Project: Quay (Provisioning / Container Registry)
File: CHANGELOG.md

<a name="v3.11.0"></a> : Return layer compressed size with manifest request (PROJQUAY-6616) () : adding nickname decorator to autoprune policy endpoints (PROJQUAY-6483) () : add caching for get_repository method (PROJQUAY-6472) () : graceful error handling for robot acct already exists (PROJQUAY-6261) () : adding audit logs to namespace autoprune policy API (PROJQUAY-6229) () : validating input to autoprune policy (PROJQUAY-6230) () : Syncing teams with OIDC group (PROJQUAY-6290) () : marketplace UI (PROJQUAY-6551) () : apply free trial to stripe checkout sessions (PROJQUAY-6405) () : bump github.com/aws/aws-sdk-go from 1.45.24 to 1.50.20 in /config-tool () : bump cryptography from 41.0.4 to 41.0.6 () : bump github.com/spf13/cobra from 1.7.0 to 1.8.0 in /config-tool () : bump oslo-i18n from 3.25.1 to 6.2.0 () : bump websocket-client from 0.57.0 to 1.7.0 () : bump github.com/minio/minio-go/v7 from 7.0.63 to 7.0.66 in /config-tool () : bump axios from 1.4.0 to 1.6.5 in /web () : bump jinja2 from 3.1.2 to 3.1.3 () : bump dotenv-webpack from 7.1.0 to 8.0.1 in /web () : bump browserify-sign from 4.2.1 to 4.2.2 in /web () : bump eslint from 8.49.0 to 8.56.0 in /web () : adding caching on look_up repository (PROJQUAY-6472) () : add namespace and username to CDN redirect for usage calculation (PROJQUAY-5939) () : update local development clair to

() : extend market place subscription enddate (chore) () : use oci_model directly without proxy object () : adding debug logging for repository_lookup cache key(PROJQUAY-6472) () : add libpq-dev to fix issue while installing psycopg2 () : Adding validation for IBM Cloud Storage (PROJQUAY-6549) () : use psycopg2 instead of psycopg2-binary (PROJQUAY-6453) () : update main deployment to add regitry worker count (PROJQUAY-6456) () : fix health check endpoint for quay deployment (PROJQUAY-6456) () : update deploy template add proxy port (PROJQUAY-6456) () : add web worker count to deployment (PROJQUAY-6453) () : add DB pooling to py3 template (PROJQUAY-5550) () : Add connection pooling env variable (PROJQUAY-5550) () : Add auto-prune policy at repository level (PROJQUAY-6354) () : fixing keepalive settings for LDAP connections (PROJQUAY-5137) () : pull-through should tolerate missing tag (PROJQUAY-4849) () : add failure logging for login, push, pull and delete events (PROJQUAY-5411) () : support empty config for artifacts (PROJQUAY-6658) () : add support for quantity from subscriptions api (PROJQUAY-6551) () : return array of valid subscriptions when looking up subscription (PROJQUAY-6551) () : make sure customer id from api is returned as an int (PROJQUAY-233) () : update reconciliationworker to use webCustomerId instead of ebsAccountNumber (PROJQUAY-233) () : add exception handling for reconciler (PROJQUAY-233) () : update user ebs number lookup to find personal account numbers (PROJQUAY-233) () : add logging for user api (PROJQUAY-233) () : return None if subscription api times out (PROJQUAY-5363) () : remove platform requirement for image index (PROJQUAY-6658) () : Remove cpu limits (PROJQUAY-6440) () : removing repo size from quota verification (PROJQUAY-6637) () : allow pushing manifests with artifactType and subject fields (PROJQUAY-6673) () : add caching for get_repository method (PROJQUAY-6472)" () : enable gc for manifests by default (PROJQUAY-4126) () : adding error log for export compliance (PROJQUAY-6486) () : Fix big layer uploads for Ceph/RADOS driver (PROJQUAY-6586) () : adding IBM COS storage option (PROJQUAY-2679) () : pass S3 region to S3Storage init (PROJQUAY-6375) () : Add STS support for S3 (PROJQUAY-6362) () : Upgrade Quay nginx (PROJQUAY-6685) () : fix bug in usage logs description (PROJQUAY-6755) () : add usage log table (PROJQUAY-6702) () : ui and initial scaffolding for OIDC auth (PROJQUAY-6298) () : add chart for usage logs (PROJQUAY-6701) () : removing repo settings and build UI feature flags (PROJQUAY-6617) () : add width and height for logo (PROJQUAY-5460) () : view builds logs (PROJQUAY-6296) () : add overview to plugin (PROJQUAY-5460) () : run builds (PROJQUAY-6297) () : fixing build trigger test (PROJQUAY-6695) () : add breadcrumbs for overview (PROJQUAY-5460) () : fix docker and podman login command for windows (PROJQUAY-6648) () : add export button for usage logs (PROJQUAY-6420) () : add section for RH subscriptions under billing settings (PROJQUAY-5363) () : updating references to status.redhat.com (PROJQUAY-6654) () : fix scrollbars and various layout issues (PROJQUAY-6619) () : adjusting size of avatar (PROJQUAY-6676) () : fixing tag list reset when rendering manifest lists (PROJQUAY-5793) () : implementing github and gitlab build triggers (PROJQUAY-6585) () : allow for regular expressions to be used in search (PROJQUAY-6597) () : implementing creation of custom git trigger (PROJQUAY-6299) () : adding build trigger table (PROJQUAY-6295) () : adding build avatar image size (PROJQUAY-6575) () : add dark mode to see Quay in a new light or lack thereof (PROJQUAY-6570) () : breadcrumbs fix when org and repo names are identical (PROJQUAY-6504) () : updating logo for quay.io (PROJQUAY-6531) () : Prevent switch to beta UI toggle from rendering if user is anonymous (PROJQUAY-6526) () : show UI toogle to all users in quay.io (PROJQUAY-6505) () : implementing build history page (PROJQUAY-6293) () : updates Quay.io documentation redirect link (PROJQUAY-6473) () : fix broken update of repo description (PROJQUAY-6243) () : add breadcrumbs for teams page (PROJQUAY-6442) () : following capitalisation guidelines in the new ui (PROJQUAY-6247) () : Allow adding user from create team wizard (PROJQUAY-6336) () : display manifest list size range (PROJQUAY-6393) () : breadcrumbs on new ui (PROJQUAY-5452) () : fix tab visibility for teams and membership (PROJQUAY-6333) () : fix search for bulk delete default permission modal (PROJQUAY-6369) () : allow current day to be selected for tag expiration (PROJQUAY-6262) () : Add form for repository state (PROJQUAY-5715) () : Add landing page for quay.io (PROJQUAY-5460) () : disallow robot login and create 2nd (PROJQUAY-5968) () <a name="v3.10.4"></a> <a name="v3.10.3"></a> : pull-through should tolerate missing tag (PROJQUAY-4849) () : fix broken update of repo description (PROJQUAY-6243) () <a name="v3.10.2"></a> : Adding validation for IBM Cloud Storage (PROJQUAY-6549) () <a name="v3.10.1"></a> : adding nickname decorator to autoprune policy endpoints (PROJQUAY-6483) () : adding audit logs to namespace autoprune policy API (PROJQUAY-6229) () : adding IBM COS storage option (PROJQUAY-2679) () : fix search for bulk delete default permission modal (PROJQUAY-6369) () : fix tab visibility for teams and membership (PROJQUAY-6333) () : breadcrumbs on new ui (PROJQUAY-5452) () : Allow adding user from create team wizard (PROJQUAY-6336) () : disallow robot login and create 2nd (PROJQUAY-5968) () <a

: accepting empty body for create robot endpoints (PROJQUAY-6224) () : fix duplicate robot accounts (PROJQUAY-5931) () : Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) () : allow robot token creation with a pre-defined token (PROJQUAY-5414) () : add permanently delete tag usage log (PROJQUAY-5496) () : ignore errors due to read-only mode in audit logs (PROJQUAY-5598) () : allow LDAP referrals to not be followed (PROJQUAY-5291) () : preventing prune of mirror or readonly repos (PROJQUAY-6235) () : updating task status to running (PROJQUAY-6213) () : background worker (PROJQUAY-6095) () : UI settings (PROJQUAY-6097) () : add auto-prune policy endpoints (PROJQUAY-6096) () : add initial setup for the autoprune feature (PROJQUAY-6094) () : Assign SKU to org (PROJQUAY-5363) () : bump urllib3 from 1.26.17 to 1.26.18 () : bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 in /config-tool () : bump golang.org/x/net from 0.15.0 to 0.17.0 in /config-tool () : bump /react-charts from 7.0.1 to 7.1.1 in /web () : bump github.com/aws/aws-sdk-go from 1.45.22 to 1.45.24 in /config-tool () : bump sqlalchemy from 1.4.31 to 1.4.49 () : bump deprecated from 1.2.7 to 1.2.14 () : bump flask-restful from 0.3.9 to 0.3.10 () : bump zope-event from 4.5.0 to 5.0 () : bump python-swiftclient from 3.8.1 to 4.4.0 () : bump react-scripts from 5.0.0 to 5.0.1 in /web () : bump splunk-sdk from 1.7.3 to 1.7.4 () : bump pymysql from 0.9.3 to 1.1.0 () : bump github.com/Azure/azure-storage-blob-go from 0.11.0 to 0.15.0 in /config-tool () : bump decorator from 4.4.1 to 5.1.1 () : bump jsonpointer from 2.0 to 2.4 () : bump python-ldap from 3.4.0 to 3.4.3 () : bump pygithub from 1.45 to 2.1.1 () : bump psycopg2-binary from 2.9.3 to 2.9.9 () : bump zipp from 2.1.0 to 3.17.0 () : bump pip from 22.2.1 to 23.2.1 () : bump setuptools-scm) : bump protobuf from 3.18.3 to 3.20.3 () : bump netifaces from 0.10.9 to 0.11.0 () : bump boto3 from 1.21.42 to 1.28.61 () : bump toposort from 1.5 to 1.10 () : bump github.com/olekukonko/tablewriter from 0.0.5-0.20200416053754-163badb3bac6 to 0.0.5 in /config-tool () : bump mako from 1.2.2 to 1.2.4 () : bump babel from 2.9.1 to 2.13.0 () : bump requests-aws4auth from 0.9 to 1.2.3 () : bump github.com/minio/minio-go/v7 from 7.0.40 to 7.0.63 in /config-tool () : bump github.com/swaggo/http-swagger from 1.3.3 to 1.3.4 in /config-tool () : bump gunicorn from 20.1.0 to 21.2.0 () : bump click from 8.1.3 to 8.1.7 () : bump github.com/jackc/pgx/v4 from 4.11.0 to 4.18.1 in /config-tool () : bump hashids from 1.2.0 to 1.3.1 () : bump peewee from 3.13.1 to 3.16.3 () : bump tldextract from 2.2.2 to 3.6.0 () : bump python-magic from 0.4.15 to 0.4.27 () : bump github.com/ncw/swift from 1.0.52 to 1.0.53 in /config-tool () : bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 in /config-tool () : bump github.com/aws/aws-sdk-go from 1.44.282 to 1.45.22 in /config-tool () : bump supervisor from 4.1.0 to 4.2.5 () : bump lxml from 4.9.2 to 4.9.3 () : bump stevedore from 1.31.0 to 5.1.0 () : bump github.com/dave/jennifer from 1.4.0 to 1.7.0 in /config-tool () : bump github.com/creasty/defaults from 1.4.0 to 1.7.0 in /config-tool () : bump github.com/go-redis/redis/v8 from 8.0.0-beta.6 to 8.11.5 in /config-tool () : bump github.com/go-ldap/ldap/v3 from 3.2.4 to 3.4.6 in /config-tool () : bump github.com/swaggo/swag from 1.8.1 to 1.16.2 in /config-tool () : bump rehash from 1.0.0 to 1.0.1 () : bump bintrees from 2.1.0 to 2.2.0 () : bump github.com/lib/pq from 1.10.7 to 1.10.9 in /config-tool () : bump golang.org/x/oauth2 from 0.0.0-20190226205417-e64efc72b421 to 0.12.0 in /config-tool () : bump github.com/go-sql-driver/mysql from 1.5.0 to 1.7.1 in /config-tool () : bump cuelang.org/go from 0.2.1 to 0.6.0 in /config-tool () : bump dumb-init from 1.2.2 to 1.2.5.post1 () : bump github.com/iancoleman/strcase from 0.0.0-20191112232945-16388991a334 to 0.3.0 in /config-tool () : bump pillow from 9.3.0 to 10.0.1 () : bump pyjwt from 2.4.0 to 2.8.0 () : bump tzlocal from 2.0.0 to 5.0.1 () : bump urllib3 from 1.26.9 to 1.26.17 () : bump oslo-utils from 4.12.2 to 6.2.1 () : bump gevent from 21.8.0 to 23.9.1 () : bump /request and cypress in /config-tool/pkg/lib/editor () : bump cryptography from 41.0.3 to 41.0.4 () : bump /react-charts from 6.94.19 to

