docker/quay
1
0
Fork 0
mirror of https://github.com/quay/quay.git synced 2026-01-26 06:21:37 +03:00
Code Activity
12,289 Commits 2,636 Branches 136 Tags
v3.13.9
Commit Graph

12289 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]
9fd0c57b65 v3.13.9 Changelog Bump (#4298) 
chore: v3.13.9 changelog bump (PROJQUAY-9421)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: SeanZhao-redhat <SeanZhao-redhat@users.noreply.github.com>
v3.13.9 		2025-09-17 09:23:28 -04:00
OpenShift Cherrypick Robot
f8084d9c82 [redhat-3.13] deps: update cipher-base to version 1.0.6 (PROJQUAY-9335) (#4226) 
* Update cipher-base to version 1.0.6

* update web package-lock.json

---------

Co-authored-by: Antonio Carlos Royo <aroyo@aroyo-thinkpadp1gen7.rmtco.csb>
 2025-09-01 08:37:55 -05:00
Demetrius
156e60b38d [redhat 3.13] deps: update sha.js to 2.4.12 (PROJQUAY-9341) (#4220) 
update sha.js to 2.4.12
 2025-08-27 08:23:36 -05:00
github-actions[bot]
7c3856779c v3.13.8 Changelog Bump (#4205) 
chore: v3.13.8 changelog bump (PROJQUAY-9311)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: SeanZhao-redhat <SeanZhao-redhat@users.noreply.github.com>
v3.13.8 		2025-08-19 08:30:44 -04:00
github-actions[bot]
536f8c11df v3.13.7 Changelog Bump (#4119) 
* chore: v3.13.7 changelog bump (PROJQUAY-9069)

Signed-off-by: GitHub <noreply@github.com>

* Update CHANGELOG.mdn

---------

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: dongboyan77 <dongboyan77@users.noreply.github.com>
Co-authored-by: Dongbo Yan <dyan@redhat.com>
v3.13.7 		2025-07-08 08:29:57 -04:00
Antonio Carlos Royo
172c3e493e [redhat-3.13] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9090) (#4112) 
* update pbkdf2 to version 3.1.3

* updating registry proxy tests

---------

Co-authored-by: Antonio Carlos Royo <aroyo@aroyo-thinkpadp1gen7.rmtco.csb>
 2025-07-07 15:05:15 -03:00
Marcus Kok
81b18893f1 build: Konflux 3.13 (PROJQUAY-8969) (#4032) 
* update tekton files
 2025-06-11 12:01:05 -04:00
OpenShift Cherrypick Robot
8b2d10a4c8 [redhat-3.13] ci: fixing app type import (PROJQUAY-8991) (#4035) 
ci: fixing app type import

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-06-10 15:20:56 -04:00
OpenShift Cherrypick Robot
6b5564cb4e [redhat-3.13] dockerfile: set GOPATH env var before running go build in dockerfile (PROJQUAY-8789) (#4017) 
set GOPATH env var before running go build in dockerfile

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-06-10 14:08:08 -04:00
OpenShift Cherrypick Robot
35b3f7e0fe [redhat-3.13] ci: Oci fix (PROJQUAY-0000) (#4026) 
* add CRB for oci CI test

* add flag instead of command

---------

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-06-10 13:27:53 -04:00
OpenShift Cherrypick Robot
f0ace54367 [redhat-3.13] build: add artifacts lockfile (PROJQUAY-8931) (#3937) 
add artifacts lockfile

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-06-03 13:40:37 -04:00
Marcus Kok
fad2b74539 cherrypick: updating hack script for gathering python dependencies on konflux (PROJQUAY-0000) (#3979) 
updating hack script for gathering python dependencies on konflux
 2025-06-02 14:59:06 -04:00
OpenShift Cherrypick Robot
81c585bb70 [redhat-3.13] build: Add rust build dependencies for cryptography (PROJQUAY-8804) (#3980) 
Add rust build dependencies for cryptography

