1
0
mirror of https://github.com/quay/quay.git synced 2025-04-18 10:44:06 +03:00
quay/CHANGELOG.md
Ivan Bazulic 75b7ed6e83
Revert "v3.12.1 Changelog Bump" (#3100)
Revert "v3.12.1 Changelog Bump (#3099)"

This reverts commit d1686acdc9475d562bbfc4b7716fed6313c316be.
2024-08-01 12:30:17 -04:00

272 KiB

Red Hat Quay Release Notes

Red Hat Customer Portal

v3.11.0 - 2024-03-01

Api

  • 46d1322c: Return layer compressed size with manifest request (PROJQUAY-6616) (#2627)
  • aaba7539: adding nickname decorator to autoprune policy endpoints (PROJQUAY-6483) (#2524)
  • 9c89e843: add caching for get_repository method (PROJQUAY-6472) (#2515)
  • 21e502f8: graceful error handling for robot acct already exists (PROJQUAY-6261) (#2436)

Autoprune

  • 236e2fe4: adding audit logs to namespace autoprune policy API (PROJQUAY-6229) (#2431)
  • 7e7dfc91: validating input to autoprune policy (PROJQUAY-6230) (#2430)

Backend

  • 74fd23d7: Syncing teams with OIDC group (PROJQUAY-6290) (#2693)

Billing

Build(Deps)

  • e8256477: bump github.com/aws/aws-sdk-go from 1.45.24 to 1.50.20 in /config-tool (#2690)
  • 116f19b1: bump cryptography from 41.0.4 to 41.0.6 (#2514)
  • 0ea33dc3: bump github.com/spf13/cobra from 1.7.0 to 1.8.0 in /config-tool (#2455)
  • 4a1e44f9: bump oslo-i18n from 3.25.1 to 6.2.0 (#2501)
  • 2f8efdaa: bump websocket-client from 0.57.0 to 1.7.0 (#2525)
  • da2ffe76: bump github.com/minio/minio-go/v7 from 7.0.63 to 7.0.66 in /config-tool (#2563)
  • f5a5e4e4: bump axios from 1.4.0 to 1.6.5 in /web (#2589)
  • f5c78c5a: bump jinja2 from 3.1.2 to 3.1.3 (#2600)

Build(Deps-Dev)

Cache

  • a7737722: adding caching on look_up repository (PROJQUAY-6472) (#2521)

Cdn

  • 93c816b2: add namespace and username to CDN redirect for usage calculation (PROJQUAY-5939) (#2616)

Chore

  • b23a2282: update local development clair to 4.7.2 (#2692)
  • 80c184f1: extend market place subscription enddate (chore) (#2663)
  • 6d5e6293: use oci_model directly without proxy object (#2618)
  • 88168d08: adding debug logging for repository_lookup cache key(PROJQUAY-6472) (#2610)

Chore: Amd64 Nightly

  • 84ac7f20: add libpq-dev to fix issue while installing psycopg2 (#2642)

Configtool

  • 94735bcf: Adding validation for IBM Cloud Storage (PROJQUAY-6549) (#2568)

Database

  • 9621d4ef: use psycopg2 instead of psycopg2-binary (PROJQUAY-6453) (#2511)

Deploy

  • bb0a6332: update main deployment to add regitry worker count (PROJQUAY-6456) (#2546)
  • aab56e43: fix health check endpoint for quay deployment (PROJQUAY-6456) (#2544)
  • 248ea771: update deploy template add proxy port (PROJQUAY-6456) (#2539)
  • 2410c7a9: add web worker count to deployment (PROJQUAY-6453) (#2520)
  • 7284542f: add DB pooling to py3 template (PROJQUAY-5550) (#2474)
  • 3f39a0fc: Add connection pooling env variable (PROJQUAY-5550) (#2472)

Feat

  • 98811f53: Add auto-prune policy at repository level (PROJQUAY-6354) (#2691)

Federationuser(Ldap)

  • 2c24975d: fixing keepalive settings for LDAP connections (PROJQUAY-5137) (#2440)

Fix

  • a8381d45: pull-through should tolerate missing tag (PROJQUAY-4849) (#2598)

Logs

  • e8ff33e7: add failure logging for login, push, pull and delete events (PROJQUAY-5411) (#1903)

Manifest

  • 0b3d35b7: support empty config for artifacts (PROJQUAY-6658) (#2647)

Marketplace

  • 2ab7dc29: add support for quantity from subscriptions api (PROJQUAY-6551) (#2633)
  • 54bc56d5: return array of valid subscriptions when looking up subscription (PROJQUAY-6551) (#2613)
  • 26451766: make sure customer id from api is returned as an int (PROJQUAY-233) (#2590)
  • 1c893bab: update reconciliationworker to use webCustomerId instead of ebsAccountNumber (PROJQUAY-233) (#2582)
  • 79723f1c: add exception handling for reconciler (PROJQUAY-233) (#2560)
  • 1bf3f448: update user ebs number lookup to find personal account numbers (PROJQUAY-233) (#2545)
  • 4c243341: add logging for user api (PROJQUAY-233) (#2513)
  • 3aa21213: return None if subscription api times out (PROJQUAY-5363) (#2437)

Oci

  • 8895caf9: remove platform requirement for image index (PROJQUAY-6658) (#2657)

Quayio

Quota

  • 29258ae0: removing repo size from quota verification (PROJQUAY-6637) (#2704)

Registry

  • e91b9e45: allow pushing manifests with artifactType and subject fields (PROJQUAY-6673) (#2659)

Revert "Api

  • 6fc77823: add caching for get_repository method (PROJQUAY-6472)" (#2517)

Secscan

  • 1fa6ed5d: enable gc for manifests by default (PROJQUAY-4126) (#2485)

Sso

  • 3e6384e6: adding error log for export compliance (PROJQUAY-6486) (#2540)

Storage

  • e243d233: Fix big layer uploads for Ceph/RADOS driver (PROJQUAY-6586) (#2601)
  • 9f0e60e4: adding IBM COS storage option (PROJQUAY-2679) (#2470)
  • ad0d979c: pass S3 region to S3Storage init (PROJQUAY-6375) (#2459)

