artifact-keeper/artifact-keeper v1.2.0-rc.2

Artifact Keeper v1.2.0-rc.2

on GitHub

What's Changed

• fix(proxy): stop inserting proxy-cached items into artifacts table (closes #1278) by @brandonrc in #1280
• fix(auth): drop sync fast-path from replica-safe credential check by @brandonrc in #1265
• fix(repositories): reject virtual repo create with no members at 400 (closes #1279) by @brandonrc in #1281
• fix(perf): functional reverse(path) index to make the suffix LIKE indexable (closes #1266) by @ThaSami in #1285
• chore: bump ubi9/ubi from 9.7 to 9.8 in /docker by @dependabot[bot] in #1293
• chore: bump github/codeql-action from 4.35.4 to 4.35.5 by @dependabot[bot] in #1292
• chore: bump ubi9/ubi-micro from 9.7 to 9.8 in /docker by @dependabot[bot] in #1291
• chore: bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in #1290
• chore: bump totp-rs from 5.7.0 to 5.7.1 by @dependabot[bot] in #1227
• chore: bump mimalloc from 0.1.48 to 0.1.51 by @dependabot[bot] in #1226
• chore: bump anchore/grype from v0.111.1 to v0.112.0 in /docker by @dependabot[bot] in #1082
• fix(dtrack): use PUT for API key creation by @junsung-cho in #1270
• fix(migration): correct column names + required NOT NULL columns in MigrationService by @ThaSami in #1268
• fix(pypi): union virtual member entries on simple// (#1230) by @ThaSami in #1267
• chore: enforce PR-issue link via GH Actions by @brandonrc in #1310
• fix(migrations): raise statement_timeout/lock_timeout for the migration session by @ThaSami in #1269
• fix(incus): use server-wide STORAGE_PATH for staging, not per-repo storage_path by @dragonpaw in #1297
• fix(setup): make admin password retrieval instructions runtime-agnostic by @dragonpaw in #1271
• fix(nuget): accept trailing slash on push + populate packages index by @joonhwan in #1289
• fix: proxy generic streaming by @lesaux in #1294
• fix(scanner): image scanner emits bare package name (closes #1311) by @brandonrc in #1312
• fix(auth): block non-admins from granting admin-class scopes on token issuance by @ThaSami in #1261
• docs(changelog): note affected_component format change (closes #1159) by @brandonrc in #1223
• fix: update and improve docker-compose files by @JojoMee in #1231
• fix(migration): improve JFrog 7.38.10 cache-artifact migration reliability by @danatri in #1295
• fix(users): split /users router so non-admins can self-manage tokens / password (closes #1257) by @ThaSami in #1258
• fix(lxc): register routes mirroring incus (closes #1272) by @brandonrc in #1318
• fix(maven): include groupId in virtual local-member match (closes #1287) by @brandonrc in #1323
• fix(dtrack): use artifact name as DT project name (closes #1276) by @brandonrc in #1324
• feat(ssrf): add AK_SSRF_ALLOW_PRIVATE_CIDRS env var (closes #1224) by @brandonrc in #1325
• fix(cocoapods): preserve all podspec fields in served JSON (closes #1286) by @brandonrc in #1321
• fix(pypi): refetch stale proxy-cache hits instead of 500 proposal by @axellpadilla in #1283
• fix (debian/apt) Use real OpenPGP signatures for Debian repository metadata by @D13410N3 in #1236
• fix(repositories): honor custom path on multipart upload (closes #1237) by @brandonrc in #1322
• fix(scanner): extract npm tgz via tar crate (closes #1243) by @brandonrc in #1330
• fix(sbom): include Grype-matched components in scan_packages inventory (closes #1273) by @brandonrc in #1333
• fix(proxy): migrate remaining buffered fetches to streaming (closes #1215) by @brandonrc in #1334
• fix(migrations): repair v1.1.9 -> v1.2.0 upgrade VersionMismatch(73) (closes #1277) by @brandonrc in #1335
• feat(repositories): server-side Docker tag aggregation (closes #1193) by @brandonrc in #1336
• fix: apply rustfmt to unblock v1.2.0-rc.2 (closes #1337) by @brandonrc in #1339
• fix(smtp): accept recipient alias on test email endpoint (closes #1332) by @brandonrc in #1338
• chore(deps): bump wasmtime-wasi to 36.0.10 (closes #1351) by @brandonrc in #1352
• fix(ci): smoke E2E virtual repo creates must supply member_repos (closes #1353) by @brandonrc in #1354
• chore(release): bump to v1.2.0-rc.2 (closes #1361) by @brandonrc in #1362
• fix(ci): make e2e-setup.sh POSIX-shell compatible (closes #1363) by @brandonrc in #1364

Thank You

Special recognition to @dragonpaw (Ash A.), one of the project's longest-running community members. Their first merged PRs land in this release (#1271, #1297), but their contribution history goes far beyond:

• Project sponsor via GitHub Sponsors
• 9+ issues filed since February 2026 covering LXC/Incus support (#203), API key tiering (#202), SSO improvements (#211, #213), garbage collection ideas (#218), and product feedback (#212, #217, #235, #236)
• Filed the LXC routing bug (#1272) that this release fixes

Thank you for the long-running engagement.

New Contributors

• @joonhwan made their first contribution in #1289
• @lesaux made their first contribution in #1294
• @JojoMee made their first contribution in #1231
• @danatri made their first contribution in #1295
• @axellpadilla made their first contribution in #1283
• @D13410N3 made their first contribution in #1236

Full Changelog: v1.2.0-rc.1...v1.2.0-rc.2