v2.0.0-rc4

What's Changed

• feat(graphql): Image() call now returns a non-nullable ImageSummary by @andaaron in #1216
• refactor(test): remove unnecessary usage of images copied from under … by @nicoldr in #1217
• feat(repodb): Multiarch Image support by @laurentiuNiculae in #1147
• test(ui): add owasp zap scanner in ci/cd by @andaaron in #1224
• chore(go.mod): fix dependabot alerts by @rchincha in #1228
• fix: trivydb update now uses task scheduler by @aokirisaki in #1204
• refactor(test): update cve tests to stop duplicating test/data if not… by @nicoldr in #1232
• fix(go.mod): replace opencontainers/umoci dependency with project-sta… by @Andreea-Lupu in #1240
• feat(doc): add documentation for dynamodb by @peusebiu in #1236
• feat(ui): update to the latest zui version which supports new multiarch image APIs by @andaaron in #1246
• chore(go.mod): fix dependabot alerts by @andaaron in #1247
• chore(go.mod): fix dependabot alerts by @rchincha in #1251
• feat(sync): skip already synced images in sync ondemand by @peusebiu in #1234
• feat(authz): added groups mechanism by @aokirisaki in #1123
• feat(ui): zui can now show multiple manifests per image by @andaaron in #1254
• feat(repodb): update repodb after sync operation by @laurentiuNiculae in #1241
• feat(mgmt): added mgmt extension which returns current zot configuration by @peusebiu in #1198
• bug(cve): fix trivyDB being downloaded multiple times in a loop by @andaaron in #1255
• feat(repodb): update referrers api to use repodb by @laurentiuNiculae in #1230
• chore(deps): remove usage of deprecated package pkg/errors by @nicoldr in #1262
• chore(deps): modify pkg/errors dependency as indirect by @nicoldr in #1266
• fix(repodb): GQL request for ExpandedRepoInfo errors when artifacts w… by @laurentiuNiculae in #1265
• fix(mgmt): skip bearer authn for mgmt route by @peusebiu in #1267
• fix(cve): Search by CVE title/id (full or partial) when listing an im… by @aokirisaki in #1264
• feat(routes): better error message in case of missing annotations by @peusebiu in #1150
• feat(search): add referrers field to ImageSummary by @laurentiuNiculae in #1261
• fix(errors): remove direct dependency on 'github.com/pkg/errors' by @laurentiuNiculae in #1275
• feat: cleanup error msgs by @nicoldr in #1273
• test(referrers): add test for getting referrers for a image index, mu… by @laurentiuNiculae in #1282
• feat(cli): updated display format for multiarch images by @laurentiuNiculae in #1268
• ci(go.mod): verify go.mod and go.sum don't have uncommitted changes after go mod tidy by @andaaron in #1287
• feat(ui): upgrade to a zui version supporting cve search for a specific image by @andaaron in #1290
• fix(http): fix GET requests to use 'Accept' header by @peusebiu in #1288
• fix(trivy): consistent coverage for reset method + longer wait time b… by @aokirisaki in #1272
• feat(ui): update zui to a version which leverages the referrers on ImageSummary by @andaaron in #1293
• feat(search): update search pattern matching rules by @laurentiuNiculae in #1257
• chore(deps): fix dependabot alerts by @rchincha in #1291
• fix(loadrepodb): statistics are now preserved after reloading zot by @laurentiuNiculae in #1289
• fix(cve): blackbox cve tests now verifying actual cves by @aokirisaki in #1300
• chore(deps): remove unused package pkg/extensions/search/digest by @nicoldr in #1298
• chore(go.mod): fix dependabot alerts by @rchincha in #1305
• chore: fix dependabot alerts by @rchincha in #1312
• refactor(repodb): moving common utilities under pkg/meta by @laurentiuNiculae in #1292
• test(convert): added test for consistent coverage for update last-upd… by @laurentiuNiculae in #1299
• test: stop task scheduler between test runs by @peusebiu in #1311
• chore: fix dependabot alerts by @rchincha in #1320
• feat(ui): if zui tag is not found for download, it now builds locally… by @aokirisaki in #1318
• fix(repodb): fixed assigned repoLastUpdated when searching for repos by @laurentiuNiculae in #1323
• chore(go.mod): fix dependabot alerts by @rchincha in #1330
• chore(go.mod): fix dependabot alerts by @andaaron in #1333
• bug: replaced printing the port with logging it when chosen dynamically by @aokirisaki in #1339
• chore(go.mod): fix dependabot alerts by @rchincha in #1343
• test(sync): consolidate all sync tests by @peusebiu in #1332
• feat(storage): rebuild s3/local dedupe index when switching dedupe status by @peusebiu in #1062
• refactor: move pkg/extensions/search/common/oci_layout.go un… by @nicoldr in #1325
• chore(go.mod): fix dependabot alerts by @rchincha in #1351
• chore(go.mod): fix dependabot alerts by @rchincha in #1360
• chore(go.mod): fix dependabot alerts by @rchincha in #1365
• test: additional blackbox tests for client push/pull by @rchincha in #1371
• fix(csp): upgrade UI and fix zap failure by @andaaron in #1372
• refactor: remove pkg/extensions/search/common and move the code to th… by @nicoldr in #1358
• test(sync): make sure sync doesn't write on shutdown by @peusebiu in #1370
• feat: add a kind cluster example by @rchincha in #1378
• User preferences support by @laurentiuNiculae in #1317
• chore: update golang (to 1.20.x) and golangci-linter by @rchincha in #1388
• Global search filterby bookmarked by @laurentiuNiculae in #1336
• feat(ui): UX update for UI by @andaaron in #1391
• fix(authz): get username from authn.go request context by @peusebiu in #1383
• chore(go.mod): upgrade trivy and cosign by @Andreea-Lupu in #1387
• feat: remove usage of zerolog.Logger.Msgf() from zot code by @nicoldr in #1382
• fix(serve): exit with a status code on error instead of panic by @rchincha in #1396
• chore(go.mod): fix dependabot alerts by @rchincha in #1377
• chore: fix dependabot alerts by @rchincha in #1403
• fix: non-distributable layers may not exist by @rchincha in #1404
• fix: use golang 1.20 to build our container images by @rchincha in #1408

Full Changelog: v2.0.0-rc3...v2.0.0-rc4