mirrors/distribution
0
0 Fork 0
mirror of https://github.com/distribution/distribution.git synced 2026-10-28 10:15:27 +08:00
Code Activity
6,007 Commits 26 Branches 66 Tags
89b235700948342f2d051323e62228df8b5d8d8f
Commit Graph
6007 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
yusheng.wang 89b2357009 Include filesystem rootdirectory in PathNotFound errors 
PathNotFoundError previously printed a storage-driver-relative path that callers treated as an absolute OS path. Include the filesystem driver's rootdirectory in the error message so the configured storage root is visible. Fixes #1793.

Signed-off-by: yusheng.wang <yusheng.wang@chaitin.com>
 2026-10-10 04:25:53 +08:00
Milos Gajdos bbf0a189dc build(deps): bump the codeql-actions group across 1 directory with 4 updates (#4994) 2026-10-07 21:36:25 -07:00
dependabot[bot] 9992df89b9 build(deps): bump the codeql-actions group across 1 directory with 4 updates 
Bumps the codeql-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/autobuild` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-08 01:16:55 +00:00
Milos Gajdos fd9609dd58 Fix inmemory driver find traversing too deep into directory nodes (#4996) 2026-10-07 07:48:39 -07:00
Tianon Gravi 2ff9628d81 Add a regression test for inmemory race 
Signed-off-by: Tianon Gravi <admwiggin@gmail.com>
 2026-10-06 16:48:20 -07:00
Milos Gajdos 8ceb7bbf72 build: reduce binary size via improved dead‑code elimination (#4997) 2026-10-04 18:05:48 -07:00
ningmingxiao f3556cdabf build: reduce binary size via improved dead‑code elimination 
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
 2026-10-05 08:48:30 +08:00
Tianon Gravi f9e83ae0b7 Fix inmemory driver find traversing too deep into directory nodes 
When the final path component resolves to a directory, `q = q[i+1:]` with `i == -1` leaves `q` unchanged and recurses into the child -- going one level deeper than intended.  That is normally harmless, because the repeated lookup finds nothing and returns the directory it is already in, but it returns the wrong node when that directory has a child with the same name.

Guard with `i >= 0` so the found directory is returned directly.

Fixes an intermittent flake (~3-7% of runs) in `TestDeleteOnlyDeletesSubpaths`, which constructs `dirname/dirname` to deliberately trigger the ambiguous case.

Assisted-By: "claude my eyes right out"
Signed-off-by: Tianon Gravi <admwiggin@gmail.com>
 2026-10-02 14:54:29 -07:00
Milos Gajdos f01dfc400e docs: fix "offical" typo in Azure storage documentation (#4992) 2026-10-01 08:09:54 -07:00
Frank Yu 7a667cb13b docs: restore generated API error-code anchor 
Signed-off-by: Frank Yu <1729065730@qq.com>
 2026-10-01 04:14:05 -07:00
Milos Gajdos 1d71a5c78e build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#4991) 2026-09-30 07:37:06 -07:00
yuwk d585764950 docs: fix "offical" typo and stale Errors anchor 
Signed-off-by: yuwk <1729065730@qq.com>
 2026-09-30 13:58:35 +08:00
dependabot[bot] 3cf5242fb6 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 01:16:55 +00:00
Milos Gajdos e0904092e2 build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#4990) 2026-09-29 07:25:03 -07:00
dependabot[bot] de6e36b066 build(deps): bump actions/checkout from 6.0.2 to 7.0.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-29 01:18:25 +00:00
Milos Gajdos 905f26de4b build(deps): bump the codeql-actions group across 1 directory with 4 updates (#4984) 2026-09-28 06:46:07 -07:00
João Pereira f68cd9cf7e wire validateManifestList into manifest list unmarshal (#4893) 2026-09-28 11:31:36 +01:00
dependabot[bot] 9c8ed05ae0 build(deps): bump the codeql-actions group across 1 directory with 4 updates 
Bumps the codeql-actions group with 4 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/autobuild` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

Updates `github/codeql-action/upload-sarif` from 4.38.0 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-28 01:16:29 +00:00
Milos Gajdos 923efdb825 Update containerd client link .../{master => main/core}/remotes/docker (#4902) 2026-09-26 08:50:04 -07:00
Milos Gajdos 3220848f15 chore(release): prepare for v3.1.2 release (#4981) v3.1.2 2026-09-24 04:43:29 -07:00
Milos Gajdos 973fbf7e75 build(deps): bump the docker-actions group across 1 directory with 3 updates (#4978) 2026-09-23 18:38:52 -07:00
Milos Gajdos 30301b116a build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#4982) 2026-09-23 18:38:23 -07:00
dependabot[bot] 807a931132 build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-24 01:16:51 +00:00
dependabot[bot] fa720c9d5f build(deps): bump the docker-actions group across 1 directory with 3 updates 
Bumps the docker-actions group with 3 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/login-action](https://github.com/docker/login-action) and [docker/bake-action](https://github.com/docker/bake-action).


