1
0
mirror of https://github.com/quay/quay.git synced 2026-01-26 06:21:37 +03:00
Commit Graph

122 Commits

Author SHA1 Message Date
Deirdre Malone
e8790e844d chore(deps): update go version to 1.24.8 (PROJQUAY-9842) (#4653)
Update go version 1.24.8
Fix for CVE-2025-58183
2025-12-02 15:54:36 +00:00
jbpratt
c96d865f8d chore: add workflow to label original PR on backport merge (#4663)
When a cherry-pick PR merges to a redhat-* branch, this workflow
labels the original PR with backported/<branch> to track which
releases contain the fix.

Signed-off-by: Brady Pratt <bpratt@redhat.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-12-01 13:02:13 -06:00
jbpratt
44c7209481 chore: resolve fork PR labeling 403 errors with workflow_run pattern (#4644)
Refactor PR auto-labeling using two-workflow pattern to handle fork PRs
securely. The label-status job is replaced with capture-pr-data (read-only)
and a new pr-status-labeler workflow that runs with write permissions via
workflow_run trigger.

Fixes 403 errors when labeling PRs from forks.

Signed-off-by: Brady Pratt <bpratt@redhat.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-11-26 04:16:24 -06:00
jbpratt
ec1b1ba302 chore: add automated PR labeling workflow (#4608)
Implement GitHub Actions workflow to automatically label pull requests
based on changed files, PR status, and target branch.

Features:
- Area labels (area/api, area/web-ui, etc.) based on file paths
- Status labels (needs-rebase, approved) based on PR state and reviews
- Backport labels (backport/redhat-3.x) for PRs targeting release branches
- Works with PRs from forks using pull_request_target trigger

The workflow uses actions/labeler for path-based labeling and
actions/github-script for dynamic status detection.

Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-11-25 10:25:46 -06:00
jbpratt
08153b6660 chore: CI runtime improvements (#4586)
* chore: update ci to use new large ubuntu 24.04 runner

Signed-off-by: Brady Pratt <bpratt@redhat.com>
Co-Authored-By: Dave O'Connor <doconnor@redhat.com>

* fix: add libfreetype6-dev for Ubuntu 24.04 compatibility

The reportlab package requires FreeType development headers to build.
On Ubuntu 24.04, this dependency is not pulled in transitively and
must be explicitly installed. This fixes the "cannot find ft2build.h"
build error.

Added libfreetype6-dev to all jobs that install system dependencies
in CI.yaml and CI-nightly.yaml workflows.

Signed-off-by: Brady Pratt <bpratt@redhat.com>
Co-Authored-By: Dave O'Connor <doconnor@redhat.com>

* chore: set the TEST_DATETIME to a static value

this caused an issue in xdist when generating test names

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore: cache pip packages in CI

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore: run registry tests with -n auto

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore: run psql with -n auto

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore: add file locking to prevent parallel test db init race condition

When running pytest -n auto with multiple workers, both workers would
simultaneously execute populate_database(), causing duplicate key
violations on shared tables like imagestoragelocation:

Worker 1: Check if User "devtable" exists → No → Start populating
Worker 2: Check if User "devtable" exists → No → Start populating
Both: INSERT INTO imagestoragelocation (name) VALUES ('local_eu')
Result: IntegrityError - duplicate key violation

Solution: Wrap init_db_path fixture with FileLock to ensure only one
worker initializes the database at a time. The lock file is created
in pytest's shared temp directory, coordinating across all workers.

- First worker acquires lock and populates database
- Subsequent workers wait at lock, then see database is already
  populated (via User.get() check in populate_database())
- Works for both PostgreSQL and MySQL
- 300-second timeout prevents deadlocks

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* chore: run mysql with -n auto

Signed-off-by: Brady Pratt <bpratt@redhat.com>

---------

Signed-off-by: Brady Pratt <bpratt@redhat.com>
Co-authored-by: Dave O'Connor <doconnor@redhat.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-11-20 09:01:18 -05:00
jbpratt
51c9056c24 chore: setup surge previews (#4485)
Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-11-07 22:34:49 +00:00
jbpratt
c27f9b1337 chore: ctrf cypress reporting (#4486)
* chore: set up CTRF cypress reporting

generate and upload cypress test results to PRs using CTRF (common test
report format)

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore: set up multi workflow ctrf pr reporting

and simplify the uploading into 2 stages

Signed-off-by: Brady Pratt <bpratt@redhat.com>

---------

Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-11-07 16:02:37 -06:00
jbpratt
b372b71367 chore: cache deps and remove unnecessary seeding (#4414)
* chore: add pip and npm caching

gotta go fast

Signed-off-by: Brady Pratt <bpratt@redhat.com>

* chore(test): remove unneeded seeding

- theme-switcher.cy.ts improved from ~1m to ~10s
- notification-drawer.cy.ts improved from ~2m to ~10s
- overview.cy.ts down to ~10s
- breadcrumbs.cy.ts improved from ~3m to ~10s
- marketplace.cy.ts down to ~10s

