quay

What's Changed

• v3.8.13 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/2395

Full Changelog: https://github.com/quay/quay/compare/v3.8.12...v3.8.13

What's Changed

• v3.9.2 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/2236
• [redhat-3.9] api: fix duplicate robot accounts (PROJQUAY-5931) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2198
• [redhat-3.9] georeplication: Enqueue blobs for replication on manifest list pushes (PROJQUAY-5256) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2232

Full Changelog: https://github.com/quay/quay/compare/v3.9.1...v3.9.2

What's Changed

• [redhat-3.8] chore: pull changes for s390x from master by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2112
• [redhat-3.8] chore: fix build of PyYAML on linux/ppc64le by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2113
• [redhat-3.8] build(deps): bump pypdf2 from 1.27.6 to 1.27.9 by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2055
• v3.8.12 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/2213

Full Changelog: https://github.com/quay/quay/compare/v3.8.11...v3.8.12

What's Changed

[v3.9.1]

Build(Deps)

• 7d19eac7: bump certifi from 2022.12.7 to 2023.7.22 (#2062)
• d3b05d4b: bump reportlab from 3.5.55 to 3.6.13 (PROJQUAY-5691) (#2056)

Chore

• ea71ac15: Bump pushgateway to 1.6.0 (PROJQUAY-5874) (#2058)
• 0b3c93f0: Add build dependency for reportlab (#2137)
• a2e23e68: Add build dependencies for lxml 4.9.2 (#2136)
• e8acc54f: fix build of PyYAML on linux/ppc64le (#2114)

[Redhat-3.9] Chore

• 2032ffa7: pull changes for s390x from master (#2107)

[Redhat-3.9] Ui

• a659db25: Robot Accounts tab fixes (PROJQUAY-5914) (#2135)
• 7f54e765: displaying quota totals on user namespaces (PROJQUAY-5581) (#2128)

