This repository was archived by the owner on Apr 19, 2024. It is now read-only.
Merge upstream conflicts - #11
Open
10d9e wants to merge 1267 commits into
Open
Conversation
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Andy Castille <me@andycc.dev>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 4. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/labeler](https://github.com/actions/labeler) from 5 to 6. - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v5...v6) --- updated-dependencies: - dependency-name: actions/labeler dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@05b42c6...4eaacf0) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 4 to 5. - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@v4...v5) --- updated-dependencies: - dependency-name: peter-evans/dockerhub-description dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* Fix incorrect (old) warning hint Signed-off-by: nkaaf <nkaaf@protonmail.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 4.30.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v3.26.5...v4.30.7) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.7 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.7 to 4.30.8. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v4.30.7...v4.30.8) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
The manifest Exists() client call issued a HEAD without any Accept headers. Some OCI-focused registries require an explicit Accept for manifest content negotiation, causing HEAD to fail (404/406) even when the manifest exists. The Get() path already sets Accept; Exists() did not. This change adds all supported manifest media types from distribution.ManifestMediaTypes() as Accept headers to the Exists() HEAD request, aligning behavior with Get() and improving OCI interoperability. Tests: - Regression: Exists() returns true when Accept is present and false when stripped (negative path), mirroring real-world behavior. Risk/compatibility: - Low. Registries that ignore Accept on HEAD continue to work. - Redirect handling is unchanged; existing CheckRedirect preserves Accept. Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
The `TestGracefulShutdown` test was failing intermittently, especially with stricter HTTP handling in newer Go versions (e.g., 1.25). This was caused by sending an incomplete HTTP request in two separate writes, creating a race condition where the server could shut down before receiving the full request. This commit fixes the test's flakiness by sending a single, complete, and valid HTTP/1.1 request before triggering the shutdown. This ensures the test accurately verifies the intended behavior: that a valid, in-flight request is fully processed while new connections are rejected. Fixes:#4696 Signed-off-by: Sumedh Vats <sumedhvats2004@gmail.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.30.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v4.30.8...v4.30.9) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@4907a6d...650006c) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@9e0d7b8...7211b7c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@030e881...80c7e94) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: darsh <darshanravichandran07@gmail.com>
Write PutContent objects as block blobs so Azure retries overwrite small objects instead of appending duplicate link contents. Delete legacy append-blob objects before uploading because Azure cannot replace an AppendBlob with a BlockBlob in place. Preserve zero-byte append compatibility and add Azure regression coverage for link-style content, legacy migration, and concurrent same-path writes. Signed-off-by: Baptiste Girard-Carrabin <baptiste.girardcarrabin@datadoghq.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropicxxxxxx.com> Signed-off-by: luochenhui1 <luochenhui1@kingsoft.com>
The S3 driver's Walk used a bare strings.HasPrefix to decide whether a walkInfo was under the last ErrSkipDir directory. Without a trailing "/" on the parent, a sibling whose name starts with the skipped directory's name (e.g. "0.1.20" after "0.1.2") falsely matched and was skipped, so its tag dir was never emitted to handleTag and the tag was omitted from /v2/<name>/tags/list. Replace the prefix check with isSubpath, which appends "/" to the parent so only true descendants match. Add a unit test pinning the sibling-with-lexical-prefix case. The bug is S3-only because the filesystem and inmemory drivers list directories recursively via WalkFallback and don't use this skip mechanism. It surfaced in 3.1.0 when the tags handler switched from tagService.All() (driver List with delimiter) to tagService.List() (driver Walk) for pagination support. Fixes #4891 Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
Signed-off-by: alhudz <al.hudz.k@gmail.com>
Reported in #4903: with the S3 driver, paging /v2/_catalog silently skips a repository whose name is a prefix of another's. The S3 Walk lists keys in byte order (where '/' is 0x2F), but the catalog filter in handleRepository compared the page cursor with lessPath, which sorts '/' first. For a prefix pair like ".../math" / ".../math-voila" (next byte '-' is 0x2D, below '/') the orders disagree, so a page ending on the longer name drops the shorter one on every later page. The driver already positions the walk after `last` via the start-after hint, so the extra lessPath check is what breaks pagination. Drop it and only de-duplicate the boundary repo. Each driver then stays self-consistent: byte order for S3, component-wise for the filesystem/inmemory WalkFallback. S3-only (WalkFallback trims the hint per level). Regressed in 3.0.0 (cf81f67, e22f7cb); 2.8.x is fine. Adds a regression test replaying the S3 byte-order Walk that fails before and passes after. Fixes #4903 Signed-off-by: Dustin Kaiser <8209087+mrnicegyu11@users.noreply.github.com>
The catalog.maxentries configuration option was introduced as part of the fix for CVE-2023-2253 (GHSA-hqxw-f8mx-cpmw) but was never added to the configuration documentation. Document the catalog subsection: the default limit (1000), the default page size when n is not specified (100), and the 400 PAGINATION_NUMBER_INVALID error returned when n exceeds maxentries. Also include the recommendation from the security advisory to avoid exposing the catalog endpoint to the internet. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Tokuhiro Matsuno <tokuhirom@gmail.com>
We also address deprecated package that was breaking lint Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
Signed-off-by: darshanime <darshan@argonaut.dev>
Signed-off-by: darshanime <darshan@argonaut.dev>
Bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `google.golang.org/grpc` from 1.80.0 to 1.82.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.82.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.82.1 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
… go_modules group across 1 directory (#4922)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.