| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: zot-registry-fish-completion | Distribution: openSUSE Tumbleweed |
| Version: 2.1.22 | Vendor: openSUSE |
| Release: 1.1 | Build date: Thu Oct 8 07:39:06 2026 |
| Group: System/Shells | Build host: reproducible |
| Size: 9417 | Source RPM: zot-registry-2.1.22-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/project-zot/zot/ | |
| Summary: Fish Completion for zot-registry | |
Fish command line completion support for zot-registry.
Apache-2.0
* Thu Oct 08 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.22:
* fix: improve input validation (#4521)
* chore: bump zui version (#4519)
* fix(storage): fail closed on GC, dedupe, and incomplete
listings (#4514)
* fix(api): return MANIFEST_BLOB_UNKNOWN for a manifest with a
missing blob (#4515)
* chore(deps): bump the github-actions group with 7 updates
(#4516)
* fix(api): map storage Transient to 503, not client 404 (#4512)
* fix(zb): retry timeout-class errors on seed image uploads
(#4511)
* fix(storage): stop collapsing blob I/O to bare ErrBlobNotFound
(#4505)
* fix(sync): surface on-demand upstream errors (#4507)
* fix(zb): treat unexpected EOF as a timeout-class failure
(#4510)
* test(metrics): disable dedupe in TestPopulateStorageMetrics
(#4509)
* fix: complete GC when repository metadata is absent (#4500)
* fix(meta): stop storing signature layers in MetaDB, verify from
storage (#4493)
* fix(storage): classify driver errors as missing, transient, or
permanent (#4474)
* fix(storage): avoid remote-cache races during concurrent dedupe
uploads (#4504)
* chore(deps): bump the go-dependencies group with 10 updates
(#4503)
* fix(build): tag the image make docker-image builds (#4501)
* fix(cli): don't ignore SIGCHLD, so child processes can be
waited for (#4499)
* fix(storage): keep remote dedupe origins from being emptied on
rebuild (#4465)
* test(race): fix race condition when running dynamodb tests
(#4496)
* bug: treat cosign attestations as referrers, not signatures
(#4492)
* test(gc): start the scheduler before stopping it in
runSchedulerUntil (#4494)
* test(stress): pull alpine from project GHCR instead of ECR
Public (#4490)
* fix(storage): return an empty referrers index for a namespace
without a repo (#4488)
* fix(api): don't overflow the tags/list page end for a large n
(#4489)
* test: hash test htpasswd credentials with the minimum bcrypt
cost (#4481)
* fix(cve): don't read MetaDB inside the scan generator's
FilterTags filter (#4483)
* chore(deps): bump the github-actions group with 5 updates
(#4478)
* fix(api): reject manifest pushes with an invalid path tag
(#4475)
* fix(api): report the whole upload in the Range of a streamed
PATCH (#4476)
* fix(auth): never proxy local api keys to upstream token service
(#4473)
* fix(storage): repair remote dedupe origin on manifest re-upload
(#4457)
* fix(meta): update repo info when index manifests are added
after the index (#4470)
* feat(server): notify systemd when ready (#4464)
* chore(deps): bump github.com/containerd/containerd/v2 from
2.3.5 to 2.3.6 (#4462)
* feat: add zot healthcheck for distroless container probes
(#4461)
* feat(sync): add onDemandInBackground for non-blocking on-demand
sync (#4451)
* fix(meta): avoid DeleteSignature panic when signature type is
missing (#4459)
* fix(storage): list repositories after a last value that is not
a repo (#4455)
* fix(api): return 404 when deleting a manifest in a missing repo
(#4460)
* feat(sync): seed on-demand sync sessions with locally-stored
blobs (#4420)
* chore(deps): bump the go-dependencies group with 12 updates
(#4458)
* fix(api): list tags after a last value that is not a tag
(#4448)
* test: stabilize apikey expiry test (#4450)
* fix(storage): keep digests pullable after last-tag overwrite
(#4444) (#4447)
* fix(gc): validate cosign tag subject digest before use in
removeReferrer (#4445)
* test(scanner): fix flaky concurrent ScanImage coalescing test
(#4446)
* fix(storage): repair equal-size corrupted manifests on
re-upload (#4443)
* fix(scanner): synchronize trivy scans (#4440)
* chore: fix dependabot alerts (#4441)
* chore: fix dependabot alerts (#4439)
* fix(storage): 404 when S3 dedupe stubs resolve to empty content
