* This is the first v3 stable release since `v2.8.3` which is a
culmination of years of hard work of the container community
and registry maintainers!
* If you are upgrading from `v2.x` and have never used any of
the release candidates, please familiarise yourselves with
the `v2.x` deprecations properly.
* oss and swift storage drivers are no longer supported
* `docker/libtrust` has been replaced with `go-jose/go-jose` in
https://github.com/distribution/distribution/pull/4096
* `client` is no longer supported as a standalone package in
https://github.com/distribution/distribution/pull/4126
* the default configuration path has changed to
`/etc/distribution/config.yml`
* `ManifestBuilder` interface in 3886
* `manifest.Versioned` has been deprecated in favor of
`oci.Versioned` in 3887
* `reference` package has been moved to
github.com/distribution/reference in
https://github.com/distribution/distribution/pull/4063
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/distribution?expand=0&rev=23
- update to 2.8.3 (bsc#1216491):
* Pass `BUILDTAGS` argument to `go build`
* Enable Go build tags
* `reference`: replace deprecated function `SplitHostname`
* Dont parse errors as JSON unless Content-Type is set to JSON
* update to go 1.20.8
* Set `Content-Type` header in registry client `ReadFrom`
* deprecate reference package, migrate to
github.com/distribution/reference
* `digestset`: deprecate package in favor of `go-
digest/digestset`
* Do not close HTTP request body in HTTP handler
* Add v2.8.3 release notes
support (SD-106252)
- cleanups
- go back to golang 1.15 to fix the build for now
Make ipfilteredby optional
- enabled changesgenerate option to automatically generate changes
OBS-URL: https://build.opensuse.org/request/show/1129251
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/distribution?expand=0&rev=6
* Pass `BUILDTAGS` argument to `go build`
* Enable Go build tags
* `reference`: replace deprecated function `SplitHostname`
* Dont parse errors as JSON unless Content-Type is set to JSON
* update to go 1.20.8
* Set `Content-Type` header in registry client `ReadFrom`
* deprecate reference package, migrate to
github.com/distribution/reference
* `digestset`: deprecate package in favor of `go-
digest/digestset`
* Do not close HTTP request body in HTTP handler
* Add v2.8.3 release notes
support (SD-106252)
- cleanups
- go back to golang 1.15 to fix the build for now
Make ipfilteredby optional
- enabled changesgenerate option to automatically generate changes
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/distribution?expand=0&rev=19
- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
* Revert registry/client: set `Accept: identity` header when
getting layers
* Parse `http` forbidden as denied
* Fix CVE-2023-2253 runaway allocation on /v2/_catalog
* Fix panic in inmemory driver
* update to go1.19.9
* Add code to handle pagination of parts. Fixes max layer size
of 10GB bug
* Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)
- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣
- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)
OBS-URL: https://build.opensuse.org/request/show/1086800
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/distribution?expand=0&rev=5
* Revert registry/client: set `Accept: identity` header when
getting layers
* Parse `http` forbidden as denied
* Fix CVE-2023-2253 runaway allocation on /v2/_catalog
* Fix panic in inmemory driver
* update to go1.19.9
* Add code to handle pagination of parts. Fixes max layer size
of 10GB bug
* Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/distribution?expand=0&rev=14
