Distribution Versions Save

What's Changed

• Pass BUILDTAGS argument to go build by @marcusirgens in https://github.com/distribution/distribution/pull/3926
• Enable Go build tags by @thaJeztah in https://github.com/distribution/distribution/pull/4009
• reference: replace deprecated function SplitHostname by @thaJeztah in https://github.com/distribution/distribution/pull/4032
• Dont parse errors as JSON unless Content-Type is set to JSON by @thaJeztah in https://github.com/distribution/distribution/pull/4054
• update to go 1.20.8 by @thaJeztah in https://github.com/distribution/distribution/pull/4056
• Set Content-Type header in registry client ReadFrom by @thaJeztah in https://github.com/distribution/distribution/pull/4053
• deprecate reference package, migrate to github.com/distribution/reference by @thaJeztah in https://github.com/distribution/distribution/pull/4063
• digestset: deprecate package in favor of go-digest/digestset by @thaJeztah in https://github.com/distribution/distribution/pull/4064
• Do not close HTTP request body in HTTP handler by @milosgajdos in https://github.com/distribution/distribution/pull/4068
• Add v2.8.3 release notes by @milosgajdos in https://github.com/distribution/distribution/pull/4088

New Contributors

• @marcusirgens made their first contribution in https://github.com/distribution/distribution/pull/3926

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3

What's Changed

• Revert registry/client: set Accept: identity header when getting layers by @ndeloof in https://github.com/distribution/distribution/pull/3783
• Parse http forbidden as denied by @vvoland in https://github.com/distribution/distribution/pull/3914
• Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by @thaJeztah (#3650)
• Fix CVE-2023-2253 runaway allocation on /v2/_catalog by @josegomezr 521ea3d9
• Fix panic in inmemory driver by @wy65701436 in https://github.com/distribution/distribution/pull/3815
• bump up golang version (alternative) by @thaJeztah in https://github.com/distribution/distribution/pull/3903
• Dockerfile: update xx to v1.2.1 by @thaJeztah in https://github.com/distribution/distribution/pull/3907
• update to go1.19.9 by @thaJeztah in https://github.com/distribution/distribution/pull/3908
• Add code to handle pagination of parts. Fixes max layer size of 10GB bug by @DavidSpek in https://github.com/distribution/distribution/pull/3893
• Dockerfile: fix filenames of artifacts by @thaJeztah in https://github.com/distribution/distribution/pull/3911

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2

What's Changed

• Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by @thaJeztah (#3650)
• Fix CVE-2023-2253 runaway allocation on /v2/_catalog by @josegomezr 521ea3d9
• Fix panic in inmemory driver by @wy65701436 in https://github.com/distribution/distribution/pull/3815
• bump up golang version (alternative) by @thaJeztah in https://github.com/distribution/distribution/pull/3903
• Dockerfile: update xx to v1.2.1 by @thaJeztah in https://github.com/distribution/distribution/pull/3907
• update to go1.19.9 by @thaJeztah in https://github.com/distribution/distribution/pull/3908
• Add code to handle pagination of parts. Fixes max layer size of 10GB bug by @DavidSpek in https://github.com/distribution/distribution/pull/3893
• Dockerfile: fix filenames of artifacts by @thaJeztah in https://github.com/distribution/distribution/pull/3911

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2

NOTE: This is a pre-release that does not contain any artifacts!

What's Changed

• Fix runaway allocation on /v2/_catalog by @josegomezr 521ea3d9
• Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by @thaJeztah in https://github.com/distribution/distribution/pull/3650
• Fix panic in inmemory driver by @wy65701436 in https://github.com/distribution/distribution/pull/3815
• bump up golang version (alternative) by @thaJeztah in https://github.com/distribution/distribution/pull/3903
• Dockerfile: update xx to v1.2.1 by @thaJeztah in https://github.com/distribution/distribution/pull/3907
• update to go1.19.9 by @thaJeztah in https://github.com/distribution/distribution/pull/3908
• Add code to handle pagination of parts. Fixes max layer size of 10GB bug by @DavidSpek in https://github.com/distribution/distribution/pull/3893

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1

Welcome to the v2.8.1 release of registry!

The 2.8.1 registry release fixes the Go module issues that have popped up in the v2.8.0

There have been no changes made in the released binaries other than the bump of the Go runtime.

See the changelog below for a full list of changes.

CI

• ci: use proper git ref for versioning #3595
• Go: make Go version explicit and pin it to the latest 1.16 release #3604

Contributors

• CrazyMax
• Milos Gajdos

Changes

6 commits

• 96cc1fdb FIx typo
• e744906f Update 2.8.1. release notes
• Prepare for v2.8.1 release (#3596)
  • 6736d188 Prepare for v2.8.1 release
• [2.8 backport] ci: use proper git ref for versioning (#3595)
  • 80acbdf0 ci: use proper git ref for versioning

Dependency Changes

This release has no dependency changes

The previous release can be found at v2.8.0

registry 2.8.0

Welcome to the v2.8.0 release of registry!