What's Changed

• deps: Bump golang (PROJQUAY-4556) by @HammerMeetNail in https://github.com/quay/quay/pull/1549
• ui: Fix font size in superuser page (PROJQUAY-4407) by @bcaton85 in https://github.com/quay/quay/pull/1553
• Config: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) by @Sunandadadi in https://github.com/quay/quay/pull/1554
• arch: add ppc64le support to quay (PROJQUAY-4595) by @snehagg24 in https://github.com/quay/quay/pull/1535
• chore: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) by @ibazulic in https://github.com/quay/quay/pull/1557
• repomirror: Use skopeo list-tags to get repo tags (PROJQUAY-2179) by @dmage in https://github.com/quay/quay/pull/1427
• storage: Add Cloudflare as a CDN provider for an S3 backed storage (PROJQUAY-3699) by @syed in https://github.com/quay/quay/pull/1294
• deps: Update bs4 (PROJQUAY-4605) by @HammerMeetNail in https://github.com/quay/quay/pull/1561
• auth: Speed up permissions loading (PROJQUAY-4004) by @jonathankingfc in https://github.com/quay/quay/pull/1566
• config: Add conftest mediatypes to default Quay configuration (PROJQUAY-4614) by @Marcusk19 in https://github.com/quay/quay/pull/1567
• v3.7.9 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/1568
• chore: Restore create release id (PROJQUAY-4624) by @HammerMeetNail in https://github.com/quay/quay/pull/1571
• secscan: Generate key to reduce vulnerabilities (PROJQUAY-4562) by @crozzy in https://github.com/quay/quay/pull/1547
• cleanup: Remove old validation code (PROJQUAY-4606) by @jonathankingfc in https://github.com/quay/quay/pull/1562
• Util: Adding git pre-commit checks (PROJQUAY-4658) by @Sunandadadi in https://github.com/quay/quay/pull/1585
• deps: Bump deps (PROJQUAY-4504) by @HammerMeetNail in https://github.com/quay/quay/pull/1588
• Util: Clean up and adding make target to install pre-commit hooks(PROJQUAY-000) by @Sunandadadi in https://github.com/quay/quay/pull/1587
• v3.7.10 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/1591
• storage: Add **kwargs to get_direct_download_url for CloudFlare storage (PROJQUAY-3512) by @syed in https://github.com/quay/quay/pull/1594
• Update auth flow to add "access_token" response field (PROJQUAY-4431) by @harishsurf in https://github.com/quay/quay/pull/1580
• config: Remove whitespace from config (PROJQUAY-4666) by @bcaton85 in https://github.com/quay/quay/pull/1596
• users: add restricted users' filter (PROJQUAY-1245) by @kleesc in https://github.com/quay/quay/pull/1551
• build(deps): bump protobuf from 3.15.0 to 3.18.3 by @dependabot in https://github.com/quay/quay/pull/1541
• Fix proxy-cache overflow quota limit when pulling same image (PROJQUAY-4670) by @harishsurf in https://github.com/quay/quay/pull/1597
• scripts: push to ecr backup when building quay.io (PROJQUAY-3273) by @Marcusk19 in https://github.com/quay/quay/pull/1578
• deploy: Add deployment manifests for CloudFlare (PROJQUAY-3512) by @syed in https://github.com/quay/quay/pull/1604
• buildman: allow fallback on non-exception build failures (PROJQUAY-4609) by @kleesc in https://github.com/quay/quay/pull/1605
• arch: Map aarch64 to arm64 in ARCH variable (PROJQUAY-4679) by @jnohlgard in https://github.com/quay/quay/pull/1602
• Quay: Cloudfront multi domain (PROJQUAY-4506) by @kwestpharedhat in https://github.com/quay/quay/pull/1598
• buildman: add SLO metric for time spent in queue for build jobs (PROJQUAY-4487) by @Marcusk19 in https://github.com/quay/quay/pull/1575
• auth: Adding wraps to user namespace decorator (PROJQUAY-4694) by @bcaton85 in https://github.com/quay/quay/pull/1607
• proxy: Modify registry auth url for proxy cache validation (PROJQUAY-4585) by @harishsurf in https://github.com/quay/quay/pull/1603
• superusers: grant superusers additinonal org permissions (PROJQUAY-4687) by @kleesc in https://github.com/quay/quay/pull/1613
• users: prevent creating repo on push for restricted users (PROJQUAY-4706) by @kleesc in https://github.com/quay/quay/pull/1614
• users: when FEATURE_SUPERUSERS_FULL_ACCESS is set, grant superusers repository permissions (PROJQUAY-4708) by @kleesc in https://github.com/quay/quay/pull/1620
• users: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) by @kleesc in https://github.com/quay/quay/pull/1621
• UI: Fix redirection to user/org page (PROJQUAY-4667) by @Sunandadadi in https://github.com/quay/quay/pull/1623
• storage: Add S3 Region to CloudFlare URL (PROJQUAY-3512) by @syed in https://github.com/quay/quay/pull/1630
• users: fix create repo on push on orgs for restricted users (PROJQUAY-4732) by @kleesc in https://github.com/quay/quay/pull/1634
• logs: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) by @kleesc in https://github.com/quay/quay/pull/1625
• deploy: add directory for grafana dashboards (PROJQUAY-4477) by @Marcusk19 in https://github.com/quay/quay/pull/1638
• users: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) by @kleesc in https://github.com/quay/quay/pull/1640
• Revert "chore: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4773) by @ibazulic in https://github.com/quay/quay/pull/1642
• users: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) by @kleesc in https://github.com/quay/quay/pull/1645
• buildman: add SLO metric that calculates build success rate (PROJQUAY-4486) by @Marcusk19 in https://github.com/quay/quay/pull/1609
• cors: Adding missing method type (PROJQUAY-4800) by @bcaton85 in https://github.com/quay/quay/pull/1651
• v3.7.11 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/1650
• ui: Add script for adobe analytics for quay.io (PROJQUAY-4582) by @syed in https://github.com/quay/quay/pull/1648
• secscan: Correct links (PROJQUAY-2164) by @crozzy in https://github.com/quay/quay/pull/1552
• oci/index.py: support docker schema2 sub-manifest types (PROJQUAY-4826) by @flavianmissi in https://github.com/quay/quay/pull/1649
• ui: Show UI toggle on quay.io only to redhat users (PROJQUAY-4804) by @syed in https://github.com/quay/quay/pull/1653
• conf: Update nginx config (PROJQUAY-4554) by @HammerMeetNail in https://github.com/quay/quay/pull/1639
• ui: Add script for adobe analytics for quay.io in angular UI (PROJQUAY-4582) by @syed in https://github.com/quay/quay/pull/1654
• ui: Add cookie consent for quay.io (PROJQUAY-4555) by @HammerMeetNail in https://github.com/quay/quay/pull/1657
• ui: Remove FEATURE_UI_V2 from analytics scripts (PROJQUAY-4582) by @syed in https://github.com/quay/quay/pull/1658
• build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in https://github.com/quay/quay/pull/1656
• ci: Set ubuntu runner to be 20.04 (PROJQUAY-4825) by @HammerMeetNail in https://github.com/quay/quay/pull/1666
• deploy: update grafana dashboard (PROJQUAY-4484) by @Marcusk19 in https://github.com/quay/quay/pull/1655
• ui: Remove add_analytics script from Dockerfile (PROJQUAY-4582) by @syed in https://github.com/quay/quay/pull/1669
• deploy: fix api panels in dashboard (PROJQUAY-4485) by @Marcusk19 in https://github.com/quay/quay/pull/1668
• Nginx: Minor update to fix toggling issue on Safari (PROJQUAY-4527) by @Sunandadadi in https://github.com/quay/quay/pull/1670
• build(deps): bump express from 4.17.1 to 4.18.2 by @dependabot in https://github.com/quay/quay/pull/1664
• chore: Update Dockerfile to reduce size of image (PROJQUAY-4837) by @dmage in https://github.com/quay/quay/pull/1675
• ui: Repository settings feature flag (PROJQUAY-4565) by @bcaton85 in https://github.com/quay/quay/pull/1677
• Revert "chore: Update Dockerfile to reduce size of image (PROJQUAY-4837)" by @syed in https://github.com/quay/quay/pull/1678
• ui: Hot fix billing information (PROJQUAY-0000) by @jonathankingfc in https://github.com/quay/quay/pull/1679
• chore: Use real Quay image for OCI tests (PROJQUAY-4825) by @dmage in https://github.com/quay/quay/pull/1680
• chore: Add quay-ui (PROJQUAY-0000) by @HammerMeetNail in https://github.com/quay/quay/pull/1683
• chore: Update Dockerfile to reduce size of image (PROJQUAY-4837) by @dmage in https://github.com/quay/quay/pull/1681
• build(deps): bump setuptools from 63.4.0 to 65.5.1 by @dependabot in https://github.com/quay/quay/pull/1691
• build(deps): bump wheel from 0.35.1 to 0.38.1 by @dependabot in https://github.com/quay/quay/pull/1690
• chore: Bump pbr by @dmage in https://github.com/quay/quay/pull/1692
• build(deps): bump certifi from 2019.11.28 to 2022.12.7 by @dependabot in https://github.com/quay/quay/pull/1665
• login: Add subject in debug logs for export compliance (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1695
• login: Use the correct username for export compliance (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1696
• deploy: add panel to dashboard (PROJQUAY-4486) by @Marcusk19 in https://github.com/quay/quay/pull/1698
• superusers: gives superusers access to team invite api (PROJQUAY-4765) by @kleesc in https://github.com/quay/quay/pull/1694
• logs: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) by @kleesc in https://github.com/quay/quay/pull/1682
• deploy: add podAntiAffinity to deployment (PROJQUAY-3684) by @Marcusk19 in https://github.com/quay/quay/pull/1700
• logs: Add repository information for build audit logs (PROJQUAY-4726) by @kleesc in https://github.com/quay/quay/pull/1705
• secscan: add metric for scan results (PROJQUAY-4488) by @Marcusk19 in https://github.com/quay/quay/pull/1674
• logs: validate date range is within configuration (PROJQUAY-4959) by @kleesc in https://github.com/quay/quay/pull/1707
• deploy: add weight to anti-affinity (PROJQUAY-3684) by @Marcusk19 in https://github.com/quay/quay/pull/1711
• deploy: update slo dashboard (PROJQUAY-4488) by @Marcusk19 in https://github.com/quay/quay/pull/1712
• Revert "secscan: add metric for scan results (PROJQUAY-4488)" by @Marcusk19 in https://github.com/quay/quay/pull/1714
• login: Add error message for export compliance hold (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1715
• chore: remove deprecated appr code (PROJQUAY-4992) by @kleesc in https://github.com/quay/quay/pull/1718
• v3.8.1 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/1721
• chore: Use GitHub Actions cache for Docker Build jobs (PROJQUAY-4970) by @dmage in https://github.com/quay/quay/pull/1710
• login: Re-raise the export compliance exception on RHSSO (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1725
• login: Re-raise the export compliance exception on RHSSO (prod) (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1726
• chore: remove yapf (PROJQUAY-4865) by @dmage in https://github.com/quay/quay/pull/1693
• secscan: add timeout to indexing requests (PROJQUAY-5009) by @kleesc in https://github.com/quay/quay/pull/1727
• login: Use dedicated mailing list for export compliance email (PROJQUAY-4844) by @syed in https://github.com/quay/quay/pull/1730
• chore: Remove appr dependencies (PROJQUAY-4992) by @dmage in https://github.com/quay/quay/pull/1728
• deploy: change slo dashboard (PROJQUAY-5026) by @Marcusk19 in https://github.com/quay/quay/pull/1732
• secscan: add option to limit manifests with layer size too large to index (PROJQUAY-4957) by @kleesc in https://github.com/quay/quay/pull/1733
• secscan: add scan metric (PROJQUAY-4488) by @Marcusk19 in https://github.com/quay/quay/pull/1719
• config: clean upload folder by default (PROJQUAY-4395) by @dmesser in https://github.com/quay/quay/pull/1731
• secscan: handle non backfilled layers_compressed_size (PROJQUAY-4395) by @kleesc in https://github.com/quay/quay/pull/1734
• secscan: fix string to int conversion (PROJQUAY-4395) by @kleesc in https://github.com/quay/quay/pull/1736
• deploy: change push-pull panel (PROJQUAY-4956) by @Marcusk19 in https://github.com/quay/quay/pull/1735
• build(deps): reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) by @dmesser in https://github.com/quay/quay/pull/1644
• build(deps): bump pillow from 9.0.1 to 9.3.0 by @dependabot in https://github.com/quay/quay/pull/1633
• build(deps): bump oauthlib from 3.2.1 to 3.2.2 by @dependabot in https://github.com/quay/quay/pull/1738
• deploy: fix units in slo panel (PROJQUAY-4956) by @Marcusk19 in https://github.com/quay/quay/pull/1749
• registry: add option to ignore unknown mediatypes (PROJQUAY-5018) by @kleesc in https://github.com/quay/quay/pull/1750
• storage: Add MultiCDN storage provider (PROJQUAY-5048) by @syed in https://github.com/quay/quay/pull/1747
• deploy: add annotation for disabling DVO check (PROJQUAY-3680) by @Marcusk19 in https://github.com/quay/quay/pull/1753
• tox: allow /bin/sh (PROJQUAY-5092) by @Marcusk19 in https://github.com/quay/quay/pull/1757
• deploy: add value for empty annotation (PROJQUAY-3860) by @Marcusk19 in https://github.com/quay/quay/pull/1755
• storage: add option to validate all configured storages (PROJQUAY-5074) by @kleesc in https://github.com/quay/quay/pull/1752
• chore: bump config-tool version to latest (PROJQUAY-5048) by @syed in https://github.com/quay/quay/pull/1754
• Added support for IBMZ by @modassarrana89 in https://github.com/quay/quay/pull/1737
• deploy: Allow for dynamic service names (PROJQUAY-5103) by @bcaton85 in https://github.com/quay/quay/pull/1759
• chore: Bump config-tool to 1.15 (PROJQUAY-3643) by @dmage in https://github.com/quay/quay/pull/1763
• Updated comments for grpc installation on IBMZ by @modassarrana89 in https://github.com/quay/quay/pull/1762
• security: Change error messages in UI during LDAP login (PROJQUAY-4845) by @ibazulic in https://github.com/quay/quay/pull/1767
• permissions: lazy-load superuser permissions (PROJQUAY-5117) by @kleesc in https://github.com/quay/quay/pull/1761
• chore: Bump Authlib (PROJQUAY-5120) by @dmage in https://github.com/quay/quay/pull/1773
• billing: update default subscription payment behavior (PROJQUAY-5129) by @kleesc in https://github.com/quay/quay/pull/1778
• chore: Bump pyOpenSSL and cryptography (PROJQUAY-5120) by @dmage in https://github.com/quay/quay/pull/1777
• Update quick-local-deployment.md by @fkaanoz in https://github.com/quay/quay/pull/1765
• healthcheck: fix invalid Exception attribute (PROJQUAY-5047) by @kleesc in https://github.com/quay/quay/pull/1782
• builders: Add scopes to the oauth call to gitlab for build trigger (PROJQUAY-5181) by @syed in https://github.com/quay/quay/pull/1784
• builders: Update scope for gitlab to include write access (PROJQUAY-5181) by @syed in https://github.com/quay/quay/pull/1785
• repomirror: Add default value for REPO_MIRROR_ROLLBACK to config (PROJQUAY-4296) by @ibazulic in https://github.com/quay/quay/pull/1786
• chore: Add setuptools-rust as a build dependency by @dmage in https://github.com/quay/quay/pull/1788
• chore: Downgrade cryptography to 3.3.2 (PROJQUAY-5120) by @dmage in https://github.com/quay/quay/pull/1803
• api: Allow setting multiple CORS_ORIGIN (PROJQUAY-5213) by @syed in https://github.com/quay/quay/pull/1791
• chore: Pin distribution-spec conformance tests by @dmage in https://github.com/quay/quay/pull/1809
• storagereplication: sleep on unexpected exception for retry (PROJQUAY-4792) by @kleesc in https://github.com/quay/quay/pull/1792
• ldap: Don't convert dashes to underscores in usernames (PROJQUAY-5253) by @ibazulic in https://github.com/quay/quay/pull/1808
• cors: check for request_origin being set (PROJQUAY-5213) by @syed in https://github.com/quay/quay/pull/1811
• secscan: send notifications for new indexes (PROJQUAY-4659) by @Marcusk19 in https://github.com/quay/quay/pull/1813
• PROJQUAY-4993: Allow action logs to be forwarded to Splunk by @harishsurf in https://github.com/quay/quay/pull/1764
• locking: change log severity (PROJQUAY-5221) by @Marcusk19 in https://github.com/quay/quay/pull/1820
• chore: Fixes for local-dev-up-with-clair by @dmage in https://github.com/quay/quay/pull/1819
• chore: Simplify base image (PROJQUAY-4837) by @dmage in https://github.com/quay/quay/pull/1709
• billing: update Stripe checkout to support 3DS (PROJQUAY-5129) by @kleesc in https://github.com/quay/quay/pull/1818
• billing: fallback to cards api if paymentmethod is not set (PROJQUAY-5129) by @kleesc in https://github.com/quay/quay/pull/1826
• chore: Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) by @ibazulic in https://github.com/quay/quay/pull/1825
• ui: Merge quay-ui into quay (PROJQUAY-5315) by @syed in https://github.com/quay/quay/pull/1827
• ui: add support for exposing quay UI as a dynamic plugin (PROJQUAY-3203) by @syed in https://github.com/quay/quay/pull/1799
• build: Add build scripts for quay.io frontend (PROJQUAY-5229) by @syed in https://github.com/quay/quay/pull/1833
• build: Add template for deploying quayio frontend in console (PROJQUAY-5229) by @syed in https://github.com/quay/quay/pull/1835
• build: disable push to backup repo for quayio-frontend (PROJQUAY-5229) by @syed in https://github.com/quay/quay/pull/1834
• UI: Fixing repoDetails not defined error (PROJQUAY-5361) by @Sunandadadi in https://github.com/quay/quay/pull/1837
• build(deps): bump json5 from 1.0.1 to 1.0.2 in /web by @dependabot in https://github.com/quay/quay/pull/1699
• build(deps): bump loader-utils from 1.4.0 to 1.4.2 in /web by @dependabot in https://github.com/quay/quay/pull/1685
• build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /web by @dependabot in https://github.com/quay/quay/pull/1684
• chore: Remove cachito magic for PyPDF2 by @dmage in https://github.com/quay/quay/pull/1838
• build(deps): bump dns-packet from 5.3.1 to 5.4.0 in /web by @dependabot in https://github.com/quay/quay/pull/1771
• Quay UI: Creating new username for accounts that login via SSO (PROJQUAY-5289) by @Sunandadadi in https://github.com/quay/quay/pull/1831
• ui: Use the correct endpoint for plugin (PROJQUAY-3203) by @syed in https://github.com/quay/quay/pull/1842
• ui: Refresh auth token for plugin flow on 401 (PROJQUAY-5390) by @syed in https://github.com/quay/quay/pull/1843
• ui: use route location instead of window.location (PROJQUAY-5392) by @syed in https://github.com/quay/quay/pull/1844
• UI: Creating repository from Repositories tab (PROJQUAY-5399) by @Sunandadadi in https://github.com/quay/quay/pull/1845
• API/UI: Filtering of tags API through query parameter (PROJQUAY-5362) by @Sunandadadi in https://github.com/quay/quay/pull/1839
• UI: Check if org is user for robot creation (PROJQUAY-5398) by @Sunandadadi in https://github.com/quay/quay/pull/1847
• UI: Replacing useRecoil with useState for robot account search (PROJQUAY-5404) by @Sunandadadi in https://github.com/quay/quay/pull/1848
• UI: Replacing FilterInput with SearchInput in Robot accounts page (PROJQUAY-5404) by @Sunandadadi in https://github.com/quay/quay/pull/1849
• Remove stage.quay.io SSO Config by @BillDett in https://github.com/quay/quay/pull/1850
• UI: Replacing FilterInput with SearchInput in repo search for create robot account wizard (PROJQUAY-5403) by @Sunandadadi in https://github.com/quay/quay/pull/1851
• quota: Include blob deduplication in totals (PROJQUAY-3942) by @bcaton85 in https://github.com/quay/quay/pull/1751
• ui: fix last modified date on repo list (PROJQUAY-5408) by @syed in https://github.com/quay/quay/pull/1854
• logs: Add audit logs for organization and user namespace activities (PROJQUAY-3482) by @dmesser in https://github.com/quay/quay/pull/1846
• ui: Adding option to permanently delete tags past time machine window (PROJQUAY-5303) by @bcaton85 in https://github.com/quay/quay/pull/1853
• billing: allow changing subscription on empty stripe_id (PROJQUAY-5413) by @kleesc in https://github.com/quay/quay/pull/1857
• UI: Fixing Teams search in Create Robot Wizard (PROJQUAY-5403) by @Sunandadadi in https://github.com/quay/quay/pull/1859
• ui: Hide organization settings when user is not admin (PROJQUAY-4553) by @jonathankingfc in https://github.com/quay/quay/pull/1829
• UI: Filtering security report vulnerabilities (PROJQUAY-5401) by @Sunandadadi in https://github.com/quay/quay/pull/1861
• UI: Robot token fetch & regenerate fix for user namespace (PROJQUAY-5419) by @Sunandadadi in https://github.com/quay/quay/pull/1860
• UI: Using organizationName variable and using isHidden to hide tabs (PROJQUAY-4553) by @Sunandadadi in https://github.com/quay/quay/pull/1862
• UI: Removing isHidden from Tab as incompatible with console dot (PROJQUAY-4553) by @Sunandadadi in https://github.com/quay/quay/pull/1863
• ui: update survey link to new survey (PROJQUAY-5432) by @syed in https://github.com/quay/quay/pull/1865
• storagereplication: add retry logic without exhausting queue retries (PROJQUAY-4793) by @kleesc in https://github.com/quay/quay/pull/1832
• chore: Fix UI tests (PROJQUAY-5424) by @dmage in https://github.com/quay/quay/pull/1858
• UI: Removing Cancel button from Robot account credentials modal (PROJQUAY-5426) by @Sunandadadi in https://github.com/quay/quay/pull/1867
• reconciler: add worker (PROJQUAY-5320) by @Marcusk19 in https://github.com/quay/quay/pull/1817
• marketplace: fix path to api cert (PROJQUAY-5409) by @Marcusk19 in https://github.com/quay/quay/pull/1870
• quota: excluding robots from quota total (PROJQUAY-5469) by @bcaton85 in https://github.com/quay/quay/pull/1871
• chore: Update db data for UI tests by @dmage in https://github.com/quay/quay/pull/1874
• ui: Fix search in bulk delete for robot accounts (PROJQUAY-5355) by @harishsurf in https://github.com/quay/quay/pull/1868
• UI: Fixing repository name for nested repos (PROJQUAY-5446) by @Sunandadadi in https://github.com/quay/quay/pull/1873
• UI: Fix visibility of organization and user settings on new UI (PROJQUAY-5500) by @Sunandadadi in https://github.com/quay/quay/pull/1882
• UI: Adding functionality to update organization settings (PROJQUAY-5402) by @Sunandadadi in https://github.com/quay/quay/pull/1864
• ui: updating quota size format (PROJQUAY-5471) by @bcaton85 in https://github.com/quay/quay/pull/1886
• logs: add audit log events for login/logout to Quay (PROJQUAY-2344) by @dmesser in https://github.com/quay/quay/pull/1866
• superuser: paginating superuser organization list (PROJQUAY-4297) by @bcaton85 in https://github.com/quay/quay/pull/1876
• UI: Fixing failing tests by @Sunandadadi in https://github.com/quay/quay/pull/1890
• chore: Remove Docker Build jobs (PROJQUAY-5519) by @dmage in https://github.com/quay/quay/pull/1888
• superuser: paginate user's list (PROJQUAY-4297) by @bcaton85 in https://github.com/quay/quay/pull/1881
• logs: Add SSL cert support and test coverage for splunk logging (PROJQUAY-4993) by @harishsurf in https://github.com/quay/quay/pull/1878
• chore: Delete outdated k8 manifests (PROJQUAY-5490) by @crozzy in https://github.com/quay/quay/pull/1880
• quota: moving resetting of child manifest temporary tags to delete endpoint (PROJQUAY-5512) by @bcaton85 in https://github.com/quay/quay/pull/1894
• chore: Use external builders by @dmage in https://github.com/quay/quay/pull/1898
• config: updating quota defaults (PROJQUAY-5546) by @bcaton85 in https://github.com/quay/quay/pull/1901
• chore: update ppc64le builder by @yussufsh in https://github.com/quay/quay/pull/1904
• Util: Reading new UI feedback form url from config parameter (PROJQUAY-5463) by @Sunandadadi in https://github.com/quay/quay/pull/1902
• quota: calculating registry size (PROJQUAY-5476) by @bcaton85 in https://github.com/quay/quay/pull/1879
• marketplace: fixing allowed repo count (PROJQUAY-5513) by @Marcusk19 in https://github.com/quay/quay/pull/1891
• proxy: Allow anonymous pulls from registries (PROJQUAY-5273) by @harishsurf in https://github.com/quay/quay/pull/1906
• api: allow manifests to be pulled by digest (PROJQUAY-5467) by @Marcusk19 in https://github.com/quay/quay/pull/1877
• proxy: allowing expiring tags with timemachine set to 0 (PROJQUAY-5558) by @bcaton85 in https://github.com/quay/quay/pull/1907
• [redhat-3.9] logs: ssl_ca_path should be optional (PROJQUAY-4993) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1920
• [redhat-3.9] authentication(LDAP): allow LDAP referrals to not be followed (PROJQUAY-5291) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1922
• [redhat-3.9] api: add permanently delete tag usage log (PROJQUAY-5496) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1926
• [redhat-3.9] superuser: lowering page limit (PROJQUAY-5178) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1933
• [redhat-3.9] ui: remove permanently deleted tags from tag history (PROJQUAY-5574) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1934
• [redhat-3.9] ui: changing quota configuration byte units to base 1000 (PROJQUAY-5595) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1940
• [redhat-3.9] geo-rep: Add util script to remove geo-rep location and corresponding image locations (PROJQUAY-4995) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1943
• v3.9.0 Changelog Bump by @github-actions in https://github.com/quay/quay/pull/1944
• [redhat-3.9] db: change removed_tag_expiration_s to bigint (PROJQUAY-2462) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1932
• Revert "[redhat-3.9] db: change removed_tag_expiration_s to bigint (PROJQUAY-2462)" by @dmage in https://github.com/quay/quay/pull/1950
• [redhat-3.9] logs: Add autologin to splunk's connect() to allow retries (PROJQUAY-5621) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1957
• [redhat-3.9] geo-rep: Initialize features from config in util script (PROJQUAY-5627) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1967
• [redhat-3.9] ui: display sizes as base 2 (PROJQUAY-5524) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1970
• [redhat-3.9] chore: Use buildx v0.11.0-rc2 by @dmage in https://github.com/quay/quay/pull/1971
• config: Enable notifications for new indexes by default (PROJQUAY-5682) by @Marcusk19 in https://github.com/quay/quay/pull/1995
• [redhat-3.9] Pagination: Fixing paginate for /api/v1/superuser/logs API (PROJQUAY-5360) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2011
• [redhat-3.9] storage: make cloudfront_distribution_org_overrides optional (PROJQUAY-5788) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2009
• [redhat-3.9] build(deps): bump requests from 2.27.1 to 2.31.0 by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1985
• [redhat-3.9] oci: Allow optional components in the image config to be set to "null" (PROJQUAY-5634) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1964
• [redhat-3.9] UI: Delete normal user org by super user (PROJQUAY-5639) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2008
• [redhat-3.9] chore: Use latest go-toolset for config-tool by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2020
• [redhat-3.9] chore: Bump PyYAML by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2022
• [redhat-3.9] chore: Use conventional-commit-checker-action for Jira check (PROJQUAY-5672) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2023
• [redhat-3.9] chore: Use stable Cython by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2025
• Revert "[redhat-3.9] chore: Bump PyYAML" by @dmage in https://github.com/quay/quay/pull/2041
• Revert "[redhat-3.9] chore: Use stable Cython" by @dmage in https://github.com/quay/quay/pull/2042
• [redhat-3.9] chore: Fix regexp in pull_request_linting.yaml by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2054
• [redhat-3.9] build(deps): bump pypdf2 from 1.27.6 to 1.27.9 by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2052
• [redhat-3.9] build(deps): bump config-tool to v0.1.21 by @dmage in https://github.com/quay/quay/pull/2057
• [redhat-3.9] secscan_model: attempt urldecoding fixed_in_version (PROJQUAY-5886) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2063
• [redhat-3.9] chore: use isinstance to check instance type by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2070
• [redhat-3.9] chore: Do not require ticket for build(deps-dev) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2081
• [redhat-3.9] ui: adding null check on dark logo by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2085
• [redhat-3.9] UI: Replace time to wait with event waits in cypress tests by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2078
• [redhat-3.9] chore: Add config-tool by @dmage in https://github.com/quay/quay/pull/2069
• [redhat-3.9] api: Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2079
• [redhat-3.9] UI: Robot Accounts page perms fix (PROJQUAY-5487) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2088
• [redhat-3.9] build(deps): bump golang.org/x/net (PROJQUAY-5339) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2093
• [redhat-3.9] georep: Add error handling for remove location script (PROJQUAY-5878) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2094
• [redhat-3.9] fix: Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/2105

