v2.1.0-rc2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2446
• remove unnecessary calls to storage driver by @peusebiu in #2432

Full Changelog: v2.1.0-rc1...v2.1.0-rc2

v2.1.0-rc1

What's Changed

• chore: fix dependabot alerts by @rchincha in #2411
• refactor(http): refactor http client to accept more customisable options by @vrajashkr in #2414
• feat(cluster): Add support for request proxying for scale out by @vrajashkr in #2385
• chore: fix dependabot alerts by @andaaron in #2431
• feat(sync): support for periodic repo sync in scale-out cluster by @vrajashkr in #2424

Full Changelog: v2.0.4...v2.1.0-rc1

v2.0.4

What's Changed

• ci: add description field to our published images by @rchincha in #2354
• chore: fix dependabot alerts by @rchincha in #2366
• chore: fix dependabot alerts by @rchincha in #2377
• fix(cli/server): serve command expected positional args by @ralgozino in #2382
• ci: update zap scan docker image location by @rchincha in #2391
• chore: fix dependabot alerts by @rchincha in #2393
• ci: upgrade localstack to v3.3.0 by @rchincha in #2390
• chore: disable content trust check for localstack image by @rchincha in #2398
• ci: fix localstack docker uri by @rchincha in #2400
• chore: fix dependabot alerts by @rchincha in #2399
• fix: additional input validation for CVE graphQL query by @rchincha in #2408

New Contributors

• @ralgozino made their first contribution in #2382

Full Changelog: v2.0.3...v2.0.4

v2.0.3

What's Changed

• Add OSSF scorecard and update support matrix by @rchamarthy in #2320
• chore: fix dependabot alerts by @rchincha in #2331
• chore: update to go 1.22 by @andaaron in #2330
• Add a job to check zot config examples (and fix existing examples) by @andaaron in #2322
• ci: add a ML model artifact test case by @rchincha in #2332
• feat: show brief package list in image CVE listings by @vrajashkr in #2338
• feat(ui): new signature UX by @andaaron in #2339
• chore: fix dependabot alerts by @rchincha in #2348
• fix: Allow GET requests on repositories not found in metadb by @andaaron in #2351
• chore: fix dependabot alerts by @rchincha in #2352

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• chore: fix dependabot alerts by @rchincha in #2208
• feat(search): search for a specific tag cross-repo by @andaaron in #2211
• feat(ui): update zui version by @Andreea-Lupu in #2216
• refactor: rename go module from zotregistry.io/zot to zotregistry.dev/zot by @andaaron in #2187
• fix(scheduler): the session cleanup generator is reset too often by @andaaron in #2220
• ci: stabilize ecosystem client tools workflow by @andaaron in #2224
• ci: add script to build/publish a zot multiarch image by @andaaron in #2214
• chore(deps): fix dependabot alerts by @andaaron in #2232
• ci: release a checksums file with SHA256 hashes for release assets by @vrajashkr in #2227
• feat(ui): show more information about CVEs by @andaaron in #2233
• build(go): switch to go 1.21 by @andaaron in #2049
• test(blackbox): fix the scrub test sometimes deleting the image manifest from the layout by @andaaron in #2236
• fix(tests): fixed inconsistent sync test by @peusebiu in #2237
• ci(nightly): update go version used for prometheus tests by @andaaron in #2239
• style(metadb): use type aliases for metadb types to be easier to read by @laurentiuNiculae in #2043
• feat(graphql): filter CVEs by severity by @Andreea-Lupu in #2246
• chore(go.mod): fix dependabot alerts by @andaaron in #2247
• feat: Get the image LastUpdated timestamp from annotations by @andaaron in #2240
• fix(sync): added bearer client for sync by @peusebiu in #2222
• feat(ui): update zui version by @Andreea-Lupu in #2248
• test: add test images build instructions and stacker.yamls by @andaaron in #2249
• feat: Include PackagePath information in CVE results for image by @vrajashkr in #2241
• feat(ui): update zui version by @Andreea-Lupu in #2251
• fix(npe): handle case where os.Stat returns different error types in DirExists by @andaaron in #2253
• test: fix flacky coverage in cookiestore cleanup tests by @andaaron in #2257
• feat(ui): introduce API key management in ZUI by @andaaron in #2256
• chore: update image-spec and dist spec to 1.1.0 by @andaaron in #2255
• chore: fix dependabot alerts by @rchincha in #2268
• chore: fix dependabot alerts by @rchincha in #2283
• feat(ui): show CVE package path by @andaaron in #2286
• fix(sync): better blobs cleanup by @peusebiu in #2273
• fix(sync): sync generator now backs off on errors by @peusebiu in #2272
• chore: fix dependabort alerts by @rchincha in #2295
• feat(cve): cli cve diff by @laurentiuNiculae in #2242
• fix(oras)!: remove ORAS artifact references support by @rchincha in #2294
• chore: fix dependabot alerts by @rchincha in #2302
• test(blackbox): add multi-arch index creation and image attributes modification by @ossfellow in #2306
• chore: fix dependabot alerts by @rchincha in #2317
• feat: add verbose mode for cves for image listing by @vrajashkr in #2308
• fix: ignore metadb errors if tag not found by @rchincha in #2301
• chore: update zui version by @rchincha in #2319

New Contributors

• @vrajashkr made their first contribution in #2227
• @ossfellow made their first contribution in #2306

