v0.9.0

Changelog

• c1f420a Add and align CI security and dependency automation
• 73a9863 Assert omitted Helm releases are not downloadable
• 8d3dacf Bump azure/setup-helm from 4.3.1 to 5.0.1 (#332)
• f0580d9 Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#331)
• 0935c15 Bump github.com/aws/aws-sdk-go-v2/config from 1.32.40 to 1.33.2 (#336)
• b2817dc Bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.4 (#356)
• f29c916 Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.61.0 to 1.64.0 (#334)
• 2ae6213 Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.64.0 to 1.65.0 (#357)
• 2aad8bf Bump github.com/git-pkgs/spdx from 0.3.1 to 0.3.2 (#355)
• 66a6d81 Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#330)
• 83e7e80 Bump golang.org/x/sync from 0.22.0 to 0.23.0 (#335)
• 4436130 Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#346)
• dc1ce8d Bump modernc.org/sqlite from 1.57.0 to 1.58.0 (#337)
• 7e4b13c Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#333)
• b83bc0e Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#354)
• 436155e Clear before deleting on eviction, and requeue failed reclaims
• 7835f7a Discard a stale cache entry under the coalescing key (#348)
• 1001cd7 End an eviction pass that cannot evict anything
• 499033b Exit non-zero when mirror denylist is invalid
• 2736fe0 Fall back to embedded build info for Version (#352)
• c895e5b Fix NuGet cooldown enforcement for listings and downloads (#340)
• eb45cd5 Fix duplicate fetches and 502s on concurrent cache misses (#329)
• 8f09c1d Fix the handler test build
• 4ce6c37 Give each fetch its own storage path
• eb43505 Log and count requests aborted mid-relay
• 2fef446 Mark Helm as completed in registry table (#316)
• 8b1e7cb Omit malformed Helm chart releases instead of failing the index
• 0bab9bd Separate OCI request timeout from readiness probes in loopback test (#347)
• 00a49e2 Standardize the README license footer
• 0089917 Stop writing fileblob's .attrs sidecar (#328)
• e635a62 Test that GCS Delete of a missing object returns nil
• 5f0f3b0 Update enrichment to v0.7.2 (#394)
• 51caa17 Update git-pkgs dependencies (#396)
• 65f2bf5 Widen wall-clock bound in flaky probe timeout test
• 94c11b4 align data in the dashboard table more nicely (#318)
• d8a8111 apply review changes
• d14b240 build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0
• 3724c93 build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1
• 15d5ac0 build(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0
• ccc80f8 build(deps): bump github.com/aws/aws-sdk-go-v2/config
• 8bbe117 build(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr
• eedc290 build(deps): bump github.com/git-pkgs/archives from 0.7.0 to 0.7.1
• 2a35d3d build(deps): bump github.com/git-pkgs/magic from 0.3.1 to 0.4.0
• ceee79f build(deps): bump github.com/git-pkgs/registries from 0.9.1 to 0.9.2
• 3611ff2 build(deps): bump github.com/git-pkgs/vers from 0.7.0 to 0.7.1
• 442b591 build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0
• 468e9e5 build(deps): bump golang.org/x/net from 0.58.0 to 0.59.0
• fbb89c9 build(deps): bump modernc.org/sqlite from 1.58.0 to 1.59.0
• bb2205a docker host is trimmed too much in the docs (#317)
• 658664a docs(debian): drop a stray space in a test comment
• 46faf76 docs(debian): trim comments on the named-repositories change
• 9788aa7 feat(debian): report a misspelled repository name
• 8a51d04 feat(debian): serve additional APT archives at /debian/{name}/
• 548a50d feat: add exact-version package denylist
• c4f34b0 fix pnpm audit
• e40c78f fix(conda): preserve gzip for large repodata indexes
• 3db2cd5 fix(database): set connection pool limits for Postgres (#350)
• 8696a25 fix(handler): let the ProxyCached path request a per-call Accept-Encoding (#324)
• 429e745 fix(helm): support OCI references in HTTP repository indexes
• a55f42e fix(mirror): match cached artifacts by resolved filename
• be2a1f0 fix(server): tune the shared upstream transport defaults (#351)
• ac261cc fix: centralize pass-through response relaying
• ba45227 test(database): drop every schema table in the Postgres fixture (#349)
• e738a21 test(handler): stop asserting on an upstream connection the proxy abandons