0d0eae502e
chore: fix dependabot alerts ( #2499 )
...
https://github.com/project-zot/zot/pull/2489
https://github.com/project-zot/zot/pull/2490
https://github.com/project-zot/zot/pull/2491
https://github.com/project-zot/zot/pull/2492
https://github.com/project-zot/zot/pull/2493
https://github.com/project-zot/zot/pull/2494
https://github.com/project-zot/zot/pull/2495
https://github.com/project-zot/zot/pull/2496
https://github.com/project-zot/zot/pull/2497
https://github.com/project-zot/zot/pull/2498
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-06-25 13:17:27 -07:00
fb2edcc269
chore: fix dependabot alerts ( #2486 )
...
https://github.com/project-zot/zot/pull/2475
https://github.com/project-zot/zot/pull/2477
https://github.com/project-zot/zot/pull/2478
https://github.com/project-zot/zot/pull/2479
https://github.com/project-zot/zot/pull/2480
https://github.com/project-zot/zot/pull/2481
https://github.com/project-zot/zot/pull/2482
https://github.com/project-zot/zot/pull/2483
https://github.com/project-zot/zot/pull/2484
https://github.com/project-zot/zot/pull/2485
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-06-17 20:31:01 +03:00
a460e7f441
chore: fix dependabot alerts ( #2474 )
2024-06-15 07:14:44 +03:00
56f41dcc15
chore: fix dependabot alerts ( #2471 )
2024-06-14 07:09:59 +03:00
f5fef2384a
chore: fix dependabot alerts ( #2462 )
...
* chore: fix dependabot alerts
https://github.com/project-zot/zot/pull/2451
https://github.com/project-zot/zot/pull/2452
https://github.com/project-zot/zot/pull/2453
https://github.com/project-zot/zot/pull/2454
https://github.com/project-zot/zot/pull/2455
https://github.com/project-zot/zot/pull/2456
https://github.com/project-zot/zot/pull/2457
https://github.com/project-zot/zot/pull/2458
https://github.com/project-zot/zot/pull/2459
https://github.com/project-zot/zot/pull/2460
https://github.com/project-zot/zot/pull/2461
https://github.com/project-zot/zot/pull/2463
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* chore: mockoidc has moved to github.com/go-jose/go-jose/v3
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* chore: quiet aws/s3 golang api deprecations
These need to be addressed in a separate PR.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-06-12 22:51:32 -07:00
1594852428
chore: fix dependabot alerts ( #2446 )
...
* chore: fix dependabot alerts
https://github.com/project-zot/zot/pull/2435
https://github.com/project-zot/zot/pull/2436
https://github.com/project-zot/zot/pull/2437
https://github.com/project-zot/zot/pull/2438
https://github.com/project-zot/zot/pull/2439
https://github.com/project-zot/zot/pull/2440
https://github.com/project-zot/zot/pull/2441
https://github.com/project-zot/zot/pull/2442
https://github.com/project-zot/zot/pull/2443
https://github.com/project-zot/zot/pull/2444
https://github.com/project-zot/zot/pull/2445
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* fix(zli): _schema query in zli code should not use empty parens
Fix also some tests
See https://github.com/vektah/gqlparser/issues/292 and https://github.com/vektah/gqlparser/pull/293
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
Co-authored-by: Andrei Aaron <aaaron@luxoft.com >
2024-06-04 13:54:30 +03:00
2bb46b0562
chore: fix dependabot alerts ( #2431 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-05-27 14:37:27 -07:00
5ae7a028d9
feat(cluster): Add support for request proxying for scale out ( #2385 )
...
* feat(cluster): initial commit for scale-out cluster
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* feat(cluster): support shared storage scale out
This change introduces support for shared storage backed
zot cluster scale out.
New feature
Multiple stateless zot instances can run using the same shared
storage backend where each instance looks at a specific set
of repositories based on a siphash of the repository name to improve
scale as the load is distributed across multiple instances.
For a given config, there will only be one instance that can perform
dist-spec read/write on a given repository.
What's changed?
- introduced a transparent request proxy for dist-spec endpoints based on
siphash of repository name.
- new config for scale out cluster that specifies list of
cluster members.
Signed-off-by: Vishwas Rajashekar <vrajashe@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Vishwas Rajashekar <vrajashe@cisco.com >
Co-authored-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-05-20 09:05:21 -07:00
4671e412fc
chore: fix dependabot alerts ( #2411 )
...
