Red Hat Quay Release Notes
v3.8.2 - 2023-02-07
Build(Deps)
- 53ca62b8: bump oauthlib from 3.2.1 to 3.2.2 (#1742)
- 1ab53c38: bump pillow from 9.0.1 to 9.3.0 (#1739)
Chore
- 7547f6f5: Remove appr dependencies (PROJQUAY-4992) (#1743)
- ce694e04: remove deprecated appr code (PROJQUAY-4992) (#1729)
Config
- 08fae2ee: clean upload folder by default (PROJQUAY-4395) (#1741)
Logs
- 8c562906: Add repository information for build audit logs (PROJQUAY-4726) (#1720)
v3.8.1 - 2023-01-24
Chore
- 136e9734: v3.8.1 changelog bump (PROJQUAY-4716) (#1723)
Chore: V3.7.11 Changelog Bump (Https
- 8238c755: //issues.redhat.com/browse/PROJQUAY-4790) (#1722)
Cors
- 8f4cae04: Adding missing method type (PROJQUAY-4800) (#1660)
Logs
- c722d6df: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1701)
Nginx
- 006779bd: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1673)
Oci/Index.Py
Superusers
- 68ec0579: gives superusers access to team invite api (PROJQUAY-4765) (#1702)
UI
- 013f96fd: Fix redirection to user/org page (PROJQUAY-4667) (#1659)
Ui
- 3a3daeb5: Repository settings feature flag (PROJQUAY-4565) (#1689)
- 95f3064c: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1672)
v3.8.0 - 2022-11-26
Api
- 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
- aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
- d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
- 871c43ea: handle missing tag on DELETE tag api (#1444)
- bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)
Arch
Auth
- 734f7f9d: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1608)
- 3ae26f5e: Speed up permissions loading (PROJQUAY-4004) (#1582)
- 6ed0bcde: allow rs384 in jwt (PROJQUAY-4148) (#1449)
Billing
- 78896aa0: fix new private repo count (PROJQUAY-4208) (#1463)
- 17778979: add new larger stripe plan (PROJQUAY-4208) (#1462)
Bug
- ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
- 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)
Build(Deps)
- 9a1de19f: bump angular and @types/angular (#1451)
- 0c62c0ee: bump terser from 4.3.4 to 4.8.1 (#1452)
- 0f2ebdaf: bump moment from 2.29.2 to 2.29.4 (#1442)
Builders
- b8d3e174: Add cacert's to build agent (PROJQUAY-3819) (#1398)
- d11d45f2: Send notifications on build completion (PROJQUAY-3614) (#1346)
- 1d2e55b6: Set imagePullPolicy to always (PROJQUAY-3507) (#1330)
- 3a63fd71: Add dnsPolicy option (PROJQUAY-3755) (#1305)
Buildman
Bump
- b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)
CI
- e566560f: Commenting arm docker build (PROJQUAY-0000) (#1522)
Chore
- f4828fde: Add georeplication variable check (PROJQUAY-4363) (#1499)
- 8e1fba48: Fix startup script (#1402)
- cf52f5e3: Use Python 3.9 (#1382)
- 5eaf0584: Run mypy as CI job (#1363)
- 13f8e0c4: Rebuild quay image if requirements.txt is changed (#1342)
Chore: V3.6.8 Changelog Bump (Https
- f69b1309: //issues.redhat.com/browse/PROJQUAY-3990) (#1419)
Chore: V3.6.9 Changelog Bump (Https
- b44df459: //issues.redhat.com/browse/PROJQUAY-4192) (#1466)
Chore: V3.7.0 Changelog Bump (Https
- e85372d0: //issues.redhat.com/browse/PROJQUAY-2411) (#1337)
Chore: V3.7.1 Changelog Bump (Https
- e76db133: //issues.redhat.com/browse/PROJQUAY-3836) (#1372)
Chore: V3.7.10 Changelog Bump (Https
- 9f3c1699: //issues.redhat.com/browse/PROJQUAY-4627) (#1593)
Chore: V3.7.3 Changelog Bump (Https
- a55c63e7: //issues.redhat.com/browse/PROJQUAY-3989) (#1420)
Chore: V3.7.4 Changelog Bump (Https
- a5279983: //issues.redhat.com/browse/PROJQUAY-4050) (#1446)
Chore: V3.7.5 Changelog Bump (Https
- cc26275d: //issues.redhat.com/browse/PROJQUAY-4172) (#1458)
Chore: V3.7.6 Changelog Bump (Https
- e1a14f5c: //issues.redhat.com/browse/PROJQUAY-4237) (#1480)
Chore: V3.7.7 Changelog Bump (Https
- fcdd0e12: //issues.redhat.com/browse/PROJQUAY-4286) (#1508)
Chore: V3.7.8 Changelog Bump (Https
- 292d33f2: //issues.redhat.com/browse/PROJQUAY-4385) (#1517)
Chore: V3.7.9 Changelog Bump (Https
- 6438a8c6: //issues.redhat.com/browse/PROJQUAY-4478) (#1570)
Ci
- 07c8a75f: Check arm64 builds in CI (PROJQUAY-4038) (#1431)
Cleanup
- eb2cda16: Remove old validation code (PROJQUAY-4606) (#1586)
Conf/Nginx
Dev
- d3cc640f: Update Clair for dev (PROJQUAY-4461) (#1528)
- 04af141a: Add pre-commit script to run black (PROJQUAY-4039) (#1432)
Doc
Dockerfile
Export Compliance
- adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)
Fix
- 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
- f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)
GUI
Healthcheck
- c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)
Init
- e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
- 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
- 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)
Logs
- 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)
Makefile
- 692e3cee: use non-standard port for postgres test container (#1485)
- fd4e7723: use variable to tell postgres test target which tests to run (#1475)
Mirror
- 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
- 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
- 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)
Mirroring
- 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)
Nginx
Oauth
- 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
- 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)
PROJQUAY-3750
Proxy Cache
- 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)
Pull-Thru
Quay
- 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)
Quayio
- b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)
Quota
- f90e5e3d: Configuring Quota for user panel(PROJQUAY-3767) (#1334)
- 1e4871ec: Add Cache To Tag Delete (PROJQUAY-3828) (#1345)
Quota
- a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
- f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
- 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)
Quota Management
- 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)
Quota UI
- a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
- 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)
Registry
- c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)
Requirements.Txt
Revert "Chore
- 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)