in /web () : bump /node from 16.18.46 to 20.6.5 in /web () : bump highlight.js from 9.18.3 to 11.8.0 in /config-tool/pkg/lib/editor () : bump -cloud-services/frontend-components-config-utilities from 1.5.31 to 3.0.4 in /web () : bump grpcio from 1.53.0 to 1.58.0 () : bump requests-oauthlib from 1.3.0 to 1.3.1 () : bump web-vitals from 2.1.4 to 3.4.0 in /web () : bump loader-utils, css-loader, karma-webpack, ngtemplate-loader and style-loader in /config-tool/pkg/lib/editor () : bump isodate from 0.6.0 to 0.6.1 () : bump setuptools from 65.5.1 to 68.1.2 () : bump cypress from 10.10.0 to 12.17.4 in /web () : bump idna from 2.8 to 3.4 () : bump pycparser from 2.20 to 2.21 () : bump react-router-dom from 6.3.0 to 6.15.0 in /web () : bump pyasn1-modules from 0.2.8 to 0.3.0 () : bump urijs from 1.19.2 to 1.19.11 in /config-tool/pkg/lib/editor () : bump moment-timezone from 0.4.1 to 0.5.35 in /config-tool/pkg/lib/editor () : bump ejs and webpack-bundle-analyzer in /config-tool/pkg/lib/editor () : bump jsrsasign from 10.1.13 to 10.5.25 in /config-tool/pkg/lib/editor () : bump moment from 2.27.0 to 2.29.4 in /config-tool/pkg/lib/editor () : bump jszip from 3.5.0 to 3.8.0 in /config-tool/pkg/lib/editor () : bump jquery from 1.12.4 to 3.5.0 in /config-tool/pkg/lib/editor () : bump tqdm from 4.65.0 to 4.66.1 () : bump /jest from 27.4.1 to 29.5.3 in /web () : bump -library/user-event in /web () : bump packaging from 21.3 to 23.1 () : bump authlib from 1.2.0 to 1.2.1 () : bump msrest from 0.6.21 to 0.7.1 () : bump stripe from 5.2.0 to 5.5.0 () : bump setuptools-scm) : bump /react-icons from 4.93.6 to 4.93.7 in /web () : bump requests-file from 1.4.3 to 1.5.1 () : bump typing-extensions from 4.0.1 to 4.7.1 () : bump cryptography from 3.3.2 to 41.0.3 () : bump mini-css-extract-plugin from 2.6.1 to 2.7.6 in /web () : bump ts-jest from 26.5.6 to 29.1.1 in /web () : bump semantic-version from 2.8.4 to 2.10.0 () : bump cryptography and pyOpenSSL (PROJQUAY-5120) () : bump golang.org/x/net (PROJQUAY-5339) () : bump pbr from 5.10.0 to 5.11.1 () : bump axios from 0.27.2 to 1.4.0 in /web () : bump recoil from 0.7.2 to 0.7.7 in /web () : bump certifi from 2022.12.7 to 2023.7.22 () : bump config-tool to v0.1.21 () : bump minimatch, recursive-readdir and serve in /web () : bump config-tool to v0.1.20 () : bump /react-charts in /web () : bump reportlab from 3.5.55 to 3.6.13 (PROJQUAY-5691) () : bump word-wrap from 1.2.3 to 1.2.4 in /web () : bump semver from 5.7.1 to 5.7.2 in /web () : bump grpcio from 1.46.3 to 1.53.0 () : bump config-tool to v0.1.19 () : bump pypdf2 from 1.27.6 to 1.27.9 () : bump requests from 2.27.1 to 2.31.0 () : bump webpack-merge from 5.9.0 to 5.10.0 in /web () : bump ts-loader from 9.4.4 to 9.5.0 in /web () : bump types-docutils from 0.17.1 to 0.20.0.3 () : bump tsconfig-paths-webpack-plugin from 3.5.2 to 4.1.0 in /web () : bump types-tzlocal from 3.0.0 to 5.1.0.0 () : bump types-html5lib from 1.1.11.14 to 1.1.11.15 () : bump types-python-dateutil from 2.8.2 to 2.8.19.14 () : bump types-boto from 2.49.2 to 2.49.18.9 () : bump types-setuptools from 57.4.2 to 68.2.0.0 () : bump types-freezegun from 1.1.2 to 1.1.10 () : bump types-stripe from 3.5.2.10 to 3.5.2.14 () : bump termcolor from 1.1.0 to 2.3.0 () : bump types-pytz from 2021.3.0 to 2023.3.1.1 () : bump types-ipaddress from 1.0.1 to 1.0.8 () : bump types-six from 1.16.2 to 1.16.21.9 () : bump moto from 4.1.4 to

() : bump types-mock from 4.0.3 to 5.1.0.2 () : bump types-deprecated from 1.2.3 to 1.2.9.3 () : bump parameterized from 0.8.1 to 0.9.0 () : bump types-beautifulsoup4 from 4.12.0.5 to 4.12.0.6 () : bump postcss from 8.4.29 to 8.4.31 in /config-tool/pkg/lib/editor () : bump prettier from 3.0.2 to 3.0.3 in /web () : bump axios-mock-adapter from 1.20.0 to 1.22.0 in /web () : bump json5 from 1.0.1 to 1.0.2 in /config-tool/pkg/lib/editor () : bump css-minimizer-webpack-plugin from 3.4.1 to 5.0.1 in /web () : bump eslint from 8.48.0 to 8.49.0 in /web () : bump eslint-plugin-import from 2.28.0 to 2.28.1 in /web () : bump httmock from 1.3.0 to 1.4.0 () : bump webpack-merge from 5.8.0 to 5.9.0 in /web () : bump eslint from 8.13.0 to 8.48.0 in /web () : bump prettier from 2.6.2 to 3.0.2 in /web () : bump source-map-loader from 0.1.5 to 1.1.3 in /config-tool/pkg/lib/editor () : bump svg-url-loader from 7.1.1 to 8.0.0 in /web () : bump angular-mocks and /angular-mocks in /config-tool/pkg/lib/editor () : bump webpack-cli from 3.3.9 to 4.10.0 in /config-tool/pkg/lib/editor () : bump qs in /config-tool/pkg/lib/editor () : bump eslint-config-prettier in /web () : bump style-loader from 3.3.1 to 3.3.3 in /web () : bump eslint-plugin-react-hooks in /web () : bump css-loader from 6.7.1 to 6.8.1 in /web () : bump eslint-plugin-jsx-a11y from 6.5.1 to 6.7.1 in /web () : bump webpack-cli from 4.9.2 to 5.1.4 in /web () : bump word-wrap in /config-tool/pkg/lib/editor () : bump sass from 1.51.0 to 1.64.1 in /web () : bump terser-webpack-plugin from 5.3.3 to 5.3.9 in /web () : bump eslint-plugin-import from 2.26.0 to 2.28.0 in /web () : bump ts-node from 10.7.0 to 10.9.1 in /web () : bump types-cryptography from 3.3.7 to 3.3.23.2 () : bump ts-loader from 9.3.0 to 9.4.4 in /web () : bump eslint-plugin-react from 7.29.4 to 7.33.0 in /web () : bump webpack from 5.72.1 to 5.76.0 in /web () : add build dependencies for build dependencies () : add hack/update-requirements-build.sh () : update dependabot.yml () : add requirements-build.txt () : enable dependabot for config-tool () : add tests for blobupload () : remove cached data from the final image () : preinstall grpcio for Z () : fix missing grpc build with openssl for Z () : fix failing nightly and also use ssh action for ppc64le () : add /node_modules to dockerignore () : make eslint to ignore css files () : don't chmod on every file in Dockerfile () : update werkzeug and related package versions (PROJQUAY-5098) () : add /config-tool/pkg/lib/editor to dependabot.yml () : remove set buildx rc version as not needed anymore () : drop deprecated tables and remove unused code (PROJQUAY-522) () : add cypress tests for config-tool () : upload coverage reports to Codecov () : fix s390x nightly ci () : fix ppc64le nightly test run () : remove husky () : run pre-commit checks only on pull requests () : fix build of PyYAML on linux/ppc64le () : Remove reference to Image table from the backfill replication script () : updated build-and-publish for s390x () : Run pre-commit checks on pull requests () : Add build dependency for reportlab () : Reformat python scripts in config-tool : Merge config-tool/.github into .github : Rename github.com/quay/config-tool to github.com/quay/quay/config-tool : Use config-tool from this repo : use isinstance to check instance type () : Bump pushgateway to 1.6.0 (PROJQUAY-5874) () : Add build dependencies for lxml