Sts

Task

Ui

  • b6c6f00c: fix bug in usage logs description (PROJQUAY-6755) (#2711)
  • 5e3381a4: add usage log table (PROJQUAY-6702) (#2695)
  • 4cb0a574: ui and initial scaffolding for OIDC auth (PROJQUAY-6298) (#2646)
  • 0c03e6af: add chart for usage logs (PROJQUAY-6701) (#2681)
  • b641538b: removing repo settings and build UI feature flags (PROJQUAY-6617) (#2680)
  • ca78dddf: add width and height for logo (PROJQUAY-5460) (#2683)
  • 00d983bf: view builds logs (PROJQUAY-6296) (#2679)
  • 426e1a94: add overview to plugin (PROJQUAY-5460) (#2682)
  • 417e66ee: run builds (PROJQUAY-6297) (#2636)
  • f312efbc: fixing build trigger test (PROJQUAY-6695) (#2677)
  • 19f2bb81: add breadcrumbs for overview (PROJQUAY-5460) (#2676)
  • 696c35a8: fix docker and podman login command for windows (PROJQUAY-6648) (#2644)
  • 5f4c15be: add export button for usage logs (PROJQUAY-6420) (#2492)
  • 5c44cc48: add section for RH subscriptions under billing settings (PROJQUAY-5363) (#2656)
  • df73b6e9: updating references to status.redhat.com (PROJQUAY-6654) (#2645)
  • 0981ce15: fix scrollbars and various layout issues (PROJQUAY-6619) (#2629)
  • 7ba3a3d9: adjusting size of avatar (PROJQUAY-6676) (#2660)
  • eec2c0fc: fixing tag list reset when rendering manifest lists (PROJQUAY-5793) (#2643)
  • 03b7fec2: implementing github and gitlab build triggers (PROJQUAY-6585) (#2614)
  • 40bcd1f1: allow for regular expressions to be used in search (PROJQUAY-6597) (#2611)
  • 7cec2f66: implementing creation of custom git trigger (PROJQUAY-6299) (#2599)
  • 27cceb1b: adding build trigger table (PROJQUAY-6295) (#2570)
  • 7357e317: adding build avatar image size (PROJQUAY-6575) (#2580)
  • 2a22ed09: add dark mode to see Quay in a new light or lack thereof (PROJQUAY-6570) (#2575)
  • 77d6ad74: breadcrumbs fix when org and repo names are identical (PROJQUAY-6504) (#2569)
  • 6f365ed7: updating logo for quay.io (PROJQUAY-6531) (#2559)
  • 9b43b475: Prevent switch to beta UI toggle from rendering if user is anonymous (PROJQUAY-6526) (#2558)
  • 4f0c8db1: show UI toogle to all users in quay.io (PROJQUAY-6505) (#2553)
  • ac221a60: implementing build history page (PROJQUAY-6293) (#2523)
  • e6d35781: updates Quay.io documentation redirect link (PROJQUAY-6473) (#2516)
  • 03490a06: fix broken update of repo description (PROJQUAY-6243) (#2554)
  • a9eaa380: add breadcrumbs for teams page (PROJQUAY-6442) (#2504)
  • a7b448c6: following capitalisation guidelines in the new ui (PROJQUAY-6247) (#2488)
  • 29acc8da: Allow adding user from create team wizard (PROJQUAY-6336) (#2468)
  • 0c08bfff: display manifest list size range (PROJQUAY-6393) (#2469)
  • d860e40b: breadcrumbs on new ui (PROJQUAY-5452) (#1893)
  • 94ca5b31: fix tab visibility for teams and membership (PROJQUAY-6333) (#2451)
  • e2d25699: fix search for bulk delete default permission modal (PROJQUAY-6369) (#2464)
  • ccb3658a: allow current day to be selected for tag expiration (PROJQUAY-6262) (#2448)
  • 0b06da02: Add form for repository state (PROJQUAY-5715) (#2449)
  • 7c0cc50a: Add landing page for quay.io (PROJQUAY-5460) (#2264)

User(Robots)

  • 0dfa72d0: disallow robot login and create 2nd (PROJQUAY-5968) (#2483)

v3.10.4 - 2024-02-07

v3.10.3 - 2024-01-23

[Redhat-3.10] Fix

  • 4dd833ad: pull-through should tolerate missing tag (PROJQUAY-4849) (#2617)

[Redhat-3.10] Ui

  • 5a9cabd0: fix broken update of repo description (PROJQUAY-6243) (#2612)

v3.10.2 - 2024-01-08

[Redhat-3.10] Configtool

  • a5ec0422: Adding validation for IBM Cloud Storage (PROJQUAY-6549) (#2581)

v3.10.1 - 2023-12-05

[Redhat-3.10] Api

  • 1499ae5c: adding nickname decorator to autoprune policy endpoints (PROJQUAY-6483) (#2535)

[Redhat-3.10] Autoprune

  • 73b36220: adding audit logs to namespace autoprune policy API (PROJQUAY-6229) (#2538)

[Redhat-3.10] Storage

  • 9dde0359: adding IBM COS storage option (PROJQUAY-2679) (#2536)

[Redhat-3.10] Ui

  • d4b18ad4: fix search for bulk delete default permission modal (PROJQUAY-6369) (#2467)
  • bf6733ff: fix tab visibility for teams and membership (PROJQUAY-6333) (#2482)
  • fea7c2cb: breadcrumbs on new ui (PROJQUAY-5452) (#2490)
  • 4d3aa4dd: Allow adding user from create team wizard (PROJQUAY-6336) (#2502)

[Redhat-3.10] User(Robots)

  • 2044413b: disallow robot login and create 2nd (PROJQUAY-5968) (#2541)

v3.10.0 - 2023-11-15

Api

  • e5a5e178: accepting empty body for create robot endpoints (PROJQUAY-6224) (#2420)
  • c93b6d08: fix duplicate robot accounts (PROJQUAY-5931) (#2192)
  • a095e1f9: Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) (#2027)
  • 2371c4d6: allow robot token creation with a pre-defined token (PROJQUAY-5414) (#1972)
  • e38d70f0: add permanently delete tag usage log (PROJQUAY-5496) (#1887)

Audit

  • e1e8dc8e: ignore errors due to read-only mode in audit logs (PROJQUAY-5598) (#1928)

Authentication(LDAP)

  • 7ecf97b9: allow LDAP referrals to not be followed (PROJQUAY-5291) (#1905)

Autoprune

Billing

Build(Deps)

Build(Deps-Dev)

Chore

Chore: Fix Isort Config And Remove `Isort

Compliance

Config

  • eede634a: updating GeoLite2-Country (PROJQUAY-6023) (#2218)
  • e6224142: Enable notifications for new indexes by default (PROJQUAY-5682) (#1993)

Core

Data

  • ff68f86c: Fix error getting tag while calculating scan results SLO (#1952)

Database

  • d47cea46: remove foreign key constraints from deprecated tables (PROJQUAY-4879) (#1348)

Deploy

  • 848ed3c3: update configmap for slo dashboard (PROJQUAY-6221) (#2419)
  • ee2e12ab: Add a startup probe to the py3 deployment (PROJQUAY-522) (#2149)

Documentation

  • b42f2d7a: Change tag template link location for build triggers (PROJQUAY-6044) (#2234)

Feat(Config-Tool)

  • 9ab64f20: add SSL client authentication (PROJQUAY-2417) (#2157)

Federationuser(Ldap)

  • 4719f46c: adding keepalive settings for LDAP connections (PROJQUAY-5137) (#1975)

Fix

  • 1643b40c: Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) (#2096)

Frontend

  • 02feee3e: Change frontend name so that correct paths will be generated (RHCLOUD-28385) (#2244)

Geo-Rep

  • 88fd1bae: Initialize features from config in util script (PROJQUAY-5627) (#1966)
  • 2d93fc7c: Add util script to remove geo-rep location and corresponding image locations (PROJQUAY-4995) (#1892)

Georep

  • faa0315a: Add error handling for remove location script (PROJQUAY-5878) (#2071)

Georeplication

  • abfde5b9: Enqueue blobs for replication on manifest list pushes (PROJQUAY-5256) (#2212)

Init(Postgresclientcerts)

  • 324844bd: add Postgresql client certificate authentication (PROJQUAY-2417) (#2156)

Logs

  • 3fd695cf: Add autologin to splunk's connect() to allow retries (PROJQUAY-5621) (#1956)
  • f5be32d8: ssl_ca_path should be optional (PROJQUAY-4993) (#1913)

Marketplace

  • 685cbef1: use get method for ebsAccountNumber lookup (PROJQUAY-6219) (#2417)

Oci

  • d193d90a: Allow optional components in the image config to be set to "null" (PROJQUAY-5634) (#1961)

Pagination

  • f56382ee: Fixing paginate for /api/v1/superuser/logs API (#2006)

Quota

  • 2a672551: prevent tag creation on rejected manifest (PROJQUAY-3906) (#2247)
  • 9a9355e5: adding indexes to the quota size tables (PROJQUAY-6048) (#2268)
  • dcdf132f: removing extra calls to get namespace quotas (PROJQUAY-6048) (#2267)
  • d453882b: fixing registry total worker failing to start (PROJQUAY-6010) (#2217)
  • db4fc041: disabling quota worker when running config editor (PROJQUAY-5925) (#2131)

Reconfigure

  • f013a27b: Remove ca-bundle.crt and service-ca.crt (PROJQUAY-5233) (#2231)

Revert "Build(Deps)

Revert "Chore

Secscan

  • 54fcfd14: Cache clair vuln reports (PROJQUAY-6057) (#2245)
  • 8d0ee386: fix metrics to track all request types to secscan service (PROJQUAY-3839) (#2108)
  • 93086fa5: update error from secscan delete (PROJQUAY-0000) (#2077)
  • 0ea48269: garbage collect manifests (#1663)

Secscan_model

  • 50224e2d: attempt urldecoding fixed_in_version (PROJQUAY-5886) (#2060)