New Contributors

• @snehagg24 made their first contribution in https://github.com/quay/quay/pull/1535
• @jnohlgard made their first contribution in https://github.com/quay/quay/pull/1602
• @fkaanoz made their first contribution in https://github.com/quay/quay/pull/1765
• @yussufsh made their first contribution in https://github.com/quay/quay/pull/1904

Full Changelog: https://github.com/quay/quay/compare/v3.8.0...v3.9.0

Red Hat Quay Release Notes

Red Hat Customer Portal

v3.8.10 - 2023-06-23

Chore

• d1e2d0f1: v3.8.10 changelog bump (PROJQUAY-5677) (#1991)

Db

• a7cfd6ee: handle readonly mode when updating repo size cache (PROJQUAY-4854) (#1930)

v3.8.9 - 2023-06-07

Chore

• 45487213: v3.8.9 changelog bump (PROJQUAY-5607) (#1946)
• 3747f70e: update ppc64le builder (#1911)
• b80166b0: Use external builders (#1910)

Proxy

• 47d50900: Allow anonymous pulls from registries (PROJQUAY-5273) (#1908)

Superuser

• 540cf0f8: paginate user's list (PROJQUAY-4297) (#1881) (#1909)

[Redhat-3.8] Superuser

• 9c198c69: paginating superuser organization list (PROJQUAY-4297) (#1896)

v3.8.8 - 2023-05-17

Chore

• 9c27dadc: v3.8.8 changelog bump (PROJQUAY-5514) (#1889)
• 517d3b35: Remove cachito magic for PyPDF2 (#1885)

Storagereplication

• 1cc45a7b: add retry logic without exhausting queue retries (PROJQUAY-4793) (#1884)

v3.8.7 - 2023-04-26

Chore

• d60d6e42: v3.8.7 changelog bump (PROJQUAY-5352) (#1836)
• 3db02218: Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) We were not enforcing the use of HTTP 1.1 when storage proxy was concerned. This causes problems in certain complex scenarios. (#1828)

v3.8.6 - 2023-04-12

Build(Deps)

• f218831c: bump certifi from 2019.11.28 to 2022.12.7 (#1823)

Chore

• 12b0bc23: v3.8.6 changelog bump (PROJQUAY-5279) (#1824)
• 7761140e: Pin distribution-spec conformance tests (#1816)

Storagereplication

• 3809d7ff: sleep on unexpected exception for retry (PROJQUAY-4792) (#1810)

v3.8.5 - 2023-03-21

Build(Deps)

• c38bbef9: bump setuptools from 63.4.0 to 65.5.1 (#1797)
• e4a562b5: reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) (#1644) (#1795)

Chore

• 9ca88389: v3.8.5 changelog bump (PROJQUAY-5228) (#1805)
• 5695cbf9: Downgrade cryptography to 3.3.2 (PROJQUAY-5120) (#1804)
• 5af451df: Add setuptools-rust as a build dependency (#1798)
• 7e2eab2e: backport requirements.txt changes (PROJQUAY-4777) (#1781)

[Redhat-3.8] Chore

• 54799d69: Bump pyOpenSSL and cryptography (PROJQUAY-5120) (#1796)

[Redhat-3.8] Security

• 3b38e859: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1801)

v3.8.4 - 2023-03-10

Chore

• abc58174: v3.8.4 changelog bump (PROJQUAY-5148) (#1780)
• 4b29cd5b: Bump Authlib (PROJQUAY-5120) (#1776)

Healthcheck

• 9858a0d8: fix invalid Exception attribute (PROJQUAY-5047) (#1783)

Permissions

• 0caa7786: lazy-load superuser permissions (PROJQUAY-5117) (#1779)

Storage

• 1c191a2f: add option to validate all configured storages (PROJQUAY-5074) (#1768)

Tox

• cd2cc5c3: allow /bin/sh (PROJQUAY-5092) (#1769)

v3.8.3 - 2023-02-28

Chore

• 02caa532: v3.8.3 changelog bump (PROJQUAY-5062) (#1766)

v3.8.2 - 2023-02-07

Build(Deps)

• 53ca62b8: bump oauthlib from 3.2.1 to 3.2.2 (#1742)
• 1ab53c38: bump pillow from 9.0.1 to 9.3.0 (#1739)

Chore

• 7547f6f5: Remove appr dependencies (PROJQUAY-4992) (#1743)
• ce694e04: remove deprecated appr code (PROJQUAY-4992) (#1729)

Config

• 08fae2ee: clean upload folder by default (PROJQUAY-4395) (#1741)

Logs

• 8c562906: Add repository information for build audit logs (PROJQUAY-4726) (#1720)

v3.8.1 - 2023-01-24

Chore

• 136e9734: v3.8.1 changelog bump (PROJQUAY-4716) (#1723)

Chore: V3.7.11 Changelog Bump (Https

• 8238c755: //issues.redhat.com/browse/PROJQUAY-4790) (#1722)

Cors

• 8f4cae04: Adding missing method type (PROJQUAY-4800) (#1660)

Logs

• c722d6df: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1701)

Nginx

• 006779bd: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1673)

Oci/Index.Py

• d7371d1e: support docker schema2 sub-manifest types (#1661)

Superusers

• 68ec0579: gives superusers access to team invite api (PROJQUAY-4765) (#1702)

UI

• 013f96fd: Fix redirection to user/org page (PROJQUAY-4667) (#1659)

Ui

• 3a3daeb5: Repository settings feature flag (PROJQUAY-4565) (#1689)
• 95f3064c: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1672)

v3.8.0 - 2022-11-26

Api

• 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
• aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
• d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
• 871c43ea: handle missing tag on DELETE tag api (#1444)
• bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)

Arch

• 0f0cc408: Map aarch64 to arm64 in ARCH variable (#1606)

Auth

• 734f7f9d: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1608)
• 3ae26f5e: Speed up permissions loading (PROJQUAY-4004) (#1582)
• 6ed0bcde: allow rs384 in jwt (PROJQUAY-4148) (#1449)

Billing

• 78896aa0: fix new private repo count (PROJQUAY-4208) (#1463)
• 17778979: add new larger stripe plan (PROJQUAY-4208) (#1462)

Bug

• ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
• 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)

Build(Deps)

• 9a1de19f: bump angular and @types/angular (#1451)
• 0c62c0ee: bump terser from 4.3.4 to 4.8.1 (#1452)
• 0f2ebdaf: bump moment from 2.29.2 to 2.29.4 (#1442)

Builders

• b8d3e174: Add cacert's to build agent (PROJQUAY-3819) (#1398)
• d11d45f2: Send notifications on build completion (PROJQUAY-3614) (#1346)
• 1d2e55b6: Set imagePullPolicy to always (PROJQUAY-3507) (#1330)
• 3a63fd71: Add dnsPolicy option (PROJQUAY-3755) (#1305)

Buildman

• e3b170ea: fix type when getting ec2 ami (#1328)

Bump

• b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)

CI

• e566560f: Commenting arm docker build (PROJQUAY-0000) (#1522)

Chore

• f4828fde: Add georeplication variable check (PROJQUAY-4363) (#1499)
• 8e1fba48: Fix startup script (#1402)
• cf52f5e3: Use Python 3.9 (#1382)
• 5eaf0584: Run mypy as CI job (#1363)
• 13f8e0c4: Rebuild quay image if requirements.txt is changed (#1342)

Chore: V3.6.8 Changelog Bump (Https

• f69b1309: //issues.redhat.com/browse/PROJQUAY-3990) (#1419)

Chore: V3.6.9 Changelog Bump (Https

• b44df459: //issues.redhat.com/browse/PROJQUAY-4192) (#1466)

Chore: V3.7.0 Changelog Bump (Https

• e85372d0: //issues.redhat.com/browse/PROJQUAY-2411) (#1337)

Chore: V3.7.1 Changelog Bump (Https

• e76db133: //issues.redhat.com/browse/PROJQUAY-3836) (#1372)

Chore: V3.7.10 Changelog Bump (Https

• 9f3c1699: //issues.redhat.com/browse/PROJQUAY-4627) (#1593)

Chore: V3.7.3 Changelog Bump (Https

• a55c63e7: //issues.redhat.com/browse/PROJQUAY-3989) (#1420)

Chore: V3.7.4 Changelog Bump (Https

• a5279983: //issues.redhat.com/browse/PROJQUAY-4050) (#1446)

Chore: V3.7.5 Changelog Bump (Https

• cc26275d: //issues.redhat.com/browse/PROJQUAY-4172) (#1458)

Chore: V3.7.6 Changelog Bump (Https

• e1a14f5c: //issues.redhat.com/browse/PROJQUAY-4237) (#1480)

Chore: V3.7.7 Changelog Bump (Https

• fcdd0e12: //issues.redhat.com/browse/PROJQUAY-4286) (#1508)

Chore: V3.7.8 Changelog Bump (Https

• 292d33f2: //issues.redhat.com/browse/PROJQUAY-4385) (#1517)

Chore: V3.7.9 Changelog Bump (Https

• 6438a8c6: //issues.redhat.com/browse/PROJQUAY-4478) (#1570)

Ci

• 07c8a75f: Check arm64 builds in CI (PROJQUAY-4038) (#1431)

Cleanup

• eb2cda16: Remove old validation code (PROJQUAY-4606) (#1586)

Conf/Nginx

• f45c68eb: mark beginning of string in oauth location match (#1550)

Dev

• d3cc640f: Update Clair for dev (PROJQUAY-4461) (#1528)
• 04af141a: Add pre-commit script to run black (PROJQUAY-4039) (#1432)

Doc

• 34cd7d09: update Instructions for Deploying on OpenShift (#1537)

Dockerfile

• f0f31e0b: use nodejs ubi8 image to build frontends (#1355)

Export Compliance

• adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)

Fix

• 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
• f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)

GUI

• 020b3abe: Show how to pull an image using podman pull (#1332)

Healthcheck

• c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)

Init

• e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
• 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
• 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)

Logs

• 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)

Makefile

• 692e3cee: use non-standard port for postgres test container (#1485)
• fd4e7723: use variable to tell postgres test target which tests to run (#1475)

Mirror

• 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
• 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
• 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)

Mirroring

• 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)

Nginx

• 30bf4050: mark beginning of string in location match (#1546)

Oauth

• 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
• 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)

PROJQUAY-3750

• ac6a8d2f: support registries that do not return a digest header (#1310)

Proxy Cache

• 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)

Pull-Thru

• d029a465: bump expiration of all parent manifest lists on pull (#1336)

Quay

• 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)

Quayio

• b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)

Quota

• f90e5e3d: Configuring Quota for user panel(PROJQUAY-3767) (#1334)
• 1e4871ec: Add Cache To Tag Delete (PROJQUAY-3828) (#1345)

Quota

• a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
• f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
• 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)

Quota Management

• 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)

Quota UI

• a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
• 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)

Registry

• c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)

Requirements.Txt

• 46cd48dd: bump flask-restful from 0.3.7 to 0.3.9 (#1375)

Revert "Chore

• 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)

Rhsso

• 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)

Schema1

• b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)

Secscan

• 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
• 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
• 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
• 776dbd90: update https proxy scheme (#1340)

Sso

• ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
• 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
• f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
• 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
• 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
• 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)

Storage

• 47564690: handle KeyError we sometimes get from aws (#1543)
• a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
• e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
• 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)

Superusers

• acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)

Task

• eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)

UI

• ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
• c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)

Ui

• 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
• 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
• b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
• 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
• 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
• d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)

User

• 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)

Users

• 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
• 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
• 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
• 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
• c4595fbb: when set, grant superusers repository permissions. (#1622)
• f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
• 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
• 14e87bd4: fix missing references in ldap for superusers (#1542)
• 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)

V2auth

• fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)

[Redhat-3.8] Arch

• 2e6f9b1e: add ppc64le support to quay (PROJQUAY-4595) (#1558)