() : Do not require ticket for build(deps-dev) () : Add config for dependabot () : Fix regexp in pullrequestlinting.yaml () : Use stable Cython () : Use latest go-toolset for config-tool () : Bump PyYAML () : Use conventional-commit-checker-action for Jira check (PROJQUAY-5672) () : Bump mypy () : Updated checks for s390x ZVSI builder () : Unhandled exceptions should not occur during OCI conformance tests () : updated secrets and added status of ZVSI () : Bump dependencies that cause syntax warnings (PROJQUAY-5650) () : Bump gitleaks, add isort and lint-staged to pre-commit () : deprecate image table support (PROJQUAY-522) () : Use buildx v0.11.0-rc2 () : Get REGISTRY from GitHub secrets () : Disable provenance for Quay images () : updated s390x builder () : skip_file` () : Update export hold email (PROJQUAY-6024) () : updating GeoLite2-Country (PROJQUAY-6023) () : Enable notifications for new indexes by default (PROJQUAY-5682) () : fix nightly test failures () : Fix error getting tag while calculating scan results SLO () : remove foreign key constraints from deprecated tables (PROJQUAY-4879) () : update configmap for slo dashboard (PROJQUAY-6221) () : Add a startup probe to the py3 deployment (PROJQUAY-522) () : Change tag template link location for build triggers (PROJQUAY-6044) () : add SSL client authentication (PROJQUAY-2417) () : adding keepalive settings for LDAP connections (PROJQUAY-5137) () : Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) () : Change frontend name so that correct paths will be generated (RHCLOUD-28385) () : Initialize features from config in util script (PROJQUAY-5627) () : Add util script to remove geo-rep location and corresponding image locations (PROJQUAY-4995) () : Add error handling for remove location script (PROJQUAY-5878) () : Enqueue blobs for replication on manifest list pushes (PROJQUAY-5256) () : add Postgresql client certificate authentication (PROJQUAY-2417) () : Add autologin to splunk's connect() to allow retries (PROJQUAY-5621) () : sslcapath should be optional (PROJQUAY-4993) () : use get method for ebsAccountNumber lookup (PROJQUAY-6219) () : Allow optional components in the image config to be set to "null" (PROJQUAY-5634) () : Fixing paginate for /api/v1/superuser/logs API () : prevent tag creation on rejected manifest (PROJQUAY-3906) () : adding indexes to the quota size tables (PROJQUAY-6048) () : removing extra calls to get namespace quotas (PROJQUAY-6048) () : fixing registry total worker failing to start (PROJQUAY-6010) () : disabling quota worker when running config editor (PROJQUAY-5925) () : Remove ca-bundle.crt and service-ca.crt (PROJQUAY-5233) () : bump tldextract from 2.2.2 to 3.6.0 ()" () : bump peewee from 3.13.1 to 3.16.3 ()" () : bump pymysql from 0.9.3 to 1.1.0" () : Bump PyYAML ()" () : Use stable Cython ()" () : Bump dependencies that cause syntax warnings (PROJQUAY-5650) ()" () : Cache clair vuln reports (PROJQUAY-6057) () : fix metrics to track all request types to secscan service (PROJQUAY-3839) () : update error from secscan delete (PROJQUAY-0000) () : garbage collect manifests () : attempt urldecoding `fixedinversion` (PROJQUAY-5886) () : Add models pkgs to

(PROJQUAY-5414) () : adding maximumchunksize_gb storage option (PROJQUAY-2679) () : Check for request context before getting host header (PROJQUAY-5860) () : make cloudfrontdistributionorg_overrides optional (PROJQUAY-5788) () : Do nothing when completing chunked upload if chunk list is empty (PROJQUAY-5489) () : Add Host header matching for multi CDN storage (PROJQUAY-5415) () : lowering page limit (PROJQUAY-5178) () : Delete normal user org by super user (PROJQUAY-5639) () : Replace time to wait with event waits in cypress tests () : Robot Accounts page perms fix (PROJQUAY-5487) () : fixing RobotAccount AddToTeam console error (PROJQUAY-6233) () : Implement drawer to add a new team member (PROJQUAY-6032) () : Add organization and user account settings (PROJQUAY-4553) () : Add create new team button (PROJQUAY-5685) () : Add bulk deletion for default permissions (PROJQUAY-6093) () : Fix styling conflict with RedHatInsights (PROJQUAY-6085) () : Compact tables & extend page count to 20 (PROJQUAY-6183) () : Update all Patternfly deprecated components (PROJQUAY-6085) () : Add missing props for create robot acocunt modal (PROJQUAY-6184) () : fix for useTeams hook when data is null (PROJQUAY-6177) () : Add delay after write operations (PROJQUAY-6146) () : Upgrade to PatternFly v5 (PROJQUAY-6085) () : adding alerts for robot account actions (PROJQUAY-5946) () : combining robot account hooks into a single file (PROJQUAY-5945) () : adding robot account support for user namespace (PROJQUAY-5945) () : Default Permissions tab (PROJQUAY-4570) () : Fix public path for console dot (PROJQUAY-5938) () : Get public path form env variable (PROJQUAY-5938) () : Teams and members (PROJQUAY-4569) () : adding tag history panel (PROJQUAY-5720) () : adding delete tag by row (PROJQUAY-5933) () : Robot Accounts tab fixes (PROJQUAY-5914) () : adding set expiration tag option (PROJQUAY-5290) () : adding edit labels tag operation (PROJQUAY-5290) () : adding create tag option and generic alerts (PROJQUAY-5290) () : displaying quota totals on user namespaces (PROJQUAY-5581) () : Add custom TOS support (PROJQUAY-5648) () : display sizes as base 2 (PROJQUAY-5524) () : adding null check on dark logo () : changing quota configuration byte units to base 1000 (PROJQUAY-5595) () : Support custom LDAP memberOf attribute (PROJQUAY-5928) () : disallow robot login and create (PROJQUAY-5968) () : validating input to autoprune policy (PROJQUAY-6230) () : fixing keepalive settings for LDAP connections (PROJQUAY-5137) () : enable gc for manifests by default (PROJQUAY-4126) () : Add form for repository state (PROJQUAY-5715) () : allow current day to be selected for tag expiration (PROJQUAY-6262) () Merge pull request from dmage/merge-config-tool <a name="v3.9.6"></a> : Add auth to comit to operator endpoint <a name="v3.9.5"></a> : bump urllib3 from 1.26.9 to 1.26.18 (PROJQUAY-6110) () <a name="v3.9.4"></a> : bump golang.org/x/net from 0.13.0 to 0.17.0 (PROJQUAY-6208) () <a name="v3.9.3"></a> : prevent tag creation on rejected manifest (PROJQUAY-3906) () : bump cypress from 10.10.0 to 12.17.4 in /web () : remove husky () : Remove ca-bundle.crt and service-ca.crt (PROJQUAY-5233) () <a name="v3.9.2"></a> : fix duplicate robot accounts (PROJQUAY-5931) () : Enqueue blobs for replication on manifest list pushes (PROJQUAY-5256) () <a name="v3.9.1"></a> : bump certifi from 2022.12.7 to 2023.7.22 () : bump reportlab from 3.5.55 to 3.6.13 (PROJQUAY-5691) () : v3.9.1 changelog bump (PROJQUAY-5937) () : Bump pushgateway to 1.6.0 (PROJQUAY-5874) () : Add build dependency for reportlab () : Add build dependencies for lxml 4.9.2 () : fix build of PyYAML on linux/ppc64le () : pull changes for s390x from master () : adding maximumchunksize_gb storage option (PROJQUAY-2679) () : Robot Accounts tab fixes (PROJQUAY-5914) () : displaying quota totals on user namespaces (PROJQUAY-5581) () <a