Setup

Storage

  • 3e9cff6c: adding maximum_chunk_size_gb storage option (PROJQUAY-2679) (#2186)
  • af97203e: Check for request context before getting host header (PROJQUAY-5860) (#2024)
  • 8cacdf19: make cloudfront_distribution_org_overrides optional (PROJQUAY-5788) (#2004)
  • c49077cf: Do nothing when completing chunked upload if chunk list is empty (PROJQUAY-5489) (#2005)
  • a985bb6c: Add Host header matching for multi CDN storage (PROJQUAY-5415) (#1969)

Superuser

UI

  • f1f61024: Delete normal user org by super user (PROJQUAY-5639) (#1994)
  • 6b9c0f72: Replace time to wait with event waits in cypress tests (#1980)
  • 00b3a02e: Robot Accounts page perms fix (PROJQUAY-5487) (#1977)

Ui

  • 2ec1eea3: fixing RobotAccount AddToTeam console error (PROJQUAY-6233) (#2424)
  • 88f40d9a: Implement drawer to add a new team member (PROJQUAY-6032) (#2270)
  • 72f0a895: Add organization and user account settings (PROJQUAY-4553) (#2151)
  • 5d5e7c16: Add create new team button (PROJQUAY-5685) (#2309)
  • 81bf6347: Add bulk deletion for default permissions (PROJQUAY-6093) (#2336)
  • 38fd992f: Fix styling conflict with RedHatInsights (PROJQUAY-6085) (#2418)
  • fb5eb3fa: Compact tables & extend page count to 20 (PROJQUAY-6183) (#2412)
  • 2b07f1af: Update all Patternfly deprecated components (PROJQUAY-6085) (#2401)
  • 7a407435: Add missing props for create robot acocunt modal (PROJQUAY-6184) (#2405)
  • ad6b1c83: fix for useTeams hook when data is null (PROJQUAY-6177) (#2404)
  • 27f1699b: Add delay after write operations (PROJQUAY-6146) (#2400)
  • 033bcf67: Upgrade to PatternFly v5 (PROJQUAY-6085) (#2281)
  • 48b300a8: adding alerts for robot account actions (PROJQUAY-5946) (#2228)
  • e428d88a: combining robot account hooks into a single file (PROJQUAY-5945) (#2266)
  • ff602c2e: adding robot account support for user namespace (PROJQUAY-5945) (#2183)
  • b76fa5bc: Default Permissions tab (PROJQUAY-4570) (#1856)
  • 8a704ae2: Fix public path for console dot (PROJQUAY-5938) (#2194)
  • 59288733: Get public path form env variable (PROJQUAY-5938) (#2193)
  • 226684df: Teams and members (PROJQUAY-4569) (#2007)
  • 3ad94608: adding tag history panel (PROJQUAY-5720) (#2115)
  • c62dae11: adding delete tag by row (PROJQUAY-5933) (#2117)
  • 36a78ade: Robot Accounts tab fixes (PROJQUAY-5914) (#2097)
  • a5d22fc4: adding set expiration tag option (PROJQUAY-5290) (#2059)
  • 62ce1574: adding edit labels tag operation (PROJQUAY-5290) (#2028)
  • c8bc48e3: adding create tag option and generic alerts (PROJQUAY-5290) (#1996)
  • 65c1829b: displaying quota totals on user namespaces (PROJQUAY-5581) (#1953)
  • d7864ed4: Add custom TOS support (PROJQUAY-5648) (#1973)
  • 3152b102: display sizes as base 2 (PROJQUAY-5524) (#1968)
  • 78598d6a: adding null check on dark logo (#1942)
  • e97a3eb4: changing quota configuration byte units to base 1000 (PROJQUAY-5595) (#1939)

User

  • dd96025f: Support custom LDAP memberOf attribute (PROJQUAY-5928) (#2406)

User(Robots)

  • 67028af9: disallow robot login and create (PROJQUAY-5968) (#2155)

[Redhat-3.10] Autoprune

  • 3f733179: validating input to autoprune policy (PROJQUAY-6230) (#2461)

[Redhat-3.10] Federationuser(Ldap)

  • 8ecfd47f: fixing keepalive settings for LDAP connections (PROJQUAY-5137) (#2489)

[Redhat-3.10] Secscan

  • db1c7368: enable gc for manifests by default (PROJQUAY-4126) (#2486)

[Redhat-3.10] Ui

  • 304d35b8: Add form for repository state (PROJQUAY-5715) (#2484)
  • 026561ce: allow current day to be selected for tag expiration (PROJQUAY-6262) (#2466)

Pull Requests

  • Merge pull request #2065 from dmage/merge-config-tool

v3.9.6 - 2024-01-09

Reconfigure

  • 25516930: Add auth to comit to operator endpoint

v3.9.5 - 2023-11-07

Build(Deps)

  • 384aa6e5: bump urllib3 from 1.26.9 to 1.26.18 (PROJQUAY-6110) (#2458)

v3.9.4 - 2023-10-26

Build(Deps)

  • ef2035c7: bump golang.org/x/net from 0.13.0 to 0.17.0 (PROJQUAY-6208) (#2435)

v3.9.3 - 2023-10-10

Quota

  • a4a23414: prevent tag creation on rejected manifest (PROJQUAY-3906) (#2282)

[Redhat-3.9] Build(Deps)

[Redhat-3.9] Chore

[Redhat-3.9] Reconfigure

  • 8b47d3fd: Remove ca-bundle.crt and service-ca.crt (PROJQUAY-5233) (#2257)

v3.9.2 - 2023-09-19

[Redhat-3.9] Api

[Redhat-3.9] Georeplication

  • 7152164c: Enqueue blobs for replication on manifest list pushes (PROJQUAY-5256) (#2232)

v3.9.1 - 2023-08-30

Build(Deps)

  • 7d19eac7: bump certifi from 2022.12.7 to 2023.7.22 (#2062)
  • d3b05d4b: bump reportlab from 3.5.55 to 3.6.13 (PROJQUAY-5691) (#2056)

Chore

[Redhat-3.9] Chore

[Redhat-3.9] Storage

  • a6776d94: adding maximum_chunk_size_gb storage option (PROJQUAY-2679) (#2191)

[Redhat-3.9] Ui

  • a659db25: Robot Accounts tab fixes (PROJQUAY-5914) (#2135)
  • 7f54e765: displaying quota totals on user namespaces (PROJQUAY-5581) (#2128)

v3.9.0 - 2023-08-07

API/UI

  • 5c342969: Filtering of tags API through query parameter (PROJQUAY-5362) (#1839)

Api

  • b911d480: allow manifests to be pulled by digest (PROJQUAY-5467) (#1877)
  • 84abdba0: Allow setting multiple CORS_ORIGIN (PROJQUAY-5213) (#1791)

Arch

Auth

  • d34e9399: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1607)
  • ea90cc4f: Speed up permissions loading (PROJQUAY-4004) (#1566)

Billing

  • 2d949b3b: allow changing subscription on empty stripe_id (PROJQUAY-5413) (#1857)
  • e7a7b4a0: fallback to cards api if paymentmethod is not set (PROJQUAY-5129) (#1826)
  • 89725309: update Stripe checkout to support 3DS (PROJQUAY-5129) (#1818)
  • d05c32b9: update default subscription payment behavior (#1778)

Build

  • 47141afc: disable push to backup repo for quayio-frontend (PROJQUAY-5229) (#1834)
  • b7d95a18: Add template for deploying quayio frontend in console (PROJQUAY-5229) (#1835)
  • 05e3773b: Add build scripts for quay.io frontend (PROJQUAY-5229) (#1833)

Build(Deps)

Builders

  • 7c72e313: Update scope for gitlab to include write access (PROJQUAY-5181) (#1785)
  • 890e2ce9: Add scopes to the oauth call to gitlab for build trigger (PROJQUAY-5181) (#1784)

Buildman

  • 1a60cbe7: add SLO metric that calculates build success (PROJQUAY-4486) (#1609)
  • ea67af5a: add SLO metric for time spent in queue for build jobs (PROJQUAY-4487) (#1575)
  • 9a11e476: allow fallback on non-exception build failures (PROJQUAY-4609) (#1605)

