What's Changed
- chore: fix dependabot alerts by @rchincha in #1649
- feat: signal handling by @peusebiu in #1651
- feat(test): Simplify tests by @laurentiuNiculae in #1583
- fix(authn): session authn is skipped when anonymous policy is configured by @peusebiu in #1647
- test(upload): update the new signature of the upload image function by @laurentiuNiculae in #1655
- fix(auth): fix anonymous auth for ui by @andaaron in #1662
- feat(ui): update ui to support cve filtering by platform by @andaaron in #1661
- fix: freebsd build support by @dfr in #1659
- Refactor metadb sorting pagination by @laurentiuNiculae in #1637
- ci: add freebsd target for releases by @rchincha in #1660
- refactor(extensions)!: refactor the extensions URLs and errors by @andaaron in #1636
- fix: Build scripts broken on Mac by @adodon2go in #1668
- ci(conformance): revert to upstream OCI checks by @rchincha in #1678
- fix(convert): now returned annotations for an index will fallback to … by @laurentiuNiculae in #1667
- fix: remove inline GC and schedule a background task instead by @Andreea-Lupu in #1610
- test(annotations): print logs for annotations bats tests by @laurentiuNiculae in #1680
- fix(authn): handle the case where zot with openid runs behind a proxy by @peusebiu in #1675
- chore(go.mod): fix dependabot alerts by @rchincha in #1684
- fix: binary-stacker Makefile target is broken by @adodon2go in #1689
- docs: fix apikey case by @babs in #1693
- chore: fix dependabot alerts by @rchincha in #1702
- fix: swagger Makefile target broken on darwin by @adodon2go in #1701
- test(refactor): refactor tests that use zot-test to use smaller images by @laurentiuNiculae in #1690
- feat: automated detection of OS and ARCH if unset by @adodon2go in #1711
- refactor: move /pkg/meta/signatures under /pkg/extensions/imagetrust by @Andreea-Lupu in #1712
- chore: fix dependabot alerts by @rchincha in #1720
- fix(ci/cd): detect uncommited swagger docs by @adodon2go in #1724
- fix(parse): lock storage while reading using image store by @laurentiuNiculae in #1719
- feat: propagate detailed error msgs to client (OCI dist-spec format) by @adodon2go in #1681
- feat(authn): add generic oidc and allow customizable name by @babs in #1691
- feat(mgmt): mgmt extention no longer depends on UI being enabled by @andaaron in #1728
- feat(apikey): added route to list user api keys by @peusebiu in #1708
- refactor(log): replace default logger with config complient log in ro… by @laurentiuNiculae in #1734
- feat(ui): update to latest zui version by @andaaron in #1735
- chore: fix dependabot alerts by @rchincha in #1737
- fix(examples): revert examples/config-minimal.json by @peusebiu in #1740
- refactor(cli): added equivalent subcommands for each flag combination under every command by @laurentiuNiculae in #1674
- fix: bats test refactoring by @adodon2go in #1731
- chore(go.mod): upgrade 3rd party packages by @andaaron in #1742
- fix: nightly build by @adodon2go in #1745
- test(bats): added bats example for deleting an image by @laurentiuNiculae in #1718
- refactor(storage): refactor storage into a single ImageStore by @peusebiu in #1656
- refactor(authz): use a struct for user access control info operations by @peusebiu in #1682
- fix: add manifest validation checks by @rchincha in #1747
- fix(gc): gc removes unknown manifests by @peusebiu in #1762
- feat(scheduler): pass the shutdown/reload context to running tasks by @peusebiu in #1671
- chore: fix dependabot alerts by @rchincha in #1763
- refactor: Reduce binary size of zot-minimal; Added CI check for binar… by @adodon2go in #1758
- refactor(makefile): consolidate the make targets used for bats tests by @andaaron in #1746
- feat: upload cosign public key and notation certificates to cloud by @Andreea-Lupu in #1744