Rhsso
- 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)
Schema1
- b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)
Secscan
- 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
- 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
- 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
- 776dbd90: update https proxy scheme (#1340)
Sso
- ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
- 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
- f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
- 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
- 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
- 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)
Storage
- 47564690: handle KeyError we sometimes get from aws (#1543)
- a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
- e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
- 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)
Superusers
- acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)
Task
- eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)
UI
- ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
- c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)
Ui
- 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
- 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
- b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
- 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
- 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
- d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)
User
- 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)
Users
- 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
- 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
- 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
- 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
- c4595fbb: when set, grant superusers repository permissions. (#1622)
- f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
- 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
- 14e87bd4: fix missing references in ldap for superusers (#1542)
- 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)
V2auth
- fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)
[Redhat-3.8] Arch
- 2e6f9b1e: add ppc64le support to quay (PROJQUAY-4595) (#1558)
[Redhat-3.8] Chore
- 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)
[Redhat-3.8] Config
- 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)
[Redhat-3.8] Repomirror
- 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)
v3.7.10 - 2022-10-25
Auth
- b619da30: Speed up permissions loading (PROJQUAY-4004) (#1581)
Chore: V3.7.10 Changelog Bump (Https
- 59937c6d: //issues.redhat.com/browse/PROJQUAY-4627) (#1592)
Secscan
- 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)
[Redhat-3.7] Chore
- 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)
v3.7.9 - 2022-10-17
Chore: V3.7.9 Changelog Bump (Https
- f65a235e: //issues.redhat.com/browse/PROJQUAY-4478) (#1569)
Storage
v3.7.8 - 2022-09-12
Chore: V3.7.7 Changelog Bump (Https
- 40b023fd: //issues.redhat.com/browse/PROJQUAY-4286) (#1509)
Chore: V3.7.8 Changelog Bump (Https
- 53f866cc: //issues.redhat.com/browse/PROJQUAY-4385) (#1518)
Healthcheck
- 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)
[Redhat-3.7] Bug
- 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
- 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)
[Redhat-3.7] Ci
- 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)
v3.7.7 - 2022-08-29
Mirror
- 72a4d353: Rollback failed tags (PROJQUAY-4322) (#1501)
- 21931a63: Default mirror rollback to false (PROJQUAY-4296) (#1491)
Registry
v3.7.6 - 2022-08-15
Chore: V3.7.6 Changelog Bump (Https
- 01b30c2d: //issues.redhat.com/browse/PROJQUAY-4237) (#1480) (#1481)
Fix
- dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)
Proxy Cache
- f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)
v3.7.5 - 2022-07-26
Auth
- f435b9e6: allow rs384 in jwt (PROJQUAY-4148) (#1450)
Chore: V3.7.4 Changelog Bump (Https
- 10edbe6d: //issues.redhat.com/browse/PROJQUAY-4050) (#1446) (#1447)
Chore: V3.7.5 Changelog Bump (Https
- 564f3f0c: //issues.redhat.com/browse/PROJQUAY-4172) (#1460)
Mirroring
- eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)
v3.7.4 - 2022-07-07
Builders
- 92d694aa: Add cacert's to build agent (PROJQUAY-3819) (#1398) (#1436)
Mirror
- c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)
v3.7.3 - 2022-06-28
Chore: V3.7.3 Changelog Bump (Https
- 50f24e2f: //issues.redhat.com/browse/PROJQUAY-3989) (#1420) (#1421)
Storage
- 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)
[Redhat-3.7] Ui
- 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)
v3.7.2 - 2022-06-22
Builders
- ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)
Chore: V3.7.1 Changelog Bump (Https
- ece9d54f: //issues.redhat.com/browse/PROJQUAY-3836) (#1373)
Chore: V3.7.2 Changelog Bump (Https
- 78814ef2: //issues.redhat.com/browse/PROJQUAY-3932) (#1406)
Fix
- 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)
GUI
Quota
- af28e832: Fix calculating org size (PROJQUAY-3889) (#1393)
- 058b9d34: Fix join on caching repo size (PROJQUAY-3889) (#1381)
Requirements.Txt
UI
- abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)
[Redhat-3.7] Quota UI
- 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)
v3.7.1 - 2022-06-06
Init
- e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
- cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
- c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)
Pull-Thru
- a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)
[Redhat-3.7] Quota
- abe1528d: Configuring Quota for user panel(PROJQUAY-3767) (#1353)
- 0cafea97: Add Cache To Tag Delete (PROJQUAY-3828) (#1347)
[Redhat-3.7] UI
- 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)
v3.7.0 - 2022-05-23
API
Api
- 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
- 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)
App.Py
Auth
- 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
- edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
- 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
- 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)
