some bug fixes and features

What's Changed

• s3: bugfix, use sync.Map instead of map for storing multi part upload… by @peusebiu in #436
• CVE-2022-23648: update dependencies in go.mod by @rchincha in #439
• go.mod: cleanup deps so 'go mod tidy' works by @rchincha in #438
• conformance: fix cross-mount behavior when 'from' is missing by @rchincha in #443
• test: use T.TempDir to create temporary test directory by @Juneezee in #447
• Root access for skopeo in Makefile by @laurentiuNiculae in #446
• routes: changes required to do browser authentication by @shimish2 in #429
• Added clustering github workflow by @peusebiu in #416
• Distribution-spec version named simply Version in zot logs by @laurentiuNiculae in #448
• fix dependabot alert by @rchincha in #460
• fix issue and PR templates by @rchincha in #463
• ci/cd: scan released images with trivy scanner by @rchincha in #453
• Export absolute path for notation binary so it runs locally by @chofnar in #470
• sync: support reloading sync config when the config file changes by @peusebiu in #406
• new config option for sync-destination by @laurentiuNiculae in #454
• move module deps under project-zot repo by @rchincha in #473
• Refactor the push/pull tests to use the bats test framework by @andaaron in #467
• sync: Add a new flag to enforce syncing only signed images, closes #455 by @peusebiu in #456
• gc: add a unit test by @rchincha in #478
• build: add -buildmode=pie to builds by @rchincha in #412
• sync: fix inconsistent test by @peusebiu in #489
• Modified shared storage haproxy config to stick only writes, not reads by @peusebiu in #471
• Leave zot repositories in a consistent state after zot hits fd limit closes #359 by @adodon2go in #381
• make scrub inline and periodic by @Andreea-Lupu in #440
• demos: initial commit of asciinema demos by @rchincha in #491
• Separate make targets that require elevated privileges by @chofnar in #461
• update 3rd party licenses by @rchincha in #496
• update demos for better sizing and layout by @rchincha in #498
• Add read-only tests, mixed read-only tests, mixed write-only tests and mixed read-write tests for zb binary by @roxanaN in #372
• "make verify-config" target reports issues by @laurentiuNiculae in #488
• s3: fix initRepo not creating index.json in some edge cases by @peusebiu in #469
• go.mod: update dependencies by @peusebiu in #505
• gc: make garbage-collect periodic by @Andreea-Lupu in #476
• Migrate from docker/build-push-action to stacker-build-push-action by @peusebiu in #499

New Contributors

• @Juneezee made their first contribution in #447
• @laurentiuNiculae made their first contribution in #446
• @chofnar made their first contribution in #470

Full Changelog: v1.3.9...v1.4.0

some bug fixes

What's Changed

• sync: fix inconsistent test by @peusebiu in #415
• tls: restrict tls cipher suites by @rchincha in #435
• CVE-2022-23649: fix dependabot alert by @rchincha in #431
• remove linger go.sum entries to fix dependabot alert by @rchincha in #437

Full Changelog: v1.3.8...v1.3.9

some bug fixes and improvements

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407
• dependabot-alert: update 'github.com/open-policy-agent/opa' by @rchincha in #408
• fix security alerts by @rchincha in #410
• sync: pull only missing images, not everything, closes #335 by @peusebiu in #340
• gc: add a gcDelay param by @rchincha in #404
• update README.md by @rchincha in #388
• ci/cd: add a workflow to detect/close stale PRs and issues by @rchincha in #414
• codecov: upgrade from v1 to v2 by @rchincha in #428

Full Changelog: v1.3.7...v1.3.8

v1.3.8-rc3

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407
• dependabot-alert: update 'github.com/open-policy-agent/opa' by @rchincha in #408
• fix security alerts by @rchincha in #410
• sync: pull only missing images, not everything, closes #335 by @peusebiu in #340
• gc: add a gcDelay param by @rchincha in #404

