dynamodb implementation by @chofnar in #953
• fix(oras): relax artifactType check to allow other types by @rchincha in #1010
• fix: handle remote cache driver misconfig by @rchincha in #1011
• feat(graphql): add an api to return referrers by @alexstan12 in #1009
• fix(routes): set Content-Length on GetManifest by @peusebiu in #1019
• feat: gc untagged manifests and signatures without references by @peusebiu in #948
• Upgrade oras cli by @peusebiu in #1021
• chore(deps): fix dependabot alerts by @rchincha in #1030
• perf(zb): cleanup tool output by @rchincha in #1033
• fix(config): warn if cve is used with remote storage driver by @rchincha in https://github.com...

v1.4.3-rc9

Final pre-release before an actual release

What's Changed

• fix(routes): set Content-Length on GetManifest by @peusebiu in #1019
• feat: gc untagged manifests and signatures without references by @peusebiu in #948
• Upgrade oras cli by @peusebiu in #1021
• chore(deps): fix dependabot alerts by @rchincha in #1030
• perf(zb): cleanup tool output by @rchincha in #1033
• fix(config): warn if cve is used with remote storage driver by @rchincha in #1034

Full Changelog: v1.4.3-rc8...v1.4.3-rc9

v1.4.3-rc8

What's Changed

• chore(deps): fix dependabot alerts by @rchincha in #1000
• doc: update README with minimal image and urls by @rchincha in #1001
• feat(sync,s3): added s3 logic for ORAS and OCI artifacts by @peusebiu in #985
• fix: signatures now show correctly if signed or not by @aokirisaki in #954
• fix(storage): deleting manifests with identical digests by @peusebiu in #951
• test(sync): added blackbox tests for sync by @peusebiu in #1008
• fix(storage): fix locks when uploading image by @peusebiu in #1003
• feat(cache): dynamodb implementation by @chofnar in #953
• fix(oras): relax artifactType check to allow other types by @rchincha in #1010
• fix: handle remote cache driver misconfig by @rchincha in #1011
• feat(graphql): add an api to return referrers by @alexstan12 in #1009

Full Changelog: v1.4.3-rc7...v1.4.3-rc8

v1.4.3-rc7

What's Changed

• fix(ci): set correct arch/os for published container images by @rchincha in #991
• test(swagger): increase coverage using fault injection by @rchincha in #993

Full Changelog: v1.4.3-rc6...v1.4.3-rc7

v1.4.3-rc6

What's Changed

• chore(deps): fix dependabot alerts by @rchincha in #977
• build: move build artifacts into build/ by @rchincha in #986
• ImageSummary should have author information by @aokirisaki in #976
• fix(ci): fix releasing zot minimal image by @peusebiu in #990

Full Changelog: v1.4.3-rc5...v1.4.3-rc6

some bug fixes and features

What's Changed

• feat(cve): better distinguish max severity on an image by @andaaron in #918
• chore(deps): fix dependabot alerts by @rchincha in #919
• refactor(tests): removed globals from digest test, more hardcoded digests by @chofnar in #923
• fix(sync): also sync on demand digests, not only tags, closes #902 by @peusebiu in #932
• test: Add cosign and notations bats tests by @nicoldr in #929
• chore(deps): fix dependabot alerts by @rchincha in #945
• refactor: changed github issue templates to yml form by @chofnar in #949
• test(bats): added regclient artifact commands by @peusebiu in #938
• refactor(cache): Add database interface for blob paths + refactor BoltDB to use interface by @chofnar in #667
• bug: fixed image size not counting config and manifest sizes by @aokirisaki in #937
• feat(artifact): add OCI references support by @rchincha in #936
• chore(deps): fix dependabot alerts by @rchincha in #965

Full Changelog: v1.4.3-rc4...v1.4.3-rc5

some bug fixes and features

What's Changed

• ci: fix image build/release workflow by @rchincha in #874
• fix(workflow): gql introspection - run only at release, resulting json in downloadable files by @chofnar in #873
• chore(deps): fix dependabot alerts by @rchincha in #885
• refactor(tests): remove hardcoded digests by @chofnar in #871
• chore: rename search route prefix by @peusebiu in #887
• test: Build images with annotations by @nicoldr in #872
• fix(tests): consolidate routes tests by @peusebiu in #892
• fix: zli images show if signed instead of signature by @aokirisaki in #886
• fix(s3): remove tracking multipart uploads by @peusebiu in #883
• chore(lint): gci to separate zot from other imports by @andaaron in #870
• fix(config): make all extension config consistent by @rchincha in #888
• fix: flaky scheduler coverage by @chofnar in #893
• fix: replace time.sleep() with checking logs by @aokirisaki in #899
• fix(sync): fixed broken logic to get tags for repo by @peusebiu in #900
• refactor(digests): standardise representation of digests to digest.Digest by @andaaron in #898
• fix(cli): do not show signatures and fix tls verification client side by @andaaron in #904

Full Changelog: v1.4.3-rc3...v1.4.3-rc4