v2.0.0-rc7

What's Changed

• chore: fix dependabot alerts by @rchincha in #1649
• feat: signal handling by @peusebiu in #1651
• feat(test): Simplify tests by @laurentiuNiculae in #1583
• fix(authn): session authn is skipped when anonymous policy is configured by @peusebiu in #1647
• test(upload): update the new signature of the upload image function by @laurentiuNiculae in #1655
• fix(auth): fix anonymous auth for ui by @andaaron in #1662
• feat(ui): update ui to support cve filtering by platform by @andaaron in #1661
• fix: freebsd build support by @dfr in #1659
• Refactor metadb sorting pagination by @laurentiuNiculae in #1637
• ci: add freebsd target for releases by @rchincha in #1660
• refactor(extensions)!: refactor the extensions URLs and errors by @andaaron in #1636
• fix: Build scripts broken on Mac by @adodon2go in #1668
• ci(conformance): revert to upstream OCI checks by @rchincha in #1678
• fix(convert): now returned annotations for an index will fallback to … by @laurentiuNiculae in #1667
• fix: remove inline GC and schedule a background task instead by @Andreea-Lupu in #1610
• test(annotations): print logs for annotations bats tests by @laurentiuNiculae in #1680
• fix(authn): handle the case where zot with openid runs behind a proxy by @peusebiu in #1675
• chore(go.mod): fix dependabot alerts by @rchincha in #1684
• fix: binary-stacker Makefile target is broken by @adodon2go in #1689
• docs: fix apikey case by @babs in #1693
• chore: fix dependabot alerts by @rchincha in #1702
• fix: swagger Makefile target broken on darwin by @adodon2go in #1701
• test(refactor): refactor tests that use zot-test to use smaller images by @laurentiuNiculae in #1690
• feat: automated detection of OS and ARCH if unset by @adodon2go in #1711
• refactor: move /pkg/meta/signatures under /pkg/extensions/imagetrust by @Andreea-Lupu in #1712
• chore: fix dependabot alerts by @rchincha in #1720
• fix(ci/cd): detect uncommited swagger docs by @adodon2go in #1724
• fix(parse): lock storage while reading using image store by @laurentiuNiculae in #1719
• feat: propagate detailed error msgs to client (OCI dist-spec format) by @adodon2go in #1681
• feat(authn): add generic oidc and allow customizable name by @babs in #1691
• feat(mgmt): mgmt extention no longer depends on UI being enabled by @andaaron in #1728
• feat(apikey): added route to list user api keys by @peusebiu in #1708
• refactor(log): replace default logger with config complient log in ro… by @laurentiuNiculae in #1734
• feat(ui): update to latest zui version by @andaaron in #1735
• chore: fix dependabot alerts by @rchincha in #1737
• fix(examples): revert examples/config-minimal.json by @peusebiu in #1740
• refactor(cli): added equivalent subcommands for each flag combination under every command by @laurentiuNiculae in #1674
• fix: bats test refactoring by @adodon2go in #1731
• chore(go.mod): upgrade 3rd party packages by @andaaron in #1742
• fix: nightly build by @adodon2go in #1745
• test(bats): added bats example for deleting an image by @laurentiuNiculae in #1718
• refactor(storage): refactor storage into a single ImageStore by @peusebiu in #1656
• refactor(authz): use a struct for user access control info operations by @peusebiu in #1682
• fix: add manifest validation checks by @rchincha in #1747
• fix(gc): gc removes unknown manifests by @peusebiu in #1762
• feat(scheduler): pass the shutdown/reload context to running tasks by @peusebiu in #1671
• chore: fix dependabot alerts by @rchincha in #1763
• refactor: Reduce binary size of zot-minimal; Added CI check for binar… by @adodon2go in #1758
• refactor(makefile): consolidate the make targets used for bats tests by @andaaron in #1746
• feat: upload cosign public key and notation certificates to cloud by @Andreea-Lupu in #1744