- fix: DATA RACE in TestNewExporter by @adodon2go in #1766
- refactor(cli): remove old cli commands by @laurentiuNiculae in #1756
- fix(api): Fix 'last' query param for /tags/list to work without param 'n' by @andaaron in #1777
- chore: fix dependabot alerts by @rchincha in #1774
- fix: add retry logic to recreate existing trustpolicy secret by @Andreea-Lupu in #1776
- chore(dependabot): increase the limit of dependabot PRs by @andaaron in #1788
- chore: fix dependabot alerts by @rchincha in #1797
- fix: do not recreate trustpolicy secret if the content doesn't change by @Andreea-Lupu in #1800
- bug: can't build zot with empty EXTENSIONS by @adodon2go in #1803
- refactor: Reduce zb binary size by @adodon2go in #1783
- fix: change log msg for updating signatures validity by @Andreea-Lupu in #1804
- fix(sync): ping func should not try to read response body by @peusebiu in #1757
- fix(config): fix config reloader panic by @peusebiu in #1806
- fix(convert): fix the update rule of download count for images by @laurentiuNiculae in #1802
- feat(cli): add cli sort flag to subcommands by @laurentiuNiculae in #1768
- refactor: Review metrics endpoints by @adodon2go in #1770
- refactor(test): move image utils for tests in a separate module by @laurentiuNiculae in #1789
- refactor: Reduce zli binary size by @adodon2go in #1805
- fix(cve): cumulative fixes and improvements for CVE scanning logic by @andaaron in #1810
- chore: fix dependabot alerts by @rchincha in #1827
- feat(pprof): add profiling route handler to debug runtime by @andaaron in #1818
- fix(ci): print zot log on failure by @peusebiu in #1799
- test(cosign): add a oci dist-spec 1.1.0 conformant test case by @rchincha in #1835
- refactor(cli): Move cmdflags package under pkg/cli/client by @adodon2go in #1840
- feat(cve): implement CVE scanning as background tasks by @andaaron in #1833
- fix(gc): update repodb when gc'ing manifests by @peusebiu in #1819
- fix(tests): call ImageStore constructor with correct parameters by @andaaron in #1846
- chore: fix dependabot alerts by @rchincha in #1855
- ci: add a "nightly jobs" badge by @rchincha in #1858
- Add cross-compile to dockerfile by @sagikazarmark in #1816
- refactor(scrub): replace umoci logic in scrub implementation by @Andreea-Lupu in #1845
- fix(dedupe): run dedupe only for repositories found at startup by @peusebiu in #1844
- refactor(pkg/test): split logic in pkg/test/common.go into multiple packages by @andaaron in #1861
- fix: reduce test run time by @adodon2go in #1832
- ci(localstack): pin localstack python package to 2.2.0 and pull container image from ghcr by @andaaron in #1867
- ci: update localstack to 2.3.1 by @rchincha in #1869
- fix: errors returned by zot should match the dist-spec errors by @adodon2go in #1868
- fix(nightly): create bucket for s3 testing with localstack by @peusebiu in #1872
- fix: metrics endpoint must be secured behind authN by @adodon2go in #1864
- refactor(tests): Migrate some of the older tests to the new image-utils library by @andaaron in #1863
- refactor(test): make sure cli tests are not internal unless they need to be by @andaaron in #1878
- build: fix container image targets by @rchincha in #1856
- chore: fix dependabot alerts by @rchincha in #1885
- docs: add logging guidelines by @rchincha in #1884
- chore: fix dependabot alerts by @rchincha in #1893
- fix: running tests locally fails by @adodon2go in #1879
- chore: fix dependabot alerts by @rchincha in #1911
- chore(modules): update trivy to the tip of main by @andaaron in #1901
- ci(licenses): check if licenses file is updated by @adodon2go in #1898
- fix(cache): make dynamoDB aware of orignal/deduped blobs by @peusebiu in #1881
- chore: fix dependabot alerts by @rchincha in #1915