Chore

Chore: V3.7.10 Changelog Bump (Https

Chore: V3.7.11 Changelog Bump (Https

Chore: V3.7.9 Changelog Bump (Https

Cleanup

Config

  • 6eeb45b7: Set feature flag default for new vulnerability notifications to True (#1995)
  • 9a7239e8: updating quota defaults (PROJQUAY-5546) (#1901)
  • 34a6e5fe: clean upload folder by default (PROJQUAY-4395) (#1731)
  • 6bbfdf5e: Remove whitespace from config (PROJQUAY-4666) (#1596)
  • ff8043dd: Add conftest mediatypes to default Quay configuration (PROJQUAY-4614) (#1567)

Config

  • 4ebad4dc: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1554)

Cors

  • 98d89a1f: check for request_origin being set (PROJQUAY-5213) (#1811)
  • 017c4f0b: Adding missing method type (PROJQUAY-4800) (#1651)

Deploy

Feat

  • be1bddfd: Allow action logs to be forwarded to Splunk (PROJQUAY-4993) (#1764)

Fix

  • 80cd9c33: Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) (#2105)

Geo-Rep

  • 0e08328b: Initialize features from config in util script (PROJQUAY-5627) (#1967)
  • 95819675: Add util script to remove geo-rep location and corresponding image locations (PROJQUAY-4995) (#1943)

Georep

  • b5b7aabe: Add error handling for remove location script (PROJQUAY-5878) (#2094)

Healthcheck

  • 2dd0d3e2: fix invalid Exception attribute (PROJQUAY-5047) (#1782)

Ldap

  • b2a5b3ab: Don't convert dashes to underscores in usernames (PROJQUAY-5253) (#1808)

Locking

Login

  • c5ea9fa1: Use dedicated mailing list for export compliance email (PROJQUAY-4844) (#1730)
  • 68844dbf: Re-raise the export compliance exception on RHSSO (prod) (PROJQUAY-4844) (#1726)
  • f2b70c50: Re-raise the export compliance exception on RHSSO (PROJQUAY-4844) (#1725)
  • cb590f9a: Add error message for exprot compliance hold (PROJQUAY-4844) (#1715)
  • 442bb168: Use the correct username for export compliance (PROJQUAY-4844) (#1696)
  • 5bd24264: Add subject in debug logs for export compliance (PROJQUAY-4844) (#1695)

Logs

  • 0c2f4c92: Add autologin to splunk's connect() to allow retries (PROJQUAY-5621) (#1957)
  • 171f9cc1: ssl_ca_path should be optional (PROJQUAY-4993) (#1920)
  • 490a6b2c: Add SSL cert support and test coverage for splunk logging (PROJQUAY-4993) (#1878)
  • 41cd8330: add audit log events for login/logout to Quay (PROJQUAY-2344) (#1866)
  • 37e4990b: Add audit logs for organization and user namespace activities (PROJQUAY-3482) (#1846)
  • ed86a102: validate date range is within configuration (PROJQUAY-4959) (#1707)
  • 1bd016fd: Add repository information for build audit logs (PROJQUAY-4726) (#1705)
  • 33451ca9: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1682)
  • fe2b89d6: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1625)

Marketplace

Nginx

  • 056b6fca: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1670)

Oci/Index.Py

Permissions

  • 16e53211: lazy-load superuser permissions (PROJQUAY-5117) (#1761)

Pg

  • 133437f2: Add warning log when Postgres version less than 13 (#218)

Proxy

  • ba29a40b: allowing expiring tags with timemachine set to 0 (PROJQUAY-5558) (#1907)
  • e349762d: Allow anonymous pulls from registries (PROJQUAY-5273) (#1906)

Quay

Quay UI

  • 3a90e1b4: Creating new username for accounts that login via SSO (PROJQUAY-5289) (#1831)

Quota

  • 6cf0a353: calculating registry size (PROJQUAY-5476) (#1879)
  • cf509011: moving resetting of child manifest temporary tags to delete endpoint (PROJQUAY-5512) (#1894)
  • e6f2dc33: excluding robots from quota total (PROJQUAY-5469) (#1871)
  • a2c379d4: Include blob deduplication in totals (PROJQUAY-3942) (#1751)

Registry

  • 23b39720: add option to ignore unknown mediatypes (PROJQUAY-5018) (#1750)

Repomirror

  • ff66a93e: Add default value for REPO_MIRROR_ROLLBACKto config (PROJQUAY-4296) (#1786)
  • 15ea8350: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1427)

Revert "Chore

Revert "Secscan

Scripts

  • facb4b1e: push to ecr backup when building quay.io (PROJQUAY-3273) (#1578)

Secscan

  • c3fc3a82: send notifications for new indexes (PROJQUAY-4659) (#1813)
  • 4aa84a52: fix string to int conversion (PROJQUAY-4395) (#1736)
  • e1985942: handle non backfilled layers_compressed_size (PROJQUAY-4395) (#1734)
  • d84b67c7: add scan metric (PROJQUAY-4488) (#1719)
  • 80fdb924: add config to limit manifests with layer size too large to index (PROJQUAY-4957) (#1733)
  • 709487b3: add timeout to indexing requests (#1727)
  • 8f9d6c94: add metric for scan results (PROJQUAY-4488) (#1674)
  • 84786b9c: Correct links (PROJQUAY-2164) (#1552)
  • 98801bfd: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1547)

Secscan_model

  • 37578247: attempt urldecoding fixed_in_version (PROJQUAY-5886) (#2063)

Security

  • 95a59325: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1767)

Storage

  • 63888379: add option to validate all configured storages (PROJQUAY-5074) (#1752)
  • 0ae31c6e: Add MultiCDN storage provider (PROJQUAY-5048) (#1747)
  • f4d9dda2: Add **kwargs to get_direct_download_url for CloudFlare storage (PROJQUAY-3512) (#1594)
  • 40735569: Add Cloudflare as a CDN provider for an S3 backed storage (PROJQUAY-3699) (#1294)

Storagereplication

  • c0efc752: add retry logic without exhausting queue retries (PROJQUAY-4793) (#1832)
  • 2e5f2572: sleep on unexpected exception for retry (PROJQUAY-4792) (#1792)

Superuser

Superusers

  • 45d00a6b: gives superusers access to team invite api (PROJQUAY-4765) (#1694)
  • 64ec1560: grant superusers additinonal org permissions (PROJQUAY-4687) (#1613)

Tox

UI

  • 5198db57: Robot Accounts page perms fix (PROJQUAY-5487) (#2088)
  • 8c21856b: Delete normal user org by super user (PROJQUAY-5639) (#2008)
  • 98a0f8bb: Fixing failing tests (#1890)
  • c014b6af: Adding functionality to update organization settings (PROJQUAY-5402) (#1864)
  • 7be6c3d2: Fix visibility of organization and user settings on new UI (PROJQUAY-5500) (#1882)
  • e6d834f2: Fixing repository name for nested repos (PROJQUAY-5446) (#1873)
  • 37723b96: Removing Cancel button from Robot account credentials modal (PROJQUAY-5426) (#1867)
  • c6f35b3d: Removing isHidden from Tab as incompatible with console dot (PROJQUAY-4553) (#1863)
  • dcd192d5: Using organizationName variable and using isHidden to hide tabs (PROJQUAY-4553) (#1862)
  • d20fd5e7: Robot token fetch & regenerate fix for user namespace (PROJQUAY-5419) (#1860)
  • 22d28f9f: Filtering security report vulnerabilities (PROJQUAY-5401) (#1861)
  • 1634f817: Fixing Teams search in Create Robot Wizard (PROJQUAY-5403) (#1859)
  • b95a4f6a: Replacing FilterInput with SearchInput in repo search for create robot account wizard (PROJQUAY-5403) (#1851)
  • 155165d6: Replacing FilterInput with SearchInput in Robot accounts page (PROJQUAY-5404) (#1849)
  • 2616bf9b: Replacing useRecoil with useState for robot account search (PROJQUAY-5404) (#1848)
  • d9b9f60c: Check if org is user for robot creation (PROJQUAY-5398) (#1847)
  • 71cfdca0: Fixing repoDetails not defined error (#1837)
  • 60181dae: Fix redirection to user/org page (PROJQUAY-4667) (#1623)