(#4432)
* fix(zb): create and remove a dedicated temp dir for test blobs
(#4428)
* chore(deps): bump the github-actions group with 4 updates
(#4426)
* ci: fix nightly (#4425)
* feat(auth): allow bearer with API keys and OIDC for humans
(#4243)
* feat(sync): sparse multi-arch indexes with periodic platforms
filter (#4410)
* chore: fix dependabot alerts (#4424)
* fix: skip invalid repo dirs like lost+found during storage
walks (#4419)
* fix(authn): avoid session CookieStore panic for anonymous UI
clients (#4418)
* chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
(#4415)
* fix: set Strict-Transport-Security header on TLS responses
(#4414)
* chore(deps): bump the github-actions group with 6 updates
(#4411)
* ci: replace HELM_PUSH_TOKEN with App token and verified API
commits (#4409)
* Sat Sep 19 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.21:
* fix(ci): use latest zot for upgrade tests in #4298
* chore(deps): bump the go-dependencies group with 12 updates in
[#4306]
* fix(imagetrust): add recognization of sigstore v3 bundles in
[#4307]
* chore(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to
5.19.2 in #4310
* fix(auth): make htpasswd hot-reload work for K8s secret mounts
in #4285
* chore(deps): bump the github-actions group with 7 updates in
[#4314]
* fix: code quality review comments in #4312
* fix(storage): dedupe walk must visit nested-namespace
repositories in #4313
* fix(gc): collect referenced blobs once per repo during cleanup
in #4236
* test: prefer Port "0" and TLS-aware StartAndWait to cut bind
flakes in #4317
* ci: update codeowners in #4321
* fix: stop metrics goroutine leak in sync without metrics build
in #4320
* chore(deps): bump the go-dependencies group with 15 updates in
[#4324]
* fix(gc): prevent exponential nested-index walks during untagged
GC; correctly GC multi-tag and cosign referrers that share a
digest in #4318
* fix(storage): memoize nested index walks and honor docker media
types in blob lookups in #4325
* fix(storage): honor docker2s2 compat media types in
delete/prune/scrub in #4327
* chore(deps): bump the github-actions group with 5 updates in
[#4329]
* feat: bump zui version in #4330
* feat(sync): add manifestCheckInterval to throttle on-demand
upstream manifest checks in #4328
* feat(sync): make upstream request concurrency/rate configurable
in #4322
* fix(cli): stop test server leaks and initialize Trivy logger
safely in #4331
* fix(sync): add disableHTTP2 option to saturate high-bandwidth
links in #4335
* fix(events): only log successful publish when all sinks accept
the event in #4334
* chore(deps): bump the go-dependencies group with 15 updates in
[#4340]
* Update link reference for project-zot repository in #4342
* feat(ci): also use floci for CI tests in #4295
* ci: always run emulator teardown after job failures in #4341
* fix: miscellaneous code quality review fixes in #4348
* chore(deps): bump the github-actions group with 4 updates in
[#4354]
* perf: drop the index walk on blob Content-Type in #4350
* feat(search): support Trivy ignore files in #4346
* test: fix scrub extension flaky tests in #4358
* chore(deps): bump the go-dependencies group with 13 updates in
[#4362]
* perf: walk storage once per dedupe run in #4351
* fix: don't lock storage before reading blob upload bodies in
[#4360]
* feat(server): support systemd socket activation in #4326
* test(blackbox): allocate two distinct systemd ports for
multi-listener in #4367
* ci: stabilize systemd tests in #4369
* test: avoid TestAPIKeys short-expire flake in #4370
* fix(compat): preserve Docker media types through MetaDB and
search in #4359
* feat(mgmt): expose allowAnonymousAccess in auth config in #4368
* chore: bump zui version in #4377
* fix(api)!: make blob HEAD/range reads repo-local by default in
[#4363]
* chore(deps): bump the github-actions group with 5 updates in
[#4381]
* fix(cve): stop SBOM generation from widening CVE results in
[#4366]
* chore: bump zui version in #4382
* fix(sync): dedupe on-demand sync with singleflight in #4379
* fix(meta): release the repo quota slot when a repo is emptied
in #4332
* fix(api): enforce dedupe mount auth for bearer and unify via