Billing
- 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
- 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
- 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)
Blobuploadcleanupworker
- f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
- 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)
Build
- 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
- fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
- eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
- 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
- a347d316: Update backup base image name (PROJQUAY-2372) (#965)
- d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
- af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
- e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
- d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
- 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)
Build(Deps)
- 4ee715c9: bump is-my-json-valid from 2.16.0 to 2.20.6 (#1058)
- b009590c: bump ajv from 6.10.2 to 6.12.6 (#1112)
- 4176c498: bump moment from 2.17.1 to 2.29.2 (#1236)
- 723fd599: bump url-parse from 1.5.8 to 1.5.9 (#1168)
- 4b4f16e1: bump url-parse from 1.5.6 to 1.5.8 (#1151)
- 49c56aa1: bump url-parse from 1.5.2 to 1.5.6 (#1125)
- c96d1fbc: bump protobuf from 3.12.2 to 3.15.0 (#1110)
- 102705c9: bump pillow from 8.3.2 to 9.0.0 (#1059)
- e7e093b0: bump qs from 6.3.1 to 6.3.3 (#1086)
- 88956630: bump y18n from 3.2.1 to 3.2.2 (#1080)
- 21f3538f: bump python-ldap from 3.2.0 to 3.4.0 (#1002)
- ae516d84: bump reportlab from 3.5.34 to 3.5.55 (#978)
- 288f31bb: bump pip from 20.2.3 to 21.1 (#977)
- 8eab6366: bump babel from 2.8.0 to 2.9.1 (#944)
- 66373020: bump url-parse from 1.4.0 to 1.5.2 (#873)
- 299fa6d9: bump pillow from 8.3.1 to 8.3.2 (#882)
- b6495343: bump path-parse from 1.0.5 to 1.0.7 (#870)
Builders
- 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
- 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
- d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
- 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
- 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
- 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
- 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
- 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
- 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
- dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
- b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)
Buildman
- a79f7b6f: increase allowed grpc body size for log streams (#1234)
- ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
- 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
- 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
- a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
- 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
- a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
- eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
- b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)
CONTRIBUTING
Cache
- ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)
Chore
- c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
- 2d56a8df: add logging during instance service key generation (#1276)
- 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
- a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
- 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
- 9bdbba6f: Remove unused files (#1067)
- 65100439: download aws ip ranges via github workflow (#1041)
- b7037d9c: Bump up config-tool version v0.1.9 (#992)
- 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
- ae129b45: Bump up config-tool version v0.1.8 (#984)
- c8092069: Bump up config-tool version (#983)
- ba08ddd7: Bump up config-tool version (#982)
- bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
- 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
- c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
- 16dcebf1: build and publish workflow (PROJQUAY-2556)
- 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)
Chore(Dockerfile)
- 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)
Chore: V3.6.3 Changelog Bump (Https
- 62e2eac1: //issues.redhat.com/browse/PROJQUAY-3028) (#1118)
Chore: V3.6.4 Changelog Bump (Https
- 992bc5c3: //issues.redhat.com/browse/PROJQUAY-3335) (#1162)
Chore: V3.6.5 Changelog Bump (Https
- 81db4e84: //issues.redhat.com/browse/PROJQUAY-3354) (#1211)
Chore: V3.6.6 Changelog Bump (Https
- d8a76c0d: //issues.redhat.com/browse/PROJQUAY-3635) (#1278)
Chore: V3.7.0 Changelog Bump (Https
- 8a54431d: //issues.redhat.com/browse/PROJQUAY-2411) (#1338)
Ci
- e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
- c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)
Clean.Sh
Cleanup
- 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)
Compliance
- ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)
Conf
Config
- e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
- c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
- c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
- c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)
Config.Py
- d14da17a: Add support for source containers (PROJQUAY-2271) (#954)
Data
Data/Buildlogs
Database
- 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
- 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
- c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)
Db
- eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)
Debug
- 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
- 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)
Defaults
- a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)
Deploy
- 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
- d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
- 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
- 1589351b: Add clair back fill worker deployment manifests (#991)
- 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
- 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
- 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
- 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
- 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)
Deps
Dockerfile