Ui

  • 74d6d827: updating quota size format (PROJQUAY-5471) (#1886)
  • a681a0b7: Fix search in bulk delete of robot accounts (PROJQUAY-5355) (#1868)
  • 0029b8b4: update survey link to new survey (PROJQUAY-5432) (#1865)
  • 93de6539: Hide organization settings when user is not admin (PROJQUAY-4053) (#1829)
  • be1424ca: Adding option to permanently delete tags past time machine window (PROJQUAY-5303) (#1853)
  • 64e4e327: fix last modified date on repo list (PROJQUAY-5408) (#1854)
  • f22da92e: use route location instead of window.location (PROJQUAY-5392) (#1844)
  • 19259c1c: Refresh auth token for plugin flow on 401 (PROJQUAY-5390) (#1843)
  • 717db76c: Use the correct endpoint for plugin (PROJQUAY-3203) (#1842)
  • 2db3b186: add support for exposing quay UI as a dynamic plugin (PROJQUAY-3203) (#1799)
  • 0e3221e4: Merge quay-ui into quay (PROJQUAY-5315) (#1827)
  • 85218f11: Hot fix billing information (PROJQUAY-0000) (#1679)
  • b8cf8932: Repository settings feature flag (PROJQUAY-4565) (#1677)
  • 1a2bb4a4: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1669)
  • 74d8a515: Remove FEATURE_UI_V2 from analytics scripts (PROJQUAY-4582) (#1658)
  • c71fd10b: Add script for adobe analytics for quay.io in angular UI (PROJQUAY-4582) (#1654)
  • 8211b774: Show UI toggle on quay.io only to redhat users (PROJQUAY-4804) (#1653)
  • bc5bc22b: Add script for adobe analytics for quay.io (PROJQUAY-4582) (#1648)
  • 96372019: Fix font size in superuser page (PROJQUAY-4407) (#1553)

Users

  • dba302b5: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1645)
  • b128936b: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1640)
  • 7cd55ea0: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1634)
  • 0caa4203: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1621)
  • 8fc03857: when set, grant superusers repository permissions. (#1620)
  • ef8ad2c3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1614)
  • c84067a4: add restricted users' filter (PROJQUAY-1245) (#1551)

Util

  • 230fd24f: Reading new UI feedback form url from config parameter (PROJQUAY-5463) (#1902)
  • 3035f46f: Clean up and adding make target to install pre-commit hooks(PROJQUAY-000) (#1587)
  • e8e5d5d9: Adding git pre-commit checks (PROJQUAY-4658) (#1585)

[Redhat-3.9] Api

  • 1239477f: Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) (#2079)
  • 2afab1c6: add permanently delete tag usage log (PROJQUAY-5496) (#1926)

[Redhat-3.9] Authentication(LDAP)

  • 6be4d052: allow LDAP referrals to not be followed (PROJQUAY-5291) (#1922)

[Redhat-3.9] Build(Deps)

[Redhat-3.9] Oci

  • 0f8fd65d: Allow optional components in the image config to be set to "null" (PROJQUAY-5634) (#1964)

[Redhat-3.9] Pagination

  • 81dc7966: Fixing paginate for /api/v1/superuser/logs API (PROJQUAY-5360) (#2011)

[Redhat-3.9] Storage

  • 313a9544: make cloudfront_distribution_org_overrides optional (PROJQUAY-5788) (#2009)

[Redhat-3.9] UI

  • b1bab0b9: Replace time to wait with event waits in cypress tests (#2078)

[Redhat-3.9] Ui

Pull Requests

  • Merge pull request #2069 from dmage/merge-config-tool-3.9

v3.8.15 - 2024-01-24

Reconfigure

  • 2d351213: Add auth to comit to operator endpoint (PROJQUAY-6598) (#2631)

v3.8.14 - 2023-11-02

[Redhat-3.8] Build(Deps)

  • d4df6b53: bump golang.org/x/net from 0.13.0 to 0.17.0 (PROJQUAY-6208) (#2447)

v3.8.13 - 2023-10-10

v3.8.12 - 2023-09-06

Build(Deps)

Chore

[Redhat-3.8] Chore

v3.8.11 - 2023-08-07

Azure

  • 63ed3d95: Remove parsing of error response (PROJQUAY-3718) (#167)

Build(Deps)

  • 3791ff6a: bump decode-uri-component in /pkg/lib/editor (#192)
  • 3b1c7dba: bump socket.io-parser in /pkg/lib/editor (#213)
  • 7c252e50: bump minimist and karma in /pkg/lib/editor (#210)

Builders

  • 72307569: Log errors for Github and Bitbucket trigger validation (PROJQUAY-3125) (#144)

Certs

  • 0cb8bde0: Load certs with both extra_ca_cert_ and extra_ca_certs/ prefix (PROJQUAY-3593)

Chore

  • e43ee92a: Use latest go-toolset for config-tool
  • 0befa36a: Reformat python scripts in config-tool
  • 78f27f81: Merge config-tool/.github into .github
  • a785405e: Rename github.com/quay/config-tool to github.com/quay/quay/config-tool
  • b57d88c0: Use config-tool from this repo
  • 29e28da6: Move config-tool into its own directory
  • 65ea29ad: use isinstance to check instance type (#2084)
  • 5fb07695: Fix regexp in pull_request_linting.yaml (#2083)
  • aea7ba03: Use conventional-commit-checker-action for Jira check (PROJQUAY-5672) (#2082)
  • 2fae683a: v3.8.11 changelog bump (PROJQUAY-5869) (#2038)
  • cb82a468: Bump dependencies (PROJQUAY-5630) (#211)
  • 9a562abe: Use buildx v0.11.0-rc2 (#1960) (#2013)
  • 290ebbe2: Create Quay PR from the same push event
  • 11cc5961: Use DEPLOY_PAT so that GitHub reacts on new tags
  • 4b95f4dd: Create PR against Quay for new tags (#212)
  • 77b91045: Bump http-swagger (PROJQUAY-3643) (#198)

Ci

  • 202973a1: Update golang version in CI (PROJQUAY-1605)

Config

  • 509884f6: Allow download of unvalidated config (PROJQUAY-1925)

Configtool

  • a1c33a95: Add option to override Azure endpoint (PROJQUAY-891) (#164)

Configvalidation

Defaults

  • 250e355a: Add defaults for nested repos and init users (PROJQUAY-2425) (#130)

Deploy

  • 5f9333ce: use PAT for creating PR on quay repo (PROJQUAY-5048) (#207)
  • 11481cd2: fix release.yaml quote (PROJQUAY-5048) (#206)
  • 28b4036c: Create a PR against quay for every release (PROJQUAY-5048) (#204)
  • 58f85e46: Add workflow to auto release on push (PROJQUAY-5048) (#200)

Docs

  • 589a932b: Add documentation for TLS usage (PROJQUAY-4558) (#188)
  • 31de43f6: Remove link from example .env file

Editor

  • 408c0535: Remove BITTORRENT_FILENAME_PEPPER from generated config
  • fd0a2762: Remove certs from ui scope on select external-tls (PROJQUAY-2528) (#127)
  • 0f77b0b4: Add logic to allow managing/unmanaging of RepoMirror from ui (#126)
  • ef304b75: Add sslmode=verify-full when Postgres cert uploaded (PROJQUAY-2200) (#111)

Fix

  • 6ea08094: Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) (#2106)

Frontend

  • a24d8708: Set default USERFILES_LOCATION to a valid storage

Go

  • 372289ad: Update golang to version 1.16 (PROJQUAY-1605) (#176)

Href

Ldap

  • acc37482: Remove validation check for users (PROJQUAY-2343) (#142)