UserAc in #4380
* feat(events): configurable CloudEvents source and type
namespace in #4385
* chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1
in #4388
* test(blackbox): add mount authorization tests with curl and
regctl in #4387
* test(sync,retention): fix flaky tests in #4389
* fix(sync,gc): guard repo removal and reap stale .sync staging
sessions in #4383
* feat(zb): add --max-timeout-failures budget for GC stress
flakes in #4394
* fix(search): configure the GraphQL server explicitly instead of
the e… in #4395
* ci: build zot binaries once per workflow and reuse them in
[#4397]
* ci: parallelize ecosystem client-tools jobs with shared build
artifact in #4392
* chore(deps): bump the go-dependencies group with 12 updates in
[#4396]
* refactor(compat): consolidate repetitive media-type checks into
helpers with @Copilot in #4402
* fix(api): don't 500 on GET manifest when download-stats update
fails in #4403
* ci: consolidate shared binary install and scale-out CI helpers
in #4401
* feat(events): reload the event recorder on config change in
[#4400]
* fix(cli): reload config on Kubernetes ConfigMap updates in
[#4384]
* Wed Aug 05 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.20:
* fix(ci): pin zot release ver to v2.1.18 (#4297)
* chore: bump zui version (#4296)
* Tue Aug 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.19:
* fix(meta): don't 500 a manifest delete once metaDB signature
cleanup … (#4289)
* ci: don't double checkout in the nightly job (#4294)
* chore(deps): bump the github-actions group with 8 updates
(#4293)
* refactor: CVE models cleanup (#4287)
* fix(sync): surface the rejected media type in manifest sync
failures (#4292)
* fix: dedupe digests before DynamoDB BatchGetItem (#4280)
* test(gql): add more unit tests (#4283)
* chore(deps): bump the go-dependencies group with 12 updates
(#4282)
* test: migrate pkg/cli tests from GetFreePort to port "0"
(#4281)
* test: migrate pkg/api tests from GetFreePort to port "0"
(#4278)
* fix(events): apply default HTTP sink timeout when unset (#4277)
* feat(sync): add a Google Artifact Registry credential helper
(#4276)
* feat: restrict periodic storage GC to a configurable
gcTimeWindow (#4223)
* feat(sync): support RFC 8693 token exchange in oauth2 helper
(#4269)
* fix: mask event headers when event config is present (#4274)
* fix(sync): refresh helper credentials on every sync entry point
(#4270)
* fix(api): require update for digest multi-tag overwrites
(#4266)
* fix(gql): fix Vulnerabilities skip key (#4273)
* fix(sync): guard credential refresh under clientLock (#4272)
* fix(ci): stabilize blackbox NATS events subscriber wait (#4265)
* chore(deps): bump the github-actions group across 1 directory
with 5 updates (#4264)
* feat: send an http event when an image has been scanned (#4257)
* fix(storage): check table existence before CreateTable in
dynamodb cache (#4260)
* feat: add ztsd layer support for cve scans (#4258)
* fix(ci): stabilize blackbox GC and HTTP events tests (#4261)
* chore: fix dependabot alerts (#4253)
* chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1
(#4249)
* chore(deps): bump oras-go to v2.6.2 (#4247)
* chore(deps): bump the github-actions group with 6 updates
(#4242)
* fix(api): reject backslash in OIDC callback redirect to prevent
open redirect (#4238)
* sync: prime auth before catalog lookup (#4186)
* chore(deps): bump the go-dependencies group with 8 updates
(#4237)
* fix(meta): derive push timestamp from blob mod time on storage
parse (#4234)
* chore(deps): bump the github-actions group across 1 directory
with 2 updates (#4225)
* ci: relax dco check for dependabot alerts (#4232)
* fix(storage): skip reserved dirs in GetNextRepository walk
(#4227)
* test(sync): query zot over kind network in on-demand E2E
(#4231)
* ci(nightly): increase sync timeout (#4230)
* chore: bump zui version (#4222)
* fix(search): use index descriptor platform when config platform
is empty (#4221)
* test: migrate extensions and pkg/test from GetFreePort to port
"0" (#4220)
* fix(storage): verify manifest and config blob digests during
scrub (#4212)
* fix(sync): predict post-OCI digest for on-demand skip checks