Updates `docker/setup-buildx-action` from 4.0.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...f87e5991a6d7451dcb8d9637bfbc97413f497069)

Updates `docker/login-action` from 4.2.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...dbcb813823bdd20940b903addbd779551569679f)

Updates `docker/bake-action` from 7.2.0 to 7.4.0
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/6614cfa25eff9a0b2b2697efb0b6159e7680d584...018cb6412ab401ebaa809aa5f85966b74628600f)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-24 01:13:23 +00:00
Milos Gajdos fd67fd4e32 chore(release): prepare for v3.1.2 release 
* Release notes added
* AUTHORS updated
* Version bump in the version package

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-23 07:52:57 -07:00
Milos Gajdos 960439b09f Merge commit from fork 
fix(client): verify manifest and blob content against requested digest (GHSA-685w-q87j-wqw3)
 2026-09-23 07:25:18 -07:00
Milos Gajdos ca9b887920 build(deps): bump the codeql-actions group with 4 updates (#4977) 2026-09-23 07:20:10 -07:00
Milos Gajdos 77aca8d1e7 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#4979) 2026-09-23 07:18:50 -07:00
dependabot[bot] 300e3a84e3 build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](https://github.com/actions/deploy-pages/compare/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128...368f82528645a54fb793d4d04e342629a3f51346)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 14:00:07 +00:00
dependabot[bot] 672bb1b382 build(deps): bump the codeql-actions group with 4 updates 
Bumps the codeql-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/autobuild` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/analyze` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...b96794f015dfd88f77b49b1c93e0fa7110f94c63)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: codeql-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 13:59:06 +00:00
Milos Gajdos 5e5d395b64 ci: dependabot: group CodeQL and Docker action updates (#4975) 2026-09-23 06:54:23 -07:00
Sebastiaan van Stijn e61f5df034 ci: dependabot: group CodeQL and Docker action updates 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-09-23 09:30:39 +02:00
Milos Gajdos bc5876a2f2 registry: remove logrus-logstash-hook dependency (#4970) 2026-09-22 10:14:10 -07:00
Sebastiaan van Stijn 9356fc8cfa registry: remove logrus-logstash-hook dependency 
The logstash formatter was originally added in a75f0f2 using the
formatter that was provided by logrus at the time.

Commit 1d6c1a6 switched to logrus-logstash-hook after the formatter
was removed from logrus. However, it instantiated LogstashFormatter
directly instead of using DefaultFormatter, so the Logstash field
mappings and default fields provided by that package are not used.

The only additional formatting currently provided by the wrapper is
copying caller information to "function" and "file". Logrus'
JSONFormatter supports configuring these field names directly and
already formats the file as "<file>:<line>".

Replace the external formatter with JSONFormatter and map the caller
function field to preserve the current output.

This removes the logrus-logstash-hook dependency without intentionally
changing the logstash formatter output.

Refs: a75f0f26f7
Refs: 1d6c1a6468

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-09-22 18:40:28 +02:00
Milos Gajdos aa0900d7b9 chore(docs): fix build status badge (#4969) 2026-09-22 08:39:51 -07:00
Milos Gajdos a95d3993c9 chore(docs): fix build status badge 
Replaced the legacy badge URL with GitHub’s documented workflow-file endpoint

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-22 07:40:46 -07:00
Milos Gajdos 774a889daa build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#4915) 2026-09-22 07:32:52 -07:00
Milos Gajdos 8e7f698a2a chore(deps): bump oltp version (#4968) 2026-09-22 07:18:23 -07:00
dependabot[bot] 106065c71f build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-22 14:17:16 +00:00
Milos Gajdos d19a486756 chore(deps): bump oltp version 
This is one last dep update that fixes a medium sec vuln

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-22 07:07:39 -07:00
Milos Gajdos cffc083547 chore(ci): bump alpine image version (#4966) 2026-09-22 06:52:14 -07:00
Milos Gajdos 7fb99ce3e0 chore(ci): bump alpine image version 
long overdue that fixes some minor vulns in base layers

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-22 06:39:06 -07:00
Milos Gajdos 26be4bd519 fix(deps): update deps to fix security vulns (#4965) 2026-09-22 06:37:13 -07:00
Milos Gajdos 3ef63905b3 fix(deps): update deps to fix security vulns 
Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-22 06:23:35 -07:00
Milos Gajdos a45f0a0824 docs: explain Redis Sentinel configuration (#4964) 2026-09-22 06:11:57 -07:00
Milos Gajdos 4bf640e205 fix(deps): bump grpc dep to fix sec vuln (#4963) 2026-09-22 05:52:56 -07:00
xinjun.jiang 0763411bec docs: explain Redis Sentinel configuration 
The Redis settings reference does not explain that mastername switches
the universal client to Sentinel failover mode. Show Sentinel endpoints
and the monitored master name, with the environment override and the
separate Redis and Sentinel authentication fields.

Fixes #4638

Assisted-by: OpenAI Codex
Signed-off-by: xinjun.jiang <xinjun.jiang@daocloud.io>
 2026-09-22 17:15:53 +08:00
Milos Gajdos 5d7daa1aa1 Fix lint 
Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-21 21:01:32 -07:00
Milos Gajdos eeb07fe996 fix(deps): bump grpc dep to fix sec vuln 
See: https://github.com/distribution/distribution/security/dependabot/44

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
 2026-09-21 20:54:22 -07:00
Milos Gajdos a90fb174ca fix(handlers): cancel context on Shutdown to stop upload purger goroutine (#4956) 2026-09-21 19:35:26 -07:00