[Redhat-3.8] Chore

• 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)

[Redhat-3.8] Config

• 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)

[Redhat-3.8] Repomirror

• 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)

v3.7.12 - 2023-06-05

Chore

• 578e047a: v3.7.12 changelog bump ( PROJQUAY-5599) (#1937)
• b57937a5: Remove appr dependencies (PROJQUAY-4992) (#1936)
• bb0544db: Pin distribution-spec conformance tests (#1919)
• 96bc0dec: remove deprecated appr code (PROJQUAY-4992) (#1746)

Superuser

• 65de5d3b: paginate user's list (PROJQUAY-4297) (#1881) (#1923)

Tox

• c3e5912c: allow /bin/sh (PROJQUAY-5092) (#1918)

[Redhat-3.7] Oci

• 7c22f8e3: Create workflow for OCI Conformance (PROJQUAY-2812) (#1744)

[Redhat-3.7] Superuser

• f5f0ea90: lowering page limit (PROJQUAY-5178) (#1912) (#1925)
• 4cbde7e2: paginating superuser organization list (PROJQUAY-4297) (#1895)

v3.7.11 - 2022-12-01

Chore: V3.7.11 Changelog Bump (Https

• 5b1d1f67: //issues.redhat.com/browse/PROJQUAY-4790) (#1652)

Revert "Chore

• f61ba511: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1647)

v3.7.10 - 2022-10-25

Auth

• b619da30: Speed up permissions loading (PROJQUAY-4004) (#1581)

Chore: V3.7.10 Changelog Bump (Https

• 59937c6d: //issues.redhat.com/browse/PROJQUAY-4627) (#1592)

Secscan

• 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)

[Redhat-3.7] Chore

• 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)

v3.7.9 - 2022-10-17

Chore: V3.7.9 Changelog Bump (Https

• f65a235e: //issues.redhat.com/browse/PROJQUAY-4478) (#1569)

Storage

• 4d44be98: handle KeyError we sometimes get from aws (#1544)

v3.7.8 - 2022-09-12

Chore: V3.7.7 Changelog Bump (Https

• 40b023fd: //issues.redhat.com/browse/PROJQUAY-4286) (#1509)

Chore: V3.7.8 Changelog Bump (Https

• 53f866cc: //issues.redhat.com/browse/PROJQUAY-4385) (#1518)

Healthcheck

• 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)

[Redhat-3.7] Bug

• 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
• 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)

[Redhat-3.7] Ci

• 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)

v3.7.7 - 2022-08-29

Mirror

• 72a4d353: Rollback failed tags (PROJQUAY-4322) (#1501)
• 21931a63: Default mirror rollback to false (PROJQUAY-4296) (#1491)

Registry

• b7f3434a: correctly bump tag expiration when tag changes upstream (#1484)

v3.7.6 - 2022-08-15

Chore: V3.7.6 Changelog Bump (Https

• 01b30c2d: //issues.redhat.com/browse/PROJQUAY-4237) (#1480) (#1481)

Fix

• dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)

Proxy Cache

• f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)

v3.7.5 - 2022-07-26

Auth

• f435b9e6: allow rs384 in jwt (PROJQUAY-4148) (#1450)

Chore: V3.7.4 Changelog Bump (Https

• 10edbe6d: //issues.redhat.com/browse/PROJQUAY-4050) (#1446) (#1447)

Chore: V3.7.5 Changelog Bump (Https

• 564f3f0c: //issues.redhat.com/browse/PROJQUAY-4172) (#1460)

Mirroring

• eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)

v3.7.4 - 2022-07-07

Builders

• 92d694aa: Add cacert's to build agent (PROJQUAY-3819) (#1398) (#1436)

Mirror

• c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)

v3.7.3 - 2022-06-28

Chore: V3.7.3 Changelog Bump (Https

• 50f24e2f: //issues.redhat.com/browse/PROJQUAY-3989) (#1420) (#1421)

Storage

• 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)

[Redhat-3.7] Ui

• 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)

v3.7.2 - 2022-06-22

Builders

• ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)

Chore: V3.7.1 Changelog Bump (Https

• ece9d54f: //issues.redhat.com/browse/PROJQUAY-3836) (#1373)

Chore: V3.7.2 Changelog Bump (Https

• 78814ef2: //issues.redhat.com/browse/PROJQUAY-3932) (#1406)

Fix

• 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)

GUI

• 5487b269: Show how to pull an image using podman pull (#1377)

Quota

• af28e832: Fix calculating org size (PROJQUAY-3889) (#1393)
• 058b9d34: Fix join on caching repo size (PROJQUAY-3889) (#1381)

Requirements.Txt

• c0cdee4e: bump flask-restful from 0.3.7 to 0.3.9 (#1376)

UI

• abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)

[Redhat-3.7] Quota UI

• 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)

v3.7.1 - 2022-06-06

Init

• e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
• cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
• c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)

Pull-Thru

• a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)

[Redhat-3.7] Quota

• abe1528d: Configuring Quota for user panel(PROJQUAY-3767) (#1353)
• 0cafea97: Add Cache To Tag Delete (PROJQUAY-3828) (#1347)

[Redhat-3.7] UI

• 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)

v3.7.0 - 2022-05-23

API

• 2dca65f9: Removing internal only decorator from exposed Super user endpoints (#1271)

Api

• 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
• 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)

App.Py

• b4600553: filter proxy cache login details from debug logs (#1268)

Auth

• 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
• edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
• 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
• 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)

Billing

• 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
• 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
• 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)

Blobuploadcleanupworker

• f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
• 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)

Build

• 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
• fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
• eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
• 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
• a347d316: Update backup base image name (PROJQUAY-2372) (#965)
• d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
• af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
• e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
• d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
• 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)

Build(Deps)

• 4ee715c9: bump is-my-json-valid from 2.16.0 to 2.20.6 (#1058)
• b009590c: bump ajv from 6.10.2 to 6.12.6 (#1112)
• 4176c498: bump moment from 2.17.1 to 2.29.2 (#1236)
• 723fd599: bump url-parse from 1.5.8 to 1.5.9 (#1168)
• 4b4f16e1: bump url-parse from 1.5.6 to 1.5.8 (#1151)
• 49c56aa1: bump url-parse from 1.5.2 to 1.5.6 (#1125)
• c96d1fbc: bump protobuf from 3.12.2 to 3.15.0 (#1110)
• 102705c9: bump pillow from 8.3.2 to 9.0.0 (#1059)
• e7e093b0: bump qs from 6.3.1 to 6.3.3 (#1086)
• 88956630: bump y18n from 3.2.1 to 3.2.2 (#1080)
• 21f3538f: bump python-ldap from 3.2.0 to 3.4.0 (#1002)
• ae516d84: bump reportlab from 3.5.34 to 3.5.55 (#978)
• 288f31bb: bump pip from 20.2.3 to 21.1 (#977)
• 8eab6366: bump babel from 2.8.0 to 2.9.1 (#944)
• 66373020: bump url-parse from 1.4.0 to 1.5.2 (#873)
• 299fa6d9: bump pillow from 8.3.1 to 8.3.2 (#882)
• b6495343: bump path-parse from 1.0.5 to 1.0.7 (#870)

Builders

• 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
• 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
• d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
• 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
• 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
• 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
• 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
• 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
• 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
• dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
• b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)

Buildman

• a79f7b6f: increase allowed grpc body size for log streams (#1234)
• ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
• 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
• 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
• a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
• 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
• a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
• eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
• b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)

CONTRIBUTING

• f0edbceb: document backporting process (#1043)

Cache

• ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)

Chore

• c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
• 2d56a8df: add logging during instance service key generation (#1276)
• 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
• a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
• 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
• 9bdbba6f: Remove unused files (#1067)
• 65100439: download aws ip ranges via github workflow (#1041)
• b7037d9c: Bump up config-tool version v0.1.9 (#992)
• 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
• ae129b45: Bump up config-tool version v0.1.8 (#984)
• c8092069: Bump up config-tool version (#983)
• ba08ddd7: Bump up config-tool version (#982)
• bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
• 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
• c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
• 16dcebf1: build and publish workflow (PROJQUAY-2556)
• 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)

Chore(Dockerfile)

• 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)

Chore: V3.6.3 Changelog Bump (Https

• 62e2eac1: //issues.redhat.com/browse/PROJQUAY-3028) (#1118)

Chore: V3.6.4 Changelog Bump (Https

• 992bc5c3: //issues.redhat.com/browse/PROJQUAY-3335) (#1162)

Chore: V3.6.5 Changelog Bump (Https

• 81db4e84: //issues.redhat.com/browse/PROJQUAY-3354) (#1211)

Chore: V3.6.6 Changelog Bump (Https

• d8a76c0d: //issues.redhat.com/browse/PROJQUAY-3635) (#1278)

Chore: V3.7.0 Changelog Bump (Https

• 8a54431d: //issues.redhat.com/browse/PROJQUAY-2411) (#1338)

Ci

• e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
• c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)

Clean.Sh

• 6b5e7f50: don't remove webfonts dir since its now versioned (#1025)

Cleanup

• 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)

Compliance

• ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)

Conf

• a07ba480: fix supervisord chunk worker template (#1259)

Config

• e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
• c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
• c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
• c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)

Config.Py

• d14da17a: Add support for source containers (PROJQUAY-2271) (#954)

Data

• a4ed9866: increase max len for proxy cache config credentials (#1241)

Data/Buildlogs

• e1ae52ee: format file with black (#1061)

Database

• 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
• 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
• c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)

Db

• eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)

Debug

• 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
• 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)

Defaults

• a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)

Deploy

• 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
• d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
• 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
• 1589351b: Add clair back fill worker deployment manifests (#991)
• 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
• 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
• 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
• 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
• 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)

Deps

• bb53127d: upgrade upstream requirements.txt package versions (#1072)

Dockerfile

• 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
• 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
• 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
• cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
• da558b0f: replace golang base image in production dockerfile (#928)
• 139c9abc: use separate dockerfile for production deployment (#927)
• 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)

Docs

• 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)

Documentation

• ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)

Editor

• 6f7dea7f: Bump config tool to v0.1.12 (PROJQUAY-3593) (#1267)

Email

• d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)

Endpoints/V2

• 59875347: handle generic proxy related errors (#1213)

Feat

• fe4d66b0: pull-thru proxy cache (#1053)
• fca67e77: mypy type annotations (PROJQUAY-740) (#455)

Fix

• d3809b2e: pin setuptools to version 57 (#885)

Fix

• c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)

Format

• ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)

Formatting

• e4390472: Update code to obey the linter (PROJQUAY-0) (#1057)

Gc

• 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)

Imagemirror

• 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)

Invoice

• 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)

Ipresolver

• b9557d14: update country mmdb (PROJQUAY-3031) (#1049)

Ldap

• c8a7e641: add test for user filter (PROJQUAY-2766) (#980)

Makefile

• 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)

Migration

• 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
• 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)

Mirror

• d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
• f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)

Namespacequota

• 61f4bd42: return 0 when namespace has no size yet (#1237)

Nginix

• 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)

Nginx

• aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
• 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
• de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
• ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
• 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
• 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
• 630d6f46: use bigger http/2 chunks for blobs (#630)

Notification

• 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
• a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)

Oci

• f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)

PROJQUAY-3750

• 2e2fefe5: support registries that do not return a digest header (#1313)

Proxy

• 1342a17b: make upstream related error message more actionable (#1240)
• b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
• f248d885: don't store entire blob in memory when caching (#1200)

Proxy Cache

• a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)

Proxy Cache

• 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)

Quay

• 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)

Quay UI

• 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)

Quay.Io

• 5debec58: Catching requests from impersonated principals (#869)

Quay.Io UI

• 20aef6a5: Fetching severity from cvss score and removing visibility… (#887)

Quayio

• 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
• 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)

Quota

• 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)

Quota

• f4093b0d: fix caching (PROJQUAY-3660) (#1291)
• 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
• 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
• eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)

Quota API

• a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
• 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)

Quota Management

• cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)

Quota UI

• d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
• a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
• 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
• f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
• 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
• 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)

QuotaManagement

• 15fa20a1: Reporting (PROJQUAY-2936) (#1048)

Realtime

• a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)

Refactor(Dockerfile)

• 5ad6e0ff: use pre-built centos 8 stream (#936)

Registry

• 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)

Registry_proxy_model

• 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)

Requirements

• 5c11e7a6: bump cryptography package version (#939)

Requirements-Osbs

• 12705e49: upgrade cryptography package (#943)

Requirements-Osbs.Txt

• f3e016f4: remove ipython and related deps (#1069)

Requirements.Txt

• 897e7e39: remove unused dependencies (#948)

Revert "Quayio

• 8324586e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)

Revert "Revert "Quayio

• 3140a62e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)" (#1289)

Revert "Schema1

• 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)

Revert "Secscan

• dd1eab52: add a global lock on security worker runs (PROJQUAY-3501) (#1226)" (#1232)

Schema1

• b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)

Secscan

• 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
• f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
• 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
• 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
• ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
• 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
• a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
• 922892d1: configure global lock (PROJQUAY-3501) (#1255)
• 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
• d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
• 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
• a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
• 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
• 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
• 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
• 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
• 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
• 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
• b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
• 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
• 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
• 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)

Sescan

• 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)

Setup

• fd190ad9: Export Quay modules (PROJQUAY-3181) (#1108)

Static

• a13baef9: vendor webfonts dir (#1016)
• ab499e8f: vendor external libraries (#1014)

Storage

• c9c91339: allow arbitrary endpoint url for azure storage (#1071)
• 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
• ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
• f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)

Superuser

• dad7dfaf: Fix display of build logs (PROJQUAY-3404) (#1185)

Teams

• 639833cc: admin team deletion (PROJQUAY-2080) (#1077)

Trigger_analyzer

• 861c247f: fix confusing print (PROJQUAY-1995) (#1073)

UI

• 3d6545b9: Quota UI enhancements (PROJQUAY-0000) (#1242)

Ui

• e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
• 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
• 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
• e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
• 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
• bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)

Util

• 42d1cdb4: update aws-ip-ranges.json (#1143)

Util/Ipresolver

• 9ee1c580: manually add aws-ip-ranges.json (#1065)

V2auth

• 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)

[Redhat-3.7] Quota Management

• 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)

v3.6.2 - 2021-12-02

Api

• 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)

Backport

• 0520aa7c: Quayio nvd data UI improvements (#957)

Build

• 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
• 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
• 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
• 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
• 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
• 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)

Build(Deps)