: Filtering of tags API through query parameter (PROJQUAY-5362) () : allow manifests to be pulled by digest (PROJQUAY-5467) () : Allow setting multiple CORS_ORIGIN (PROJQUAY-5213) () : Map aarch64 to arm64 in ARCH variable () : add ppc64le support to quay (PROJQUAY-4595) () : Adding wraps to user namespace decorator (PROJQUAY-4694) () : Speed up permissions loading (PROJQUAY-4004) () : allow changing subscription on empty stripe_id (PROJQUAY-5413) () : fallback to cards api if paymentmethod is not set (PROJQUAY-5129) () : update Stripe checkout to support 3DS (PROJQUAY-5129) () : update default subscription payment behavior () : disable push to backup repo for quayio-frontend (PROJQUAY-5229) () : Add template for deploying quayio frontend in console (PROJQUAY-5229) () : Add build scripts for quay.io frontend (PROJQUAY-5229) () : bump config-tool to v0.1.21 () () : bump pypdf2 from 1.27.6 to 1.27.9 () : bump requests from 2.27.1 to 2.31.0 () : bump dns-packet from 5.3.1 to 5.4.0 in /web () : bump decode-uri-component from 0.2.0 to 0.2.2 in /web () : bump loader-utils from 1.4.0 to 1.4.2 in /web () : bump json5 from 1.0.1 to 1.0.2 in /web () : bump oauthlib from 3.2.1 to 3.2.2 () : bump pillow from 9.0.1 to 9.3.0 () : reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) () : bump certifi from 2019.11.28 to 2022.12.7 () : bump wheel from 0.35.1 to 0.38.1 () : bump setuptools from 63.4.0 to 65.5.1 () : bump express from 4.17.1 to 4.18.2 () : bump decode-uri-component from 0.2.0 to 0.2.2 () : bump protobuf from 3.15.0 to 3.18.3 () : Update scope for gitlab to include write access (PROJQUAY-5181) () : Add scopes to the oauth call to gitlab for build trigger (PROJQUAY-5181) () : add SLO metric that calculates build success (PROJQUAY-4486) () : add SLO metric for time spent in queue for build jobs (PROJQUAY-4487) () : allow fallback on non-exception build failures (PROJQUAY-4609) () : Reformat python scripts in config-tool : Merge config-tool/.github into .github : Rename github.com/quay/config-tool to github.com/quay/quay/config-tool : Use config-tool from this repo : Do not require ticket for build(deps-dev) () : use isinstance to check instance type () : Move config-tool into its own directory : Fix regexp in pullrequestlinting.yaml () : Use stable Cython () : Use conventional-commit-checker-action for Jira check (PROJQUAY-5672) () : Bump PyYAML () : Use latest go-toolset for config-tool () : Use buildx v0.11.0-rc2 () () : v3.9.0 changelog bump (PROJQUAY-5065) () : update ppc64le builder () : Use external builders () : Delete outdated k8 manifests (PROJQUAY-5490) () : Remove Docker Build jobs (PROJQUAY-5519) () : Update db data for UI tests () : Fix UI tests (PROJQUAY-5424) () : Remove cachito magic for PyPDF2 () : Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) () : Simplify base image (PROJQUAY-4837) () : Fixes for local-dev-up-with-clair () : Pin distribution-spec conformance tests () : Downgrade cryptography to 3.3.2 (PROJQUAY-5120) () : Add setuptools-rust as a build dependency () : Bump pyOpenSSL and cryptography (PROJQUAY-5120) () : Bump Authlib (PROJQUAY-5120) () : Bump config-tool to 1.15 (PROJQUAY-3643) () : bump config-tool version to latest (PROJQUAY-5048) () : Remove appr dependencies (PROJQUAY-4992) () : remove yapf (PROJQUAY-4865) () : Use GitHub Actions cache for Docker Build jobs (PROJQUAY-4970) () : v3.8.1 changelog bump (PROJQUAY-4716) () : remove deprecated appr code (PROJQUAY-4992) () : Update Dockerfile to reduce size of image (PROJQUAY-4837) () () : Update Dockerfile to reduce size of image (PROJQUAY-4837) () : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) () : //issues.redhat.com/browse/PROJQUAY-4627) () : //issues.redhat.com/browse/PROJQUAY-4790) () :

() : Remove old validation code (PROJQUAY-4606) () : Set feature flag default for new vulnerability notifications to True () : updating quota defaults (PROJQUAY-5546) () : clean upload folder by default (PROJQUAY-4395) () : Remove whitespace from config (PROJQUAY-4666) () : Add conftest mediatypes to default Quay configuration (PROJQUAY-4614) () : Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) () : check for request_origin being set (PROJQUAY-5213) () : Adding missing method type (PROJQUAY-4800) () : Allow for dynamic service names (PROJQUAY-5103) () : add value for empty annotation (PROJQUAY-3860) () : add annotation for disabling DVO check (PROJQUAY-3680) () : fix units in slo panel (PROJQUAY-4956) () : change push-pull panel (PROJQUAY-4956) () : change slo dashboard (PROJQUAY-5026) () : update slo dashboard (PROJQUAY-4488) () : add weight to anti-affinity (PROJQUAY-3684) () : add podAntiAffinity to deployment (PROJQUAY-3684) () : add panel to dashboard (PROJQUAY-4486) () : fix api panels in dashboard (PROJQUAY-4485) () : update grafana dashboard (PROJQUAY-4484) () : Add deployment manifests for CloudFlare (PROJQUAY-3512) () : Allow action logs to be forwarded to Splunk (PROJQUAY-4993) () : Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) () : Initialize features from config in util script (PROJQUAY-5627) () : Add util script to remove geo-rep location and corresponding image locations (PROJQUAY-4995) () : Add error handling for remove location script (PROJQUAY-5878) () : fix invalid Exception attribute (PROJQUAY-5047) () : Don't convert dashes to underscores in usernames (PROJQUAY-5253) () : change log severity (PROJQUAY-5221) () : Use dedicated mailing list for export compliance email (PROJQUAY-4844) () : Re-raise the export compliance exception on RHSSO (prod) (PROJQUAY-4844) () : Re-raise the export compliance exception on RHSSO (PROJQUAY-4844) () : Add error message for exprot compliance hold (PROJQUAY-4844) () : Use the correct username for export compliance (PROJQUAY-4844) () : Add subject in debug logs for export compliance (PROJQUAY-4844) () : Add autologin to splunk's connect() to allow retries (PROJQUAY-5621) () : sslcapath should be optional (PROJQUAY-4993) () : Add SSL cert support and test coverage for splunk logging (PROJQUAY-4993) () : add audit log events for login/logout to Quay (PROJQUAY-2344) () : Add audit logs for organization and user namespace activities (PROJQUAY-3482) () : validate date range is within configuration (PROJQUAY-4959) () : Add repository information for build audit logs (PROJQUAY-4726) () : audit logs on manual build triggers and build cancellations (PROJQUAY-4726) () : create action logs on proxy cache config creation/deletion (PROJQUAY-4718) () : fixing allowed repo count (PROJQUAY-5513) () : fix path to api cert (PROJQUAY-5409) () : add reconciler (PROJQUAY-5320) () : Minor update to fix toggling issue on Safari (PROJQUAY-4527) () : support docker schema2 sub-manifest types () : lazy-load superuser permissions (PROJQUAY-5117) () : Add warning log when Postgres version less than 13 () : allowing expiring tags with timemachine set to 0 (PROJQUAY-5558) () : Allow anonymous pulls from registries (PROJQUAY-5273) () : Cloudfront multi domain (PROJQUAY-4506) () : Creating new username for accounts that login via SSO (PROJQUAY-5289) () : calculating registry size (PROJQUAY-5476) () : moving resetting of child manifest temporary tags to delete endpoint (PROJQUAY-5512) () : excluding robots from quota total (PROJQUAY-5469) () : Include blob deduplication in totals (PROJQUAY-3942) () : add option to ignore unknown mediatypes (PROJQUAY-5018) () : Add default value for `REPOMIRRORROLLBACK`to config (PROJQUAY-4296) () : Use skopeo list-tags to get repo tags (PROJQUAY-2179) () : Use stable Cython ()" () : Bump PyYAML ()" () : Update Dockerfile to reduce size of image (PROJQUAY-4837) ()" () : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) ()" () : add metric for scan results (PROJQUAY-4488) ()" () : push to ecr backup when building

(PROJQUAY-3273) () : send notifications for new indexes (PROJQUAY-4659) () : fix string to int conversion (PROJQUAY-4395) () : handle non backfilled layerscompressedsize (PROJQUAY-4395) () : add scan metric (PROJQUAY-4488) () : add config to limit manifests with layer size too large to index (PROJQUAY-4957) () : add timeout to indexing requests () : add metric for scan results (PROJQUAY-4488) () : Correct links (PROJQUAY-2164) () : Generate key to reduce vulnerabilities (PROJQUAY-4562) () : attempt urldecoding `fixedinversion` (PROJQUAY-5886) () : Change error messages in UI during LDAP login (PROJQUAY-4845) () : add option to validate all configured storages (PROJQUAY-5074) () : Add MultiCDN storage provider (PROJQUAY-5048) () : Add kwargs to getdirectdownload_url for CloudFlare storage (PROJQUAY-3512) () : Add Cloudflare as a CDN provider for an S3 backed storage (PROJQUAY-3699) () : add retry logic without exhausting queue retries (PROJQUAY-4793) () : sleep on unexpected exception for retry (PROJQUAY-4792) () : paginate user's list (PROJQUAY-4297) () : paginating superuser organization list (PROJQUAY-4297) () : gives superusers access to team invite api (PROJQUAY-4765) () : grant superusers additinonal org permissions (PROJQUAY-4687) () : allow /bin/sh (PROJQUAY-5092) () : Robot Accounts page perms fix (PROJQUAY-5487) () : Delete normal user org by super user (PROJQUAY-5639) () : Fixing failing tests () : Adding functionality to update organization settings (PROJQUAY-5402) () : Fix visibility of organization and user settings on new UI (PROJQUAY-5500) () : Fixing repository name for nested repos (PROJQUAY-5446) () : Removing Cancel button from Robot account credentials modal (PROJQUAY-5426) () : Removing isHidden from Tab as incompatible with console dot (PROJQUAY-4553) () : Using organizationName variable and using isHidden to hide tabs (PROJQUAY-4553) () : Robot token fetch & regenerate fix for user namespace (PROJQUAY-5419) () : Filtering security report vulnerabilities (PROJQUAY-5401) () : Fixing Teams search in Create Robot Wizard (PROJQUAY-5403) () : Replacing FilterInput with SearchInput in repo search for create robot account wizard (PROJQUAY-5403) () : Replacing FilterInput with SearchInput in Robot accounts page (PROJQUAY-5404) () : Replacing useRecoil with useState for robot account search (PROJQUAY-5404) () : Check if org is user for robot creation (PROJQUAY-5398) () : Fixing repoDetails not defined error () : Fix redirection to user/org page (PROJQUAY-4667) () : updating quota size format (PROJQUAY-5471) () : Fix search in bulk delete of robot accounts (PROJQUAY-5355) () : update survey link to new survey (PROJQUAY-5432) () : Hide organization settings when user is not admin (PROJQUAY-4053) () : Adding option to permanently delete tags past time machine window (PROJQUAY-5303) () : fix last modified date on repo list (PROJQUAY-5408) () : use route location instead of window.location (PROJQUAY-5392) () : Refresh auth token for plugin flow on 401 (PROJQUAY-5390) () : Use the correct endpoint for plugin (PROJQUAY-3203) () : add support for exposing quay UI as a dynamic plugin (PROJQUAY-3203) () : Merge quay-ui into quay (PROJQUAY-5315) () : Hot fix billing information (PROJQUAY-0000) () : Repository settings feature flag (PROJQUAY-4565) () : Remove add_analytics script from Dockerfile (PROJQUAY-4582) () : Remove FEATUREUIV2 from analytics scripts (PROJQUAY-4582) () : Add script for adobe analytics for quay.io in angular UI (PROJQUAY-4582) () : Show UI toggle on quay.io only to redhat users (PROJQUAY-4804) () : Add script for adobe analytics for quay.io (PROJQUAY-4582) () : Fix font size in superuser page (PROJQUAY-4407) () : default to true if LDAPRESTRICTEDUSER_FILTER is not set (PROJQUAY-4776) () : fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) () : fix create repo on push on orgs for restricted users (PROJQUAY-4732) () : prevent CREATENAMESPACEON_PUSH is restricted (PROJQUAY-4702) () : when set, grant superusers repository