The 2.8.0 registry release has been a long time overdue. This is the first step towards the last 2.x release. No further active development will continue on 2.x branch. Security vulnerability patches to 2.x might be considered, but all active development will be focussed on v3 release due in 2022. This release includes a security vulnerability fix along with a few minor bug fixes and improvemnts in documentation and CI.

See changelog below for full list of changes.

Bugfixes

• Close the io.ReadCloser from storage driver #3370
• Remove empty Content-Type header #3297
• Make ipfilteredby not required in cloudfront storage middleware #3088

Features

• Add reference.ParseDockerRef utility function #3002

CI build

• First draft of actions based ci #3347
• Fix vndr and check #3001
• Improve code quality by adding linter checks #3385

Documentation

• Add redirect for old URL #3197
• Fix broken table #3073
• Adding deprecated schema v1 instructions #2987
• Change should to must in v2 spec (#3495)

Storage drivers

• S3 Driver: add support for ceph radosgw #3119

Security

• Added flag for user configurable cipher suites #3384
• Address CVE-2020-26160 by replacing vulnerable third-party depedency#3466
• Replace math rand with crypto rand #3531
• Address CVE-2021-41190 by validating document type before unmarshal GHSA-77vh-xpmg-72qh

Changes

50 commits

• Prepare for v2.8.0 release (#3552)
  • d5d89a46 Make this releaes a beta release first.
  • 1ddad0ba Apply suggestions from code review
  • 3960a560 Prepare for v2.8.0 release
• [2.8] Release artifacts (#3568)
  • 6241e099 [2.8] Release artifacts
• [2.8] Release workflow (#3565)
  • 65ca39e6 release workflow
  • 3b7b5345 Merge pull request from GHSA-qq97-vm5h-rrhg
  • 10ade61d manifest: validate document type before unmarshal
• [release/2.7] github.com/golang-jwt/jwt v3.2.2 (#3466)
  • c5679da3 [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
• [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2 (#3535)
  • 97f6dace [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
• [release/2.7]fix go check issues (#3531)
  • 9a3ff113 fix go check issues
• [release/2.7 backport] Change should to must in v2 spec (#3495)
  • 19b573a6 Change should to must in v2 spec
• [release/2.7] update to go1.16 (#3472)
  • d836b23f [release/2.7] update to go1.16
• [backport release/2.7]Added flag for user configurable cipher suites (#3384)
  • cc341b01 Added flag for user configurable cipher suites
• enable ci for release/2.7 (#3385)
  • 09109ab5 Fix gosimple checks
  • 89e6568e Remove err nil check
  • 3c64ff10 Fix gometalint errors
  • f807afbf Migrate to golangci-lint
  • 9142de99 enable ci for release/2.7
• [cherry pick]close the io.ReadCloser from storage driver (#3370)
  • 3fe1d67a close the io.ReadCloser from storage driver
• [backport release/2.7] First draft of actions based ci (#3347)
  • f1bd6551 First draft of actions based ci
• [release/2.7 backport] Remove empty Content-Type header (#3297)
  • cf8615de Remove empty Content-Type header
• [release/2.7 backport] docs: add redirect for old URL (#3197)
  • 48eeac88 docs: add redirect for old URL
• [release/2.7] Fix s3 driver for supporting ceph radosgw (#3119)
  • e2f006ac S3 Driver: added comment for missing KeyCount workaround
  • 0a1e4a57 Fix s3 driver for supporting ceph radosgw
• [release/2.7 backport] Bugfix: Make ipfilteredby not required (#3088)
  • afa91463 Bugfix: Make ipfilteredby not required
• [release/2.7 backport] Add reference.ParseDockerRef utility function (#3002)
  • fad36ed1 Add reference.ParseDockerRef utility function
• [release/2.7 backport] fix markdown issues on configuration page (#3073)
  • f999f540 Fixing broken table
  • c636ed78 Fix cloudfront documentation formatting
• [release/2.7] Fix vndr and check (#3001)
  • 5883e2d9 Fix vndr and check
• [release/2.7] Adding deprecated schema v1 page (#2987)
  • a3c027e6 Adding deprecated schema instructions

Dependency Changes

• github.com/dgrijalva/jwt-go -> github.com/golang-jwt/jwt.git # v3.2.2 (a601269ab70c -> 4bbdd8ac624f)
• github.com/opencontainers/image-spec -> github.com/opencontainers/image-spec # v1.0.2 (ab7389ef9f50 -> 67d2d5658fe0)

Previous release can be found at v2.7.1

Welcome to the v2.8.0-beta.1 release of registry!

The 2.8.0 registry release has been a long time overdue. This is the first step towards the last 2.x release. No further active development will continue on 2.x branch. Security vulnerability patches to 2.x might be considered, but all active development will be focussed on v3 release due in 2022. This beta release includes a security vulnerability fix along with a few minor bug fixes and improvemnts in documentation and CI.

See changelog below for full list of changes.