Merge Branch 'FileUploads' Of Https

  • d9dbde22: //github.com/quay/config-tool into fileUploads
  • 3680dc27: //github.com/quay/config-tool into fileUploads
  • 98671957: //github.com/quay/config-tool into fileUploads
  • c0e31276: //github.com/quay/config-tool into fileUploads

Merge Branch 'Master' Of Github.Com

Merge Branch 'Master' Of Https

  • 276308dd: //github.com/quay/config-tool
  • dce89b56: //github.com/quay/config-tool
  • adedb28a: //github.com/quay/config-tool

Redis

  • ac69360b: Increase Redis timeout from 3 seconds to 10 seconds

S3validation

  • b40c62ce: Pass token during ec2 role auth (PROJQUAY-2983) (#153)

Securityscanner

  • 1a4e817b: validate introspection endpoint (PROJQUAY-1610)

Setup

  • 92c96876: Add ALLOWED_OCI_ARFICAT_TYPES to generated config (PROJQUAY-1032) (#110)

Smtp

  • 764673d2: Use TLS certs when connecting to smpt (PROJQUAY-1605) (#175)

Ssl

  • 89755418: re-enable .key file loading (PROJQUAY-2511) (#123)

Storage

  • bbdefcb8: Add CloudFlare and MultiCDN config validation (PROJQUAY-5048) (#199)
  • c5a1a7c0: Do not require a storage_path in Distributed Storage Configuration (#133)

Tls

  • ca5a4280: Set external tls termination flag to false when internal (PROJQUAY-2428) (#124)

Tlscomponent

  • ddc1b3de: changing option message for custom tls (PROJQUAY-2428) (#117)

Ui

  • 76146760: Show extra_ca_cert_ prefix (PROJQUAY-3318) (#158)

Validation

  • 4c0a37a4: calls to gcs should always be secure (PROJQUAY-2722) (#131)
  • 04973cc1: fix postgres root cert validation (PROJQUAY-2414) (#113)

Validator

  • c4a3b5db: Fix database.pem path in config.yaml (PROJQIUAY-4222) (#181)
  • 75c713c7: Use user provided endpoint for Gitlab and Github OAuth validations (PROJQUAY-2560) (#168)
  • 3bfe148b: Check for IAM role when aws keys missing. (PROJQUAY-1626) (#109)

Validators

  • f4fd536f: Remove cloudfront API calls that may not be included in policy (PROJQUAY-0000)

[PROJQUAY-1149] Fix: Use Mysql+Pymysql

[Redhat-3.8] Api

  • 177ac5da: Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) (#2080)

[Redhat-3.8] Build(Deps)

[Redhat-3.8] Pagination

  • 7abedb68: Fixing paginate for /api/v1/superuser/logs API (PROJQUAY-5360) (#2010)

[Redhat-3.8] Secscan_model

  • 0f134d35: attempt urldecoding fixed_in_version (PROJQUAY-5886) (#2066)

Pull Requests

  • Merge pull request #2092 from dmage/merge-config-tool-3.8
  • Merge pull request #108 from quay/PROJQUAY-1998
  • Merge pull request #107 from quay/PROJQUAY-1815
  • Merge pull request #104 from syed/add-redis-ssl
  • Merge pull request #106 from quay/loggin_refactor
  • Merge pull request #105 from quay/scram_fix
  • Merge pull request #100 from alecmerdler/PROJQUAY-1610
  • Merge pull request #99 from quay/PROJQUAY-1963
  • Merge pull request #98 from quay/PROJQUAY-1964
  • Merge pull request #97 from quay/ensure_mail_tls_fips
  • Merge pull request #95 from thomasmckay/1925-config-download
  • Merge pull request #93 from alecmerdler/oidc-tls-client
  • Merge pull request #90 from kleesc/set-correct-userfiles-location-default
  • Merge pull request #87 from thomasmckay/1633-secret-key
  • Merge pull request #83 from alecmerdler/PROJQUAY-1577
  • Merge pull request #80 from quay/aioi_gen
  • Merge pull request #82 from quay/PROJQUAY-1561
  • Merge pull request #78 from quay/PROJQUAY-1270
  • Merge pull request #77 from quay/PROJQUAY-1262
  • Merge pull request #76 from quay/PROJQUAY-541
  • Merge pull request #74 from quay/vendor
  • Merge pull request #72 from alecmerdler/PROJQUAY-1306
  • Merge pull request #70 from quay/oidc
  • Merge pull request #69 from quay/mail_validate
  • Merge pull request #68 from quay/swiftV3
  • Merge pull request #67 from quay/fix_file_input
  • Merge pull request #66 from quay/remove_boolean_omitempty
  • Merge pull request #65 from quay/fix_modals
  • Merge pull request #64 from quay/swift_validation
  • Merge pull request #63 from quay/ldap_query
  • Merge pull request #62 from quay/feature_sign
  • Merge pull request #61 from quay/cert_port
  • Merge pull request #60 from quay/cloudfront
  • Merge pull request #59 from quay/dbssl
  • Merge pull request #58 from quay/fixjs
  • Merge pull request #56 from quay/ldap
  • Merge pull request #55 from quay/checkBucket
  • Merge pull request #54 from alecmerdler/PROJQUAY-1156
  • Merge pull request #53 from BillDett/PROJQUAY-1202
  • Merge pull request #52 from quay/switchTLS
  • Merge pull request #51 from quay/tls_timeout
  • Merge pull request #50 from quay/azure
  • Merge pull request #49 from quay/time_machine
  • Merge pull request #48 from thomasmckay/1198-deprecated
  • Merge pull request #47 from quay/storage_fix
  • Merge pull request #46 from quay/cert_fix
  • Merge pull request #45 from quay/fix_mail
  • Merge pull request #41 from kurtismullins/PROJQUAY-1149
  • Merge pull request #44 from quay/gitlab_endpoint
  • Merge pull request #43 from quay/tar2
  • Merge pull request #42 from quay/clean_dev_env
  • Merge pull request #40 from quay/storage_fix
  • Merge pull request #39 from quay/debug
  • Merge pull request #38 from quay/super_users
  • Merge pull request #37 from quay/setup_add_vars
  • Merge pull request #36 from quay/clair_setup
  • Merge pull request #29 from quay/security_scanner_psk
  • Merge pull request #34 from quay/omitempty
  • Merge pull request #35 from quay/warn_no_mount
  • Merge pull request #33 from quay/cert_load_cli
  • Merge pull request #30 from quay/add_nullfix_to_api
  • Merge pull request #31 from quay/postgres_pg_check
  • Merge pull request #32 from alecmerdler/PROJQUAY-1107
  • Merge pull request #28 from quay/tls
  • Merge pull request #27 from quay/localstorage_fix
  • Merge pull request #26 from quay/chi_migration
  • Merge pull request #24 from alecmerdler/distributedstorage-proxy
  • Merge pull request #23 from alecmerdler/PROJQUAY-909
  • Merge pull request #14 from thomasmckay/npm
  • Merge pull request #21 from alecmerdler/distributedstorage-unmarshal
  • Merge pull request #19 from alecmerdler/PROJQUAY-1064
  • Merge pull request #18 from quay/repo_mirror
  • Merge pull request #16 from alecmerdler/PROJQUAY-909
  • Merge pull request #17 from alecmerdler/PROJQUAY-1029
  • Merge pull request #15 from quay/remove-hardcoded-conf-path
  • Merge pull request #13 from quay/fileUploads
  • Merge pull request #11 from josephschorr/config-editor
  • Merge pull request #10 from alecmerdler/pull-request-template
  • Merge pull request #9 from alecmerdler/fix-json-tags-hostsettings
  • Merge pull request #8 from alecmerdler/distributedstorage-omitempty
  • Merge pull request #7 from alecmerdler/dbconnectionargs-omitempty
  • Merge pull request #6 from alecmerdler/json-tags
  • Merge pull request #5 from alecmerdler/distributedstorage-fieldgroup
  • Merge pull request #4 from alecmerdler/securityscanner-typefix
  • Merge pull request #3 from quay/remove_validate_dep
  • Merge pull request #2 from quay/remove_validate_dep
  • Merge pull request #1 from quay/new_schema

v3.8.10 - 2023-06-23

Chore

Db

  • a7cfd6ee: handle readonly mode when updating repo size cache (PROJQUAY-4854) (#1930)

v3.8.9 - 2023-06-07

Chore

Proxy

  • 47d50900: Allow anonymous pulls from registries (PROJQUAY-5273) (#1908)