• 98c008e6: bump pillow from 8.3.1 to 8.3.2 (#882) (#958)
• c5488aa3: bump ssri from 6.0.1 to 6.0.2 (#818)
• 3c355223: bump flask-cors from 3.0.8 to 3.0.9 (#783)

Buildman

• f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
• bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)

Cache

• 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
• cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)

Chore

• 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
• b016844a: build and publish workflow (PROJQUAY-2556)
• 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
• 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
• 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
• a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
• 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
• 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)

Config

• c4ad61b5: define default oci artifact types (PROJQUAY-2334) (#877) (#881)

Db

• 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)

Defaults

• 26a06763: Update defaults in config and schema (PROJQUAY-2425) (#923) (#925)

Deploy

• ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
• d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)

Deployment

• 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)

Doc

• 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)

Dockerfile

• 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
• 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
• 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
• 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)

Email

• a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)

Fips

• 65363057: enforce smtp tls (PROJQUAY-1804) (#782) (#782)

Local-Dev

• eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)

Migration

• 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)

Mirror

• 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)

Modelcache

• b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
• df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)

Notification

• 5996cbec: check certs exists for webhooks (PROJQUAY-2424) (#886) (#900)

Oauth

• 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)

Oci

• 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
• 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
• 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)

Organization

• 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)

Python

• 2d0adf0c: bump pillow to 8.3.1 (PROJQUAY-2250) (#852)

Registry

• b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)

Release

• 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)

Repository

• a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)

Requirements

• 1f9a9aee: bump cryptography package version (#939) (#940)

Secscan

• 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
• 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
• 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)

Secscan

• fa0e8618: clair v4 enrichment (PROJQUAY-2102) (#840)

Static

• 3488e785: vendor webfonts dir (#1017)
• d93d85fa: vendor external libraries (#1015)

Templates

• 1c157e2a: escape templated script value (PROJQUAY-970) (#828)

Ui

• a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
• 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
• de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)

Util

• cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)

Utility

• 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)

v3.6.0-alpha.9 - 2021-04-21

Cache

• 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
• 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)

Chore

• 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
• 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
• addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
• ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)

Ci

• e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)

Deployment

• 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
• 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)

Gc

• efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
• f774e4c6: add metrics for deleted resources (#711)

Lock

• c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
• 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)

Queueworker

• 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)

v3.6.0-alpha.8 - 2021-04-09

Chore

• ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
• 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)

v3.6.0-alpha.7 - 2021-04-09

Chore

• b54c8999: v3.6.0-alpha.7 changelog bump (PROJQUAY-1486) (#730)
• bfc9d75c: fix cut-release.yml (PROJQUAY-1468) (#729)

v3.6.0-alpha.6 - 2021-04-09

Chore

• 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
• 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
• 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
• 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)

v3.6.0-alpha.5 - 2021-04-08

Release

• fba629b2: fixing Release action (PROJQUAY-1486) (#723)

v3.6.0-alpha.4 - 2021-04-08

Release

• 9dd55dee: fixing Release action (PROJQUAY-1486)

Historical Changelog

CHANGELOG.md

Red Hat Quay Release Notes

Red Hat Customer Portal

v3.8.9 - 2023-06-07

Chore

• 45487213: v3.8.9 changelog bump (PROJQUAY-5607) (#1946)
• 3747f70e: update ppc64le builder (#1911)
• b80166b0: Use external builders (#1910)

Proxy

• 47d50900: Allow anonymous pulls from registries (PROJQUAY-5273) (#1908)

Superuser

• 540cf0f8: paginate user's list (PROJQUAY-4297) (#1881) (#1909)

[Redhat-3.8] Superuser

• 9c198c69: paginating superuser organization list (PROJQUAY-4297) (#1896)

v3.8.8 - 2023-05-17

Chore

• 9c27dadc: v3.8.8 changelog bump (PROJQUAY-5514) (#1889)
• 517d3b35: Remove cachito magic for PyPDF2 (#1885)

Storagereplication

• 1cc45a7b: add retry logic without exhausting queue retries (PROJQUAY-4793) (#1884)

v3.8.7 - 2023-04-26

Chore

• d60d6e42: v3.8.7 changelog bump (PROJQUAY-5352) (#1836)
• 3db02218: Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) We were not enforcing the use of HTTP 1.1 when storage proxy was concerned. This causes problems in certain complex scenarios. (#1828)

v3.8.6 - 2023-04-12

Build(Deps)

• f218831c: bump certifi from 2019.11.28 to 2022.12.7 (#1823)

Chore

• 12b0bc23: v3.8.6 changelog bump (PROJQUAY-5279) (#1824)
• 7761140e: Pin distribution-spec conformance tests (#1816)

Storagereplication

• 3809d7ff: sleep on unexpected exception for retry (PROJQUAY-4792) (#1810)

v3.8.5 - 2023-03-21

Build(Deps)

• c38bbef9: bump setuptools from 63.4.0 to 65.5.1 (#1797)
• e4a562b5: reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) (#1644) (#1795)

Chore

• 9ca88389: v3.8.5 changelog bump (PROJQUAY-5228) (#1805)
• 5695cbf9: Downgrade cryptography to 3.3.2 (PROJQUAY-5120) (#1804)
• 5af451df: Add setuptools-rust as a build dependency (#1798)
• 7e2eab2e: backport requirements.txt changes (PROJQUAY-4777) (#1781)

[Redhat-3.8] Chore

• 54799d69: Bump pyOpenSSL and cryptography (PROJQUAY-5120) (#1796)

[Redhat-3.8] Security

• 3b38e859: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1801)

v3.8.4 - 2023-03-10

Chore

• abc58174: v3.8.4 changelog bump (PROJQUAY-5148) (#1780)
• 4b29cd5b: Bump Authlib (PROJQUAY-5120) (#1776)

Healthcheck

• 9858a0d8: fix invalid Exception attribute (PROJQUAY-5047) (#1783)

Permissions

• 0caa7786: lazy-load superuser permissions (PROJQUAY-5117) (#1779)

Storage

• 1c191a2f: add option to validate all configured storages (PROJQUAY-5074) (#1768)

Tox

• cd2cc5c3: allow /bin/sh (PROJQUAY-5092) (#1769)

v3.8.3 - 2023-02-28

Chore

• 02caa532: v3.8.3 changelog bump (PROJQUAY-5062) (#1766)

v3.8.2 - 2023-02-07

Build(Deps)

• 53ca62b8: bump oauthlib from 3.2.1 to 3.2.2 (#1742)
• 1ab53c38: bump pillow from 9.0.1 to 9.3.0 (#1739)

Chore

• 7547f6f5: Remove appr dependencies (PROJQUAY-4992) (#1743)
• ce694e04: remove deprecated appr code (PROJQUAY-4992) (#1729)

Config

• 08fae2ee: clean upload folder by default (PROJQUAY-4395) (#1741)

Logs

• 8c562906: Add repository information for build audit logs (PROJQUAY-4726) (#1720)

v3.8.1 - 2023-01-24

Chore

• 136e9734: v3.8.1 changelog bump (PROJQUAY-4716) (#1723)

Chore: V3.7.11 Changelog Bump (Https

• 8238c755: //issues.redhat.com/browse/PROJQUAY-4790) (#1722)

Cors

• 8f4cae04: Adding missing method type (PROJQUAY-4800) (#1660)

Logs

• c722d6df: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1701)

Nginx

• 006779bd: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1673)

Oci/Index.Py

• d7371d1e: support docker schema2 sub-manifest types (#1661)

Superusers

• 68ec0579: gives superusers access to team invite api (PROJQUAY-4765) (#1702)

UI

• 013f96fd: Fix redirection to user/org page (PROJQUAY-4667) (#1659)

Ui

• 3a3daeb5: Repository settings feature flag (PROJQUAY-4565) (#1689)
• 95f3064c: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1672)

v3.8.0 - 2022-11-26

Api

• 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
• aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
• d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
• 871c43ea: handle missing tag on DELETE tag api (#1444)
• bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)

Arch

• 0f0cc408: Map aarch64 to arm64 in ARCH variable (#1606)

Auth

• 734f7f9d: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1608)
• 3ae26f5e: Speed up permissions loading (PROJQUAY-4004) (#1582)
• 6ed0bcde: allow rs384 in jwt (PROJQUAY-4148) (#1449)

Billing

• 78896aa0: fix new private repo count (PROJQUAY-4208) (#1463)
• 17778979: add new larger stripe plan (PROJQUAY-4208) (#1462)

Bug

• ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
• 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)

Build(Deps)

• 9a1de19f: bump angular and @types/angular (#1451)
• 0c62c0ee: bump terser from 4.3.4 to 4.8.1 (#1452)
• 0f2ebdaf: bump moment from 2.29.2 to 2.29.4 (#1442)

Builders

• b8d3e174: Add cacert's to build agent (PROJQUAY-3819) (#1398)
• d11d45f2: Send notifications on build completion (PROJQUAY-3614) (#1346)
• 1d2e55b6: Set imagePullPolicy to always (PROJQUAY-3507) (#1330)
• 3a63fd71: Add dnsPolicy option (PROJQUAY-3755) (#1305)

Buildman

• e3b170ea: fix type when getting ec2 ami (#1328)

Bump

• b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)

CI

• e566560f: Commenting arm docker build (PROJQUAY-0000) (#1522)

Chore

• f4828fde: Add georeplication variable check (PROJQUAY-4363) (#1499)
• 8e1fba48: Fix startup script (#1402)
• cf52f5e3: Use Python 3.9 (#1382)
• 5eaf0584: Run mypy as CI job (#1363)
• 13f8e0c4: Rebuild quay image if requirements.txt is changed (#1342)

Chore: V3.6.8 Changelog Bump (Https

• f69b1309: //issues.redhat.com/browse/PROJQUAY-3990) (#1419)

Chore: V3.6.9 Changelog Bump (Https

• b44df459: //issues.redhat.com/browse/PROJQUAY-4192) (#1466)

Chore: V3.7.0 Changelog Bump (Https

• e85372d0: //issues.redhat.com/browse/PROJQUAY-2411) (#1337)

Chore: V3.7.1 Changelog Bump (Https

• e76db133: //issues.redhat.com/browse/PROJQUAY-3836) (#1372)

Chore: V3.7.10 Changelog Bump (Https

• 9f3c1699: //issues.redhat.com/browse/PROJQUAY-4627) (#1593)

Chore: V3.7.3 Changelog Bump (Https

• a55c63e7: //issues.redhat.com/browse/PROJQUAY-3989) (#1420)

Chore: V3.7.4 Changelog Bump (Https

• a5279983: //issues.redhat.com/browse/PROJQUAY-4050) (#1446)

Chore: V3.7.5 Changelog Bump (Https

• cc26275d: //issues.redhat.com/browse/PROJQUAY-4172) (#1458)

Chore: V3.7.6 Changelog Bump (Https

• e1a14f5c: //issues.redhat.com/browse/PROJQUAY-4237) (#1480)

Chore: V3.7.7 Changelog Bump (Https

• fcdd0e12: //issues.redhat.com/browse/PROJQUAY-4286) (#1508)

Chore: V3.7.8 Changelog Bump (Https

• 292d33f2: //issues.redhat.com/browse/PROJQUAY-4385) (#1517)

Chore: V3.7.9 Changelog Bump (Https

• 6438a8c6: //issues.redhat.com/browse/PROJQUAY-4478) (#1570)

Ci

• 07c8a75f: Check arm64 builds in CI (PROJQUAY-4038) (#1431)

Cleanup

• eb2cda16: Remove old validation code (PROJQUAY-4606) (#1586)

Conf/Nginx

• f45c68eb: mark beginning of string in oauth location match (#1550)

Dev

• d3cc640f: Update Clair for dev (PROJQUAY-4461) (#1528)
• 04af141a: Add pre-commit script to run black (PROJQUAY-4039) (#1432)

Doc

• 34cd7d09: update Instructions for Deploying on OpenShift (#1537)

Dockerfile

• f0f31e0b: use nodejs ubi8 image to build frontends (#1355)

Export Compliance

• adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)

Fix

• 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
• f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)

GUI

• 020b3abe: Show how to pull an image using podman pull (#1332)

Healthcheck

• c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)

Init

• e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
• 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
• 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)

Logs

• 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)

Makefile

• 692e3cee: use non-standard port for postgres test container (#1485)
• fd4e7723: use variable to tell postgres test target which tests to run (#1475)

Mirror

• 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
• 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
• 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)

Mirroring

• 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)

Nginx

• 30bf4050: mark beginning of string in location match (#1546)

Oauth

• 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
• 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)

PROJQUAY-3750

• ac6a8d2f: support registries that do not return a digest header (#1310)

Proxy Cache

• 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)

Pull-Thru

• d029a465: bump expiration of all parent manifest lists on pull (#1336)

Quay

• 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)

Quayio

• b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)

Quota

• f90e5e3d: Configuring Quota for user panel(PROJQUAY-3767) (#1334)
• 1e4871ec: Add Cache To Tag Delete (PROJQUAY-3828) (#1345)

Quota

• a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
• f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
• 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)

Quota Management

• 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)

Quota UI

• a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
• 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)

Registry

• c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)

Requirements.Txt

• 46cd48dd: bump flask-restful from 0.3.7 to 0.3.9 (#1375)

Revert "Chore

• 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)

Rhsso

• 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)

Schema1

• b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)

Secscan

• 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
• 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
• 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
• 776dbd90: update https proxy scheme (#1340)

Sso

• ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
• 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
• f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
• 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
• 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
• 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)

Storage

• 47564690: handle KeyError we sometimes get from aws (#1543)
• a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
• e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
• 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)

Superusers

• acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)

Task

• eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)

UI

• ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
• c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)

Ui

• 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
• 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
• b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
• 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
• 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
• d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)

User

• 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)

Users

• 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
• 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
• 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
• 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
• c4595fbb: when set, grant superusers repository permissions. (#1622)
• f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
• 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
• 14e87bd4: fix missing references in ldap for superusers (#1542)
• 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)

V2auth

• fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)

[Redhat-3.8] Arch

• 2e6f9b1e: add ppc64le support to quay (PROJQUAY-4595) (#1558)

[Redhat-3.8] Chore

• 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)

[Redhat-3.8] Config

• 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)

[Redhat-3.8] Repomirror

• 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)

v3.7.11 - 2022-12-01

Chore: V3.7.11 Changelog Bump (Https

• 5b1d1f67: //issues.redhat.com/browse/PROJQUAY-4790) (#1652)