(#4185)
* feat(sync): add oauth2 credential helper for JWT assertion
exchange #4146 (#4147)
* fix(meta): guard GetReferrersInfo against a missing referrer
entry (#4213)
* test: fix flaky server port binding in integration tests
(#4216)
* test: fix flaky test (#4218)
* ci: raise zb bench HTTP timeouts and wait for zot shutdown
(#4219)
* chore: fix dependabot alerts (#4208)
* ci: use more powerful runner to run unit tests (#4207)
* fix(zb): record benchmark errors in stats instead of aborting
with log.Fatal (#4205)
* fix(storage): defer blob deletes for cache-unknown blobs until
dedupe rebuild completes (#4195)
* fix(imagetrust): bind cosign signature verification to the
manifest digest (#4202)
* fix(meta): avoid panic on malformed cosign signature tag
(#4204)
* fix(gc): resolve subject digest for cosign .sbom tags, not only
.sig (#4203)
* fix(storage): only promote dedupe origin when the deleted blob
is the origin (boltdb) (#4201)
* chore: fix dependabot alerts (#4200)
* test(sync): stabilize file deletion in some of the tests
(#4197)
* chore: fix dependabot alerts (#4192)
* feat(retention): add untagged retention configuration (#4191)
* fix(storage): normalize repository names to '/' separators on
Windows (#4188)
* feat(oidc): support login flow for OIDC tokens (#4171)
* fix(notation): Decouple Signature trust UI processing from
scanning (#4178)
* fix(gc): break orphan cycle when manifest blobs are missing
from storage (#4180)
* chore: fix dependabot alerts (#4181)
* fix(sync): enable exponential HTTP retry backoff via
maxRetryDelay (#4175)
* feat: expose ArtifactType in ImageSummary GraphQL type (#4177)
* feat(notation): Add TSA truststore support to notation policy
(#4168)
* fix: update OCI conformance workflow and improve blob upload
handling (#4170)
* fix(api): align blob, manifest, and referrers handling with OCI
conformance (#4165)
* Sun Jun 28 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.18:
* fix: map HTTP methods to corresponding scope actions in bearer
authen… (#4161)
* ci: pull test images from ghcr mirror (#4156)
* chore: fix dependabot alerts (#4157)
* feat: add Azure Blob Storage driver (#4142)
* feat(events): include actor and request metadata in webhook
payloads (#3959)
* ci: fix conformance test to before the refactor (#4145)
* feat(cli): support default config name (#4143)
* feat: add authz support for GitHub teams (#4139)
* feat(storage): redirect blob pulls to backend URLs (#4092)
* refactor(test/blackbox): extract shared push/pull helpers
(#4132)
* fix(storage): release global write lock during blob restore I/O
(#4089)
* fix(authz): metrics: deny authenticated users not in ACL even
with anonymous read (#4131)
* feat: config: validate metrics config (#4130)
* chore: fix dependabot alerts (#4126)
* fix(storage): treat dedupe-candidate cache miss as no
candidates, not an error (#4122)
* feat(metrics): anonymous access when enabled in accessControl
config (#4110)
* metadb: add optional fast restart path that skips storage walk
when (version + commit + storage config) matches metaDB stamp
(#4026)
* ci: Update GH runner labels (#4121)
* fix: skip DynamoDB table creation when tables exist (#4120)
* feat: enhance config sanitization to mask sensitive keys in
storage a… (#4119)
* fix(cve): prefer cve.org links for AVD references (#4107)
* chore: fix dependabot alerts (#4113)
* docs: fix alongside spelling in search docs (#4095)
* fix: miscellaneous fixes for ai-reported suggestions (#4101)
* feat: add trivy-based sbom artifact generation support (#4088)
* chore: fix dependabot alerts (#4091)
* chore: fix dependabot alerts (#4082)
* Mon May 18 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.17:
* chore: bump zui version (#4074)
* chore: fix dependabot alerts (#4072)
* feat(metrics): add Prometheus GC metrics (#3863)
* fix(lint): silence deprecated gomodguard linter warning (#4070)
* chore: fix dependabot alerts (#4059)
* fix: downgrade expected missing-blob HEAD logging from error to
debug (#4056)
* chore: fix dependabot alerts (#4048)
* ci: fix golangci-lint install URL (#4052)
* ci: sync go 1.26 images to ghcr.io/project-zot/golang (#4049)
* feat(authz): introduce conditional access control via CEL