• fix: DATA RACE in TestNewExporter by @adodon2go in #1766
• refactor(cli): remove old cli commands by @laurentiuNiculae in #1756
• fix(api): Fix 'last' query param for /tags/list to work without param 'n' by @andaaron in #1777
• chore: fix dependabot alerts by @rchincha in #1774
• fix: add retry logic to recreate existing trustpolicy secret by @Andreea-Lupu in #1776
• chore(dependabot): increase the limit of dependabot PRs by @andaaron in #1788
• chore: fix dependabot alerts by @rchincha in #1797
• fix: do not recreate trustpolicy secret if the content doesn't change by @Andreea-Lupu in #1800
• bug: can't build zot with empty EXTENSIONS by @adodon2go in #1803
• refactor: Reduce zb binary size by @adodon2go in #1783
• fix: change log msg for updating signatures validity by @Andreea-Lupu in #1804
• fix(sync): ping func should not try to read response body by @peusebiu in #1757
• fix(config): fix config reloader panic by @peusebiu in #1806
• fix(convert): fix the update rule of download count for images by @laurentiuNiculae in #1802
• feat(cli): add cli sort flag to subcommands by @laurentiuNiculae in #1768
• refactor: Review metrics endpoints by @adodon2go in #1770
• refactor(test): move image utils for tests in a separate module by @laurentiuNiculae in #1789
• refactor: Reduce zli binary size by @adodon2go in #1805
• fix(cve): cumulative fixes and improvements for CVE scanning logic by @andaaron in #1810
• chore: fix dependabot alerts by @rchincha in #1827
• feat(pprof): add profiling route handler to debug runtime by @andaaron in #1818
• fix(ci): print zot log on failure by @peusebiu in #1799
• test(cosign): add a oci dist-spec 1.1.0 conformant test case by @rchincha in #1835
• refactor(cli): Move cmdflags package under pkg/cli/client by @adodon2go in #1840
• feat(cve): implement CVE scanning as background tasks by @andaaron in #1833
• fix(gc): update repodb when gc'ing manifests by @peusebiu in #1819
• fix(tests): call ImageStore constructor with correct parameters by @andaaron in #1846
• chore: fix dependabot alerts by @rchincha in #1855
• ci: add a "nightly jobs" badge by @rchincha in #1858
• Add cross-compile to dockerfile by @sagikazarmark in #1816
• refactor(scrub): replace umoci logic in scrub implementation by @Andreea-Lupu in #1845
• fix(dedupe): run dedupe only for repositories found at startup by @peusebiu in #1844
• refactor(pkg/test): split logic in pkg/test/common.go into multiple packages by @andaaron in #1861
• fix: reduce test run time by @adodon2go in #1832
• ci(localstack): pin localstack python package to 2.2.0 and pull container image from ghcr by @andaaron in #1867
• ci: update localstack to 2.3.1 by @rchincha in #1869
• fix: errors returned by zot should match the dist-spec errors by @adodon2go in #1868
• fix(nightly): create bucket for s3 testing with localstack by @peusebiu in #1872
• fix: metrics endpoint must be secured behind authN by @adodon2go in #1864
• refactor(tests): Migrate some of the older tests to the new image-utils library by @andaaron in #1863
• refactor(test): make sure cli tests are not internal unless they need to be by @andaaron in #1878
• build: fix container image targets by @rchincha in #1856
• chore: fix dependabot alerts by @rchincha in #1885
• docs: add logging guidelines by @rchincha in #1884
• chore: fix dependabot alerts by @rchincha in #1893
• fix: running tests locally fails by @adodon2go in #1879
• chore: fix dependabot alerts by @rchincha in #1911
• chore(modules): update trivy to the tip of main by @andaaron in #1901
• ci(licenses): check if licenses file is updated by @adodon2go in #1898
• fix(cache): make dynamoDB aware of orignal/deduped blobs by @peusebiu in #1881
• chore: fix dependabot alerts by @rchincha in #1915