Revert "Chore

• f61ba511: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1647)

v3.7.10 - 2022-10-25

Auth

• b619da30: Speed up permissions loading (PROJQUAY-4004) (#1581)

Chore: V3.7.10 Changelog Bump (Https

• 59937c6d: //issues.redhat.com/browse/PROJQUAY-4627) (#1592)

Secscan

• 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)

[Redhat-3.7] Chore

• 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)

v3.7.9 - 2022-10-17

Chore: V3.7.9 Changelog Bump (Https

• f65a235e: //issues.redhat.com/browse/PROJQUAY-4478) (#1569)

Storage

• 4d44be98: handle KeyError we sometimes get from aws (#1544)

v3.7.8 - 2022-09-12

Chore: V3.7.7 Changelog Bump (Https

• 40b023fd: //issues.redhat.com/browse/PROJQUAY-4286) (#1509)

Chore: V3.7.8 Changelog Bump (Https

• 53f866cc: //issues.redhat.com/browse/PROJQUAY-4385) (#1518)

Healthcheck

• 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)

[Redhat-3.7] Bug

• 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
• 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)

[Redhat-3.7] Ci

• 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)

v3.7.7 - 2022-08-29

Mirror

• 72a4d353: Rollback failed tags (PROJQUAY-4322) (#1501)
• 21931a63: Default mirror rollback to false (PROJQUAY-4296) (#1491)

Registry

• b7f3434a: correctly bump tag expiration when tag changes upstream (#1484)

v3.7.6 - 2022-08-15

Chore: V3.7.6 Changelog Bump (Https

• 01b30c2d: //issues.redhat.com/browse/PROJQUAY-4237) (#1480) (#1481)

Fix

• dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)

Proxy Cache

• f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)

v3.7.5 - 2022-07-26

Auth

• f435b9e6: allow rs384 in jwt (PROJQUAY-4148) (#1450)

Chore: V3.7.4 Changelog Bump (Https

• 10edbe6d: //issues.redhat.com/browse/PROJQUAY-4050) (#1446) (#1447)

Chore: V3.7.5 Changelog Bump (Https

• 564f3f0c: //issues.redhat.com/browse/PROJQUAY-4172) (#1460)

Mirroring

• eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)

v3.7.4 - 2022-07-07

Builders

• 92d694aa: Add cacert's to build agent (PROJQUAY-3819) (#1398) (#1436)

Mirror

• c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)

v3.7.3 - 2022-06-28

Chore: V3.7.3 Changelog Bump (Https

• 50f24e2f: //issues.redhat.com/browse/PROJQUAY-3989) (#1420) (#1421)

Storage

• 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)

[Redhat-3.7] Ui

• 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)

v3.7.2 - 2022-06-22

Builders

• ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)

Chore: V3.7.1 Changelog Bump (Https

• ece9d54f: //issues.redhat.com/browse/PROJQUAY-3836) (#1373)

Chore: V3.7.2 Changelog Bump (Https

• 78814ef2: //issues.redhat.com/browse/PROJQUAY-3932) (#1406)

Fix

• 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)

GUI

• 5487b269: Show how to pull an image using podman pull (#1377)

Quota

• af28e832: Fix calculating org size (PROJQUAY-3889) (#1393)
• 058b9d34: Fix join on caching repo size (PROJQUAY-3889) (#1381)

Requirements.Txt

• c0cdee4e: bump flask-restful from 0.3.7 to 0.3.9 (#1376)

UI

• abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)

[Redhat-3.7] Quota UI

• 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)

v3.7.1 - 2022-06-06

Init

• e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
• cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
• c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)

Pull-Thru

• a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)

[Redhat-3.7] Quota

• abe1528d: Configuring Quota for user panel(PROJQUAY-3767) (#1353)
• 0cafea97: Add Cache To Tag Delete (PROJQUAY-3828) (#1347)

[Redhat-3.7] UI

• 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)

v3.7.0 - 2022-05-23

API

• 2dca65f9: Removing internal only decorator from exposed Super user endpoints (#1271)

Api

• 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
• 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)

App.Py

• b4600553: filter proxy cache login details from debug logs (#1268)

Auth

• 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
• edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
• 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
• 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)

Billing

• 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
• 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
• 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)

Blobuploadcleanupworker

• f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
• 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)

Build

• 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
• fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
• eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
• 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
• a347d316: Update backup base image name (PROJQUAY-2372) (#965)
• d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
• af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
• e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
• d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
• 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)

Build(Deps)

• 4ee715c9: bump is-my-json-valid from 2.16.0 to 2.20.6 (#1058)
• b009590c: bump ajv from 6.10.2 to 6.12.6 (#1112)
• 4176c498: bump moment from 2.17.1 to 2.29.2 (#1236)
• 723fd599: bump url-parse from 1.5.8 to 1.5.9 (#1168)
• 4b4f16e1: bump url-parse from 1.5.6 to 1.5.8 (#1151)
• 49c56aa1: bump url-parse from 1.5.2 to 1.5.6 (#1125)
• c96d1fbc: bump protobuf from 3.12.2 to 3.15.0 (#1110)
• 102705c9: bump pillow from 8.3.2 to 9.0.0 (#1059)
• e7e093b0: bump qs from 6.3.1 to 6.3.3 (#1086)
• 88956630: bump y18n from 3.2.1 to 3.2.2 (#1080)
• 21f3538f: bump python-ldap from 3.2.0 to 3.4.0 (#1002)
• ae516d84: bump reportlab from 3.5.34 to 3.5.55 (#978)
• 288f31bb: bump pip from 20.2.3 to 21.1 (#977)
• 8eab6366: bump babel from 2.8.0 to 2.9.1 (#944)
• 66373020: bump url-parse from 1.4.0 to 1.5.2 (#873)
• 299fa6d9: bump pillow from 8.3.1 to 8.3.2 (#882)
• b6495343: bump path-parse from 1.0.5 to 1.0.7 (#870)

Builders

• 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
• 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
• d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
• 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
• 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
• 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
• 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
• 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
• 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
• dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
• b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)

Buildman

• a79f7b6f: increase allowed grpc body size for log streams (#1234)
• ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
• 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
• 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
• a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
• 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
• a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
• eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
• b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)

CONTRIBUTING

• f0edbceb: document backporting process (#1043)

Cache

• ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)

Chore

• c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
• 2d56a8df: add logging during instance service key generation (#1276)
• 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
• a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
• 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
• 9bdbba6f: Remove unused files (#1067)
• 65100439: download aws ip ranges via github workflow (#1041)
• b7037d9c: Bump up config-tool version v0.1.9 (#992)
• 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
• ae129b45: Bump up config-tool version v0.1.8 (#984)
• c8092069: Bump up config-tool version (#983)
• ba08ddd7: Bump up config-tool version (#982)
• bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
• 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
• c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
• 16dcebf1: build and publish workflow (PROJQUAY-2556)
• 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)

Chore(Dockerfile)

• 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)

Chore: V3.6.3 Changelog Bump (Https

• 62e2eac1: //issues.redhat.com/browse/PROJQUAY-3028) (#1118)

Chore: V3.6.4 Changelog Bump (Https

• 992bc5c3: //issues.redhat.com/browse/PROJQUAY-3335) (#1162)

Chore: V3.6.5 Changelog Bump (Https

• 81db4e84: //issues.redhat.com/browse/PROJQUAY-3354) (#1211)

Chore: V3.6.6 Changelog Bump (Https

• d8a76c0d: //issues.redhat.com/browse/PROJQUAY-3635) (#1278)

Chore: V3.7.0 Changelog Bump (Https

• 8a54431d: //issues.redhat.com/browse/PROJQUAY-2411) (#1338)

Ci

• e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
• c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)

Clean.Sh

• 6b5e7f50: don't remove webfonts dir since its now versioned (#1025)

Cleanup

• 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)

Compliance

• ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)

Conf

• a07ba480: fix supervisord chunk worker template (#1259)

Config

• e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
• c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
• c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
• c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)

Config.Py

• d14da17a: Add support for source containers (PROJQUAY-2271) (#954)

Data

• a4ed9866: increase max len for proxy cache config credentials (#1241)

Data/Buildlogs

• e1ae52ee: format file with black (#1061)

Database

• 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
• 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
• c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)

Db

• eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)

Debug

• 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
• 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)

Defaults

• a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)

Deploy

• 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
• d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
• 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
• 1589351b: Add clair back fill worker deployment manifests (#991)
• 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
• 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
• 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
• 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
• 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)

Deps

• bb53127d: upgrade upstream requirements.txt package versions (#1072)

Dockerfile

• 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
• 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
• 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
• cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
• da558b0f: replace golang base image in production dockerfile (#928)
• 139c9abc: use separate dockerfile for production deployment (#927)
• 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)

Docs

• 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)

Documentation

• ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)

Editor

• 6f7dea7f: Bump config tool to v0.1.12 (PROJQUAY-3593) (#1267)

Email

• d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)

Endpoints/V2

• 59875347: handle generic proxy related errors (#1213)

Feat

• fe4d66b0: pull-thru proxy cache (#1053)
• fca67e77: mypy type annotations (PROJQUAY-740) (#455)

Fix

• d3809b2e: pin setuptools to version 57 (#885)

Fix

• c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)

Format

• ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)

Formatting

• e4390472: Update code to obey the linter (PROJQUAY-0) (#1057)

Gc

• 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)

Imagemirror

• 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)

Invoice

• 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)

Ipresolver

• b9557d14: update country mmdb (PROJQUAY-3031) (#1049)

Ldap

• c8a7e641: add test for user filter (PROJQUAY-2766) (#980)

Makefile

• 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)

Migration

• 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
• 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)

Mirror

• d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
• f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)

Namespacequota

• 61f4bd42: return 0 when namespace has no size yet (#1237)

Nginix

• 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)

Nginx

• aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
• 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
• de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
• ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
• 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
• 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
• 630d6f46: use bigger http/2 chunks for blobs (#630)

Notification

• 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
• a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)

Oci

• f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)

PROJQUAY-3750

• 2e2fefe5: support registries that do not return a digest header (#1313)

Proxy

• 1342a17b: make upstream related error message more actionable (#1240)
• b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
• f248d885: don't store entire blob in memory when caching (#1200)

Proxy Cache

• a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)

Proxy Cache

• 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)

Quay

• 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)

Quay UI

• 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)

Quay.Io

• 5debec58: Catching requests from impersonated principals (#869)

Quay.Io UI

• 20aef6a5: Fetching severity from cvss score and removing visibility… (#887)

Quayio

• 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
• 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)

Quota

• 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)

Quota

• f4093b0d: fix caching (PROJQUAY-3660) (#1291)
• 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
• 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
• eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)

Quota API

• a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
• 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)

Quota Management

• cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)

Quota UI

• d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
• a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
• 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
• f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
• 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
• 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)

QuotaManagement

• 15fa20a1: Reporting (PROJQUAY-2936) (#1048)

Realtime

• a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)

Refactor(Dockerfile)

• 5ad6e0ff: use pre-built centos 8 stream (#936)

Registry

• 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)

Registry_proxy_model

• 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)

Requirements

• 5c11e7a6: bump cryptography package version (#939)

Requirements-Osbs

• 12705e49: upgrade cryptography package (#943)

Requirements-Osbs.Txt

• f3e016f4: remove ipython and related deps (#1069)

Requirements.Txt

• 897e7e39: remove unused dependencies (#948)

Revert "Quayio

• 8324586e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)

Revert "Revert "Quayio

• 3140a62e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)" (#1289)

Revert "Schema1

• 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)

Revert "Secscan

• dd1eab52: add a global lock on security worker runs (PROJQUAY-3501) (#1226)" (#1232)

Schema1

• b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)

Secscan

• 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
• f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
• 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
• 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
• ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
• 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
• a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
• 922892d1: configure global lock (PROJQUAY-3501) (#1255)
• 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
• d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
• 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
• a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
• 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
• 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
• 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
• 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
• 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
• 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
• b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
• 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
• 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
• 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)

Sescan

• 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)

Setup

• fd190ad9: Export Quay modules (PROJQUAY-3181) (#1108)

Static

• a13baef9: vendor webfonts dir (#1016)
• ab499e8f: vendor external libraries (#1014)

Storage

• c9c91339: allow arbitrary endpoint url for azure storage (#1071)
• 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
• ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
• f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)

Superuser

• dad7dfaf: Fix display of build logs (PROJQUAY-3404) (#1185)

Teams

• 639833cc: admin team deletion (PROJQUAY-2080) (#1077)

Trigger_analyzer

• 861c247f: fix confusing print (PROJQUAY-1995) (#1073)

UI

• 3d6545b9: Quota UI enhancements (PROJQUAY-0000) (#1242)

Ui

• e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
• 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
• 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
• e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
• 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
• bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)

Util

• 42d1cdb4: update aws-ip-ranges.json (#1143)

Util/Ipresolver

• 9ee1c580: manually add aws-ip-ranges.json (#1065)

V2auth

• 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)

[Redhat-3.7] Quota Management

• 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)

v3.6.2 - 2021-12-02

Api

• 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)

Backport

• 0520aa7c: Quayio nvd data UI improvements (#957)

Build

• 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
• 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
• 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
• 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
• 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
• 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)

Build(Deps)

• 98c008e6: bump pillow from 8.3.1 to 8.3.2 (#882) (#958)
• c5488aa3: bump ssri from 6.0.1 to 6.0.2 (#818)
• 3c355223: bump flask-cors from 3.0.8 to 3.0.9 (#783)

Buildman

• f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
• bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)

Cache

• 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
• cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)

Chore

• 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
• b016844a: build and publish workflow (PROJQUAY-2556)
• 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
• 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
• 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
• a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
• 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
• 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)

Config

• c4ad61b5: define default oci artifact types (PROJQUAY-2334) (#877) (#881)

Db

• 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)

Defaults

• 26a06763: Update defaults in config and schema (PROJQUAY-2425) (#923) (#925)

Deploy

• ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
• d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)

Deployment

• 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)

Doc

• 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)

Dockerfile

• 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
• 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
• 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
• 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)

Email

• a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)

Fips

• 65363057: enforce smtp tls (PROJQUAY-1804) (#782) (#782)

Local-Dev

• eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)

Migration

• 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)

Mirror

• 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)

Modelcache

• b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
• df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)

Notification

• 5996cbec: check certs exists for webhooks (PROJQUAY-2424) (#886) (#900)

Oauth

• 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)

Oci

• 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
• 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
• 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)

Organization

• 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)