- 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
- 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
- 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
- cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
- da558b0f: replace golang base image in production dockerfile (#928)
- 139c9abc: use separate dockerfile for production deployment (#927)
- 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)
Docs
- 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)
Documentation
- ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)
Editor
- 6f7dea7f: Bump config tool to v0.1.12 (PROJQUAY-3593) (#1267)
- d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)
Endpoints/V2
Feat
- fe4d66b0: pull-thru proxy cache (#1053)
- fca67e77: mypy type annotations (PROJQUAY-740) (#455)
Fix
Fix
- c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)
Format
- ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)
Formatting
- e4390472: Update code to obey the linter (PROJQUAY-0) (#1057)
Gc
- 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)
Imagemirror
- 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)
Invoice
- 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)
Ipresolver
- b9557d14: update country mmdb (PROJQUAY-3031) (#1049)
Ldap
- c8a7e641: add test for user filter (PROJQUAY-2766) (#980)
Makefile
- 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)
Migration
- 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
- 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)
Mirror
- d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
- f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)
Namespacequota
Nginix
- 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)
Nginx
- aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
- 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
- de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
- ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
- 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
- 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
- 630d6f46: use bigger http/2 chunks for blobs (#630)
Notification
- 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
- a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)
Oci
- f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)
PROJQUAY-3750
Proxy
- 1342a17b: make upstream related error message more actionable (#1240)
- b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
- f248d885: don't store entire blob in memory when caching (#1200)
Proxy Cache
- a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)
Proxy Cache
- 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)
Quay
- 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)
Quay UI
- 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)
Quay.Io
Quay.Io UI
Quayio
- 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
- 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)
Quota
- 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)
Quota
- f4093b0d: fix caching (PROJQUAY-3660) (#1291)
- 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
- 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
- eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)
Quota API
- a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
- 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)
Quota Management
- cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)
Quota UI
- d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
- a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
- 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
- f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
- 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
- 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)
QuotaManagement
- 15fa20a1: Reporting (PROJQUAY-2936) (#1048)
Realtime
- a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)
Refactor(Dockerfile)
Registry
- 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)
Registry_proxy_model
- 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)
Requirements
Requirements-Osbs
Requirements-Osbs.Txt
Requirements.Txt
Revert "Quayio
- 8324586e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)
Revert "Revert "Quayio
- 3140a62e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)" (#1289)
Revert "Schema1
- 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)
Revert "Secscan
- dd1eab52: add a global lock on security worker runs (PROJQUAY-3501) (#1226)" (#1232)
Schema1
- b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)
Secscan
- 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
- f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
- 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
- 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
- ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
- 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
- a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
- 922892d1: configure global lock (PROJQUAY-3501) (#1255)
- 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
- d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
- 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
- a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
- 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
- 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
- 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
- 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
- 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
- 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
- b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
- 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
- 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
- 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)
Sescan
- 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)
Setup
- fd190ad9: Export Quay modules (PROJQUAY-3181) (#1108)
Static
Storage
- c9c91339: allow arbitrary endpoint url for azure storage (#1071)
- 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
- ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
- f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)