Signed-off-by: Brady Pratt <bpratt@redhat.com>

---------

Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-10-29 08:01:58 -05:00
Shubhra Deshpande
49ff0da0c2 feat: Added Redis database and Redis flush worker (PROJQUAY-7176) (#4321)
* Added redis database and redis flush worker

* updated digest validation

* adding test coverage for scan_keys function

* adding test coverage

* added tests for scan function

* added coverage for flush to database function

* added coverage for gnuicorn worker initialization

* Replaced mock methods in the test with actual function calls

---------

Co-authored-by: shudeshp <shudeshp@redhat.com>
2025-10-17 09:27:11 -04:00
jbpratt
06a7eb0005 chore: remove path filters from workflows (#4358)
due to the current repository's rulesets, all jobs are required on PR.
Removing the path filters so everything runs, we should follow up to
improve the rulesets and add the filters back!

Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-10-13 09:12:39 -04:00
jbpratt
496530cbf5 ci: separate web CI jobs into dedicated workflow (PROJQUAY-9536) (#4343)
this creates web-ci.yaml with cypress and frontend-plugin jobs that only
run when web/, docker-compose.yaml, Dockerfile, or local-dev/ paths
change, and excludes web/ from the main CI workflow to prevent redundant
runs

Signed-off-by: Brady Pratt <bpratt@redhat.com>
2025-10-10 13:50:44 +00:00
jbpratt
9aaf639ac9 ci: fix log archiving for cypress tests (PROJQUAY-9535) (#4341) 2025-10-10 08:06:02 -04:00
Brandon Caton
096925447f ci: updating branch sync to use BRANCH_SYNC_TARGET (#4212) 2025-08-25 10:40:35 -04:00
Jonathan King
84ad2b243a fix: pin https-proxy-agent version to v5 (PROJQUAY-8793) (#4090) 2025-06-25 14:34:57 -04:00
Brandon Caton
fde6d6473d deps: config-tool and setup tools packages (PROJQUAY-9015) (#4053)
Upgrading the config tool go version to 1.23 and setup tools to version 78.1.1
2025-06-13 11:19:33 -04:00
Brandon Caton
f82780829f ci: updating release pipeline to generate correct changelog (#3973) 2025-05-29 15:00:24 -04:00
Brandon Caton
3e45ca1073 ci: getting full commit history and adding additional logging (#3972) 2025-05-29 14:19:10 -04:00
Brandon Caton
6f51eae282 ci: configuring user (#3971) 2025-05-29 11:45:00 -04:00
Brandon Caton
b10afac75a ci: adding git fetch to sync branches ci job (#3970) 2025-05-29 11:35:08 -04:00
Brandon Caton
4f3f2b5bb5 ci: adding branch sync job (#3969)
Adding job to sync master with the latest release branch
2025-05-29 11:28:41 -04:00
Syed Ahmed
723102e641 build: move quay to python 3.12 (PROJQUAY-8800) (#3780)
Move Quay to python version 3.12 and switch out rehash with the resumable hash library.
2025-05-29 09:35:48 -04:00
Sunandadadi
2fd0188f9c chore: move github runners to ubuntu-22.04 (#3783)
* chore: move github runners to ubuntu-22.04

* use docker image with openssl 1.1 preinstalled

* using non-interactive mode for github actions

* remove starting docker

* remove starting docker service

* install openssl 1.1 on ubuntu-22.04

* minor fixes

* compiling from source

* check openssl version

* check openssl version before running tox

* use exports when running tox

* fix typo

* overwrite OPENSSL_VERSION var

* minor fixes

* use python3.9 before installing openssl-1.1

* download python and configure openssl1.1

* adding sudo to configure

* use sudo for make

* minor fixes

* using python venv to run tox

* Apply changes to all tests
2025-04-16 12:10:46 -04:00
Sivaram Singana
2141e96448 chore: Change in the CIDR for Z (#3693) 2025-03-04 19:35:57 +05:30
Kotakonda Sai Deekshith
373621b7e4 Update CI-nightly.yaml
Fix wide open SSH port and modify ci-nightly file for a more organized format.
2025-02-27 14:50:45 +05:30
Kotakonda Sai Deekshith
a2add6e500 Update CI-nightly.yaml
Updated changes in IBM Cloud profile names for Z machines.
2025-02-26 12:37:01 +05:30
sivaramsingana
65f08a5b65 chore: fix for wide open ssh for vsi for Z (#3591)
fix for wide open ssh for vsi
2025-02-07 08:50:21 -05:00
Kotakonda Sai Deekshith
a4292cc2b4 chore: Fix for ci-nightly failure for s390x (#3558)
fix for ci-nightly failure for s390x
2025-01-12 20:34:24 +05:30
Brandon Caton
e015964768 updating actions/upload-artifact to v4 (#3555)
v3 has been deprecated and is breaking our CI
2025-01-09 13:36:02 -05:00
Brandon Caton
c171a4e7ce dep: upgrading actions/download-artifact to v4 (PROJQUAY-8379) (#3529)
actions/download-artifact@v2 has been deprecated and has broken the release pipelines. It needs to be updated to v4 to get the pipelines running again.
2025-01-02 11:59:04 -05:00
Harish Govindarajulu
7fa4bcf8f9 chore: Bump config-tool to go 1.21 (#3265)
Bump config-tool to go 1.21