Python

• 2d0adf0c: bump pillow to 8.3.1 (PROJQUAY-2250) (#852)

Registry

• b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)

Release

• 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)

Repository

• a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)

Requirements

• 1f9a9aee: bump cryptography package version (#939) (#940)

Secscan

• 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
• 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
• 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)

Secscan

• fa0e8618: clair v4 enrichment (PROJQUAY-2102) (#840)

Static

• 3488e785: vendor webfonts dir (#1017)
• d93d85fa: vendor external libraries (#1015)

Templates

• 1c157e2a: escape templated script value (PROJQUAY-970) (#828)

Ui

• a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
• 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
• de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)

Util

• cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)

Utility

• 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)

v3.6.0-alpha.9 - 2021-04-21

Cache

• 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
• 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)

Chore

• 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
• 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
• addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
• ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)

Ci

• e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)

Deployment

• 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
• 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)

Gc

• efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
• f774e4c6: add metrics for deleted resources (#711)

Lock

• c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
• 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)

Queueworker

• 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)

v3.6.0-alpha.8 - 2021-04-09

Chore

• ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
• 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)

v3.6.0-alpha.7 - 2021-04-09

Chore

• b54c8999: v3.6.0-alpha.7 changelog bump (PROJQUAY-1486) (#730)
• bfc9d75c: fix cut-release.yml (PROJQUAY-1468) (#729)

v3.6.0-alpha.6 - 2021-04-09

Chore

• 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
• 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
• 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
• 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)

v3.6.0-alpha.5 - 2021-04-08

Release

• fba629b2: fixing Release action (PROJQUAY-1486) (#723)

v3.6.0-alpha.4 - 2021-04-08

Release

• 9dd55dee: fixing Release action (PROJQUAY-1486)

Historical Changelog

CHANGELOG.md

What's Changed

• [redhat-3.7] Revert "chore: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4773) by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1647
• [redhat-3.7] v3.7.11 Changelog Bump by @openshift-cherrypick-robot in https://github.com/quay/quay/pull/1652

Full Changelog: https://github.com/quay/quay/compare/v3.7.10...v3.7.11

Red Hat Quay Release Notes

Red Hat Customer Portal

v3.8.8 - 2023-05-17

Chore

• 9c27dadc: v3.8.8 changelog bump (PROJQUAY-5514) (#1889)
• 517d3b35: Remove cachito magic for PyPDF2 (#1885)

Storagereplication

• 1cc45a7b: add retry logic without exhausting queue retries (PROJQUAY-4793) (#1884)

v3.8.7 - 2023-04-26

Chore

• d60d6e42: v3.8.7 changelog bump (PROJQUAY-5352) (#1836)
• 3db02218: Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) We were not enforcing the use of HTTP 1.1 when storage proxy was concerned. This causes problems in certain complex scenarios. (#1828)

v3.8.6 - 2023-04-12

Build(Deps)

• f218831c: bump certifi from 2019.11.28 to 2022.12.7 (#1823)

Chore

• 12b0bc23: v3.8.6 changelog bump (PROJQUAY-5279) (#1824)
• 7761140e: Pin distribution-spec conformance tests (#1816)

Storagereplication

• 3809d7ff: sleep on unexpected exception for retry (PROJQUAY-4792) (#1810)

v3.8.5 - 2023-03-21

Build(Deps)

• c38bbef9: bump setuptools from 63.4.0 to 65.5.1 (#1797)
• e4a562b5: reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) (#1644) (#1795)

Chore

• 9ca88389: v3.8.5 changelog bump (PROJQUAY-5228) (#1805)
• 5695cbf9: Downgrade cryptography to 3.3.2 (PROJQUAY-5120) (#1804)
• 5af451df: Add setuptools-rust as a build dependency (#1798)
• 7e2eab2e: backport requirements.txt changes (PROJQUAY-4777) (#1781)

[Redhat-3.8] Chore

• 54799d69: Bump pyOpenSSL and cryptography (PROJQUAY-5120) (#1796)

[Redhat-3.8] Security

• 3b38e859: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1801)

v3.8.4 - 2023-03-10

Chore

• abc58174: v3.8.4 changelog bump (PROJQUAY-5148) (#1780)
• 4b29cd5b: Bump Authlib (PROJQUAY-5120) (#1776)

Healthcheck

• 9858a0d8: fix invalid Exception attribute (PROJQUAY-5047) (#1783)

Permissions

• 0caa7786: lazy-load superuser permissions (PROJQUAY-5117) (#1779)

Storage

• 1c191a2f: add option to validate all configured storages (PROJQUAY-5074) (#1768)

Tox

• cd2cc5c3: allow /bin/sh (PROJQUAY-5092) (#1769)

v3.8.3 - 2023-02-28

Chore

• 02caa532: v3.8.3 changelog bump (PROJQUAY-5062) (#1766)

v3.8.2 - 2023-02-07

Build(Deps)

• 53ca62b8: bump oauthlib from 3.2.1 to 3.2.2 (#1742)
• 1ab53c38: bump pillow from 9.0.1 to 9.3.0 (#1739)

Chore

• 7547f6f5: Remove appr dependencies (PROJQUAY-4992) (#1743)
• ce694e04: remove deprecated appr code (PROJQUAY-4992) (#1729)

Config

• 08fae2ee: clean upload folder by default (PROJQUAY-4395) (#1741)

Logs

• 8c562906: Add repository information for build audit logs (PROJQUAY-4726) (#1720)

v3.8.1 - 2023-01-24

Chore

• 136e9734: v3.8.1 changelog bump (PROJQUAY-4716) (#1723)

Chore: V3.7.11 Changelog Bump (Https

• 8238c755: //issues.redhat.com/browse/PROJQUAY-4790) (#1722)

Cors

• 8f4cae04: Adding missing method type (PROJQUAY-4800) (#1660)

Logs

• c722d6df: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1701)

Nginx

• 006779bd: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1673)

Oci/Index.Py

• d7371d1e: support docker schema2 sub-manifest types (#1661)

Superusers

• 68ec0579: gives superusers access to team invite api (PROJQUAY-4765) (#1702)

UI

• 013f96fd: Fix redirection to user/org page (PROJQUAY-4667) (#1659)

Ui

• 3a3daeb5: Repository settings feature flag (PROJQUAY-4565) (#1689)
• 95f3064c: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1672)

v3.8.0 - 2022-11-26

Api

• 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
• aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
• d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
• 871c43ea: handle missing tag on DELETE tag api (#1444)
• bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)

Arch

• 0f0cc408: Map aarch64 to arm64 in ARCH variable (#1606)

Auth

• 734f7f9d: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1608)
• 3ae26f5e: Speed up permissions loading (PROJQUAY-4004) (#1582)
• 6ed0bcde: allow rs384 in jwt (PROJQUAY-4148) (#1449)

Billing

• 78896aa0: fix new private repo count (PROJQUAY-4208) (#1463)
• 17778979: add new larger stripe plan (PROJQUAY-4208) (#1462)

Bug

• ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
• 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)

Build(Deps)

• 9a1de19f: bump angular and @types/angular (#1451)
• 0c62c0ee: bump terser from 4.3.4 to 4.8.1 (#1452)
• 0f2ebdaf: bump moment from 2.29.2 to 2.29.4 (#1442)

Builders

• b8d3e174: Add cacert's to build agent (PROJQUAY-3819) (#1398)
• d11d45f2: Send notifications on build completion (PROJQUAY-3614) (#1346)
• 1d2e55b6: Set imagePullPolicy to always (PROJQUAY-3507) (#1330)
• 3a63fd71: Add dnsPolicy option (PROJQUAY-3755) (#1305)

Buildman

• e3b170ea: fix type when getting ec2 ami (#1328)

Bump

• b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)

CI

• e566560f: Commenting arm docker build (PROJQUAY-0000) (#1522)

Chore

• f4828fde: Add georeplication variable check (PROJQUAY-4363) (#1499)
• 8e1fba48: Fix startup script (#1402)
• cf52f5e3: Use Python 3.9 (#1382)
• 5eaf0584: Run mypy as CI job (#1363)
• 13f8e0c4: Rebuild quay image if requirements.txt is changed (#1342)

Chore: V3.6.8 Changelog Bump (Https

• f69b1309: //issues.redhat.com/browse/PROJQUAY-3990) (#1419)

Chore: V3.6.9 Changelog Bump (Https

• b44df459: //issues.redhat.com/browse/PROJQUAY-4192) (#1466)

Chore: V3.7.0 Changelog Bump (Https

• e85372d0: //issues.redhat.com/browse/PROJQUAY-2411) (#1337)

Chore: V3.7.1 Changelog Bump (Https

• e76db133: //issues.redhat.com/browse/PROJQUAY-3836) (#1372)

Chore: V3.7.10 Changelog Bump (Https

• 9f3c1699: //issues.redhat.com/browse/PROJQUAY-4627) (#1593)

Chore: V3.7.3 Changelog Bump (Https

• a55c63e7: //issues.redhat.com/browse/PROJQUAY-3989) (#1420)

Chore: V3.7.4 Changelog Bump (Https

• a5279983: //issues.redhat.com/browse/PROJQUAY-4050) (#1446)

Chore: V3.7.5 Changelog Bump (Https

• cc26275d: //issues.redhat.com/browse/PROJQUAY-4172) (#1458)

Chore: V3.7.6 Changelog Bump (Https

• e1a14f5c: //issues.redhat.com/browse/PROJQUAY-4237) (#1480)

Chore: V3.7.7 Changelog Bump (Https

• fcdd0e12: //issues.redhat.com/browse/PROJQUAY-4286) (#1508)

Chore: V3.7.8 Changelog Bump (Https

• 292d33f2: //issues.redhat.com/browse/PROJQUAY-4385) (#1517)

Chore: V3.7.9 Changelog Bump (Https

• 6438a8c6: //issues.redhat.com/browse/PROJQUAY-4478) (#1570)

Ci

• 07c8a75f: Check arm64 builds in CI (PROJQUAY-4038) (#1431)

Cleanup

• eb2cda16: Remove old validation code (PROJQUAY-4606) (#1586)

Conf/Nginx

• f45c68eb: mark beginning of string in oauth location match (#1550)

Dev

• d3cc640f: Update Clair for dev (PROJQUAY-4461) (#1528)
• 04af141a: Add pre-commit script to run black (PROJQUAY-4039) (#1432)

Doc

• 34cd7d09: update Instructions for Deploying on OpenShift (#1537)

Dockerfile

• f0f31e0b: use nodejs ubi8 image to build frontends (#1355)

Export Compliance

• adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)

Fix

• 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
• f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)

GUI

• 020b3abe: Show how to pull an image using podman pull (#1332)

Healthcheck

• c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)

Init

• e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
• 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
• 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)

Logs

• 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)

Makefile

• 692e3cee: use non-standard port for postgres test container (#1485)
• fd4e7723: use variable to tell postgres test target which tests to run (#1475)

Mirror

• 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
• 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
• 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)

Mirroring

• 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)

Nginx

• 30bf4050: mark beginning of string in location match (#1546)

Oauth

• 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
• 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)

PROJQUAY-3750

• ac6a8d2f: support registries that do not return a digest header (#1310)

Proxy Cache

• 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)

Pull-Thru

• d029a465: bump expiration of all parent manifest lists on pull (#1336)

Quay

• 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)

Quayio

• b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)

Quota

• f90e5e3d: Configuring Quota for user panel(PROJQUAY-3767) (#1334)
• 1e4871ec: Add Cache To Tag Delete (PROJQUAY-3828) (#1345)

Quota

• a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
• f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
• 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)

Quota Management

• 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)

Quota UI

• a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
• 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)

Registry

• c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)

Requirements.Txt

• 46cd48dd: bump flask-restful from 0.3.7 to 0.3.9 (#1375)

Revert "Chore

• 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)

Rhsso

• 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)

Schema1

• b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)

Secscan

• 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
• 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
• 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
• 776dbd90: update https proxy scheme (#1340)

Sso

• ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
• 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
• f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
• 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
• 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
• 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)

Storage

• 47564690: handle KeyError we sometimes get from aws (#1543)
• a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
• e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
• 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)

Superusers

• acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)

Task

• eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)

UI

• ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
• c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)

Ui

• 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
• 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
• b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
• 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
• 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
• d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)

User

• 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)

Users

• 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
• 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
• 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
• 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
• c4595fbb: when set, grant superusers repository permissions. (#1622)
• f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
• 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
• 14e87bd4: fix missing references in ldap for superusers (#1542)
• 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)

V2auth

• fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)

[Redhat-3.8] Arch

• 2e6f9b1e: add ppc64le support to quay (PROJQUAY-4595) (#1558)

[Redhat-3.8] Chore

• 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)

[Redhat-3.8] Config

• 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)

[Redhat-3.8] Repomirror

• 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)

v3.7.10 - 2022-10-25

Auth

• b619da30: Speed up permissions loading (PROJQUAY-4004) (#1581)

Chore: V3.7.10 Changelog Bump (Https

• 59937c6d: //issues.redhat.com/browse/PROJQUAY-4627) (#1592)

Secscan

• 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)

[Redhat-3.7] Chore

• 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)

v3.7.9 - 2022-10-17

Chore: V3.7.9 Changelog Bump (Https

• f65a235e: //issues.redhat.com/browse/PROJQUAY-4478) (#1569)

Storage

• 4d44be98: handle KeyError we sometimes get from aws (#1544)

v3.7.8 - 2022-09-12

Chore: V3.7.7 Changelog Bump (Https

• 40b023fd: //issues.redhat.com/browse/PROJQUAY-4286) (#1509)

Chore: V3.7.8 Changelog Bump (Https

• 53f866cc: //issues.redhat.com/browse/PROJQUAY-4385) (#1518)

Healthcheck

• 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)

[Redhat-3.7] Bug

• 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
• 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)

[Redhat-3.7] Ci

• 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)

v3.7.7 - 2022-08-29

Mirror

• 72a4d353: Rollback failed tags (PROJQUAY-4322) (#1501)
• 21931a63: Default mirror rollback to false (PROJQUAY-4296) (#1491)

Registry

• b7f3434a: correctly bump tag expiration when tag changes upstream (#1484)

v3.7.6 - 2022-08-15

Chore: V3.7.6 Changelog Bump (Https

• 01b30c2d: //issues.redhat.com/browse/PROJQUAY-4237) (#1480) (#1481)

Fix

• dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)

Proxy Cache

• f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)

v3.7.5 - 2022-07-26

Auth

• f435b9e6: allow rs384 in jwt (PROJQUAY-4148) (#1450)