GHSA-jw44-4f3j-q396
https://github.com/project-zot/zot/pull/2406
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-04-30 11:10:38 +03:00
7b1fc0450e
chore: fix dependabot alerts ( #2399 )
...
https://github.com/project-zot/zot/pull/2395
https://github.com/project-zot/zot/pull/2395
https://github.com/project-zot/zot/pull/2396
https://github.com/project-zot/zot/pull/2397
https://github.com/project-zot/zot/pull/2401
https://github.com/project-zot/zot/pull/2402
https://github.com/project-zot/zot/pull/2403
https://github.com/project-zot/zot/pull/2404
https://github.com/project-zot/zot/pull/2405
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-04-22 12:52:46 -07:00
6898b31842
chore: fix dependabot alerts ( #2393 )
2024-04-19 07:58:25 +03:00
6b3c160176
chore: fix dependabot alerts ( #2377 )
...
https://github.com/project-zot/zot/pull/2368
https://github.com/project-zot/zot/pull/2369
https://github.com/project-zot/zot/pull/2370
https://github.com/project-zot/zot/pull/2371
https://github.com/project-zot/zot/pull/2372
https://github.com/project-zot/zot/pull/2373
https://github.com/project-zot/zot/pull/2374
https://github.com/project-zot/zot/pull/2375
https://github.com/project-zot/zot/pull/2376
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-04-09 10:40:16 +03:00
6f8c058dc6
chore: fix dependabot alerts ( #2366 )
...
https://github.com/project-zot/zot/pull/2355
https://github.com/project-zot/zot/pull/2356
https://github.com/project-zot/zot/pull/2357
https://github.com/project-zot/zot/pull/2358
https://github.com/project-zot/zot/pull/2359
https://github.com/project-zot/zot/pull/2360
https://github.com/project-zot/zot/pull/2361
https://github.com/project-zot/zot/pull/2362
https://github.com/project-zot/zot/pull/2363
https://github.com/project-zot/zot/pull/2364
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-04-03 09:57:05 +03:00
819994cca1
chore: fix dependabot alerts ( #2352 )
...
https://github.com/project-zot/zot/pull/2343
https://github.com/project-zot/zot/pull/2349
https://github.com/project-zot/zot/pull/2350
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-03-26 11:33:25 -07:00
5639dfb2a9
chore: fix dependabot alerts ( #2348 )
2024-03-26 06:48:22 +02:00
375c35c5a1
chore: update to go 1.22 ( #2330 )
...
* chore: update to go 1.22
Only go toolchain version is updated.
We compile with go 1.22, but we allow others to compile using language version 1.21 if they wish to.
If we also updated the go version in go.mod everyone would be forced to update, as that is enforced as a minimum allowed version.
This comment explains the difference well enough https://news.ycombinator.com/item?id=36455759
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
* chore: fix freeBSD AMD64 build
Looks like they made some cleanup in the logic allowing buildmode pie on various platforms.
Related to https://github.com/golang/go/issues/31544
See the code at: https://cs.opensource.google/go/go/+/master:src/internal/platform/supported.go;l=222-231;drc=d7fcb5cf80953f1d63246f1ae9defa60c5ce2d76;bpv=1;bpt=0
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
---------
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-03-20 11:53:11 -07:00
28e9aabecf
chore: fix dependabot alerts ( #2331 )
...
https://github.com/project-zot/zot/pull/2324
https://github.com/project-zot/zot/pull/2325
https://github.com/project-zot/zot/pull/2326
https://github.com/project-zot/zot/pull/2327
https://github.com/project-zot/zot/pull/2328
https://github.com/project-zot/zot/pull/2329
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-03-20 07:37:29 +02:00
413514c0d4
chore: fix dependabot alerts ( #2317 )
2024-03-12 08:03:29 +02:00
2dd1fc9316
chore: fix dependabot alerts ( #2302 )
...
https://github.com/project-zot/zot/pull/2297
https://github.com/project-zot/zot/pull/2298
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-03-07 21:20:35 +02:00
18235ca254
fix(oras)!: remove ORAS artifact references support ( #2294 )
...
* fix(oras)!: remove ORAS artifact references support
ORAS artifacts/references predated OCI dist-spec 1.1.0 which now has the
same functionality and likely to see wider adoption.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* test: update to released official images
So that they are unlikely to be deleted.
*-rc images may be cleaned up over time.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-03-06 12:16:42 -08:00
752b9e87c1
chore: fix dependabort alerts ( #2295 )
...
https://github.com/project-zot/zot/pull/2287
https://github.com/project-zot/zot/pull/2288
https://github.com/project-zot/zot/pull/2289
https://github.com/project-zot/zot/pull/2290
https://github.com/project-zot/zot/pull/2291
https://github.com/project-zot/zot/pull/2292
https://github.com/project-zot/zot/pull/2293
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-03-04 21:30:27 +02:00
d00f5282fa
chore: fix dependabot alerts ( #2283 )
...
https://github.com/project-zot/zot/pull/2270
https://github.com/project-zot/zot/pull/2271
https://github.com/project-zot/zot/pull/2274
https://github.com/project-zot/zot/pull/2275
https://github.com/project-zot/zot/pull/2276
https://github.com/project-zot/zot/pull/2277
https://github.com/project-zot/zot/pull/2278
https://github.com/project-zot/zot/pull/2279
https://github.com/project-zot/zot/pull/2280
https://github.com/project-zot/zot/pull/2281
https://github.com/project-zot/zot/pull/2282
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-02-28 00:45:00 +02:00
565eca2609
chore: fix dependabot alerts ( #2268 )
...
https://github.com/project-zot/zot/pull/2258
https://github.com/project-zot/zot/pull/2259
https://github.com/project-zot/zot/pull/2260
https://github.com/project-zot/zot/pull/2261
https://github.com/project-zot/zot/pull/2262
https://github.com/project-zot/zot/pull/2263
https://github.com/project-zot/zot/pull/2264
https://github.com/project-zot/zot/pull/2265
https://github.com/project-zot/zot/pull/2266
https://github.com/project-zot/zot/pull/2267
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-02-20 21:51:40 +02:00
4e5db84cb1
chore: update image-spec and dist spec to 1.1.0 ( #2255 )
...