() : prevent creating repo on push for restricted users (PROJQUAY-4706) () : add restricted users' filter (PROJQUAY-1245) () : Reading new UI feedback form url from config parameter (PROJQUAY-5463) () : Clean up and adding make target to install pre-commit hooks(PROJQUAY-000) () : Adding git pre-commit checks (PROJQUAY-4658) () : Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) () : add permanently delete tag usage log (PROJQUAY-5496) () : allow LDAP referrals to not be followed (PROJQUAY-5291) () : bump golang.org/x/net (PROJQUAY-5339) () : Allow optional components in the image config to be set to "null" (PROJQUAY-5634) () : Fixing paginate for /api/v1/superuser/logs API (PROJQUAY-5360) () : make cloudfrontdistributionorg_overrides optional (PROJQUAY-5788) () : Replace time to wait with event waits in cypress tests () : display sizes as base 2 (PROJQUAY-5524) () Merge pull request from dmage/merge-config-tool-3.9 <a name="v3.8.15"></a> : Add auth to comit to operator endpoint (PROJQUAY-6598) () <a name="v3.8.14"></a> : bump golang.org/x/net from 0.13.0 to 0.17.0 (PROJQUAY-6208) () <a name="v3.8.13"></a> <a name="v3.8.12"></a> : bump pypdf2 from 1.27.6 to 1.27.9 () : fix build of PyYAML on linux/ppc64le () : pull changes for s390x from master () <a name="v3.8.11"></a> : Remove parsing of error response (PROJQUAY-3718) () : bump decode-uri-component in /pkg/lib/editor () : bump socket.io-parser in /pkg/lib/editor () : bump minimist and karma in /pkg/lib/editor () : Log errors for Github and Bitbucket trigger validation (PROJQUAY-3125) () : Load certs with both extracacert and extraca_certs/ prefix (PROJQUAY-3593) : Use latest go-toolset for config-tool : Reformat python scripts in config-tool : Merge config-tool/.github into .github : Rename github.com/quay/config-tool to github.com/quay/quay/config-tool : Use config-tool from this repo : Move config-tool into its own directory : use isinstance to check instance type () : Fix regexp in pullrequestlinting.yaml () : Use conventional-commit-checker-action for Jira check (PROJQUAY-5672) () : v3.8.11 changelog bump (PROJQUAY-5869) () : Bump dependencies (PROJQUAY-5630) () : Use buildx v0.11.0-rc2 () () : Create Quay PR from the same push event : Use DEPLOY_PAT so that GitHub reacts on new tags : Create PR against Quay for new tags () : Bump http-swagger (PROJQUAY-3643) () : Update golang version in CI (PROJQUAY-1605) : Allow download of unvalidated config (PROJQUAY-1925) : Add option to override Azure endpoint (PROJQUAY-891) () : load only certificates (PROJQUAY-2416) () : Add defaults for nested repos and init users (PROJQUAY-2425) () : use PAT for creating PR on quay repo (PROJQUAY-5048) () : fix release.yaml quote (PROJQUAY-5048) () : Create a PR against quay for every release (PROJQUAY-5048) () : Add workflow to auto release on push (PROJQUAY-5048) () : Add documentation for TLS usage (PROJQUAY-4558) () : Remove link from example .env file : Remove BITTORRENTFILENAMEPEPPER from generated config : Remove certs from ui scope on select external-tls (PROJQUAY-2528) () : Add logic to allow managing/unmanaging of RepoMirror from ui () : Add sslmode=verify-full when Postgres cert uploaded (PROJQUAY-2200) () : Pass CONTAINER_RUNTIME to quay-builder (PROJQUAY-5910) () : Set default USERFILES_LOCATION to a valid storage : Update golang to version 1.16 (PROJQUAY-1605) () : Fix broken link (PROJQUAY-2449) () : Remove validation check for users (PROJQUAY-2343) () : //github.com/quay/config-tool into fileUploads : //github.com/quay/config-tool into fileUploads : //github.com/quay/config-tool into fileUploads : //github.com/quay/config-tool into fileUploads : quay/config-tool : //github.com/quay/config-tool : //github.com/quay/config-tool : //github.com/quay/config-tool : Increase Redis timeout from 3 seconds to 10 seconds : Pass token during ec2 role auth (PROJQUAY-2983) () : validate introspection endpoint (PROJQUAY-1610) : Add ALLOWEDOCIARFICAT_TYPES to generated config (PROJQUAY-1032) () : Use TLS certs when connecting to smpt (PROJQUAY-1605) () : re-enable

file loading (PROJQUAY-2511) () : Add CloudFlare and MultiCDN config validation (PROJQUAY-5048) () : Do not require a storage_path in Distributed Storage Configuration () : Set external tls termination flag to false when internal (PROJQUAY-2428) () : changing option message for custom tls (PROJQUAY-2428) () : Show extracacert_ prefix (PROJQUAY-3318) () : calls to gcs should always be secure (PROJQUAY-2722) () : fix postgres root cert validation (PROJQUAY-2414) () : Fix database.pem path in config.yaml (PROJQIUAY-4222) () : Use user provided endpoint for Gitlab and Github OAuth validations (PROJQUAY-2560) () : Check for IAM role when aws keys missing. (PROJQUAY-1626) () : Remove cloudfront API calls that may not be included in policy (PROJQUAY-0000) : // for MySQL DB_URI : Adding ignore timezone flag when parsing datetime (PROJQUAY-5360) () : bump golang.org/x/net (PROJQUAY-5339) () : Fixing paginate for /api/v1/superuser/logs API (PROJQUAY-5360) () : attempt urldecoding fixedinversion (PROJQUAY-5886) () Merge pull request from dmage/merge-config-tool-3.8 Merge pull request from quay/PROJQUAY-1998 Merge pull request from quay/PROJQUAY-1815 Merge pull request from syed/add-redis-ssl Merge pull request from quay/loggin_refactor Merge pull request from quay/scram_fix Merge pull request from alecmerdler/PROJQUAY-1610 Merge pull request from quay/PROJQUAY-1963 Merge pull request from quay/PROJQUAY-1964 Merge pull request from quay/ensuremailtls_fips Merge pull request from thomasmckay/1925-config-download Merge pull request from alecmerdler/oidc-tls-client Merge pull request from kleesc/set-correct-userfiles-location-default Merge pull request from thomasmckay/1633-secret-key Merge pull request from alecmerdler/PROJQUAY-1577 Merge pull request from quay/aioi_gen Merge pull request from quay/PROJQUAY-1561 Merge pull request from quay/PROJQUAY-1270 Merge pull request from quay/PROJQUAY-1262 Merge pull request from quay/PROJQUAY-541 Merge pull request from quay/vendor Merge pull request from alecmerdler/PROJQUAY-1306 Merge pull request from quay/oidc Merge pull request from quay/mail_validate Merge pull request from quay/swiftV3 Merge pull request from quay/fixfileinput Merge pull request from quay/removebooleanomitempty Merge pull request from quay/fix_modals Merge pull request from quay/swift_validation Merge pull request from quay/ldap_query Merge pull request from quay/feature_sign Merge pull request from quay/cert_port Merge pull request from quay/cloudfront Merge pull request from quay/dbssl Merge pull request from quay/fixjs Merge pull request from quay/ldap Merge pull request from quay/checkBucket Merge pull request from alecmerdler/PROJQUAY-1156 Merge pull request from BillDett/PROJQUAY-1202 Merge pull request from quay/switchTLS Merge pull request from quay/tls_timeout Merge pull request from quay/azure Merge pull request from quay/time_machine Merge pull request from thomasmckay/1198-deprecated Merge pull request from quay/storage_fix Merge pull request from quay/cert_fix Merge pull request from quay/fix_mail Merge pull request from kurtismullins/PROJQUAY-1149 Merge pull request from quay/gitlab_endpoint Merge pull request from quay/tar2 Merge pull request from quay/cleandevenv Merge pull request from quay/storage_fix Merge pull request from quay/debug Merge pull request from quay/super_users Merge pull request from quay/setupaddvars Merge pull request from quay/clair_setup Merge pull request from quay/securityscannerpsk Merge pull request from quay/omitempty Merge pull request from quay/warnnomount Merge pull request from quay/certloadcli Merge pull request from quay/addnullfixto_api Merge pull request from quay/postgrespgcheck Merge pull request from alecmerdler/PROJQUAY-1107 Merge pull request from quay/tls Merge pull request from quay/localstorage_fix Merge pull request from quay/chi_migration Merge pull request from alecmerdler/distributedstorage-proxy Merge pull request from alecmerdler/PROJQUAY-909 Merge pull request from thomasmckay/npm Merge pull request from alecmerdler/distributedstorage-unmarshal Merge pull request from alecmerdler/PROJQUAY-1064 Merge pull request from quay/repo_mirror Merge pull request from alecmerdler/PROJQUAY-909 Merge pull request from alecmerdler/PROJQUAY-1029 Merge pull request from quay/remove-hardcoded-conf-path Merge pull request from quay/fileUploads Merge pull request from josephschorr/config-editor Merge pull request from alecmerdler/pull-request-template Merge pull request from alecmerdler/fix-json-tags-hostsettings Merge pull request from alecmerdler/distributedstorage-omitempty Merge pull request from alecmerdler/dbconnectionargs-omitempty Merge pull request from alecmerdler/json-tags Merge pull request from alecmerdler/distributedstorage-fieldgroup Merge pull request from alecmerdler/securityscanner-typefix Merge pull request from quay/removevalidatedep Merge pull request from quay/removevalidatedep Merge pull request from quay/new_schema <a name="v3.8.10"></a> : v3.8.10 changelog bump (PROJQUAY-5677) () : handle readonly mode when updating repo size cache (PROJQUAY-4854) () <a name="v3.8.9"></a> :