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-06-02 11:45:55 -04:00
OpenShift Cherrypick Robot
211f6bac73 [redhat-3.13] build: rpm lock for konflux builds (PROJQUAY-8930) (#3985) 
rpm lock for konflux builds

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-06-02 10:37:18 -04:00
red-hat-konflux[bot]
8410a24230 chore(deps): update konflux references (#3915) 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Co-authored-by: red-hat-konflux[bot] <126015336+red-hat-konflux[bot]@users.noreply.github.com>
 2025-06-02 09:20:25 -04:00
Brandon Caton
9cde8c19bd updating changelog to v3.13.6 (#3960) v3.13.6 2025-05-27 13:52:58 -04:00
Brandon Caton
250505060a deps: updating cffi and cython (#3956) 
deps: updating cffi and cython
 2025-05-22 16:19:08 -04:00
OpenShift Cherrypick Robot
77d1273d16 [redhat-3.13] proxycache(permissions): CVE-2025-4374 (PROJQUAY-8892) (#3945) 
fixing CVE-2025-4374 by extending the create_repository method to understand if we are requesting a proxy_cache repository added unittests for create_repository when proxy_cache.

Co-authored-by: Michaela Lang <milang@redhat.com>
 2025-05-22 09:57:44 -04:00
Brandon Caton
aa8a9bd003 chore: update moment version in cdn (PROJQUAY-8781) (#3766) (#3813) 
Co-authored-by: Jonathan King <jonathankingfc@gmail.com>
 2025-05-21 13:05:59 -04:00
OpenShift Cherrypick Robot
b679d505de [redhat-3.13] bug: make changes to taghistory page to accept manually entered date (PROJQUAY-8633) (#3940) 
projquay-8633 accepting dates in DD MMM YYYY format + calendar button is visible + fixing alignment across entire toolbox + improved logic for consistency across different browser language settings

Co-authored-by: sayalibhavsar <sayalibhavsar9009@gmail.com>
 2025-05-21 11:14:02 -04:00
Brandon Caton
f1854f5b40 deps: upgrading gevent (PROJQUAY-8938) (#3930) 
deps: upgrading gevent (PROJQUAY-8938) (#3928)

Upgrading gevent and greenlet
 2025-05-19 14:13:06 -04:00
red-hat-konflux[bot]
b229018065 Red Hat Konflux update quay-v3-13 (#3880) 
Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>

Co-authored-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
 2025-05-13 14:44:25 -04:00
Brandon Caton
eb31b41204 deps: updating angular to 1.6.4 (PROJQUAY-8781) (#3872) (#3876) 2025-05-12 11:47:40 -04:00
OpenShift Cherrypick Robot
cb6db7b078 [redhat-3.13] dockerfile: dockerfile changes for konflux (PROJQUAY-8804) (#3827) 
dockerfile changes for konflux

Co-authored-by: Marcus Kok <mkok@redhat.com>
 2025-05-08 16:13:29 -04:00
OpenShift Cherrypick Robot
1017438c53 [redhat-3.13] storage: Increase proxy JWT expiry to 10 minutes (PROJQUAY-8894) (#3866) 
* storage: Increase proxy JWT expiry to 10 minutes (PROJQUAY-8894) The current JWT expiry time of 30 seconds is sometimes inadequate, especially for scanning purposes when download is not as quick as one expects. This will increase the expiry time to 10 minutes allowing downloading of layers even in slower environments.

* Set expiry to 600 seconds

---------

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
 2025-05-08 16:12:00 +02:00
OpenShift Cherrypick Robot
0d9221b4af [redhat-3.13] cve: bumping cross-spawn to 6.0.6 and 7.0.6 (PROJQUAY-8210) (#3832) 
deps: update cross-spawn from 6.0.x to 6.0.6 deps: update cross-spawn from 7.0.x to 7.0.6
v3.13.5 		2025-04-29 18:51:10 -03:00
OpenShift Cherrypick Robot
2060e0967e [redhat-3.13] Reverting PROJQUAY-8536 (#3836) 
* Revert "bug: Adding allow hidden flag while looking up for manifests (PROJQUAY-8536) (#3722)"

This reverts commit f0c153fab5.

