Skip to content
This repository was archived by the owner on Mar 27, 2025. It is now read-only.

Conversation

@dependabot-preview
Copy link

Bumps github.com/docker/distribution from 83389a1 to 2.7.0. This release includes the previously tagged commit.

Release notes

Sourced from github.com/docker/distribution's releases.

registry 2.7.0

Welcome to the v2.7.0 release of registry!

The 2.7 registry release has been a long time coming and represents both
a long gap since the previous release and a renewed effort to release
regularly. The maintainers were committed to get OCI support into the
next release and thanks to much effort in the community that has
been accomplished.

OCI Support

Push and Pull of OCI Images

The registry now allows pushing and pulling OCI images. OCI images will always
be preserved exactly without conversion to older types. With this change,
clients which implement OCI can feel comfortable creating OCI images as part of
their container image build process.

Specification Donation

The Distribution specification which has had 4 years of review, implementation,
and production use is now part of OCI. As part of that move, specification
changes will no longer be accepted in the open source registry and should
instead go to OCI's distribution-spec.

Bug Fixes and Improvements

General

  • Update Go version to 1.11
  • Switch to multi-stage Dockerfile
  • Validations enabled by default with new disabled config option
  • Optimize health check performance
  • Create separate permission for deleting objects in a repo
  • Fix storage driver error propagation for manifest GETs
  • Fix forwarded header resolution
  • Add prometheus metrics
  • Disable schema1 manifest by default (this affects docker versions 1.9 and older)
  • Graceful shutdown
  • TLS: remove ciphers that do not support perfect forward secrecy
  • Fix registry stripping newlines from manifests
  • Add bugsnag logrus hook
  • Support ARM builds

Storage Driver

  • OSS: fix current directory showing up in OSS driver.List()
  • Azure: fix race condition in PutContent()
  • Azure: update vendor
  • S3: update AWS SDK and use AWS SDK to validate regions
  • S3: remove expiration tag on multi-part uploads
  • S3: improve Walk performance
... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from `83389a1` to 2.7.0. This release includes the previously tagged commit.
- [Release notes](https://github.com/docker/distribution/releases)
- [Commits](distribution/distribution@83389a1...v2.7.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jan 8, 2019
@dependabot-preview
Copy link
Author

Superseded by #81.

@dependabot-preview dependabot-preview bot deleted the dependabot/dep/github.com/docker/distribution-2.7.0 branch February 12, 2019 07:30
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant