What's Changed
- fix(api): return 416 for bad upload range on PUT; fix GET upload Range at size zero by @andaaron in #3983
- feat(zb): Support for TTFB measurement + on-demand sync tests by @vrajashkr in #3929
- fix(api): recognize Docker Compose/Buildx User-Agent in v2 challenge workaround by @gjed in #3992
- chore: fix dependabot alerts by @rchincha in #3990
- feat(auth): support OIDC RP-Initiated Logout by @krjakbrjak in #3975
- fix(security): enhance timeout configurations and body size limits fo… by @rchincha in #3984
- Improve zli CVE diff output by @AkashKumar7902 in #3994
- chore: fix dependabot alerts by @rchincha in #4020
- Support multipart range blob pulls by @AkashKumar7902 in #3995
- fix(sync): apply tag filters before destination mapping by @AkashKumar7902 in #4003
- Multipart download enhancements by @andaaron in #4021
- docs(config): reference generated config schema by @AkashKumar7902 in #4015
- feat(cosign): add support for cosign bundle by @rchincha in #4023
- feat(auth): map OpenID groups claim by @AkashKumar7902 in #3999
- test: refactor countingReader into partialReaderOpenTracker and partialReaderReadCloser by @andaaron in #4027
- fix(auth): refine OIDC identity handling and claim-mapping logs by @andaaron in #4028
- feat(api): log session/audit subject from UserAccessControl by @andaaron in #4029
- refactor(zli): add typed ~/.zot config layer and strict validation by @andaaron in #4030
- refactor(build): move build metadata to pkg/buildinfo by @andaaron in #4045
- feat(zli): add config list/show/get/set/reset and isolate deprecated syntax by @andaaron in #4037
- fix(zli config): print help for missing args by @andaaron in #4046
- feat(authz): introduce conditional access control via CEL by @matheuscscp in #4040
- ci: sync go 1.26 images to ghcr.io/project-zot/golang by @andaaron in #4049
- ci: fix golangci-lint install URL by @andaaron in #4052
- chore: fix dependabot alerts by @rchincha in #4048
- fix: downgrade expected missing-blob HEAD logging from error to debug by @rchincha in #4056
- chore: fix dependabot alerts by @rchincha in #4059
- fix(lint): silence deprecated gomodguard linter warning by @benoittgt in #4070
- feat(metrics): add Prometheus GC metrics by @benoittgt in #3863
- chore: fix dependabot alerts by @rchincha in #4072
- chore: bump zui version by @rchincha in #4074
New Contributors
- @gjed made their first contribution in #3992
- @krjakbrjak made their first contribution in #3975
- @AkashKumar7902 made their first contribution in #3994
Full Changelog: v2.1.16...v2.1.17