Commit graph

  • 219575d854 WIP ecosystem-config Kevin P. Fleming 2026-04-19 07:27:30 -04:00
  • 00b032cb5b
    Bump git-pkgs deps for v0.4.0 (#146) Andrew Nesbitt 2026-05-22 19:51:49 +01:00
  • 552c8ac4e5
    Update Gradle cache with the configurable plugin support (#114) Mati Kepa 2026-05-22 18:05:20 +02:00
  • 76f41cf271
    Add storage backend probe to /health (closes #73) (#119) Lars Wallenborn 2026-05-22 14:14:01 +03:00
  • a8b6b0a417
    add support for Gradle prometheus metrics (#124) Mati Kepa 2026-05-22 13:09:00 +02:00
  • 1e6a0d1ab8
    Bump github.com/CycloneDX/cyclonedx-go from 0.10.0 to 0.11.0 (#136) dependabot[bot] 2026-05-22 04:45:48 +01:00
  • d39e312710
    Bump modernc.org/sqlite from 1.50.0 to 1.50.1 (#140) dependabot[bot] 2026-05-22 04:03:00 +01:00
  • 7586beb37b
    Bump github.com/git-pkgs/vers from 0.2.5 to 0.2.6 (#137) dependabot[bot] 2026-05-22 04:02:48 +01:00
  • 7832db2adb
    Bump golang from 1.25-alpine to 1.26.3-alpine (#138) dependabot[bot] 2026-05-22 03:46:59 +01:00
  • 497e16f90b
    Bump alpine from 3.21 to 3.23.4 (#139) dependabot[bot] 2026-05-22 03:46:52 +01:00
  • e8363e2fec
    Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 (#135) dependabot[bot] 2026-05-22 03:43:58 +01:00
  • ffd28ad856
    Handle __unset sentinel in Composer minified metadata (#121) Andrew Nesbitt 2026-05-19 06:54:33 -05:00
  • 17a10bda55
    Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#122) dependabot[bot] 2026-05-15 06:40:26 -07:00
  • f2a5b704f0
    Add Julia Pkg server support (#117) Andrew Nesbitt 2026-05-13 06:46:35 +01:00
  • 5315883c3b
    Bump registries to v0.6.0 and replace internal/cooldown (#120) Andrew Nesbitt 2026-05-13 06:45:33 +01:00
  • ebc2ea9cf9
    Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 (#115) dependabot[bot] 2026-05-07 16:44:53 +01:00
  • 992f5c68a7
    Add .golangci.yml and clear gocognit/goconst findings (#113) Andrew Nesbitt 2026-05-05 10:25:17 +01:00
  • 31a9ca75b2
    add Gradle Build Cache support with handler and tests (#87) Mati Kepa 2026-05-04 12:15:16 +02:00
  • 61741123bf
    Verify cached artifacts on read (#111) Andrew Nesbitt 2026-05-03 10:36:28 +01:00
  • 8d2740624f
    Structured JSON error responses for API endpoints (#110) Andrew Nesbitt 2026-05-03 09:42:03 +01:00
  • e912227e3b
    Use archives.OpenBytes in browse handler to cut buffer copies (#107) Andrew Nesbitt 2026-05-03 09:29:42 +01:00
  • 522c6f233e
    Validate package paths before database lookups (#109) Andrew Nesbitt 2026-05-03 09:14:18 +01:00
  • a4fd333d48
    Check for path traversal after URL decoding (#108) Andrew Nesbitt 2026-05-03 09:07:16 +01:00
  • adca293269
    Bump git-pkgs deps to latest patch releases Andrew Nesbitt 2026-05-02 18:01:06 +01:00
  • 71e8d3b9eb
    Reject path traversal in filesystem storage (#106) Andrew Nesbitt 2026-05-02 18:00:28 +01:00
  • d6066af230
    Add MaxBytesReader to mirror API HandleCreate (#105) Andrew Nesbitt 2026-05-02 18:00:25 +01:00
  • cfcf480f69
    Limit io.ReadAll in openArchive to 512 MB (#104) Andrew Nesbitt 2026-05-02 18:00:22 +01:00
  • f1ea8b50a1
    Serve .html, .svg and .xhtml as text/plain in browse file handler (#103) Andrew Nesbitt 2026-05-02 18:00:04 +01:00
  • e2495ef0aa
    Merge pull request #102 from git-pkgs/enforce-max-size-eviction Andrew Nesbitt 2026-04-30 23:26:16 +01:00
  • 461a95c518
    Enforce max_size config with LRU cache eviction Andrew Nesbitt 2026-04-30 18:09:01 +01:00
  • fd9b8da526
    Merge pull request #97 from git-pkgs/direct-serve-presigned-urls Andrew Nesbitt 2026-04-30 18:01:10 +01:00
  • 33e3a1a197
    Merge pull request #101 from git-pkgs/dependabot/github_actions/goreleaser/goreleaser-action-7.1.0 Andrew Nesbitt 2026-04-30 17:53:23 +01:00
  • 78e1e76129
    Merge pull request #100 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.49.1 Andrew Nesbitt 2026-04-30 17:53:16 +01:00
  • 96049c1f88
    Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 dependabot[bot] 2026-04-30 15:18:13 +00:00
  • 3a68ccef3e
    Bump modernc.org/sqlite from 1.48.2 to 1.49.1 dependabot[bot] 2026-04-30 15:18:04 +00:00
  • 4c53c77092
    Merge pull request #98 from git-pkgs/cosign-v4-bundle Andrew Nesbitt 2026-04-27 22:55:28 +01:00
  • f9f2a6ecd4
    Use cosign v4 bundle format for release signing Andrew Nesbitt 2026-04-27 21:26:23 +01:00
  • 1ad182782d