- fix(sync): fix data race when pinging registries by read-locking by @peusebiu in #1924
- feat(ui): update UI version by @rchincha in #1926
- fix(authn): apply fail delay only if credentials/sessions are supplied by @peusebiu in #1920
- fix(authn): create sessions only if UI header value is supplied by @peusebiu in #1919
- fix(nightly): increase nightly delays and timeouts by @peusebiu in #1877
- fix(meta): add support for uploaded index when signing using notation by @Andreea-Lupu in #1882
- fix: quick metrics setup in kind with prometheus by @adodon2go in #1897
- chore: fix dependabot alerts by @rchincha in #1942
- fix(sessions): periodically cleanup expired sessions by @peusebiu in #1939
- fix(tests): update imagetrust tests to use mock service by @Andreea-Lupu in #1929
- fix: metrics should be protected behind authZ by @adodon2go in #1895
- feat: use the "zot" namespace for the authentication urls by @andaaron in #1947
- ci: update golangci-lint version by @rchincha in #1834
- feat(api): repair corrupted blobs when pushed again by @peusebiu in #1927
- ci: use runners provided by CNCF by @rchincha in #1946
- chore: fix dependabot alerts by @rchincha in #1961
- fix: tests refactoring by @adodon2go in #1950
- fix: ci 'TLS check' job is broken by @adodon2go in #1970
- fix: Makefile 'run' target should not depend on running tests by @adodon2go in #1969
- refactor(metadb): change backend serialization to protobuf by @laurentiuNiculae in #1842
- chore: fix dependabot alerts by @rchincha in #1986
- fix: more accurate storage metrics after zot restart by @adodon2go in #1972
- feat(retention): added image retention policies by @peusebiu in #1866
- fix(metadb): fix unexpected panic when dereferencing map fields by @laurentiuNiculae in #1993
- feat: add support for oci1.1 cosign signatures by @Andreea-Lupu in #1963
- fix: handle pathnotfound for walk call by @elee1766 in #2006
- fix(routes): fix cors headers for api keys and logout route by @peusebiu in #1984
- test(meta): add push-pull-read tests for metadb by @laurentiuNiculae in #2022
- fix(coverage): add coverage for boltdb and dynamo by @laurentiuNiculae in #2018
- chore: fix dependabot alerts by @rchincha in #2019
- fix: update-licenses make target does not use LC_ALL=C locale on some… by @adodon2go in #2023
- fix(metadb): populate image pushTimestamp if it's 0 value by @peusebiu in #2003
- chore: fix dependabot alerts by @rchincha in #2028
- build(zui): add new makefile variables for the zui repo by @andaaron in #2030
- docs: update graphql examples to match current implementation by @andaaron in #2038
- docs: update example documentation to use the current authz structure by @andaaron in #2039
- feat(ldap): add option to load ldap from file by @laurentiuNiculae in #1778
- fix: TestPopulateStorageMetrics fails occasionally in CI by @adodon2go in #2042
- chore: fix dependabot alerts by @rchincha in #2040
- ci(nightly): add prometheus kind test by @adodon2go in #1940
- build(workflows): make sure we install the crio package matching the correct ubuntu version by @andaaron in #2048
- ci: resource tuning for faster runs by @adodon2go in #1967
- fix(nightly): fix docker images build 'no space left on device' by @peusebiu in #2051
- fix(config): better configuration errors using viper.UnmarshalExact() by @peusebiu in #2050
- feat(startup): update logic for metadb update on startup, skip unmodi… by @laurentiuNiculae in #2024
- fix(metrics): one-time tasks should not be starved by @rchincha in #2053
New Contributors
- @dfr made their first contribution in #1659
- @babs made their first contribution in #1693
- @sagikazarmark made their first contribution in #1816
- @elee1766 made their first contribution in #2006
Full Changelog: v2.0.0-rc6...v2.0.0-rc7