changelog bump (PROJQUAY-5607) () : update ppc64le builder () : Use external builders () : Allow anonymous pulls from registries (PROJQUAY-5273) () : paginate user's list (PROJQUAY-4297) () () : paginating superuser organization list (PROJQUAY-4297) () <a name="v3.8.8"></a> : v3.8.8 changelog bump (PROJQUAY-5514) () : Remove cachito magic for PyPDF2 () : add retry logic without exhausting queue retries (PROJQUAY-4793) () <a name="v3.8.7"></a> : v3.8.7 changelog bump (PROJQUAY-5352) () : Ensure use of HTTP 1.1 when proxying storage (PROJQUAY-5140) We were not enforcing the use of `HTTP 1.1` when storage proxy was concerned. This causes problems in certain complex scenarios. () <a name="v3.8.6"></a> : bump certifi from 2019.11.28 to 2022.12.7 () : v3.8.6 changelog bump (PROJQUAY-5279) () : Pin distribution-spec conformance tests () : sleep on unexpected exception for retry (PROJQUAY-4792) () <a name="v3.8.5"></a> : bump setuptools from 63.4.0 to 65.5.1 () : reduce CVEs in dependencies and runtime environment (PROJQUAY-4777) () () : v3.8.5 changelog bump (PROJQUAY-5228) () : Downgrade cryptography to 3.3.2 (PROJQUAY-5120) () : Add setuptools-rust as a build dependency () : backport requirements.txt changes (PROJQUAY-4777) () : Bump pyOpenSSL and cryptography (PROJQUAY-5120) () : Change error messages in UI during LDAP login (PROJQUAY-4845) () <a name="v3.8.4"></a> : v3.8.4 changelog bump (PROJQUAY-5148) () : Bump Authlib (PROJQUAY-5120) () : fix invalid Exception attribute (PROJQUAY-5047) () : lazy-load superuser permissions (PROJQUAY-5117) () : add option to validate all configured storages (PROJQUAY-5074) () : allow /bin/sh (PROJQUAY-5092) () <a name="v3.8.3"></a> : v3.8.3 changelog bump (PROJQUAY-5062) () <a name="v3.8.2"></a> : bump oauthlib from 3.2.1 to 3.2.2 () : bump pillow from 9.0.1 to 9.3.0 () : Remove appr dependencies (PROJQUAY-4992) () : remove deprecated appr code (PROJQUAY-4992) () : clean upload folder by default (PROJQUAY-4395) () : Add repository information for build audit logs (PROJQUAY-4726) () <a name="v3.8.1"></a> : v3.8.1 changelog bump (PROJQUAY-4716) () : //issues.redhat.com/browse/PROJQUAY-4790) () : Adding missing method type (PROJQUAY-4800) () : audit logs on manual build triggers and build cancellations (PROJQUAY-4726) () : Minor update to fix toggling issue on Safari (PROJQUAY-4527) () : support docker schema2 sub-manifest types () : gives superusers access to team invite api (PROJQUAY-4765) () : Fix redirection to user/org page (PROJQUAY-4667) () : Repository settings feature flag (PROJQUAY-4565) () : Remove add_analytics script from Dockerfile (PROJQUAY-4582) () <a name="v3.8.0"></a> : feature to limit org creation to superusers (PROJQUAY-1245) () : add OPTIONS method to /config request (PROJQUAY-4276) () : fix CORS headers, use concat instead of extend (PROJQUAY-4163) () : handle missing tag on DELETE tag api () : Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) () : Map aarch64 to arm64 in ARCH variable () : Adding wraps to user namespace decorator (PROJQUAY-4694) () : Speed up permissions loading (PROJQUAY-4004) () : allow rs384 in jwt (PROJQUAY-4148) () : fix new private repo count (PROJQUAY-4208) () : add new larger stripe plan (PROJQUAY-4208) () : Increase column size in logentry3 table (PROJQUAY-4305) () : Fix schema discovery on basic auth (PROJQUAY-4362) () : bump angular and /angular () : bump terser from 4.3.4 to 4.8.1 () : bump moment from 2.29.2 to 2.29.4 () : Add cacert's to build agent (PROJQUAY-3819) () : Send notifications on build completion (PROJQUAY-3614) () : Set imagePullPolicy to always (PROJQUAY-3507) () : Add dnsPolicy option (PROJQUAY-3755) () : fix type when getting ec2 ami () : Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) () : Commenting arm docker build (PROJQUAY-0000) () : Add georeplication variable check (PROJQUAY-4363) () : Fix startup script () : Use Python

() : Run mypy as CI job () : Rebuild quay image if requirements.txt is changed () : //issues.redhat.com/browse/PROJQUAY-3990) () : //issues.redhat.com/browse/PROJQUAY-4192) () : //issues.redhat.com/browse/PROJQUAY-2411) () : //issues.redhat.com/browse/PROJQUAY-3836) () : //issues.redhat.com/browse/PROJQUAY-4627) () : //issues.redhat.com/browse/PROJQUAY-3989) () : //issues.redhat.com/browse/PROJQUAY-4050) () : //issues.redhat.com/browse/PROJQUAY-4172) () : //issues.redhat.com/browse/PROJQUAY-4237) () : //issues.redhat.com/browse/PROJQUAY-4286) () : //issues.redhat.com/browse/PROJQUAY-4385) () : //issues.redhat.com/browse/PROJQUAY-4478) () : Check arm64 builds in CI (PROJQUAY-4038) () : Remove old validation code (PROJQUAY-4606) () : mark beginning of string in oauth location match () : Update Clair for dev (PROJQUAY-4461) () : Add pre-commit script to run black (PROJQUAY-4039) () : update Instructions for Deploying on OpenShift () : use nodejs ubi8 image to build frontends () : Fetching quay user data from federated login username (PROJQUAY-0000) () : support oci image indexes that don't specify a mediaType (PROJQUAY-4254) () : enable non-admins to cache images via pull-thru (PROJQUAY-3806) () : Show how to pull an image using podman pull () : Use db_kwargs in health check (PROJQUAY-4222) () : fix bash path before appending certs (PROJQUAY-3881) () : ensure a newline is present before appending certs (PROJQUAY-3881) () : ensure a newline is present before appending certs (PROJQUAY-3881) () : create action logs on proxy cache config creation/deletion (PROJQUAY-4718) () : use non-standard port for postgres test container () : use variable to tell postgres test target which tests to run () : Rollback failed tags (PROJQUAY-4322) () : Default mirror rollback to false (PROJQUAY-4296) () : Pass command output to a tempfile instead of pipe (PROJQUAY-3145) () : fix mirror claims for multiple processes (PROJQUAY-3982) () : mark beginning of string in location match () : fix oauth token generation when using dangerous scopes (PROJQUAY-4042) () : Add the code param to the oauthrize.html template (PROJQUAY-3648) () : support registries that do not return a digest header () : respect CREATEPRIVATEREPOONPUSH flag (PROJQUAY-3743) () : bump expiration of all parent manifest lists on pull () : Exporting image.oci package to Quay module (PROJQUAY-0000) () : Redirect user to billing page when starting free trial (PROJQUAY-4130) () : Configuring Quota for user panel(PROJQUAY-3767) () : Add Cache To Tag Delete (PROJQUAY-3828) () : Fix calculating org size (PROJQUAY-3889) () : Fix join on caching repo size (PROJQUAY-3889) () : address possible integrity exception if computing size concurrently (PROJQUAY-3752) () : Adding default quota check for image push (PROJQUAY-3789) () : Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) () : Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) () : correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) () : bump flask-restful from 0.3.7 to

() : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) ()" () : Add checks for e-mail blocked in export screen (PROJQUAY-2056) () : Generate kid in the correct format (PROJQUAY-3486) () : Generate key to reduce vulnerabilities (PROJQUAY-4562) () : Don't delete manifest security status on error (PROJQUAY-4060) () : deprecate support for Clair V2 (PROJQUAY-2837) () : update https proxy scheme () : Handle edge case for stage sso only users (PROJQUAY-2056) () : Fix debug statement (PROJQUAY-2056) () : Use trusted cert from extracacerts directory (PROJQUAY-2056) () : Use requests client in screening call (PROJQUAY-2056) () : Update mount path for export compliance certificate (PROJQUAY-2056) () : Add test for RHSSO OAuth service (PROJQUAY-2056) () : handle KeyError we sometimes get from aws () : return S3 url only for ip ranges in the same region (PROJQUAY-4498) () : Add username field to requests on CloudFront (PROJQUAY-3511) () : optimize large azure chunked upload (PROJQUAY-3753) () : grant superusers additinonal org permissions (PROJQUAY-4687) () : remove obsolete logrotate.conf file (PROJQUAY-4364) () : Superuser user panel settings icon permissions fix (PROJQUAY-3905) () : Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) () : Fix font size in superuser page (PROJQUAY-4407) () : Support on Old UI to switch to New UI (PROJQUAY-4124) () : Remove trial from larger plans for quay.io (PROJQUAY-4197) () : Remove trial from larger plans for quay.io (PROJQUAY-4197) () : Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) () : basic support for cosign in the UI (PROJQUAY-3965) () : Added function to fetch users public repositories count (PROJQUAY-0000) () : default to true if LDAPRESTRICTEDUSER_FILTER is not set (PROJQUAY-4776) () : fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) () : fix create repo on push on orgs for restricted users (PROJQUAY-4732) () : prevent CREATENAMESPACEON_PUSH is restricted (PROJQUAY-4702) () : when set, grant superusers repository permissions. () : prevent creating repo on push for restricted users (PROJQUAY-4706) () : add restricted users' filter (PROJQUAY-1245) () : fix missing references in ldap for superusers () : superuser group in federated identity provider (PROJQUAY-3924) () : Check for user before creating org (PROJQUAY-3766) () : add ppc64le support to quay (PROJQUAY-4595) () : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) () : Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) () : Use skopeo list-tags to get repo tags (PROJQUAY-2179) () <a name="v3.7.14"></a> <a name="v3.7.13"></a> : v3.7.13 changelog bump (PROJQUAY-5815) () <a name="v3.7.12"></a> : v3.7.12 changelog bump ( PROJQUAY-5599) () : Remove appr dependencies (PROJQUAY-4992) () : Pin distribution-spec conformance tests () : remove deprecated appr code (PROJQUAY-4992) () : paginate user's list (PROJQUAY-4297) () () : allow /bin/sh (PROJQUAY-5092) () : Create workflow for OCI Conformance (PROJQUAY-2812) () : lowering page limit (PROJQUAY-5178) () () : paginating superuser organization list (PROJQUAY-4297) () <a name="v3.7.11"></a> : //issues.redhat.com/browse/PROJQUAY-4790) () : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) ()" () <a name="v3.7.10"></a> : Speed up permissions loading (PROJQUAY-4004) () : //issues.redhat.com/browse/PROJQUAY-4627) () : Generate key to reduce vulnerabilities (PROJQUAY-4562) () : Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) () <a name="v3.7.9"></a> : //issues.redhat.com/browse/PROJQUAY-4478) () : handle KeyError we sometimes get from aws () <a name="v3.7.8"></a> : //issues.redhat.com/browse/PROJQUAY-4286) () : //issues.redhat.com/browse/PROJQUAY-4385) () : Use db_kwargs in health check (PROJQUAY-4222) () : Increase column size in logentry3 table (PROJQUAY-4305) () : Fix schema discovery on basic auth (PROJQUAY-4362) () : Update release workflow to use new release action (PROJQUAY-4444) () <a name="v3.7.7"></a> : Rollback failed tags (PROJQUAY-4322) () : Default mirror rollback to false (PROJQUAY-4296) () : correctly bump tag expiration when tag changes upstream () <a name="v3.7.6"></a> : //issues.redhat.com/browse/PROJQUAY-4237) () () : support oci image indexes that don't specify a mediaType (PROJQUAY-4254) () : respect CREATEPRIVATEREPOONPUSH flag (PROJQUAY-3743) () <a name="v3.7.5"></a> : allow rs384 in jwt (PROJQUAY-4148) () : //issues.redhat.com/browse/PROJQUAY-4050) () () : //issues.redhat.com/browse/PROJQUAY-4172) () : fix mirror claims for multiple processes (PROJQUAY-3982) () <a name="v3.7.4"></a> : Add cacert's to build agent (PROJQUAY-3819) () () : Pass command output to a tempfile instead of pipe (PROJQUAY-3145) () <a name="v3.7.3"></a> : //issues.redhat.com/browse/PROJQUAY-3989) () () : optimize large azure chunked upload (PROJQUAY-3753) () : basic support for cosign in the UI (PROJQUAY-3965) () <a name="v3.7.2"></a> : Send notifications on build completion (PROJQUAY-3614) () : //issues.redhat.com/browse/PROJQUAY-3836) () :