* Revert "proxy: moving manifest check to after upstream manifest fetch (PROJQUAY-8536) (#3814)"

This reverts commit 944edd064b.

---------

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-04-29 14:33:42 -04:00
Brandon Caton
67ba9dfba0 updating jquery in package lock (#3828) 2025-04-28 14:48:57 -04:00
OpenShift Cherrypick Robot
74e56e1438 [redhat-3.13] logging: fix unreferenced variable from logging (PROJQUAY-8136) (#3821) 
logging: fix unreferenced variable from logging (PROJQUAY-8136)

Co-authored-by: Kenny Lee Sin Cheong <kenny.lee28@gmail.com>
 2025-04-28 09:59:15 -04:00
OpenShift Cherrypick Robot
24ae19ddfd [redhat-3.13] proxy: moving manifest check to after upstream manifest fetch (PROJQUAY-8536) (#3815) 
moving manifest check to after upstream manifest fetch

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-04-24 15:06:18 -04:00
OpenShift Cherrypick Robot
992225e048 [redhat-3.13] gc: garbage collect manifests not targetted by any tags when deleting repository (PROJQUAY-8136) (#3805) 
* gc: garbage collect manifests not targetted by any tags when deleting repository (PROJQUAY-8136)

* test untagged manifest removal

---------

Co-authored-by: Kenny Lee Sin Cheong <kenny.lee28@gmail.com>
 2025-04-22 18:18:37 +00:00
OpenShift Cherrypick Robot
0efff5ff76 [redhat-3.13] cve: upgrade elliptic version to 6.5.7 (PROJQUAY-7595) (#3769) 
* cve: upgrade elliptic version to 6.5.7 (PROJQUAY-7595)

* added package-lock with karma-webpack update

---------

Co-authored-by: shudeshp <shudeshp@redhat.com>
Co-authored-by: Brandon Caton <bcaton@redhat.com>
 2025-04-17 10:48:32 -04:00
OpenShift Cherrypick Robot
361b95d801 [redhat-3.13] chore: move github runners to ubuntu-22.04 (PROJQUAY-8805) (#3790) 
This is an automated cherry-pick of #3783

---------

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
 2025-04-16 15:07:36 -04:00
github-actions[bot]
82d5f5161f v3.13.5 Changelog Bump (#3737) 
chore: v3.13.5 changelog bump (PROJQUAY-8689)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
 2025-03-25 15:22:05 -04:00
OpenShift Cherrypick Robot
88a70d0ccc [redhat-3.13] deps: bump gunicorn (PROJQUAY-8726) (#3732) 
remove package-lock.json from the pr

Co-authored-by: sayalibhavsar <sayalibhavsar9009@gmail.com>
 2025-03-25 15:07:01 -04:00
OpenShift Cherrypick Robot
b85b5e3cc6 [redhat-3.13] bug: Adding allow hidden flag while looking up for manifests (PROJQUAY-8536) (#3726) 
When an image is pulled by digest, a temp tag is created to prevent the manifest from being garbage collected. This is true when a manifest list is pulled by tag as well. However, if this temporary tag expires (default is 1 day for proxied organizations) and the same manifest is pulled again by digest, the system attempts to create the manifest again, leading to an integrity error because the manifest already exists in the database.
 2025-03-20 13:33:40 -04:00
OpenShift Cherrypick Robot
bdd7f89428 [redhat-3.13] chore: upgrade jinja to 3.1.6 (PROJQUAY-8657) (#3710) 
chore: upgrade jinja to 3.1.6 (PROJQUAY-8657)

Co-authored-by: Jonathan King <jonathankingfc@gmail.com>
Co-authored-by: Brandon Caton <bcaton@redhat.com>
 2025-03-18 13:25:02 -04:00
OpenShift Cherrypick Robot
48691d648f storage: Modify the STS S3 implementation of the storage backend to use Web Identity Tokens when available (PROJQUAY-8692) (#3715) 
Backport the Quay STS token file implementation from https://github.com/quay/quay/pull/3670