(#4040)
deprecated syntax (#4037)
* refactor(build): move build metadata to pkg/buildinfo (#4045)
validation (#4030)
* feat(api): log session/audit subject from UserAccessControl
(#4029)
* fix(auth): refine OIDC identity handling and claim-mapping logs
(#4028)
* test: refactor countingReader into partialReaderOpenTracker and
partialReaderReadCloser (#4027)
* feat(auth): map OpenID groups claim (#3999)
* feat(cosign): add support for cosign bundle (#4023)
* docs(config): reference generated config schema (#4015)
* Multipart download enhancements (#4021)
* fix(sync): apply tag filters before destination mapping (#4003)
* fix(api): support multipart range blob pulls (#3995)
* chore: fix dependabot alerts (#4020)
* fix(security): enhance timeout configurations and body size
limits fo… (#3984)
* feat(auth): support OIDC RP-Initiated Logout (#3975)
* chore: fix dependabot alerts (#3990)
* fix(api): recognize Docker Compose/Buildx User-Agent in v2
challenge workaround (#3992)
* feat(zb): Support for TTFB measurement + on-demand sync tests
(#3929)
* fix(api): return 416 for bad upload range on PUT; fix GET
upload Range at size zero (#3983)
* Mon Apr 20 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.16:
* fix(security): remove InsecureSkipVerify from metrics client
(TLS-1) (#3982)
* security: suppress Allow-Credentials on wildcard CORS origin
(CORS-1) (#3980)
* fix(security): limit API key creation body to 4 KiB (INPUT-2)
(#3978)
* fix(security): limit manifest PUT body to 4 MiB (INPUT-1)
(#3977)
* chore: fix dependabot alerts (#3971)
* fix(auth): add workaround for Docker client auth with mixed
anonymous policies (#3868)
* chore: fix dependabot alerts (#3968)
* fix: Updating a repository should not result in a corrupted
index.json file if disk is full (#3963)
* feat(api): add repository quota enforcement middleware (#3923)
* chore: fix dependabot alerts (#3964)
* fix(ci): pass GITHUB_TOKEN explicitly to oras login in
sync-trivy step (#3961)
* Pin actions and tighten workflow permissions (#3954)
* chore: fix dependabot alerts (#3953)
* ci: fix nightly test (#3948)
* chore: fix dependabot alerts (#3947)
* feat: Add TrivyConfig.VulnSeveritySources (Trivy's
- -vuln-severity-source) (#3943)
* fix: address code review comments (#3942)
* chore: fix dependabot alerts (#3940)
* build: bump zui version to commit-1c8e5ef (#3932)
* chore: fix dependabot alerts (#3931)
* test: add tests for pushing manifests with non-canonical
digests together with tags (#3920)
* chore: fix dependabot alerts (#3921)
* test(blackbox): harden zot restart + reachability checks
(#3907)
* fix(storage/gcs): fix double-prefixed rootdirectory and EOF
handling in Walk for GCS (#3903)
* feat: support pushing multiple tags for a single manifest
(#3885)
* feat(schema): add schema command to dump JSON Schema for zot
config (#3905)
* chore: pin trivy-action to safe version (#3897)
* chore: fix dependabot alerts (#3896)
* ci: use zot localstack image and consolidate on using the setup
localstack GH action (#3899)
* feat(zb): list tests, test regex filter, docs update (#3884)
* chore: fix dependabot alerts (#3880)
* fix(search): expose LastPullTimestamp and PushedBy on index
ImageSummary (#3865)
* chore: fix dependabot alerts (#3860)
* Mon Mar 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.15:
* fix: don't skip "latest" tag authz check for update (#3847)
* fix(auth): prevent open redirect via callback_ui (#3844)
* feat(sync): add SyncLegacyCosignTags config to skip syncing
legacy cosign/SBOM tags when disabled (#3842)
* chore: fix dependabot alerts (#3841)
* fix: skip OCI conversion when image is already synced #3823
* chore: fix dependabot alerts (#3820)
* chore: bump zui version (#3809)
* GCS storage support (#3798)
* chore: update zui version (#3803)
* chore: fix dependabot alerts (#3802)
* feat(tls): implement dynamic TLS certificate reloading with
file watching (#3792)
* chore: fix dependabot alerts (#3794)
* chore: update golang version to 1.25.7 (#3790)
* fix(build): upgrade zot runtime base image to distroless
debian13 (#3791)
* chore: update github.com/sigstore/cosign/v3 from 3.0.2 to 3.0.4
(#3789)
