2023-05-09 21:15:05 +00:00
|
|
|
# commit to be tagged for new release
|
|
|
|
|
commit = "HEAD"
|
|
|
|
|
|
|
|
|
|
project_name = "registry"
|
|
|
|
|
github_repo = "distribution/distribution"
|
|
|
|
|
|
|
|
|
|
# previous release
|
|
|
|
|
previous = "v2.8.1"
|
|
|
|
|
|
|
|
|
|
pre_release = false
|
|
|
|
|
|
|
|
|
|
preface = """\
|
2023-05-11 09:46:45 +00:00
|
|
|
Welcome to the 2.8.2 release of registry!
|
2023-05-09 21:15:05 +00:00
|
|
|
|
2023-05-11 09:46:45 +00:00
|
|
|
The 2.8.2 registry release fixes several security vulnerabilities.
|
2023-05-09 21:15:05 +00:00
|
|
|
The Go runtime has been bumped to 1.19.
|
|
|
|
|
|
|
|
|
|
See the changelog below for full list of changes.
|
|
|
|
|
|
2023-05-09 22:51:24 +00:00
|
|
|
### CI
|
|
|
|
|
|
|
|
|
|
* Dockerfile: fix filenames of artifacts ([#3911](https://github.com/distribution/distribution/pull/3911))
|
|
|
|
|
|
2023-05-09 21:15:05 +00:00
|
|
|
### Bugfixes
|
|
|
|
|
|
|
|
|
|
* Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815))
|
|
|
|
|
* Add code to handle pagination of parts. Fixes max layer size of 10GB bug ([#3893](https://github.com/distribution/distribution/pull/3893))
|
2023-05-11 09:46:45 +00:00
|
|
|
* Parse http forbidden as denied ([#3914](https://github.com/distribution/distribution/pull/3914))
|
|
|
|
|
* Revert "registry/client: set Accept: identity header when getting layers ([#3783](https://github.com/distribution/distribution/pull/3783))
|
2023-05-09 21:15:05 +00:00
|
|
|
|
|
|
|
|
### Runtime
|
|
|
|
|
|
|
|
|
|
* Update to go1.19.9 ([#3908](https://github.com/distribution/distribution/pull/3908))
|
|
|
|
|
* Dockerfile: update xx to v1.2.1 ([#3907](https://github.com/distribution/distribution/pull/3907))
|
|
|
|
|
|
|
|
|
|
### Security
|
|
|
|
|
|
2023-05-09 22:51:24 +00:00
|
|
|
* Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
|
|
|
|
|
* Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
|
2023-05-09 21:15:05 +00:00
|
|
|
|
|
|
|
|
### Dependency Changes
|
|
|
|
|
|
|
|
|
|
This release has no dependency changes
|
|
|
|
|
|
|
|
|
|
Previous release can be found at [v2.8.1](https://github.com/distribution/distribution/releases/tag/v2.8.1)
|
|
|
|
|
"""
|