BREAKING CHANGE: the dist spec version in the config files needs to be bumped to 1.1.0
in order for the config verification to pass without warnings.
Also fix 1 dependabot alert for helm.
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-02-20 13:27:21 +02:00
ec38d39c06
chore(go.mod): fix dependabot alerts ( #2247 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-02-14 09:12:57 -08:00
60dc8569ec
build(go): switch to go 1.21 ( #2049 )
...
Also update to the latest swaggo version, as the previous one did not work with go 1.21
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-02-07 10:54:28 -08:00
e3065f6a2c
chore(deps): fix dependabot alerts ( #2232 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-02-05 09:56:38 -08:00
ce4924f841
refactor: rename go module from zotregistry.io/zot to zotregistry.dev/zot ( #2187 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2024-01-31 20:34:07 -08:00
580df421bf
chore: fix dependabot alerts ( #2208 )
...
https://github.com/project-zot/zot/pull/2192
https://github.com/project-zot/zot/pull/2193
https://github.com/project-zot/zot/pull/2194
https://github.com/project-zot/zot/pull/2195
https://github.com/project-zot/zot/pull/2196
https://github.com/project-zot/zot/pull/2197
https://github.com/project-zot/zot/pull/2198
https://github.com/project-zot/zot/pull/2199
https://github.com/project-zot/zot/pull/2200
https://github.com/project-zot/zot/pull/2201
https://github.com/project-zot/zot/pull/2202
https://github.com/project-zot/zot/pull/2203
https://github.com/project-zot/zot/pull/2204
https://github.com/project-zot/zot/pull/2205
https://github.com/project-zot/zot/pull/2206
https://github.com/project-zot/zot/pull/2207
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-01-29 15:30:41 -08:00
9def35f3b8
chore: update go.mod to fix dependabot alerts ( #2181 )
...
https://github.com/project-zot/zot/pull/2178
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-01-25 14:40:26 -08:00
ee9bbb0bf2
feat(log): print traceback when panics occur ( #2166 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2024-01-16 09:08:14 -08:00
d617c41cb7
chore: fix dependabot alerts ( #2160 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2024-01-10 15:56:32 -08:00
c2196e3ae1
Fix deps ( #2139 )
...
* chore: fix dependabot alerts
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* fix: update ui version
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-12-16 10:05:25 +02:00
44dfa8a210
chore: fix dependabot alerts ( #2133 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-12-12 12:44:28 +02:00
8bac653dd2
chore: fix dependabot alerts ( #2113 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-12-04 11:28:01 -08:00
c62ca62141
chore: fix dependabot alerts ( #2097 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-30 11:46:14 -08:00
90d27ff2ac
feat(cve): expand search domain to cve description and package info ( #2086 )
...
* feat(cve): add reference url for cve
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
* feat(cve): expand search domain to cve description and package info
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
---------
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-11-29 20:59:00 +02:00
c7bd2a67b4
chore: fix dependabot alerts ( #2066 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-20 14:55:04 -08:00
06e7b0b579
chore: fix dependabot alerts ( #2040 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-15 16:02:32 +02:00
8609900406
chore: fix dependabot alerts ( #2028 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-13 10:48:20 +02:00
3ddfd655ea
chore: fix dependabot alerts ( #2019 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-09 09:30:16 -08:00
3e6053e1db
chore: fix dependabot alerts ( #1986 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-30 14:47:11 -07:00
56ad9e6707
refactor(metadb): improve UX by speeding up metadb serialize/deserialize ( #1842 )
...
Use protocol buffers and update the metadb interface to better suit our search needs
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
Co-authored-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-30 13:06:04 -07:00
a3d8202345
chore: fix dependabot alerts ( #1961 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-24 12:17:59 +03:00
a44ca578a1
fix(tests): update imagetrust tests to use mock service ( #1929 )
...
- use secretsManagerMock and secretsManagerCacheMock to avoid failing
because of "already exists" error when running multiple times
image_trust_test on the same localstack instance
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-10-18 13:25:29 +03:00
d60786c3b2
chore: fix dependabot alerts ( #1942 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-16 15:19:26 -07:00
556c0660bd
chore: fix dependabot alerts ( #1915 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-11 14:29:59 +03:00
ee25985c3e
chore(modules): update trivy to the tip of main ( #1901 )
...
Includes https://github.com/aquasecurity/trivy/commit/ce89d083453f2293d8176c2ac9f4efa0fdf68095
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-10-09 15:12:25 -07:00
ed775914df
chore: fix dependabot alerts ( #1911 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-09 11:35:42 -07:00
e6902b937f
chore: fix dependabot alerts ( #1893 )
2023-10-05 09:26:20 +03:00
Ramkumar Chinchani