getnora-io/nora v1.2.2

on GitHub

NORA 1.2.2

Patch release fixing Docker retention budget pollution by digest refs, PyPI proxy failures on Chinese mirrors with relative URLs, and a Maven metadata rewrite performance optimization.

Fixed

• Docker retention keep_last counts real tags only — put_manifest stores both a tag file and a digest file per push. collect_docker_versions() counted both as separate versions, so keep_last=3 retained only ceil(3/2)=2 real tags. Digest refs (sha256:..., sha512:...) are now filtered from the retention collector and from the tags/list API response. (#932, #938)
• PyPI proxy resolves relative URLs from upstream mirrors — Chinese PyPI mirrors (Tsinghua, USTC, Aliyun) return relative hrefs in simple index HTML (e.g. ../../packages/torch-2.4.0.whl). find_file_url() returned the raw relative path which proxy_fetch() rejected as an invalid URL. The page URL is now passed in and non-absolute hrefs are resolved via Url::join(). (#877, #944)

Performance

• Maven metadata rewrite skipped when unchanged — rewrite_maven_metadata() previously serialized and wrote the merged XML on every download even when the merged document was identical. Now compares before writing, avoiding unnecessary I/O. (#888, #939)

Docs & CI

• CI docs link-checker — new link-check.yml workflow using lychee to catch dead links in markdown and llms.txt on push/PR/weekly schedule. (#727, #941)
• OIDC JWT Bearer-only clarification — compatibility docs now clarify that OIDC tokens are Bearer-only, not usable as Basic auth passwords. (#853, #940)

Full changelog: v1.2.1...v1.2.2

Install

# x86_64
curl -LO https://github.com/getnora-io/nora/releases/download/v1.2.2/nora-linux-amd64
chmod +x nora-linux-amd64
sudo mv nora-linux-amd64 /usr/local/bin/nora

# ARM64 (Apple Silicon, Graviton, Ampere)
curl -LO https://github.com/getnora-io/nora/releases/download/v1.2.2/nora-linux-arm64
chmod +x nora-linux-arm64
sudo mv nora-linux-arm64 /usr/local/bin/nora

Docker

docker pull getnora/nora:1.2.2

DEB / RPM

# Debian / Ubuntu / Astra Linux (amd64)
curl -LO https://github.com/getnora-io/nora/releases/download/v1.2.2/nora-amd64.deb
sudo dpkg -i nora-amd64.deb

# RHEL / Fedora / RED OS (amd64)
curl -LO https://github.com/getnora-io/nora/releases/download/v1.2.2/nora-amd64.rpm
sudo rpm -i nora-amd64.rpm

Cargo

cargo install nora-registry

Helm

helm repo add nora https://getnora-io.github.io/helm-charts
helm repo update
helm install nora nora/nora

Changelog

See CHANGELOG.md