Bugfixes

• Close the io.ReadCloser from storage driver #3370
• Remove empty Content-Type header #3297
• Make ipfilteredby not required in cloudfront storage middleware #3088

Features

• Add reference.ParseDockerRef utility function #3002

CI build

• First draft of actions based ci #3347
• Fix vndr and check #3001
• Improve code quality by adding linter checks #3385

Documentation

• Add redirect for old URL #3197
• Fix broken table #3073
• Adding deprecated schema v1 instructions #2987
• Change should to must in v2 spec (#3495)

Storage drivers

• S3 Driver: add support for ceph radosgw #3119

Security

• Added flag for user configurable cipher suites #3384
• Address CVE-2020-26160 by replacing vulnerable third-party depedency#3466
• Replace math rand with crypto rand #3531
• Address CVE-2021-41190 by validating document type before unmarshal GHSA-77vh-xpmg-72qh

Changes

50 commits

• Prepare for v2.8.0 release (#3552)
  • d5d89a46 Make this releaes a beta release first.
  • 1ddad0ba Apply suggestions from code review
  • 3960a560 Prepare for v2.8.0 release
• [2.8] Release artifacts (#3568)
  • 6241e099 [2.8] Release artifacts
• [2.8] Release workflow (#3565)
  • 65ca39e6 release workflow
  • 3b7b5345 Merge pull request from GHSA-qq97-vm5h-rrhg
  • 10ade61d manifest: validate document type before unmarshal
• [release/2.7] github.com/golang-jwt/jwt v3.2.2 (#3466)
  • c5679da3 [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
• [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2 (#3535)
  • 97f6dace [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
• [release/2.7]fix go check issues (#3531)
  • 9a3ff113 fix go check issues
• [release/2.7 backport] Change should to must in v2 spec (#3495)
  • 19b573a6 Change should to must in v2 spec
• [release/2.7] update to go1.16 (#3472)
  • d836b23f [release/2.7] update to go1.16
• [backport release/2.7]Added flag for user configurable cipher suites (#3384)
  • cc341b01 Added flag for user configurable cipher suites
• enable ci for release/2.7 (#3385)
  • 09109ab5 Fix gosimple checks
  • 89e6568e Remove err nil check
  • 3c64ff10 Fix gometalint errors
  • f807afbf Migrate to golangci-lint
  • 9142de99 enable ci for release/2.7
• [cherry pick]close the io.ReadCloser from storage driver (#3370)
  • 3fe1d67a close the io.ReadCloser from storage driver
• [backport release/2.7] First draft of actions based ci (#3347)
  • f1bd6551 First draft of actions based ci
• [release/2.7 backport] Remove empty Content-Type header (#3297)
  • cf8615de Remove empty Content-Type header
• [release/2.7 backport] docs: add redirect for old URL (#3197)
  • 48eeac88 docs: add redirect for old URL
• [release/2.7] Fix s3 driver for supporting ceph radosgw (#3119)
  • e2f006ac S3 Driver: added comment for missing KeyCount workaround
  • 0a1e4a57 Fix s3 driver for supporting ceph radosgw
• [release/2.7 backport] Bugfix: Make ipfilteredby not required (#3088)
  • afa91463 Bugfix: Make ipfilteredby not required
• [release/2.7 backport] Add reference.ParseDockerRef utility function (#3002)
  • fad36ed1 Add reference.ParseDockerRef utility function
• [release/2.7 backport] fix markdown issues on configuration page (#3073)
  • f999f540 Fixing broken table
  • c636ed78 Fix cloudfront documentation formatting
• [release/2.7] Fix vndr and check (#3001)
  • 5883e2d9 Fix vndr and check
• [release/2.7] Adding deprecated schema v1 page (#2987)
  • a3c027e6 Adding deprecated schema instructions

Dependency Changes

• github.com/dgrijalva/jwt-go -> github.com/golang-jwt/jwt.git # v3.2.2 (a601269ab70c -> 4bbdd8ac624f)
• github.com/opencontainers/image-spec -> github.com/opencontainers/image-spec # v1.0.2 (ab7389ef9f50 -> 67d2d5658fe0)

Previous release can be found at v2.7.1

Welcome to the v2.7.1 release of registry!

The first patch release of 2.7 addresses an upgrade issue when using configurations from pre-2.7 registries. When upgrading from 2.6 or earlier use this patch release or newer to avoid a failure on startup from not updating the configuration file.

• Set default for new autoredirect option
• GCS driver is now included in binary builds using Dockerfile

Please try out the release binaries and report any issues at https://github.com/docker/distribution/issues.

Contributors

• Derek McGowan
• Ryan Abrams
• David Wu

Changes

• 2461543d Merge pull request #2824 from dmcgowan/update-version-file-2.7.1
• 5b98226a Update version file for 2.7.1
• 2eab12df Merge pull request #2805 from dmcgowan/release-2.7.1
• 445ef068 Release notes for 2.7.1
• cbc30be4 Merge pull request #2821 from caervs/ISS-2819
• bf74e4f9 Use same env var in Dockerfile and Makefile
• 62994fdd Merge pull request #2804 from caervs/ISS-2793-2.7
• e702d95c Merge pull request #2802 from davidswu/2.7-autoredirect
• caf43bbc default autoredirect to false
• d1abdeb6 Add docs for autoredirect config parameter

Dependency Changes

Previous release can be found at v2.7.0