* chore: fix dependabot alerts (#3788)
* fix: correct typo var name mirroHostConfig (#3777)
* fix(imagestore): normalize paths to prevent panic on Windows
(#3775)
* fix(meta): fixes for LastUpdated and TaggedTimestamp (#3754)
* chore: fix dependabot alerts (#3774)
* feat(jwt-asm): support AWS Secrets Manager for JWT verification
(#3763)
* feat(zui): add Last Tagged timestamp to tag details view
(#3772)
* feat(jwt-exp): exp claim at the access entry level (#3761)
* ci: improvements for the Ecosystem tools job (#3762)
* feat(oidc): support per-issuer CA (#3760)
* chore: fix dependabot alerts (#3751)
* feat: add TaggedTimestamp to ImageSummary returned by graphql
API (#3731)
* fix(fips): flaky fips blackbox test and add missing curves
(#3732)
* Mon Jan 26 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.14:
* Introduce support for OIDC workload identity federation (#3711)
* ci: add a upgrade bats test (#3621)
* chore: fix dependabot alerts (#3730)
* chore: fix dependabot alerts (#3726)
* fix: graphql playground documentation was hardcoded to an
unrelated example (#3721)
* chore: remove direct usage of the github.com/aws/aws-sdk-go
package (aws sdk v1) (#3701)
* chore: fix dependabot alerts (#3707)
* fix: now attempt to bind to the zot server socket to check if
the server is running (#3703)
* fix: remove usage of deprecated function
aws.EndpointResolverWithOptionsFunc (#3700)
* fix: CVE-2025-30204 - golang-jwt DoS vulnerability via
excessive memory allocation (#3687)
* fix: pre-existing dynamodb versions table should be populated
with version if it doesn't contain it already (#3699)
* ci: fix nightly due to outdated kind (#3676)
* Fix typos in documentation (#3678)
* chore: fix dependabot alerts (#3677)
* test: fix some coverage issues, refactored some of the
pagination logic to accomplish this (#3674)
* Tue Jan 13 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.13:
* fix: do not reject requests having an Authorization header if
basic auth is disabled (#3673)
* Mon Jan 12 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.12:
* chore: fix dependabot alerts (#3660)
* fix: make sure the function and caller information are added to
log messages emitted by 3rd party libraries using slog
directly. (#3659)
* feat: add configurable mTLS identity extraction with fallback
chain (#3640)
* fix: prevent nil pointer dereference in RemoveImageFromRepoMeta
(#3658)
* chore: fix dependabot alerts (#3657)
* fix: more logging for sync extension (#3656)
* docs: fix deadlink and typo (#3641)
* refactor: enhance TLS cert generation and refactor HTTP client
architecture (#3638)
* fix: accept log levels supported by older zot versions,
validate configured log level (#3639)
* feat: support mTLS-only authn/authz with AccessControl and
allow combining mTLS with other auth mechanisms (#3624)
* chore: fix dependabot alerts (#3636)
* fix: remove misleading error messages on successful syncs
(#3619)
* ci: save unified coverage as build artifact (#3626)
* ci: split needsprivileges tests from devmode tests (#3625)
* refactor(test): new apis for creating temporary files (#3605)
* chore: Fix deps (#3620)
* fix(trivy): cleanup Trivy temporary directory (#3618)
* feat(config): validate storage root directories for path
conflicts (#3602)
* Fix error handling: return nil explicitly on successful
completion (#3603)
* fix(meta): handle cases when substores are nested (#3598)
* feat: explicitly log if each authentication method is enabled
(#3599)
* chore: Enable Go jsonv2 experiment and update the trivy
dependency (v0.67.2) (#3572)
* chore: fix dependabot alerts (#3595)
* fix(storage): enforce standard OCI blob path structure in
GetNextDigestWithBlobPaths (#3594)
* chore: sync golang 1.25 (#3596)
* fix: multiple fixes based on recent test failures (#3582)
* fix: sync should be disabled when enable is false (#3579)
* ci: use minio==7.2.18 (#3581)
* fix: handle zero time values in LastUpdated sorting functions
(#3580)
* refactor: optimize code with modern Go patterns and
pre-allocation (#3576)
* chore: update golangci-lint and fix all issues (#3575)
* fix: Add HTTP client timeouts to prevent indefinite hangs in
sync operations (#3574)