• fix(sync): fix data race when pinging registries by read-locking by @peusebiu in #1924
• feat(ui): update UI version by @rchincha in #1926
• fix(authn): apply fail delay only if credentials/sessions are supplied by @peusebiu in #1920
• fix(authn): create sessions only if UI header value is supplied by @peusebiu in #1919
• fix(nightly): increase nightly delays and timeouts by @peusebiu in #1877
• fix(meta): add support for uploaded index when signing using notation by @Andreea-Lupu in #1882
• fix: quick metrics setup in kind with prometheus by @adodon2go in #1897
• chore: fix dependabot alerts by @rchincha in #1942
• fix(sessions): periodically cleanup expired sessions by @peusebiu in #1939
• fix(tests): update imagetrust tests to use mock service by @Andreea-Lupu in #1929
• fix: metrics should be protected behind authZ by @adodon2go in #1895
• feat: use the "zot" namespace for the authentication urls by @andaaron in #1947
• ci: update golangci-lint version by @rchincha in #1834
• feat(api): repair corrupted blobs when pushed again by @peusebiu in #1927
• ci: use runners provided by CNCF by @rchincha in #1946
• chore: fix dependabot alerts by @rchincha in #1961
• fix: tests refactoring by @adodon2go in #1950
• fix: ci 'TLS check' job is broken by @adodon2go in #1970
• fix: Makefile 'run' target should not depend on running tests by @adodon2go in #1969
• refactor(metadb): change backend serialization to protobuf by @laurentiuNiculae in #1842
• chore: fix dependabot alerts by @rchincha in #1986
• fix: more accurate storage metrics after zot restart by @adodon2go in #1972
• feat(retention): added image retention policies by @peusebiu in #1866
• fix(metadb): fix unexpected panic when dereferencing map fields by @laurentiuNiculae in #1993
• feat: add support for oci1.1 cosign signatures by @Andreea-Lupu in #1963
• fix: handle pathnotfound for walk call by @elee1766 in #2006
• fix(routes): fix cors headers for api keys and logout route by @peusebiu in #1984
• test(meta): add push-pull-read tests for metadb by @laurentiuNiculae in #2022
• fix(coverage): add coverage for boltdb and dynamo by @laurentiuNiculae in #2018
• chore: fix dependabot alerts by @rchincha in #2019
• fix: update-licenses make target does not use LC_ALL=C locale on some… by @adodon2go in #2023
• fix(metadb): populate image pushTimestamp if it's 0 value by @peusebiu in #2003
• chore: fix dependabot alerts by @rchincha in #2028
• build(zui): add new makefile variables for the zui repo by @andaaron in #2030
• docs: update graphql examples to match current implementation by @andaaron in #2038
• docs: update example documentation to use the current authz structure by @andaaron in #2039
• feat(ldap): add option to load ldap from file by @laurentiuNiculae in #1778
• fix: TestPopulateStorageMetrics fails occasionally in CI by @adodon2go in #2042
• chore: fix dependabot alerts by @rchincha in #2040
• ci(nightly): add prometheus kind test by @adodon2go in #1940
• build(workflows): make sure we install the crio package matching the correct ubuntu version by @andaaron in #2048
• ci: resource tuning for faster runs by @adodon2go in #1967
• fix(nightly): fix docker images build 'no space left on device' by @peusebiu in #2051
• fix(config): better configuration errors using viper.UnmarshalExact() by @peusebiu in #2050
• feat(startup): update logic for metadb update on startup, skip unmodi… by @laurentiuNiculae in #2024
• fix(metrics): one-time tasks should not be starved by @rchincha in #2053

New Contributors

• @dfr made their first contribution in #1659
• @babs made their first contribution in #1693
• @sagikazarmark made their first contribution in #1816
• @elee1766 made their first contribution in #2006

Full Changelog: v2.0.0-rc6...v2.0.0-rc7