Chore: V3.7.4 Changelog Bump (Https

• 10edbe6d: //issues.redhat.com/browse/PROJQUAY-4050) (#1446) (#1447)

Chore: V3.7.5 Changelog Bump (Https

• 564f3f0c: //issues.redhat.com/browse/PROJQUAY-4172) (#1460)

Mirroring

• eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)

v3.7.4 - 2022-07-07

Builders

• 92d694aa: Add cacert's to build agent (PROJQUAY-3819) (#1398) (#1436)

Mirror

• c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)

v3.7.3 - 2022-06-28

Chore: V3.7.3 Changelog Bump (Https

• 50f24e2f: //issues.redhat.com/browse/PROJQUAY-3989) (#1420) (#1421)

Storage

• 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)

[Redhat-3.7] Ui

• 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)

v3.7.2 - 2022-06-22

Builders

• ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)

Chore: V3.7.1 Changelog Bump (Https

• ece9d54f: //issues.redhat.com/browse/PROJQUAY-3836) (#1373)

Chore: V3.7.2 Changelog Bump (Https

• 78814ef2: //issues.redhat.com/browse/PROJQUAY-3932) (#1406)

Fix

• 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)

GUI

• 5487b269: Show how to pull an image using podman pull (#1377)

Quota

• af28e832: Fix calculating org size (PROJQUAY-3889) (#1393)
• 058b9d34: Fix join on caching repo size (PROJQUAY-3889) (#1381)

Requirements.Txt

• c0cdee4e: bump flask-restful from 0.3.7 to 0.3.9 (#1376)

UI

• abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)

[Redhat-3.7] Quota UI

• 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)

v3.7.1 - 2022-06-06

Init

• e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
• cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
• c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)

Pull-Thru

• a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)

[Redhat-3.7] Quota

• abe1528d: Configuring Quota for user panel(PROJQUAY-3767) (#1353)
• 0cafea97: Add Cache To Tag Delete (PROJQUAY-3828) (#1347)

[Redhat-3.7] UI

• 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)

v3.7.0 - 2022-05-23

API

• 2dca65f9: Removing internal only decorator from exposed Super user endpoints (#1271)

Api

• 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
• 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)

App.Py

• b4600553: filter proxy cache login details from debug logs (#1268)

Auth

• 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
• edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
• 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
• 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)

Billing

• 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
• 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
• 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)

Blobuploadcleanupworker

• f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
• 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)

Build

• 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
• fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
• eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
• 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
• a347d316: Update backup base image name (PROJQUAY-2372) (#965)
• d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
• af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
• e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
• d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
• 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)

Build(Deps)

• 4ee715c9: bump is-my-json-valid from 2.16.0 to 2.20.6 (#1058)
• b009590c: bump ajv from 6.10.2 to 6.12.6 (#1112)
• 4176c498: bump moment from 2.17.1 to 2.29.2 (#1236)
• 723fd599: bump url-parse from 1.5.8 to 1.5.9 (#1168)
• 4b4f16e1: bump url-parse from 1.5.6 to 1.5.8 (#1151)
• 49c56aa1: bump url-parse from 1.5.2 to 1.5.6 (#1125)
• c96d1fbc: bump protobuf from 3.12.2 to 3.15.0 (#1110)
• 102705c9: bump pillow from 8.3.2 to 9.0.0 (#1059)
• e7e093b0: bump qs from 6.3.1 to 6.3.3 (#1086)
• 88956630: bump y18n from 3.2.1 to 3.2.2 (#1080)
• 21f3538f: bump python-ldap from 3.2.0 to 3.4.0 (#1002)
• ae516d84: bump reportlab from 3.5.34 to 3.5.55 (#978)
• 288f31bb: bump pip from 20.2.3 to 21.1 (#977)
• 8eab6366: bump babel from 2.8.0 to 2.9.1 (#944)
• 66373020: bump url-parse from 1.4.0 to 1.5.2 (#873)
• 299fa6d9: bump pillow from 8.3.1 to 8.3.2 (#882)
• b6495343: bump path-parse from 1.0.5 to 1.0.7 (#870)

Builders

• 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
• 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
• d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
• 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
• 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
• 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
• 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
• 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
• 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
• dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
• b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)

Buildman

• a79f7b6f: increase allowed grpc body size for log streams (#1234)
• ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
• 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
• 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
• a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
• 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
• a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
• eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
• b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)

CONTRIBUTING

• f0edbceb: document backporting process (#1043)

Cache

• ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)

Chore

• c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
• 2d56a8df: add logging during instance service key generation (#1276)
• 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
• a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
• 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
• 9bdbba6f: Remove unused files (#1067)
• 65100439: download aws ip ranges via github workflow (#1041)
• b7037d9c: Bump up config-tool version v0.1.9 (#992)
• 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
• ae129b45: Bump up config-tool version v0.1.8 (#984)
• c8092069: Bump up config-tool version (#983)
• ba08ddd7: Bump up config-tool version (#982)
• bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
• 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
• c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
• 16dcebf1: build and publish workflow (PROJQUAY-2556)
• 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)

Chore(Dockerfile)

• 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)

Chore: V3.6.3 Changelog Bump (Https

• 62e2eac1: //issues.redhat.com/browse/PROJQUAY-3028) (#1118)

Chore: V3.6.4 Changelog Bump (Https

• 992bc5c3: //issues.redhat.com/browse/PROJQUAY-3335) (#1162)

Chore: V3.6.5 Changelog Bump (Https

• 81db4e84: //issues.redhat.com/browse/PROJQUAY-3354) (#1211)

Chore: V3.6.6 Changelog Bump (Https

• d8a76c0d: //issues.redhat.com/browse/PROJQUAY-3635) (#1278)

Chore: V3.7.0 Changelog Bump (Https

• 8a54431d: //issues.redhat.com/browse/PROJQUAY-2411) (#1338)

Ci

• e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
• c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)

Clean.Sh

• 6b5e7f50: don't remove webfonts dir since its now versioned (#1025)

Cleanup

• 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)

Compliance

• ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)

Conf

• a07ba480: fix supervisord chunk worker template (#1259)

Config

• e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
• c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
• c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
• c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)

Config.Py

• d14da17a: Add support for source containers (PROJQUAY-2271) (#954)

Data

• a4ed9866: increase max len for proxy cache config credentials (#1241)

Data/Buildlogs

• e1ae52ee: format file with black (#1061)

Database

• 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
• 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
• c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)

Db

• eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)

Debug

• 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
• 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)

Defaults

• a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)

Deploy

• 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
• d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
• 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
• 1589351b: Add clair back fill worker deployment manifests (#991)
• 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
• 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
• 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
• 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
• 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)

Deps

• bb53127d: upgrade upstream requirements.txt package versions (#1072)

Dockerfile

• 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
• 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
• 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
• cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
• da558b0f: replace golang base image in production dockerfile (#928)
• 139c9abc: use separate dockerfile for production deployment (#927)
• 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)

Docs

• 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)

Documentation

• ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)

Editor

• 6f7dea7f: Bump config tool to v0.1.12 (PROJQUAY-3593) (#1267)

Email

• d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)

Endpoints/V2

• 59875347: handle generic proxy related errors (#1213)

Feat

• fe4d66b0: pull-thru proxy cache (#1053)
• fca67e77: mypy type annotations (PROJQUAY-740) (#455)

Fix

• d3809b2e: pin setuptools to version 57 (#885)

Fix

• c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)

Format

• ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)

Formatting

• e4390472: Update code to obey the linter (PROJQUAY-0) (#1057)

Gc

• 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)

Imagemirror

• 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)

Invoice

• 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)

Ipresolver

• b9557d14: update country mmdb (PROJQUAY-3031) (#1049)

Ldap

• c8a7e641: add test for user filter (PROJQUAY-2766) (#980)

Makefile

• 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)

Migration

• 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
• 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)

Mirror

• d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
• f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)

Namespacequota

• 61f4bd42: return 0 when namespace has no size yet (#1237)

Nginix

• 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)

Nginx

• aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
• 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
• de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
• ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
• 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
• 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
• 630d6f46: use bigger http/2 chunks for blobs (#630)

Notification

• 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
• a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)

Oci

• f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)

PROJQUAY-3750

• 2e2fefe5: support registries that do not return a digest header (#1313)

Proxy

• 1342a17b: make upstream related error message more actionable (#1240)
• b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
• f248d885: don't store entire blob in memory when caching (#1200)

Proxy Cache

• a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)

Proxy Cache

• 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)

Quay

• 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)

Quay UI

• 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)

Quay.Io

• 5debec58: Catching requests from impersonated principals (#869)

Quay.Io UI

• 20aef6a5: Fetching severity from cvss score and removing visibility… (#887)

Quayio

• 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
• 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)

Quota

• 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)

Quota

• f4093b0d: fix caching (PROJQUAY-3660) (#1291)
• 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
• 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
• eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)

Quota API

• a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
• 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)

Quota Management

• cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)

Quota UI

• d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
• a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
• 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
• f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
• 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
• 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)

QuotaManagement

• 15fa20a1: Reporting (PROJQUAY-2936) (#1048)

Realtime

• a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)

Refactor(Dockerfile)

• 5ad6e0ff: use pre-built centos 8 stream (#936)

Registry

• 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)

Registry_proxy_model

• 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)

Requirements

• 5c11e7a6: bump cryptography package version (#939)

Requirements-Osbs

• 12705e49: upgrade cryptography package (#943)

Requirements-Osbs.Txt

• f3e016f4: remove ipython and related deps (#1069)

Requirements.Txt

• 897e7e39: remove unused dependencies (#948)

Revert "Quayio

• 8324586e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)

Revert "Revert "Quayio

• 3140a62e: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)" (#1273)" (#1289)

Revert "Schema1

• 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)

Revert "Secscan

• dd1eab52: add a global lock on security worker runs (PROJQUAY-3501) (#1226)" (#1232)

Schema1

• b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)

Secscan

• 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
• f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
• 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
• 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
• ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
• 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
• a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
• 922892d1: configure global lock (PROJQUAY-3501) (#1255)
• 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
• d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
• 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
• a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
• 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
• 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
• 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
• 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
• 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
• 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
• b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
• 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
• 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
• 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)

Sescan

• 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)

Setup

• fd190ad9: Export Quay modules (PROJQUAY-3181) (#1108)

Static

• a13baef9: vendor webfonts dir (#1016)
• ab499e8f: vendor external libraries (#1014)

Storage

• c9c91339: allow arbitrary endpoint url for azure storage (#1071)
• 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
• ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
• f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)

Superuser

• dad7dfaf: Fix display of build logs (PROJQUAY-3404) (#1185)

Teams

• 639833cc: admin team deletion (PROJQUAY-2080) (#1077)

Trigger_analyzer

• 861c247f: fix confusing print (PROJQUAY-1995) (#1073)

UI

• 3d6545b9: Quota UI enhancements (PROJQUAY-0000) (#1242)

Ui

• e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
• 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
• 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
• e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
• 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
• bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)

Util

• 42d1cdb4: update aws-ip-ranges.json (#1143)

Util/Ipresolver

• 9ee1c580: manually add aws-ip-ranges.json (#1065)

V2auth

• 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)

[Redhat-3.7] Quota Management

• 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)

v3.6.2 - 2021-12-02

Api

• 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)

Backport

• 0520aa7c: Quayio nvd data UI improvements (#957)

Build

• 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
• 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
• 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
• 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
• 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
• 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)

Build(Deps)

• 98c008e6: bump pillow from 8.3.1 to 8.3.2 (#882) (#958)
• c5488aa3: bump ssri from 6.0.1 to 6.0.2 (#818)
• 3c355223: bump flask-cors from 3.0.8 to 3.0.9 (#783)

Buildman

• f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
• bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)

Cache

• 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
• cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)

Chore

• 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
• b016844a: build and publish workflow (PROJQUAY-2556)
• 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
• 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
• 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
• a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
• 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
• 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)

Config

• c4ad61b5: define default oci artifact types (PROJQUAY-2334) (#877) (#881)

Db

• 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)

Defaults

• 26a06763: Update defaults in config and schema (PROJQUAY-2425) (#923) (#925)

Deploy

• ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
• d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)

Deployment

• 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)

Doc

• 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)

Dockerfile

• 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
• 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
• 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
• 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)

Email

• a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)

Fips

• 65363057: enforce smtp tls (PROJQUAY-1804) (#782) (#782)

Local-Dev

• eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)

Migration

• 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)

Mirror

• 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)

Modelcache

• b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
• df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)

Notification

• 5996cbec: check certs exists for webhooks (PROJQUAY-2424) (#886) (#900)

Oauth

• 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)

Oci

• 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
• 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
• 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)

Organization

• 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)

Python

• 2d0adf0c: bump pillow to 8.3.1 (PROJQUAY-2250) (#852)

Registry

• b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)

Release

• 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)

Repository

• a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)

Requirements

• 1f9a9aee: bump cryptography package version (#939) (#940)

Secscan

• 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
• 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
• 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)

Secscan

• fa0e8618: clair v4 enrichment (PROJQUAY-2102) (#840)

Static

• 3488e785: vendor webfonts dir (#1017)
• d93d85fa: vendor external libraries (#1015)

Templates

• 1c157e2a: escape templated script value (PROJQUAY-970) (#828)

Ui

• a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
• 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
• de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)

Util

• cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)

Utility

• 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)

v3.6.0-alpha.9 - 2021-04-21

Cache

• 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
• 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)

Chore

• 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
• 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
• addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
• ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)

Ci

• e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)

Deployment

• 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
• 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)

Gc

• efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
• f774e4c6: add metrics for deleted resources (#711)

Lock

• c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
• 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)

Queueworker

• 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)

v3.6.0-alpha.8 - 2021-04-09

Chore

• ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
• 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)

v3.6.0-alpha.7 - 2021-04-09

Chore

• b54c8999: v3.6.0-alpha.7 changelog bump (PROJQUAY-1486) (#730)
• bfc9d75c: fix cut-release.yml (PROJQUAY-1468) (#729)

v3.6.0-alpha.6 - 2021-04-09

Chore

• 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
• 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
• 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
• 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)

v3.6.0-alpha.5 - 2021-04-08

Release

• fba629b2: fixing Release action (PROJQUAY-1486) (#723)

v3.6.0-alpha.4 - 2021-04-08

Release

• 9dd55dee: fixing Release action (PROJQUAY-1486)

Historical Changelog

CHANGELOG.md