---------

Co-authored-by: Mathieu Bouchard <mathieu.bouchard@mcn.gouv.qc.ca>
Co-authored-by: Mathieu Bouchard <83231959+bouchardmathieu-qc@users.noreply.github.com>
 2025-03-13 15:25:34 -04:00
OpenShift Cherrypick Robot
0a4e248ecb [redhat-3.13] api: put /superuser/users/<username> will now show up in swagger (PROJQUAY-7579) (#3702) 
remove internal-only decorator from PUT request

Co-authored-by: sayali bhavsar <sayalibhavsar9009@gmail.com>
 2025-03-06 10:00:05 -05:00
OpenShift Cherrypick Robot
460f4f8451 [redhat-3.13] chore: Change in the CIDR for Z (#3696) 
chore: Change in the CIDR for Z

Co-authored-by: sivaramsingana <47631665+sivaramsingana@users.noreply.github.com>
 2025-03-05 13:09:34 -05:00
OpenShift Cherrypick Robot
fceab15a5b [redhat-3.13] chore: fix for wide open ssh for vsi for Z (#3644) 
fix for wide open ssh for vsi

Co-authored-by: sivaramsingana <47631665+sivaramsingana@users.noreply.github.com>
v3.13.4 		2025-02-07 08:53:14 -05:00
github-actions[bot]
a270d52d11 v3.13.4 Changelog Bump (#3633) 
chore: v3.13.4 changelog bump (PROJQUAY-8514)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
 2025-02-04 15:24:43 -05:00
Brandon Caton
0915dcd107 deps: updating jquery to 3.5.0 (PROJQUAY-8522) (#3631) 
deps: updating jquery to 3.5.0 (PROJQUAY-8522) (#3629)

updating jquery to 3.5.0
 2025-02-04 15:21:48 -05:00
OpenShift Cherrypick Robot
4eb740503f [redhat-3.13] endpoints(repository): fixing repository return with starred repos to paged response (PROJQUAY-8450) (#3600) 
When setting repositories in the Quay UI as starred, a 500 error occurs and renders the UI use-less due to starred queries are not paged.

---------

Co-authored-by: Michaela Lang <milang@redhat.com>
Co-authored-by: Brandon Caton <bcaton@redhat.com>
 2025-02-03 13:21:53 -05:00
OpenShift Cherrypick Robot
96ff97e7df [redhat-3.13] ui: adding under_maintenance state to status indicator (PROJQUAY-8507) (#3625) 
Adding under_maintenance state to status indicator

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-02-03 12:43:34 -05:00
OpenShift Cherrypick Robot
ff77a0d5d9 [redhat-3.13] updating actions/upload-artifact to v4 (#3601) 
updating actions/upload-artifact to v4

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-01-30 13:55:35 -05:00
github-actions[bot]
177b6a4695 v3.13.3 Changelog Bump (#3559) 
chore: v3.13.3 changelog bump (PROJQUAY-8409)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
v3.13.3 		2025-01-10 09:28:44 -05:00
OpenShift Cherrypick Robot
68fa008d51 [redhat-3.13] teamsync: peewee integrity error check on teamsync (PROJQUAY-7747) (#3557) 
* teamsync: Ignore Peewee Integrity Error on teamsync (projquay-7747)

* isort fix and removing with_dbtransaction from get query

* adding tests and check if user is a member of team

* fixes based on review

* fixes

* fixing tests

* minor fixes

* reverting UserAlreadyExists exception

---------

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
 2025-01-09 21:17:13 +00:00
OpenShift Cherrypick Robot
b1870400c1 [redhat-3.13] dep: updating css-loader to 6.11.0 (PROJQUAY-8297) (#3545) 
updating css-loader to 6.11.0

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-01-07 19:12:49 +00:00
OpenShift Cherrypick Robot
b433afeedf [redhat-3.13] dep: updating jinja2 to 3.1.5 (PROJQUAY-8375) (#3544) 
updating jinja2 to 3.1.5

Co-authored-by: bcaton <bcaton@redhat.com>
 2025-01-06 19:14:22 +00:00