* docs: update examples with the sync config example (#3573)
* Fri Nov 21 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.11:
* fix(sync): properly handle CommitAll errors in syncImage and
skip failed temp sync dirs (#3567)
* feat: allow claim mapping for user name with oidc (#3540)
* Sync images with a background context (#3537)
* chore: fix dependabot alerts (#3566)
* fix(ui): update zui version (#3564)
* chore: update cosign from v2 to v3 (#3561)
* chore: update github.com/olekukonko/tablewriter to v1.1.1
(#3559)
* fix (metadb): make sure metadb statistics are initialized on
image download, and minor metadb fixes for Docker v2 manifest
compatibility (#3545)
* chore: fix dependabot alerts (#3555)
* fix: show relevant error messages in case of images which
cannot be scanned by Trivy (#3554)
* fix: img-src annotation changes with zui move to vite (#3539)
* Fix Dockerfiles by moving the BASE_IMAGE arg into the global
scope (#3536)
* fix: gracefully handle manifests missing from storage (prepare
for sparse indexes) (#3503)
* chore: fix dependabot alerts (#3534)
* fix: separate cipher suites and curve preferences into FIPS and
non FIPS, and use them accordingly (#3523)
* fix: deduplicate entries in referrers responses (#3524)
* fix: add support for sha256 and sha512 in htpasswd (#3497)
* fix: re-introduce pagination (#3521)
* chore: fix dependabot alerts (#3517)
* chore: fix dependabot alerts (#3514)
* fix: support custom OAuth2 URLs for GitHub Enterprise and
self-hosted providers (#3513)
* fix(log): ensure func record is correct (#3501)
* fix: close file handle before moving file in FullBlobUpload
(#3499)
* docs: update maintainers and codeowners info (#3502)
* chore: fix monitoring goroutine leak in tests (#3500)
* chore: fix dependabot alerts (#3496)
* feat: add zot subcommand to enable testing retention policy
settings (#3449)
* fix: configure cookie Secure flag based on TLS configuration
(#3482)
* refactor: remove usage of goto in the image store (#2969)
* fix: zot version broken after switching to /v2 (#3479)
* chore: stabilize coverage in specific sync test (#3480)
* chore: fix dependabot alerts (#3477)
* fix: minor fixes based on intermittent test failures (#3465)
- remove patch fix_broken_version_output_in_2.1.10.patch
* Mon Oct 20 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.10:
* fix: make config read/write thread safe (#3432)
* fix: migrate to Go module v2 for proper semantic versioning
(#3462)
- add patch fix_broken_version_output_in_2.1.10.patch to fix the
broken "--version" output
https://github.com/project-zot/zot/issues/3478
* Fri Oct 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.9:
* fix: update go-redsync for fips-140 compatibility (#3451)
* feat: the default retention delay is not the GC delay (#3447)
* feat(sessions): add support for remote redis session store
(#3345)
* chore: stabilize coverage for specific imagestore case (#3429)
* feat(sync): enable regclient logs (#3363)
* fix: migrate from github.com/rs/zerolog to golang-native
log/slog (#3405)
* fix: broken CodeQL badge (#3424)
* chore: increase/stabilize go test coverage (#3411)
* chore: update zui version (#3412)
* chore: Update to graphql 5.2.0 (#3410)
* feat: GC to cleanup untagged manifests by default (#3408)
* Tue Sep 02 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.8:
* fix: close the `syncResult` channel by any goroutine that
receives the data (#3348)
* fix: gc for untagged docker manifests (#3349)
* Fix deps (#3343)
* chore: fix dependabot alerts (#3328)
* chore: update notation version (#3316)
* chore: fix dependabot alerts (#3312)
* ci: selectively revert this runner (#3297)
* chore(ci): update github runners to oci gh arc runners (#3293)
* chore: fix dependabot alerts (#3292)
* Mon Aug 04 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.7:
* feat(freebsd): add support native freebsd container images
(#3256)
* chore: fix dependabot alerts (#3280)
* fix: return the entire blob size in patch upload response
(#3279)
* fix: close metadb on shutdown (#3277)
* Mon Jul 28 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.6:
* Read OpenID credentials from file (#3244)
* Fix building zot natively on FreeBSD (#3247)
