Pulp-container

Latest version: v2.19.2

Safety actively analyzes 619516 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 20

4.0.0b4

^^^^^^^

- Enable sync from registries that use basic auth or have private repos
- Enable on_demand or streamed sync
- Enable whitelist tags specification when syncing
- Compatibility with pulpcore-plugin-0.1.0rc2

`Comprehensive list of changes and bugfixes for beta 4 <https://github.com/pulp/pulp_container/compare/4.0.0b3...4.0.0b4>`_.

4.0.0b3

^^^^^^^

- Enable sync from gcr and quay registries
- Enable support to handle pagination for tags/list endpoint during sync
- Enable support to manage a docker image that has manifest schema v2s1
- Enable docker distribution to serve directly latest repository version

`Comprehensive list of changes and bugfixes for beta 3 <https://github.com/pulp/pulp_container/compare/4.0.0b2...4.0.0b3>`_.

4.0.0b2

^^^^^^^

- Compatibility with pulpcore-plugin-0.1.0rc1
- Performance improvements and bug fixes
- Add support for syncing repo with foreign layers
- Change sync pipeline to use Futures to handle nested content
- Make Docker distributions asyncronous
- Add support to create publication directly

4.0.0b1

^^^^^^^

- Add support for basic sync of a docker repo form a V2Registry
- Add support for docker/podman pull from a docker distbution served by Pulp


=========
Changelog
=========

..
You should *NOT* be adding new change log entries to this file, this
file is managed by towncrier. You *may* edit previous change logs to
fix problems like typo corrections or such.
To add a new change log entry, please see
https://docs.pulpproject.org/contributing/git.html#changelog-update

WARNING: Don't drop the next directive!

.. towncrier release notes start

2.19.0

===================

Features
--------

- Incorporated a notion of container images' characteristics. Users can now filter manifests by their
nature using the ``is_flatpak`` or ``is_bootable`` field on the corresponding Manifest endpoint.
In addition to that, manifest's annotations and configuration labels were exposed on the same
endpoint too.
`1437 <https://github.com/pulp/pulp_container/issues/1437>`__
- Updated the OCI manifest schema validation to comply with the changes from the OCI Image Manifest
Specification.
`1494 <https://github.com/pulp/pulp_container/issues/1494>`__


Bugfixes
--------

- Fixed sync failure due to ignored certs during registry signature extentions API check.
`1552 <https://github.com/pulp/pulp_container/issues/1552>`__


Improved Documentation
----------------------

- Migrated the whole documentation to staging. The documentation should be now consumed from the
unified docs site.
`1517 <https://github.com/pulp/pulp_container/issues/1517>`__


Deprecations and Removals
-------------------------

- Removed the optional "kid" parameter stored inside the signatures' payload generated during
docker manifest v2 schema 1 conversion. This change also removes the ``ecdsa`` dependency,
which is vulnerable to Minevra timing attacks.
`1485 <https://github.com/pulp/pulp_container/issues/1485>`__
- Removed the manifest schema conversion machinery. If the manifest is stored locally in the newer
format and old clients request v2 schema1 manifest they will receive 404. v2 schema1 manifest is
still going to be mirrored from remote source during sync if available and passed to the old clients
on the request.
`1509 <https://github.com/pulp/pulp_container/issues/1509>`__
- Deprecated ``ADDITIONAL_OCI_ARTIFACT_TYPES`` setting in favour of the relaxed validation.
`1494 <https://github.com/pulp/pulp_container/issues/1494>`__


----

2.18.1

Not secure
===================

Bugfixes
--------

- Fixed sync failure due to ignored certs during registry signature extentions API check.
`1552 <https://github.com/pulp/pulp_container/issues/1552>`__


----

Page 1 of 20

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.