() : enable non-admins to cache images via pull-thru (PROJQUAY-3806) () () : Show how to pull an image using podman pull () : Fix calculating org size (PROJQUAY-3889) () : Fix join on caching repo size (PROJQUAY-3889) () : bump flask-restful from 0.3.7 to 0.3.9 () : Superuser user panel settings icon permissions fix (PROJQUAY-3905) () : Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) () <a name="v3.7.1"></a> : fix bash path before appending certs (PROJQUAY-3881) () : ensure a newline is present before appending certs (PROJQUAY-3881) () : ensure a newline is present before appending certs (PROJQUAY-3881) () : bump expiration of all parent manifest lists on pull (PROJQUAY-3818) () : Configuring Quota for user panel(PROJQUAY-3767) () : Add Cache To Tag Delete (PROJQUAY-3828) () : Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) () <a name="v3.7.0"></a> : Removing internal only decorator from exposed Super user endpoints () : update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) () : fully deprecate image api endpoints (PROJQUAY-3418) () : filter proxy cache login details from debug logs () : Add state to the oauthorize redirect (PROJQUAY-3648) () : Add state to the oauthorize page (PROJQUAY-3648) () : Add state to the Oauth code response (PROJQUAY-3139) () : Fix oauth code flow (PROJQUAY-781) () : use BytesIO when rendering invoice (PROJQUAY-3267) () : Remove type hints for FakeStripe (PROJQUAY-2777) () : Remove annotations for type hints in billing (PROJQUAY-2777) () : Add BLOBUPLOADDELETIONDATE_THRESHOLD (PROJQUAY-2915) () : Add cleanup for orphaned blobs (PROJQUAY-2313) () : Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) () : Add required setup.cfg for downstream build (PROJQUAY-2713) () () : Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) () : Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) () : Update backup base image name (PROJQUAY-2372) () : Remove the image archive in post-deploy (PROJQUAY-2372) () : Use docker-archive for post-deploy script (PROJQUAY-2372) () : Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) () : Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) () : use Dockerfile for building quay app-sre (PROJQUAY-2373) () : bump is-my-json-valid from 2.16.0 to 2.20.6 () : bump ajv from 6.10.2 to 6.12.6 () : bump moment from 2.17.1 to 2.29.2 () : bump url-parse from 1.5.8 to 1.5.9 () : bump url-parse from 1.5.6 to 1.5.8 () : bump url-parse from 1.5.2 to 1.5.6 () : bump protobuf from 3.12.2 to 3.15.0 () : bump pillow from 8.3.2 to 9.0.0 () : bump qs from 6.3.1 to 6.3.3 () : bump y18n from 3.2.1 to 3.2.2 () : bump python-ldap from 3.2.0 to 3.4.0 () : bump reportlab from 3.5.34 to 3.5.55 () : bump pip from 20.2.3 to 21.1 () : bump babel from 2.8.0 to 2.9.1 () : bump url-parse from 1.4.0 to 1.5.2 () : bump pillow from 8.3.1 to 8.3.2 () : bump path-parse from 1.0.5 to

() : Add dnsPolicy option (PROJQUAY-3755) () : Set default kubernetesPodman image (PROJQUAY-3586) () : Persist build pod when DEBUG is true (PROJQUAY-3710) () : Set backoffLimit to 1 (PROJQUAY-3587) () : add a check for expired key (PROJQUAY-3489) () : Add DEBUG and JOBREGISTRATIONTIMEOUT options (PROJQUAY-3395) () : Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) () : Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) () : Update boto to fix signature error (PROJQUAY-2542) () : Remove socket_timeout from the redis client (PROJQUAY-2542) () : Make singleconnectionclient conifgurable (PROJQUAY-3025) () : increase allowed grpc body size for log streams () : Add EXECUTOR parameter (PROJQUAY-3278) () : prevent systemd oneshot service from timing (PROJQUAY-3304) () : Set build token expiration to builder's lifetime (PROJQUAY-3281) () : fix multiple build retries phase (PROJQUAY-3281) () : configurable build job registration timeout (PROJQUAY-3280) () : Add kubernetesPodman build option (PROJQUAY-3052) () : allow use of public builder image (PROJQUAY-3179) () : fix kubernetes not returning correct running count (PROJQUAY-3169) () : document backporting process () : handle uncaught redis exception (PROJQUAY-2614) () : various small changes to fix exceptions, remove unused code () : add logging during instance service key generation () : Fix cachito issue with pypdf (PROJQUAY-3184) () : Remove unneeded flags fromt he config schema () : remove unused tools (PROJQUAY-0) () : Remove unused files () : download aws ip ranges via github workflow () : Bump up config-tool version v0.1.9 () : cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) () : Bump up config-tool version v0.1.8 () : Bump up config-tool version () : Bump up config-tool version () : bump gevent related packages' version (PROJQUAY-2821) () : improve check for JIRA ticket (PROJQUAY-2623) () : Provide timestamps on container startup including registry, mirror and config container () : build and publish workflow (PROJQUAY-2556) : Move qemu outside of quay repo to its github repo (PROJQUAY-2342) () : add local-dev-env build stage (PROJQUAY-2501) () : //issues.redhat.com/browse/PROJQUAY-3028) () : //issues.redhat.com/browse/PROJQUAY-3335) () : //issues.redhat.com/browse/PROJQUAY-3354) () : //issues.redhat.com/browse/PROJQUAY-3635) () : //issues.redhat.com/browse/PROJQUAY-2411) () : Enable workflow dispatch for build and publish (PROJQUAY-3310) () : Update funcparserlib version (PROJQUAY-2520) () : don't remove webfonts dir since its now versioned () : Removing requirements-nover.txt (PROJQUAY-2985) () : Move export screening to RHSSO class (PROJQUAY-2056) () : fix supervisord chunk worker template () : Update config-tool to v0.1.11 (PROJQUAY-3318) () : Allow envelope mediatype (PROJQUAY-3386) () : Update config-tool version to v0.1.10 (PROJQUAY-3125) () : define default oci artifact types (PROJQUAY-2334) () : Add support for source containers (PROJQUAY-2271) () : increase max len for proxy cache config credentials () : format file with black () : handle nested transaaction when trying to close before transaction (PROJQUAY-3303) () : force close existing non-pooled connections before transaction (PROJQUAY-3303) () : retry connections on stale MySQL connections (PROJQUAY-3303) () : remove url unqoute from migration logic (PROJQUAY-3266) () : Log X-Forwaded-For for requests (PROJQUAY-2883) () : Log X-Forwaded-For for requests (PROJQUAY-2883) () : Update defaults in config and schema (PROJQUAY-2425) () : Add ignore validation for py3 deployment (PROJQUAY-2542) () : Add GRPC service for builds (PROJQUAY-3189) () : Add LB service with no proxy-protocol (PROJQUAY-2883) () : Add clair back fill worker deployment manifests () : Update syslog image tag(PROJQUAY-2374) () : Seperate py3 deployment manifests (PROJQUAY-2374) () : Update app-sre build script (PROJQUAY-2374) () : Push py3 images to a different quay repo (PROJQUAY-2374) () : Update quay deployment manifests for py3 canary (PROJQUAY-2373) () : upgrade upstream requirements.txt package versions () : ubi8 requires python38, otherwise installs

by default (PROJQUAY-3148) () : update upstream image to use ubi8 as base (PROJQUAY-3148) () : set QUAYRUN in non-standard dockerfiles () : make sure the production dockerfile doesn't pull from dockerhub () : replace golang base image in production dockerfile () : use separate dockerfile for production deployment () : Update symlink in upstream dockerfile (PROJQUAY-2550) () : consolidate getting started guides (PROJQUAY-2500) () : Added instructions to setup dev environment (PROJQUAY-2277) () () : Bump config tool to v0.1.12 (PROJQUAY-3593) () : fix org recovery link in email (PROJQUAY-2589) () : handle generic proxy related errors () : pull-thru proxy cache () : mypy type annotations (PROJQUAY-740) () : pin setuptools to version 57 () : Adding default vault to quota parameter (PROJQUAY-0000) () : Updating black to resolve click dependency issue (PROJQUAY-3487) () : Update code to obey the linter (PROJQUAY-0) () : remove orphaned storage on repository purge (PROJQUAY-2313) () : Add unsigned registries mirror option (PROJQUAY-3106) () : update invoice template to fix layout (PROJQUAY-3267) () : update country mmdb (PROJQUAY-3031) () : add test for user filter (PROJQUAY-2766) () : Add local-dev-build-frontend step (PROJQUAY-2693) () : skip existing mediatype inserts (PROJQUAY-2811) () : configure logging in alembic's env.py (PROJQUAY-2412) () : Get all tags during rollback (PROJQUAY-3146) () : increased registry user/pass max length (PROJQUAY-2712) () : return 0 when namespace has no size yet () : update rate limit values for quay based on traffic (PROJQUAY-3283) () : block v1/tag for helium miner curl calls (PROJQUAY-3594) () : Update rate limiting for tags API (PROJQUAY-3283) () : Increase body timeout for buildman (PROJQUAY-3406) () : add missing semicolon in template (PROJQUAY-2883) () : rename base http template file ((PROJQUAY-2883) () : support client ip through x-forwarded-for header (PROJQUAY-2883) () : use bigger http/2 chunks for blobs () : fix user ref when creating notification for quota (PROJQUAY-3711) () : check certs exists for webhooks (PROJQUAY-2424) () : Accept the stricter oci layer type used by default in Helm