* feat: healthz server (#3228)
* fix: GetNextRepository to use a list already scanned
repositories as input (#3230)
* chore: bump zui version (#3241)
* Wed Jun 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.5:
* chore: fix dependabot alerts (#3213)
* chore: update zui version (#3212)
* feat: add token auth support for event sink (#3197)
* chore: bump github.com/olekukonko/tablewriter from 0.0.5 to
1.0.7 (#3198)
* fix: image retention policy to handle patterns even if metadb
is not instantiated (#3200)
* Fix dependabot alerts (#3188)
* Fri Jun 06 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.4:
* Fix metrics authorization middleware bleed (#3183)
* fix: parse public key as fallback for certificate for bearer
authentication (#3180)
* chore: fix dependabot alerts (#3155)
* fix: license copyright update (#3167)
* Revert "feat(mcp): add MCP extension support with routes and
configur… (#3166)
* feat(mcp): add MCP extension support with routes and
configuration
* Fri May 23 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.1.3:
* Merge commit from fork
* fix(sync): fixed checking updates in remote tags digest (#3156)
* chore: fix dependabot alerts (#3154)
* chore: fix dependabot alerts (#3141)
* feat(events): add events extension (#3045)
* chore: fix dependabot alerts (#3127)
* chore: update conformance badge (#3114)
* chore: fix dependabot alerts (#3112)
* fix: remove unneeded double locks in redis implementation of
metadb (#3055)
* fix: get groups claim from idtokenclaims (#3101)
* feat(sync): use regclient for sync extension (#2903)
* chore: fix dependabot alerts (#3099)
* chore: fix dependabot alerts (#3084)
* ci: update golang version to be synced to gh (#3073)
* chore: fix dependabot alerts (#3072)
* chore: fix dependabot alerts (#3070)
* fix(zui): show referrers pointing to image manifests (#3053)
* feat: handle multiple attributes (#3052)
* chore: fix dependabot alerts (#3051)
* feat: build windows binaries (#3047)
* fix: bump zui version to fix minor issues with handling empty
manifest lists and missing platform information (#3044)
* chore: fix dependabot alerts (#3041)
* ci: fix failures in nightly (#3042)
* chore: Remove `VOLUME` instruction from image (#3027)
* test: do not use the clustering feature in case of redis + s3
storage
* test: add scale-out clustering tests using multiple zot servers
with with redis and S3 integration
* chore: update image and dist specs to v1.1.1 (#3023)
* chore: fix dependabot alerts (#3026)
* fix: allow changing media-type when pushing an image tag
(#3022)
* fix: show data from docker mediatypes in search results (#3019)
* chore: fix dependabot alerts (#3021)
* [feat]: add support for EC/ED25519 public keys for token
authentication (#2998)
* chore: fix dependabot alerts (#3002)
* Cumulative improvements for CI troubleshooting (#2996)
* feat(htpasswd): add autoreload for htpasswd (#2933)
* chore: fix dependabot alerts (#2991)
* chore: fix dependabot alerts (#2988)
* chore: fix dependabot alerts (#2978)
* fix: Update AWS DynamoDB permission list and correct issues in
DynamoDB examples (#2963)
* chore: fix dependabot alerts (#2961)
* More validation for DynamoDB cache driver cachetablename
(#2949)
* chore: fix dependabot alerts (#2945)
* fix: MetaDB fixes related to Docker media types (#2934)
* feat(ldap): allow to customize user filter (#2927)
* redis driver for blob cache information and metadb (#2865)
* fix(sync): fixed harbor authentication issues on '_catalog'
endpoint (#2891)
* chore: fix dependabot alerts (#2922)
* feat(sync): add tag excludeRegex filter (#2906)
* [Feat]: Support for AWS ECR Authentication with Temporary
Tokens (#2907)
* fix(dynamodb): properly handle ResourceInUseException for
existing tables (#2909)
* docs: fix ratelimit example (#2905)
* chore: fix dependabot alerts (#2904)
* Tue Feb 25 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package zot-registry: scale-out production-ready
vendor-neutral OCI-native container image/artifact registry
(purely based on OCI Distribution Specification)
/usr/share/fish/vendor_completions.d/zot.fish
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Oct 10 23:44:58 2026