Marco 0eafaeb043 fix(api): recognize Docker Compose/Buildx User-Agent in v2 challenge workaround (#3992) ...

Docker Compose and Buildx proxy through the Docker daemon, which sends
a User-Agent starting with "docker/<version>" rather than the
"Docker-Client/<version>" string sent by direct Docker CLI pulls.
This caused compose/buildx pulls to skip the 401 challenge on
registries with mixed anonymous/authenticated access policies,
resulting in 'unauthorized' errors.

Add strings.HasPrefix(ua, "docker/") alongside the existing
Docker-Client check so daemon-proxied requests from any upstream
tool (compose, buildx, etc.) are handled correctly.

Fixes #3991

2026-04-25 08:58:22 +03:00

..

api

fix(api): recognize Docker Compose/Buildx User-Agent in v2 challenge workaround (#3992)

2026-04-25 08:58:22 +03:00

cel

Introduce support for OIDC workload identity federation (#3711)

2026-01-24 21:03:53 -08:00

cli

feat: Add TrivyConfig.VulnSeveritySources (Trivy's --vuln-severity-source) (#3943)

2026-04-08 09:39:26 +03:00

cluster

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

common

security: suppress Allow-Credentials on wildcard CORS origin (CORS-1) (#3980)

2026-04-18 21:14:52 +03:00

compat

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

compliance

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

debug

fix: graphql playground documentation was hardcoded to an unrelated example (#3721)

2026-01-21 09:28:49 +02:00

exporter

fix(security): remove InsecureSkipVerify from metrics client (TLS-1) (#3982)

2026-04-19 08:57:24 +03:00

extensions

fix(security): remove InsecureSkipVerify from metrics client (TLS-1) (#3982)

2026-04-19 08:57:24 +03:00

log

fix: make sure the function and caller information are added to log messages emitted by 3rd party libraries using slog directly. (#3659)

2025-12-19 07:32:13 +02:00

meta

feat(api): add repository quota enforcement middleware (#3923)

2026-04-13 23:18:34 +03:00

regexp

feat: support pushing multiple tags for a single manifest (#3885)

2026-03-29 21:13:24 +03:00

requestcontext

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

retention

fix: prevent nil pointer dereference in RemoveImageFromRepoMeta (#3658)

2025-12-17 11:44:51 +02:00

scheduler

refactor(test): new apis for creating temporary files (#3605)

2025-12-05 09:54:38 +02:00

storage

fix: Updating a repository should not result in a corrupted index.json file if disk is full (#3963)

2026-04-14 08:59:25 +03:00

test

feat(api): add repository quota enforcement middleware (#3923)

2026-04-13 23:18:34 +03:00