Full Changelog: v1.3.7...v1.3.8-rc3

v1.3.8-rc2

What's Changed

• go.mod: fix GHSA-mvff-h3cj-wj9c by @rchincha in #353
• ci/cd: added a 'make verify-config' target so that example configurat… by @peusebiu in #357
• ci/cd: upgrade golang to 1.17 by @rchincha in #354
• [Identity-based Authorization] Add an option to specify a policy for … by @peusebiu in #223
• Added storage latency histogram metric closes #279 by @adodon2go in #342
• build: split functionality into separate binaries by @rchincha in #360
• Fix cli version showing help message, closes #361 by @peusebiu in #363
• sync: Added support for syncing notary/cosign signatures, closes #261 by @peusebiu in #330
• perf: add a 'zb' binary for perf testing of dist-spec registries by @rchincha in #364
• ci/cd: add continuous benchmark action by @rchincha in #365
• ci/cd: update continuous benchmark version by @rchincha in #368
• Renamed zot-exporter to zxp and added its image to zot release by @adodon2go in #369
• Fix scrub command crash by @adodon2go in #377
• update go.mod by @rchincha in #383
• controller: support rate-limiting incoming requests by @rchincha in #380
• storage: return errors instead of panics by @rchincha in #378
• Remove sync http handler, not needed anymore since added sync on demand by @peusebiu in #356
• bug: Storage used per zot repo metric is broken by @adodon2go in #386
• coverage: add failure injection framework by @rchincha in #341
• Use InsecureSkipVerify only with https upstreams by @peusebiu in #387
• ci/cd: add a license checker by @rchincha in #384
• notaryv2: fix 'notation list' by @rchincha in #390
• sync: for a prefix, allow multiple registries as a list instead of on… by @peusebiu in #349
• bench: fix test data by @rchincha in #371
• sync: periodically retry if on-demand fails inline, closes #281 by @peusebiu in #362
• ci/cd: add a basic push-pull testing using client tools by @rchincha in #396
• storage: flush/sync contents to disk on file close by @rchincha in #373
• build: parameterize arch builds by @rchincha in #382
• ci/cd: restore part of github workflow for PRs by @rchincha in #399
• ci/cd: fix build/test workflow by @rchincha in #400
• coverage: improve code coverage by @rchincha in #398
• Added config enable=true/false for extensions closes #258 by @adodon2go in #348
• test: fix ldap unit tests by @rchincha in #403
• ci/cd: count lines of code by @rchincha in #402
• search: graphql api to give detailed repo info by @shimish2 in #393
• sync: make RetryDelay and MaxRetries optional by @peusebiu in #401
• ci/cd: fix image upload pipeline by @rchincha in #407

Full Changelog: v1.3.7...v1.3.8-rc2

some bug fixes and performance improvements

What's Changed

• Disable sync periodically polling when pollInterval is not configured by @peusebiu in #254
• ci/cd: fix github workflow to upload release binaries by @rchincha in #333
• Fix negative WaitGroup counter at runtime by @peusebiu in #338
• ci/cd: upgrade golangci-lint by @rchincha in #269
• Install notation as prerequisite for test Makefile target by @adodon2go in #326
• lint: some more linter-related cleanup by @rchincha in #346
• storage: use sha256-simd from minio by @rchincha in #347

Full Changelog: v1.3.6...v1.3.7

add a 'zot scrub' cmd to check integrity

What's Changed

• ci/cd: fix arch builds to pick correct file by @rchincha in #328
• Implement "scrub" to check manifest/blob integrity by @Andreea-Lupu in #236

New Contributors

• @Andreea-Lupu made their first contribution in #236

Full Changelog: v1.3.5...v1.3.6

make sync aware of storage subpaths and some bugfixes

What's Changed

• ci/cd: build for arm64 arch by @rchincha in #305
• move references to zotregistry.io and project-zot by @rchincha in #309
• sync: allow for saving to a subpath, closes #307 by @peusebiu in #312
• build: fix build artifacts in binary by @rchincha in #324
• fix Dependabot alert about GHSA-v95c-p5hm-xq8f by @rchincha in #325
• Fix race detected in sync test, closes #302 by @peusebiu in #304

Full Changelog: v1.3.4...v1.3.5

support for image signatures and some bugfixes

What's Changed

• revert release workflow by @rchincha in #276
• Fix data races in tests, closes #255 by @adodon2go in #274
• go.mod: upgrade module deps by @rchincha in #277
• ci/cd: update badges link to refer to main branch by @shimish2 in #284
• dependabot: fix dependabot alerts by @rchincha in #287
• go.mod: tidy go.mod by @rchincha in #289
• go.mod: fix another dependabot alert by @rchincha in #290
• routes: fix CheckManifest to return content length by @rchincha in #288
• sync: skip tls verify on /v2/_catalog when a registry is configured w… by @peusebiu in #285
• Sync prefix can be an exact match or a glob pattern, closes #297 by @peusebiu in #298
• ci/cd: unit test hangs for a long time intermittently closes #286 by @adodon2go in #291
• ci/cd: keep docker and stacker builds files consistent by @rchincha in #301
• artifacts: initial support for artifacts spec by @rchincha in #265

Full Changelog: v1.3.3...v1.3.4

add s3 support, fix sync extension bug

What's Changed

• storage: add s3 backend support (without GC and dedupe) by @peusebiu in #216
• sync: copy to a local cache first instead of writing over http by @peusebiu in #262

Full Changelog: v1.3.2...v1.3.3