(PROJQUAY-2653) () : support registries that do not return a digest header () : make upstream related error message more actionable () : raise UpstreamRegistryError if we can't request upstream () : don't store entire blob in memory when caching () : Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) () : Interface and UI for Proxy cache Configuration (PROJQUAY-3029) () : Fixing reclassified CVE ratings source (PROJQUAY-2691) () : Converting to nearest integer (PROJQUAY-3602) () : Catching requests from impersonated principals () : Fetching severity from cvss score and removing visibility () : Add export compliance service to Red Hat SSO (PROJQUAY-2056) () : allow migration to skip adding manifest columns if exists (PROJQUAY-2579) () : address possible integrity exception if computing size concurrently (PROJQUAY-3752) () : fix caching (PROJQUAY-3660) () : Raising exception when entered quota size is too big (PROJQUAY-3702) () : Show a different error message if default quota is set on removing quota (PROJQUAY-3657) () : Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) () : Add super user permissions on Organization endpoints (PROJQUAY-3742) () : Remove trailing backslash (PROJQUAY-3625) () : Quota settings on Organization view needs to be read only (PROJQUAY-3622) () : Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) () : Fix quota input value (PROJQUAY-3691) () : Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) () : Display Error when decimal values entered from UI (PROJQUAY-3627) () : Syntax fix to throw error on 0 input (PROJQUAY-3419) () : Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) () : Reporting (PROJQUAY-2936) () : decode byte to string before using split (PROJQUAY-3180) () : use pre-built centos 8 stream () : update blob mount behaviour when from parameter is missing (PROJQUAY-2570) () : count repository size when caching images (PROJQUAY-3464) () : bump cryptography package version () : upgrade cryptography package () : remove ipython and related deps () : remove unused dependencies () : Add export compliance service to Red Hat SSO (PROJQUAY-2056) ()" () : Add export compliance service to Red Hat SSO (PROJQUAY-2056) ()" ()" () : Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) ()" () : add a global lock on security worker runs (PROJQUAY-3501) ()" () : Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) () : split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) () : add option to skip recent manifest batch lock (PROJQUAY-3501) () : cleanup secscan interface (PROJQUAY-3501) () : fix config reference (PROJQUAY-3501) () : split indexing of recent manifest into separate background operation (PROJQUAY-3501) () : fix check for end of table (PROJQUAY-3501) () : fix missing import (PROJQUAY-3501) () : configure global lock (PROJQUAY-3501) () : update the secscan model interface (PROJQUAY-3501) () : optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) () : add indexer service request duration metric (PROJQUAY-3501) () : fix database manifest allocator for securityworker (PROJQUAY-3501) () : add a global lock on security worker runs (PROJQUAY-3501) () : scan recent manifests in addition to regular backfill (PROJQUAY-3287) () : log manifest ID when indexing (PROJQUAY-3287) () : Log start and end index of block in clair (PROJQUAY-3287) () : make batch_size configurable (PROJQUAY-3287) () : clairv2 - fix datatype bug (PROJQUAY-3279) () : ClairV2 datatype compatibility (PROJQUAY-3279) () : Don't save secscan result if returned state is unknown (PROJQUAY-2939) () : fix secscan api ApiRequestFailure test (PROJQUAY-2563) () : continue iterating after failure (PROJQUAY-2563) () : prioritize scanning new pushes (PROJQUAY-3287) () : Export Quay modules (PROJQUAY-3181) () : vendor webfonts dir () : vendor external libraries () : allow arbitrary endpoint url for azure storage () : Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) () : handle cn-north-1 region (PROJQUAY-3082) () : allow configuration of storage region for cloud storage (PROJQUAY-3082) () : Fix display of build logs (PROJQUAY-3404) () : admin team deletion (PROJQUAY-2080) () : fix confusing print (PROJQUAY-1995) () : Quota UI enhancements (PROJQUAY-0000) () : Copy build logs error fix (PROJQUAY-3405) () : remove deprecated docker-image-id references from ui (PROJQUAY-3418) () : display manifest list manifest sizes (PROJQUAY-3196) () : Depricate getImageCommand in security UI (PROJQUAY-3284) () : fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) () : change angular routing order for repo paths (PROJQUAY-2325) () : update aws-ip-ranges.json () : manually add aws-ip-ranges.json () : Check for user before creating org (PROJQUAY-3766) () : Adding default quota check for image push (PROJQUAY-3789) () <a name="v3.6.2"></a> : /v1/user/initialize to create first user (PROJQUAY-1926) () : Quayio nvd data UI improvements () : Add required setup.cfg for downstream build (PROJQUAY-2713) () () : add full python build dependencies (PROJQUAY-2216) () : update package-lock.json (PROJQUAY-1749) () : remove unused node modules (PROJQUAY-1667) () : update python pillow version (PROJQUAY-1520) () : update node url-parse to 1.4.3 (PROJQUAY-1749) () : bump pillow from 8.3.1 to 8.3.2 () () : bump ssri from 6.0.1 to 6.0.2 () : bump flask-cors from 3.0.8 to 3.0.9 () : Add proxy variables to builds if they exist (PROJQUAY-2120) () : fix vm image name in startup script (PROJQUAY-2120) () : py2 compatibility, kwargs after named args (PROJQUAY-2101) () : add support for redis cluster mode (PROJQUAY-2101) () :

changelog bump (PROJQUAY-2728) () : build and publish workflow (PROJQUAY-2556) : remove ui elements for account recovery mode (PROJQUAY-970) () : return zope.interface to requirements-osbs.txt (PROJQUAY-1535) () : fix rediscluster cache config key name (PROJQUAY-2101) () : allows Quay to run for account recoveries (PROJQUAY-970) () : remove node modules from final container (PROJQUAY-1822) () : remove uploading filtering from imagestorage queries (PROJQUAY-1914) () : define default oci artifact types (PROJQUAY-2334) () () : remove transaction from empty layer upload (PROJQUAY-1946) () : Update defaults in config and schema (PROJQUAY-2425) () () : update component label value for recovery (PROJQUAY-970) () : Add recovery endpoint deployment manifests (PROJQUAY-970) () : Change canary to blue deployment (PROJQUAY-1896) () : Fix broken links in the CHANGELOG (PROJQUAY-2298) () : Update symlink in upstream dockerfile (PROJQUAY-2550) () () : Fix downstream python site-packages location (PROJQUAY-2258) () : Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) () : refactor dockerfile (PROJQUAY-1997) () : fix org recovery link in email (PROJQUAY-2589) () : enforce smtp tls (PROJQUAY-1804) () () : Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) () : Add composite index in manifestblob (PROJQUAY-1922) () : Do not store signatures on repo mirroring (PROJQUAY-2167) () : Add read and write endpoints to Redis (PROJQUAY-1939) () : Make ModelCache TTL configurable (PROJQUAY-1878) () : check certs exists for webhooks (PROJQUAY-2424) () () : add timeout to OAuth token exchange (PROJQUAY-1335) () : Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) () () : add support for zstd compression (PROJQUAY-1417) () : allow oci artifact registration (PROJQUAY-1032) () : config to allow organization creation on push (PROJQUAY-928) () : bump pillow to 8.3.1 (PROJQUAY-2250) () : add support for extended repository names (PROJQUAY-1535) () : update downstream Dockerfile (PROJQUAY-1861) () : config to allow public repo create (PROJQUAY-1929) () : bump cryptography package version () () : continue iterating after failure (PROJQUAY-2563) () : handle proxy model fallback to noop v2 (PROJQUAY-2289) () : handle remote layer url when sending request to Clair (PROJQUAY-2269) () : clair v4 enrichment (PROJQUAY-2102) () : vendor webfonts dir () : vendor external libraries () : escape templated script value (PROJQUAY-970) () : force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) () : Require user to enter repository when deleting (PROJQUAY-763) () : Add repo state column when mirroring enabled (PROJQUAY-591) () : fix matching multiples in jsontemplate.py (PROJQUAY-0000) () : Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) () <a name="v3.6.0-alpha.9"></a> : remove GlobalLock from redis model cache (PROJQUAY-1902) () : add Redis model cache implementation (PROJQUAY-788) () : v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) () : correct chnglog params (PROJQUAY-1486) () : fix release image tag to retain leading 'v' (PROJQUAY-1486) () : bump version to 3.6.0 (PROJQUAY-1861) () : include optional merge commit number in commit check job (PROJQUAY-1486) () : Add image tag param to the deploy file (PROJQUAY-1896) () : Add canary deployment to quay-app (PROJQUAY-1896) () : increment quaygcrepos_purged for NamespaceGCWorker (PROJQUAY-1802) () : add metrics for deleted resources () : allows global lock to be used from main app (PROJQUAY-788) () : reuse redis client when creating locks (PROJQUAY-1872) () : prevent stop event on WorkerSleepException (PROJQUAY-1857) () <a name="v3.6.0-alpha.8"></a> : v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) () : correct cut-release.yml (PROJQUAY-1486) () <a name="v3.6.0-alpha.7"></a> : v3.6.0-alpha.7 changelog bump (PROJQUAY-1486) () : fix cut-release.yml (PROJQUAY-1468) () <a name="v3.6.0-alpha.6"></a> : correct git-chglog config (PROJQUAY-1468) () : v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) () : fix changelog template (PROJQUAY-1486) () : parse new CHANGELOG.md format (PROJQUAY-1486) () <a