Superuser

[Redhat-3.8] Superuser

  • 9c198c69: paginating superuser organization list (PROJQUAY-4297) (#1896)

v3.8.8 - 2023-05-17

Chore

Storagereplication

  • 1cc45a7b: add retry logic without exhausting queue retries (PROJQUAY-4793) (#1884)

v3.8.7 - 2023-04-26

Chore

  • d60d6e42: v3.8.7 changelog bump (PROJQUAY-5352) (#1836)
  • 3db02218: Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) We were not enforcing the use of HTTP 1.1 when storage proxy was concerned. This causes problems in certain complex scenarios. (#1828)

v3.8.6 - 2023-04-12

Build(Deps)

Chore

Storagereplication

  • 3809d7ff: sleep on unexpected exception for retry (PROJQUAY-4792) (#1810)

v3.8.5 - 2023-03-21

Build(Deps)

Chore

[Redhat-3.8] Chore

  • 54799d69: Bump pyOpenSSL and cryptography (PROJQUAY-5120) (#1796)

[Redhat-3.8] Security

  • 3b38e859: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1801)

v3.8.4 - 2023-03-10

Chore

Healthcheck

  • 9858a0d8: fix invalid Exception attribute (PROJQUAY-5047) (#1783)

Permissions

  • 0caa7786: lazy-load superuser permissions (PROJQUAY-5117) (#1779)

Storage

  • 1c191a2f: add option to validate all configured storages (PROJQUAY-5074) (#1768)

Tox

v3.8.3 - 2023-02-28

Chore

v3.8.2 - 2023-02-07

Build(Deps)

Chore

Config

  • 08fae2ee: clean upload folder by default (PROJQUAY-4395) (#1741)

Logs

  • 8c562906: Add repository information for build audit logs (PROJQUAY-4726) (#1720)

v3.8.1 - 2023-01-24

Chore

Chore: V3.7.11 Changelog Bump (Https

Cors

Logs

  • c722d6df: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1701)

Nginx

  • 006779bd: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1673)

Oci/Index.Py

Superusers

  • 68ec0579: gives superusers access to team invite api (PROJQUAY-4765) (#1702)

UI

  • 013f96fd: Fix redirection to user/org page (PROJQUAY-4667) (#1659)

Ui

  • 3a3daeb5: Repository settings feature flag (PROJQUAY-4565) (#1689)
  • 95f3064c: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1672)

v3.8.0 - 2022-11-26

Api

  • 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
  • aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
  • d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
  • 871c43ea: handle missing tag on DELETE tag api (#1444)
  • bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)

Arch

Auth

Billing

Bug

  • ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
  • 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)

Build(Deps)

Builders

Buildman

Bump

  • b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)

CI

Chore

Chore: V3.6.8 Changelog Bump (Https

Chore: V3.6.9 Changelog Bump (Https

Chore: V3.7.0 Changelog Bump (Https

Chore: V3.7.1 Changelog Bump (Https

Chore: V3.7.10 Changelog Bump (Https

Chore: V3.7.3 Changelog Bump (Https

Chore: V3.7.4 Changelog Bump (Https

Chore: V3.7.5 Changelog Bump (Https

Chore: V3.7.6 Changelog Bump (Https

Chore: V3.7.7 Changelog Bump (Https

Chore: V3.7.8 Changelog Bump (Https

Chore: V3.7.9 Changelog Bump (Https

Ci

Cleanup

Conf/Nginx

  • f45c68eb: mark beginning of string in oauth location match (#1550)

Dev

Doc

  • 34cd7d09: update Instructions for Deploying on OpenShift (#1537)

Dockerfile

Export Compliance

  • adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)

Fix

  • 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
  • f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)

GUI

Healthcheck

  • c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)

Init

  • e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
  • 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
  • 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)

Logs

  • 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)

Makefile

  • 692e3cee: use non-standard port for postgres test container (#1485)
  • fd4e7723: use variable to tell postgres test target which tests to run (#1475)

Mirror

  • 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
  • 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
  • 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)

Mirroring

  • 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)

Nginx

Oauth

  • 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
  • 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)

PROJQUAY-3750

  • ac6a8d2f: support registries that do not return a digest header (#1310)

Proxy Cache

  • 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)

Pull-Thru

  • d029a465: bump expiration of all parent manifest lists on pull (#1336)

Quay

  • 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)

Quayio

  • b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)

Quota

Quota

  • a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
  • f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
  • 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)

Quota Management

  • 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)

Quota UI

  • a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
  • 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)

Registry

  • c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)

Requirements.Txt

Revert "Chore

  • 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)

Rhsso

  • 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)

Schema1

  • b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)

Secscan

  • 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
  • 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
  • 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
  • 776dbd90: update https proxy scheme (#1340)

Sso

  • ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
  • 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
  • f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
  • 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
  • 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
  • 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)

Storage

  • 47564690: handle KeyError we sometimes get from aws (#1543)
  • a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
  • e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
  • 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)

Superusers

  • acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)

Task

  • eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)

UI

  • ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
  • c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)

Ui

  • 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
  • 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
  • b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
  • 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
  • 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
  • d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)

User

  • 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)

Users

  • 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
  • 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
  • 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
  • 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
  • c4595fbb: when set, grant superusers repository permissions. (#1622)
  • f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
  • 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
  • 14e87bd4: fix missing references in ldap for superusers (#1542)
  • 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)

V2auth

  • fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)

[Redhat-3.8] Arch

[Redhat-3.8] Chore

  • 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)

[Redhat-3.8] Config

  • 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)

[Redhat-3.8] Repomirror

  • 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)

v3.7.14 - 2023-09-06

v3.7.13 - 2023-07-13

Chore

v3.7.12 - 2023-06-05

Chore

Superuser

Tox

[Redhat-3.7] Oci

  • 7c22f8e3: Create workflow for OCI Conformance (PROJQUAY-2812) (#1744)

[Redhat-3.7] Superuser

v3.7.11 - 2022-12-01

Chore: V3.7.11 Changelog Bump (Https

Revert "Chore

  • f61ba511: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1647)

v3.7.10 - 2022-10-25

Auth

Chore: V3.7.10 Changelog Bump (Https

Secscan

  • 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)

[Redhat-3.7] Chore

  • 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)

v3.7.9 - 2022-10-17

Chore: V3.7.9 Changelog Bump (Https

Storage

v3.7.8 - 2022-09-12

Chore: V3.7.7 Changelog Bump (Https

Chore: V3.7.8 Changelog Bump (Https

Healthcheck

  • 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)

[Redhat-3.7] Bug

  • 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
  • 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)

[Redhat-3.7] Ci

  • 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)

v3.7.7 - 2022-08-29

Mirror

Registry

  • b7f3434a: correctly bump tag expiration when tag changes upstream (#1484)

v3.7.6 - 2022-08-15

Chore: V3.7.6 Changelog Bump (Https

Fix

  • dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)

Proxy Cache

  • f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)

v3.7.5 - 2022-07-26

Auth

Chore: V3.7.4 Changelog Bump (Https

Chore: V3.7.5 Changelog Bump (Https

Mirroring

  • eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)

v3.7.4 - 2022-07-07

Builders

Mirror

  • c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)

v3.7.3 - 2022-06-28

Chore: V3.7.3 Changelog Bump (Https

Storage

  • 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)

[Redhat-3.7] Ui

  • 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)

v3.7.2 - 2022-06-22

Builders

  • ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)

Chore: V3.7.1 Changelog Bump (Https

Chore: V3.7.2 Changelog Bump (Https

Fix

  • 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)

GUI

Quota

Requirements.Txt

UI

  • abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)

[Redhat-3.7] Quota UI

  • 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)

v3.7.1 - 2022-06-06

Init

  • e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
  • cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
  • c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)