Superuser
- dad7dfaf: Fix display of build logs (PROJQUAY-3404) (#1185)
Teams
- 639833cc: admin team deletion (PROJQUAY-2080) (#1077)
Trigger_analyzer
- 861c247f: fix confusing print (PROJQUAY-1995) (#1073)
UI
- 3d6545b9: Quota UI enhancements (PROJQUAY-0000) (#1242)
Ui
- e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
- 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
- 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
- e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
- 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
- bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)
Util
Util/Ipresolver
V2auth
- 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)
[Redhat-3.7] Quota Management
- 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)
v3.6.2 - 2021-12-02
Api
- 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)
Backport
Build
- 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
- 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
- 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
- 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
- 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
- 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)
Build(Deps)
- 98c008e6: bump pillow from 8.3.1 to 8.3.2 (#882) (#958)
- c5488aa3: bump ssri from 6.0.1 to 6.0.2 (#818)
- 3c355223: bump flask-cors from 3.0.8 to 3.0.9 (#783)
Buildman
- f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
- bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)
Cache
- 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
- cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)
Chore
- 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
- b016844a: build and publish workflow (PROJQUAY-2556)
- 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
- 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
- 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
- a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
- 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
- 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)
Config
- c4ad61b5: define default oci artifact types (PROJQUAY-2334) (#877) (#881)
Db
- 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)
Defaults
- 26a06763: Update defaults in config and schema (PROJQUAY-2425) (#923) (#925)
Deploy
- ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
- d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)
Deployment
- 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)
Doc
- 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)
Dockerfile
- 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
- 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
- 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
- 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)
- a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)
Fips
- 65363057: enforce smtp tls (PROJQUAY-1804) (#782) (#782)
Local-Dev
- eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)
Migration
- 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)
Mirror
- 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)
Modelcache
- b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
- df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)
Notification
- 5996cbec: check certs exists for webhooks (PROJQUAY-2424) (#886) (#900)
Oauth
- 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)
Oci
- 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
- 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
- 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)
Organization
- 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)
Python
- 2d0adf0c: bump pillow to 8.3.1 (PROJQUAY-2250) (#852)
Registry
- b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)
Release
- 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)
Repository
- a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)
Requirements
Secscan
- 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
- 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
- 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)
Secscan
- fa0e8618: clair v4 enrichment (PROJQUAY-2102) (#840)
Static
Templates
- 1c157e2a: escape templated script value (PROJQUAY-970) (#828)
Ui
- a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
- 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
- de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)
Util
- cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)
Utility
- 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)
v3.6.0-alpha.9 - 2021-04-21
Cache
- 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
- 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)
Chore
- 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
- 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
- addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
- ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)
Ci
- e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)
Deployment
- 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
- 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)
Gc
- efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
- f774e4c6: add metrics for deleted resources (#711)
Lock
- c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
- 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)
Queueworker
- 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)
v3.6.0-alpha.8 - 2021-04-09
Chore
- ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
- 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)
v3.6.0-alpha.7 - 2021-04-09
Chore
- b54c8999: v3.6.0-alpha.7 changelog bump (PROJQUAY-1486) (#730)
- bfc9d75c: fix cut-release.yml (PROJQUAY-1468) (#729)
v3.6.0-alpha.6 - 2021-04-09
Chore
- 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
- 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
- 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
- 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)
v3.6.0-alpha.5 - 2021-04-08
Release
- fba629b2: fixing Release action (PROJQUAY-1486) (#723)
v3.6.0-alpha.4 - 2021-04-08
Release
- 9dd55dee: fixing Release action (PROJQUAY-1486)