This repository was archived by the owner on Apr 19, 2024. It is now read-only.
Merge upstream conflicts#11
Open
10d9e wants to merge 1263 commits into
Open
Conversation
Signed-off-by: Guillaume Pelletier <guillaume.pelletier@genaiz.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Andy Castille <me@andycc.dev>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Signed-off-by: evanebb <git@evanus.nl>
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 4. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/labeler](https://github.com/actions/labeler) from 5 to 6. - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v5...v6) --- updated-dependencies: - dependency-name: actions/labeler dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@05b42c6...4eaacf0) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 4 to 5. - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@v4...v5) --- updated-dependencies: - dependency-name: peter-evans/dockerhub-description dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* Fix incorrect (old) warning hint Signed-off-by: nkaaf <nkaaf@protonmail.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 4.30.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v3.26.5...v4.30.7) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.7 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.7 to 4.30.8. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v4.30.7...v4.30.8) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
The manifest Exists() client call issued a HEAD without any Accept headers. Some OCI-focused registries require an explicit Accept for manifest content negotiation, causing HEAD to fail (404/406) even when the manifest exists. The Get() path already sets Accept; Exists() did not. This change adds all supported manifest media types from distribution.ManifestMediaTypes() as Accept headers to the Exists() HEAD request, aligning behavior with Get() and improving OCI interoperability. Tests: - Regression: Exists() returns true when Accept is present and false when stripped (negative path), mirroring real-world behavior. Risk/compatibility: - Low. Registries that ignore Accept on HEAD continue to work. - Redirect handling is unchanged; existing CheckRedirect preserves Accept. Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
Signed-off-by: Artem Tkachuk <artemtkachuk@yahoo.com>
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.1.0 to 7.2.0. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](docker/bake-action@a66e1c8...6614cfa) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@4907a6d...650006c) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@9e0d7b8...7211b7c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@030e881...80c7e94) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: darsh <darshanravichandran07@gmail.com>
Write PutContent objects as block blobs so Azure retries overwrite small objects instead of appending duplicate link contents. Delete legacy append-blob objects before uploading because Azure cannot replace an AppendBlob with a BlockBlob in place. Preserve zero-byte append compatibility and add Azure regression coverage for link-style content, legacy migration, and concurrent same-path writes. Signed-off-by: Baptiste Girard-Carrabin <baptiste.girardcarrabin@datadoghq.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropicxxxxxx.com> Signed-off-by: luochenhui1 <luochenhui1@kingsoft.com>
The S3 driver's Walk used a bare strings.HasPrefix to decide whether a walkInfo was under the last ErrSkipDir directory. Without a trailing "/" on the parent, a sibling whose name starts with the skipped directory's name (e.g. "0.1.20" after "0.1.2") falsely matched and was skipped, so its tag dir was never emitted to handleTag and the tag was omitted from /v2/<name>/tags/list. Replace the prefix check with isSubpath, which appends "/" to the parent so only true descendants match. Add a unit test pinning the sibling-with-lexical-prefix case. The bug is S3-only because the filesystem and inmemory drivers list directories recursively via WalkFallback and don't use this skip mechanism. It surfaced in 3.1.0 when the tags handler switched from tagService.All() (driver List with delimiter) to tagService.List() (driver Walk) for pagination support. Fixes #4891 Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
Signed-off-by: alhudz <al.hudz.k@gmail.com>
The catalog.maxentries configuration option was introduced as part of the fix for CVE-2023-2253 (GHSA-hqxw-f8mx-cpmw) but was never added to the configuration documentation. Document the catalog subsection: the default limit (1000), the default page size when n is not specified (100), and the 400 PAGINATION_NUMBER_INVALID error returned when n exceeds maxentries. Also include the recommendation from the security advisory to avoid exposing the catalog endpoint to the internet. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Tokuhiro Matsuno <tokuhirom@gmail.com>
We also address deprecated package that was breaking lint Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
Signed-off-by: darshanime <darshan@argonaut.dev>
Signed-off-by: darshanime <darshan@argonaut.dev>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.