Pull-Thru

  • a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)

[Redhat-3.7] Quota

[Redhat-3.7] UI

  • 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)

v3.7.0 - 2022-05-23

API

  • 2dca65f9: Removing internal only decorator from exposed Super user endpoints (#1271)

Api

  • 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
  • 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)

App.Py

  • b4600553: filter proxy cache login details from debug logs (#1268)

Auth

  • 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
  • edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
  • 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
  • 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)

Billing

  • 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
  • 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
  • 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)

Blobuploadcleanupworker

  • f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
  • 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)

Build

  • 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
  • fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
  • eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
  • 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
  • a347d316: Update backup base image name (PROJQUAY-2372) (#965)
  • d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
  • af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
  • e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
  • d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
  • 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)

Build(Deps)

Builders

  • 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
  • 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
  • d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
  • 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
  • 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
  • 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
  • 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
  • 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
  • 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
  • dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
  • b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)

Buildman

  • a79f7b6f: increase allowed grpc body size for log streams (#1234)
  • ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
  • 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
  • 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
  • a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
  • 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
  • a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
  • eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
  • b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)

CONTRIBUTING

Cache

  • ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)

Chore

  • c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
  • 2d56a8df: add logging during instance service key generation (#1276)
  • 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
  • a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
  • 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
  • 9bdbba6f: Remove unused files (#1067)
  • 65100439: download aws ip ranges via github workflow (#1041)
  • b7037d9c: Bump up config-tool version v0.1.9 (#992)
  • 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
  • ae129b45: Bump up config-tool version v0.1.8 (#984)
  • c8092069: Bump up config-tool version (#983)
  • ba08ddd7: Bump up config-tool version (#982)
  • bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
  • 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
  • c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
  • 16dcebf1: build and publish workflow (PROJQUAY-2556)
  • 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)

Chore(Dockerfile)

  • 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)

Chore: V3.6.3 Changelog Bump (Https

Chore: V3.6.4 Changelog Bump (Https

Chore: V3.6.5 Changelog Bump (Https

Chore: V3.6.6 Changelog Bump (Https

Chore: V3.7.0 Changelog Bump (Https

Ci

  • e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
  • c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)

Clean.Sh

  • 6b5e7f50: don't remove webfonts dir since its now versioned (#1025)

Cleanup

  • 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)

Compliance

  • ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)

Conf

Config

  • e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
  • c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
  • c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
  • c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)

Config.Py

  • d14da17a: Add support for source containers (PROJQUAY-2271) (#954)

Data

  • a4ed9866: increase max len for proxy cache config credentials (#1241)

Data/Buildlogs

Database

  • 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
  • 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
  • c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)

Db

  • eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)

Debug

  • 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
  • 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)

Defaults

  • a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)

Deploy

  • 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
  • d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
  • 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
  • 1589351b: Add clair back fill worker deployment manifests (#991)
  • 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
  • 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
  • 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
  • 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
  • 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)

Deps

  • bb53127d: upgrade upstream requirements.txt package versions (#1072)

Dockerfile

  • 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
  • 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
  • 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
  • cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
  • da558b0f: replace golang base image in production dockerfile (#928)
  • 139c9abc: use separate dockerfile for production deployment (#927)
  • 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)

Docs

  • 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)

Documentation

  • ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)

Editor

Email

  • d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)

Endpoints/V2

Feat

Fix

Fix

  • c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)

Format

  • ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)

Formatting

Gc

  • 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)

Imagemirror

  • 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)

Invoice

  • 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)

Ipresolver

Ldap

Makefile

  • 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)

Migration

  • 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
  • 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)

Mirror

  • d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
  • f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)

Namespacequota

Nginix

  • 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)

Nginx

  • aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
  • 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
  • de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
  • ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
  • 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
  • 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
  • 630d6f46: use bigger http/2 chunks for blobs (#630)

Notification

  • 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
  • a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)

Oci

  • f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)

PROJQUAY-3750

  • 2e2fefe5: support registries that do not return a digest header (#1313)

Proxy

  • 1342a17b: make upstream related error message more actionable (#1240)
  • b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
  • f248d885: don't store entire blob in memory when caching (#1200)

Proxy Cache

  • a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)

Proxy Cache

  • 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)

Quay

  • 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)

Quay UI

  • 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)

Quay.Io

  • 5debec58: Catching requests from impersonated principals (#869)

Quay.Io UI

  • 20aef6a5: Fetching severity from cvss score and removing visibility… (#887)

Quayio

  • 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
  • 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)

Quota

  • 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)

Quota

  • f4093b0d: fix caching (PROJQUAY-3660) (#1291)
  • 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
  • 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
  • eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)

Quota API

  • a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
  • 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)

Quota Management

  • cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)

Quota UI

  • d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
  • a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
  • 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
  • f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
  • 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
  • 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)

QuotaManagement

Realtime

  • a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)

Refactor(Dockerfile)

Registry

  • 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)

Registry_proxy_model

  • 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)

Requirements

Requirements-Osbs

Requirements-Osbs.Txt

Requirements.Txt

Revert "Quayio

Revert "Revert "Quayio

Revert "Schema1

  • 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)

Revert "Secscan

Schema1

  • b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)

Secscan

  • 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
  • f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
  • 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
  • 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
  • ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
  • 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
  • a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
  • 922892d1: configure global lock (PROJQUAY-3501) (#1255)
  • 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
  • d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
  • 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
  • a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
  • 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
  • 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
  • 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
  • 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
  • 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
  • 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
  • b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
  • 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
  • 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
  • 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)

Sescan

  • 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)

Setup

Static

Storage

  • c9c91339: allow arbitrary endpoint url for azure storage (#1071)
  • 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
  • ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
  • f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)

Superuser

Teams

Trigger_analyzer

UI

Ui

  • e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
  • 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
  • 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
  • e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
  • 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
  • bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)

Util

Util/Ipresolver

V2auth

  • 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)

[Redhat-3.7] Quota Management

  • 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)

v3.6.2 - 2021-12-02

Api

  • 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)

Backport

Build

  • 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
  • 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
  • 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
  • 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
  • 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
  • 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)

Build(Deps)

Buildman

  • f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
  • bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)

Cache

  • 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
  • cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)

Chore

  • 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
  • b016844a: build and publish workflow (PROJQUAY-2556)
  • 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
  • 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
  • 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
  • a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
  • 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
  • 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)

Config

Db

  • 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)

Defaults

Deploy

  • ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
  • d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)

Deployment

  • 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)

Doc

  • 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)

Dockerfile

  • 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
  • 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
  • 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
  • 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)

Email

  • a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)

Fips

Local-Dev

  • eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)

Migration

  • 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)

Mirror

  • 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)

Modelcache

  • b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
  • df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)

Notification

Oauth

  • 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)

Oci

  • 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
  • 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
  • 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)

Organization

  • 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)

Python

Registry

  • b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)

Release

  • 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)

Repository

  • a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)

Requirements

Secscan

  • 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
  • 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
  • 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)

Secscan

Static

Templates

  • 1c157e2a: escape templated script value (PROJQUAY-970) (#828)

Ui

  • a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
  • 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
  • de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)

Util

  • cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)

Utility

  • 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)

v3.6.0-alpha.9 - 2021-04-21

Cache

  • 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
  • 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)

Chore

  • 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
  • 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
  • addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
  • ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)

Ci

  • e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)

Deployment

  • 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
  • 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)

Gc

  • efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
  • f774e4c6: add metrics for deleted resources (#711)

Lock

  • c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
  • 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)

Queueworker

  • 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)

v3.6.0-alpha.8 - 2021-04-09

Chore

  • ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
  • 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)

v3.6.0-alpha.7 - 2021-04-09

Chore

v3.6.0-alpha.6 - 2021-04-09

Chore

  • 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
  • 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
  • 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
  • 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)

v3.6.0-alpha.5 - 2021-04-08

Release

v3.6.0-alpha.4 - 2021-04-08

Release

  • 9dd55dee: fixing Release action (PROJQUAY-1486)

Historical Changelog

CHANGELOG.md