Signed-off-by: harishsurf <hgovinda@redhat.com>
2024-10-02 13:24:09 -04:00
sivaramsingana
3181dfc93e build(deps): reverting back the support for s390x which has been removed temporarily(PROJECTQUAY-7960) (#3180)
Reverting back the support for s390x which has been removed temporarily( #3157 )
2024-09-24 09:14:57 -04:00
Modassar Rana
40499d861b task: Temporary remove s390x support (PROJQUAY-7673) (#3140)
Update build-and-publish.yaml

Removed s390x changes temporarily . Updating s390x instance with sudo user & same will be updated in this workflow
2024-08-22 12:36:28 +05:30
Ivan Bazulic
3e1f171895 chore: Fix prepare-release.yaml to properly modify changelog URL (#3127)
Previous version of the workflow created a changelog whose URL pointed to an old QUay release. This should set the changelog URL to the branch version that the changelog is generated for.
2024-08-09 11:20:37 -04:00
Marcus Kok
f66574bc7f chore: change docker-compose to 'docker compose' (#3109)
change docker-compose to 'docker compose'
2024-08-05 14:02:19 -04:00
Oleg Bulatov
98c44a1858 chore: remove unused jwt image (#2946) 2024-06-12 15:40:17 +00:00
Kenny Lee Sin Cheong
4546163e83 registry: implements the OCI 1.1 referrers API (PROJQUAY-7280) (#2597)
* registry: implements the OCI 1.1 referrers API

Migrations:
- Adds a subject column for lookup
- Adds a subject_backfilled column to track status of the backfilling
of existing manifests
- Adds a manifest_json column making use of postgres' JSONB support,
for future use.

Manifestsubjectbackfillworker: Indexes existing manifests for possible
existing subject field.

* Deprecate IGNORE_UNKNOWN_MEDIATYPES

* Cleanup
2024-06-07 13:28:13 -04:00
Oleg Bulatov
42d0889e31 chore: Bump codecov/codecov-action to v4 (#2881) 2024-05-16 15:53:54 +00:00
Yussuf Shaikh
84ac7f2089 chore: amd64 nightly: add libpq-dev to fix issue while installing psycopg2 (#2642) 2024-02-13 18:28:09 +01:00
Oleg Bulatov
1abeb33607 Create codeql.yml 2024-02-05 15:53:17 +01:00
Brandon Caton
1676cc04e5 autoprune: UI settings (PROJQUAY-6097) (#2399)
Adds auto-prune configuration to user and organization settings.
2023-10-11 13:48:55 -04:00
Oleg Bulatov
cd44497408 chore: add hack/update-requirements-build.sh (#2384) 2023-10-10 11:42:57 +02:00
Yussuf Shaikh
41d49eb6a4 chore: preinstall grpcio for Z (#2263)
Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-09-26 21:21:22 +05:30
Yussuf Shaikh
6bdb1147a0 chore: fix missing grpc build with openssl for Z (#2262)
Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-09-26 10:58:49 +02:00
Yussuf Shaikh
e1e98e9631 chore: fix failing nightly and also use ssh action for ppc64le (#2261)
Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-09-26 08:44:34 +02:00
Yussuf Shaikh
bda3de656b chore: remove set buildx rc version as not needed anymore (#2162) 2023-08-26 11:17:50 +02:00
Oleg Bulatov
e72773bbce chore: add cypress tests for config-tool (#2152) 2023-08-25 17:14:06 +02:00
Oleg Bulatov
5c87154009 chore: upload coverage reports to Codecov (#2150) 2023-08-22 09:36:53 +00:00
Yussuf Shaikh
cf687a619f chore: fix s390x nightly ci (#2138)
Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-08-21 10:49:36 +00:00
Yussuf Shaikh
35d2708583 chore: fix ppc64le nightly test run (#2134)
Use PyYAML==6.0.1 which requires Cython<3.0 just for running tests.

Preinstall rustc cargo pkg-config required for building cryptography on ppc64le.

Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-08-16 11:45:06 +00:00
Yussuf Shaikh
700884f462 core: fix nightly test failures (#2133)
Signed-off-by: Yussuf Shaikh <yussuf.shaikh1@ibm.com>
2023-08-16 10:44:23 +02:00