Pulp-container

Latest version: v2.20.0

Safety actively analyzes 631322 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 20

2.19.1

===================

Bugfixes
--------

- Resolved circular import errors raised when using pulp-container as a library.
`1561 <https://github.com/pulp/pulp_container/issues/1561>`__


----

2.19.0

===================

Features
--------

- Incorporated a notion of container images' characteristics. Users can now filter manifests by their
nature using the ``is_flatpak`` or ``is_bootable`` field on the corresponding Manifest endpoint.
In addition to that, manifest's annotations and configuration labels were exposed on the same
endpoint too.
`1437 <https://github.com/pulp/pulp_container/issues/1437>`__
- Updated the OCI manifest schema validation to comply with the changes from the OCI Image Manifest
Specification.
`1494 <https://github.com/pulp/pulp_container/issues/1494>`__


Bugfixes
--------

- Fixed sync failure due to ignored certs during registry signature extentions API check.
`1552 <https://github.com/pulp/pulp_container/issues/1552>`__


Improved Documentation
----------------------

- Migrated the whole documentation to staging. The documentation should be now consumed from the
unified docs site.
`1517 <https://github.com/pulp/pulp_container/issues/1517>`__


Deprecations and Removals
-------------------------

- Removed the optional "kid" parameter stored inside the signatures' payload generated during
docker manifest v2 schema 1 conversion. This change also removes the ``ecdsa`` dependency,
which is vulnerable to Minevra timing attacks.
`1485 <https://github.com/pulp/pulp_container/issues/1485>`__
- Removed the manifest schema conversion machinery. If the manifest is stored locally in the newer
format and old clients request v2 schema1 manifest they will receive 404. v2 schema1 manifest is
still going to be mirrored from remote source during sync if available and passed to the old clients
on the request.
`1509 <https://github.com/pulp/pulp_container/issues/1509>`__
- Deprecated ``ADDITIONAL_OCI_ARTIFACT_TYPES`` setting in favour of the relaxed validation.
`1494 <https://github.com/pulp/pulp_container/issues/1494>`__


----

2.18.1

Not secure
===================

Bugfixes
--------

- Fixed sync failure due to ignored certs during registry signature extentions API check.
`1552 <https://github.com/pulp/pulp_container/issues/1552>`__


----

2.18.0

Not secure
===================

Features
--------

- Added support for pull-through caching. Users can now configure a dedicated distribution and remote
linked to an external registry without the need to create and mirror repositories in advance. Pulp
downloads missing content automatically if requested and acts as a caching proxy.
`507 <https://github.com/pulp/pulp_container/issues/507>`__


Bugfixes
--------

- Added ``application/vnd.docker.distribution.manifest.v1+prettyjws`` to the list of accepted
media types retrieved from a remote registry.
`1444 <https://github.com/pulp/pulp_container/issues/1444>`__


Misc
----

- `489 <https://github.com/pulp/pulp_container/issues/489>`__, `#1275 <https://github.com/pulp/pulp_container/issues/1275>`__


----

2.17.0

Not secure
===================


Features
--------

- Started signing manifests asynchronously. This feature improves the performance of signing tasks.
Additionally, setting ``MAX_PARALLEL_SIGNING_TASKS`` was introduced to cap the number of threads
used for parallel signing (defaults to ``10``).
`1208 <https://github.com/pulp/pulp_container/issues/1208>`__
- Adjusted default access policies for new labels API.
`1384 <https://github.com/pulp/pulp_container/issues/1384>`__
- Made pulp_container compatible with pulpcore 3.40.
`1399 <https://github.com/pulp/pulp_container/issues/1399>`__


Bugfixes
--------

- Fixed re-sync failures after reclaiming disk space.
`1400 <https://github.com/pulp/pulp_container/issues/1400>`__


----

2.16.6

Not secure
===================

Bugfixes
--------

- Fixed sync failure due to ignored certs during registry signature extentions API check.
`1552 <https://github.com/pulp/pulp_container/issues/1552>`__


----

Page 2 of 20

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.