Full Changelog: v2.0.1...v2.0.2

v2.0.2-rc3

What's Changed

• fix(sync): sync generator now backs off on errors by @peusebiu in #2272
• chore: fix dependabort alerts by @rchincha in #2295
• feat(cve): cli cve diff by @laurentiuNiculae in #2242
• fix(oras)!: remove ORAS artifact references support by @rchincha in #2294
• chore: fix dependabot alerts by @rchincha in #2302
• test(blackbox): add multi-arch index creation and image attributes modification by @ossfellow in #2306
• chore: fix dependabot alerts by @rchincha in #2317
• feat: add verbose mode for cves for image listing by @vrajashkr in #2308
• fix: ignore metadb errors if tag not found by @rchincha in #2301
• chore: update zui version by @rchincha in #2319

New Contributors

• @ossfellow made their first contribution in #2306

Full Changelog: v2.0.2-rc2...v2.0.2-rc3

v2.0.2-rc2

What's Changed

• build(go): switch to go 1.21 by @andaaron in #2049
• test(blackbox): fix the scrub test sometimes deleting the image manifest from the layout by @andaaron in #2236
• fix(tests): fixed inconsistent sync test by @peusebiu in #2237
• ci(nightly): update go version used for prometheus tests by @andaaron in #2239
• style(metadb): use type aliases for metadb types to be easier to read by @laurentiuNiculae in #2043
• feat(graphql): filter CVEs by severity by @Andreea-Lupu in #2246
• chore(go.mod): fix dependabot alerts by @andaaron in #2247
• feat: Get the image LastUpdated timestamp from annotations by @andaaron in #2240
• fix(sync): added bearer client for sync by @peusebiu in #2222
• feat(ui): update zui version by @Andreea-Lupu in #2248
• test: add test images build instructions and stacker.yamls by @andaaron in #2249
• feat: Include PackagePath information in CVE results for image by @vrajashkr in #2241
• feat(ui): update zui version by @Andreea-Lupu in #2251
• fix(npe): handle case where os.Stat returns different error types in DirExists by @andaaron in #2253
• test: fix flacky coverage in cookiestore cleanup tests by @andaaron in #2257
• feat(ui): introduce API key management in ZUI by @andaaron in #2256
• chore: update image-spec and dist spec to 1.1.0 by @andaaron in #2255
• chore: fix dependabot alerts by @rchincha in #2268
• chore: fix dependabot alerts by @rchincha in #2283
• feat(ui): show CVE package path by @andaaron in #2286
• fix(sync): better blobs cleanup by @peusebiu in #2273

Full Changelog: v2.0.2-rc1...v2.0.2-rc2

v2.0.2-rc1

What's Changed

• chore: fix dependabot alerts by @rchincha in #2208
• feat(search): search for a specific tag cross-repo by @andaaron in #2211
• feat(ui): update zui version by @Andreea-Lupu in #2216
• refactor: rename go module from zotregistry.io/zot to zotregistry.dev/zot by @andaaron in #2187
• fix(scheduler): the session cleanup generator is reset too often by @andaaron in #2220
• ci: stabilize ecosystem client tools workflow by @andaaron in #2224
• ci: add script to build/publish a zot multiarch image by @andaaron in #2214
• chore(deps): fix dependabot alerts by @andaaron in #2232
• ci: release a checksums file with SHA256 hashes for release assets by @vrajashkr in #2227
• feat(ui): show more information about CVEs by @andaaron in #2233

New Contributors

• @vrajashkr made their first contribution in #2227

Full Changelog: v2.0.1...v2.0.2-rc1

v2.0.1

What's Changed

• patch: Add user route to extension_ui.go by @raulkele in #2141
• fix(shutdown): fix crash when shutting down before server and task scheduler have started. by @peusebiu in #2148
• chore: fix dependabot alerts by @rchincha in #2160
• docs: update docs website url by @rchincha in #2159
• fix: high CPU utilization by scheduler while idle by @andaaron in #2156
• fix: enable panic backtraces by @rchincha in #2150
• fix: npe if ldap query doesn't return attributes by @rchincha in #2151
• feat(config): handle config files with no explicit extension by @peusebiu in #2147
• docs: Fix Examples Readme to use proper field repositories instead of repoNames by @ericgraf in #2074
• fix: excessive memory usage by @peusebiu in #2164
• feat(log): print traceback when panics occur by @peusebiu in #2166
• feat(ui): update zui version by @Andreea-Lupu in #2162
• refactor: update tests to use the newer API for creating test images by @andaaron in #2168
• feat(ui): update zui version by @Andreea-Lupu in #2171
• feat(ui): show CVE severity statistics in the UI by @andaaron in #2172
• feat(cve): add option to exclude string from cve search by @laurentiuNiculae in #2163
• fix(nightly): increase wait time for dedupe nightly build by @peusebiu in #2177
• refactor: replace deprecated APIs for creating images in the search tests by @andaaron in #2173
• fix(bearer): fixed /v2/ route not implementing token spec by @peusebiu in #2176
• fix: the scheduler is now fair by @andaaron in #2158
• feat(ldap): hot reloading ldap credentials on change by @laurentiuNiculae in #2167
• fix(scrub): hold locks per image not per repo while executing scrub by @Andreea-Lupu in #2180
• chore: update go.mod to fix dependabot alerts by @rchincha in #2181

New Contributors

• @raulkele made their first contribution in #2141
• @ericgraf made their first contribution in #2074

Full Changelog: v2.0.0...v2.0.1

v2.0.1-rc2

What's Changed

• fix: the scheduler is now fair by @andaaron in #2158
• feat(ldap): hot reloading ldap credentials on change by @laurentiuNiculae in #2167
• fix(scrub): hold locks per image not per repo while executing scrub by @Andreea-Lupu in #2180

Full Changelog: v2.0.1-rc1...v2.0.1-rc2