    Add storage.direct_serve_base_url to override presigned URL host Andrew Nesbitt 2026-04-27 12:14:37 +01:00
  • c73b0a35a1
    Add direct-serve via presigned storage URLs Andrew Nesbitt 2026-04-27 12:04:38 +01:00
  • 9d316cf937
    Merge pull request #94 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/registries-0.4.1 Andrew Nesbitt 2026-04-27 11:04:56 +01:00
  • 12f79dcca8
    Merge pull request #95 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.5.3 Andrew Nesbitt 2026-04-27 08:33:35 +01:00
  • 34be35cafa
    Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 dependabot[bot] 2026-04-23 15:21:27 +00:00
  • d9d6e8735a
    Bump github.com/git-pkgs/registries from 0.4.0 to 0.4.1 dependabot[bot] 2026-04-23 15:21:18 +00:00
  • f58e3552d3
    Merge pull request #88 from git-pkgs/dependabot/github_actions/docker/login-action-4.1.0 Andrew Nesbitt 2026-04-18 20:39:56 +01:00
  • cbec55cba4
    Merge pull request #89 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.1.0 Andrew Nesbitt 2026-04-18 20:39:43 +01:00
  • da517ad8f5
    Merge pull request #90 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.48.2 Andrew Nesbitt 2026-04-18 20:39:32 +01:00
  • 2571b0aed5
    Merge pull request #91 from git-pkgs/dependabot/go_modules/github.com/lib/pq-1.12.3 Andrew Nesbitt 2026-04-18 20:39:20 +01:00
  • 57eb063464
    Merge pull request #92 from kpfleming/apply-go-fmt Andrew Nesbitt 2026-04-18 20:38:05 +01:00
  • c655399a07 Apply 'go fmt' as suggested in CONTRIBUTING.md. apply-go-fmt Kevin P. Fleming 2026-04-18 07:43:22 -04:00
  • 59a510f3f5
    Bump github.com/lib/pq from 1.12.2 to 1.12.3 dependabot[bot] 2026-04-16 15:16:53 +00:00
  • 35f26f4645
    Bump modernc.org/sqlite from 1.48.0 to 1.48.2 dependabot[bot] 2026-04-16 15:16:42 +00:00
  • a1d028696d
    Bump docker/build-push-action from 7.0.0 to 7.1.0 dependabot[bot] 2026-04-16 15:16:37 +00:00
  • 78325b6bf1
    Bump docker/login-action from 4.0.0 to 4.1.0 dependabot[bot] 2026-04-16 15:16:24 +00:00
  • e3cc5516b5
    Merge pull request #85 from git-pkgs/homebrew-readme Andrew Nesbitt 2026-04-13 11:07:59 +01:00
  • 50772d8947
    Add Homebrew install instructions Andrew Nesbitt 2026-04-13 11:03:59 +01:00
  • 2816ff2414
    Add LICENSE Andrew Nesbitt 2026-04-13 10:36:28 +01:00
  • d3d11445c6
    Merge pull request #84 from git-pkgs/cosign-signing Andrew Nesbitt 2026-04-13 09:22:29 +01:00
  • 0c02455dc9
    Sign release checksums with cosign keyless Andrew Nesbitt 2026-04-13 09:14:33 +01:00
  • 9849ac9f16
    Merge pull request #40 from git-pkgs/mirror-feature Andrew Nesbitt 2026-04-13 09:07:43 +01:00
  • 7346008aa5
    Add metadata TTL and stale-while-revalidate support Andrew Nesbitt 2026-04-06 19:30:59 +01:00
  • c01f0a5c05
    Fix metadata caching, 404 propagation, mirror progress, and registry stubs Andrew Nesbitt 2026-04-01 20:14:11 +01:00
  • 47681066b5
    Fix review issues in mirror feature Andrew Nesbitt 2026-04-01 16:14:07 +01:00
  • 02738651ab
    Fix concurrency, resource, and reliability issues in mirror Andrew Nesbitt 2026-04-01 15:40:18 +01:00
  • d62c42b8d7
    Add mirror command and API for selective package mirroring Andrew Nesbitt 2026-03-19 21:06:02 +00:00
  • 7985a28839
    Merge pull request #79 from git-pkgs/fix-metadata-size-limit Andrew Nesbitt 2026-04-13 08:47:31 +01:00
  • 773fe55bd9
    Merge pull request #80 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/vulns-0.1.4 Andrew Nesbitt 2026-04-10 15:42:53 +01:00
  • d919d9ce3e
    Merge pull request #82 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.48.0 Andrew Nesbitt 2026-04-10 10:54:00 +01:00
  • 73d78c28fb
    Bump github.com/git-pkgs/vulns from 0.1.3 to 0.1.4 dependabot[bot] 2026-04-10 09:53:57 +00:00
  • 7d0ac94c6c
    Merge pull request #81 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/enrichment-0.2.2 Andrew Nesbitt 2026-04-10 10:53:21 +01:00
  • 5c4f6f3b85
    Merge pull request #83 from git-pkgs/dependabot/go_modules/github.com/lib/pq-1.12.2 Andrew Nesbitt 2026-04-10 10:52:37 +01:00
  • 497afdf317
    Bump github.com/lib/pq from 1.12.0 to 1.12.2 dependabot[bot] 2026-04-09 15:24:54 +00:00
  • 55db8f94fc
    Bump modernc.org/sqlite from 1.47.0 to 1.48.0 dependabot[bot] 2026-04-09 15:24:50 +00:00
  • d64fcb5b98
    Bump github.com/git-pkgs/enrichment from 0.2.1 to 0.2.2 dependabot[bot] 2026-04-09 15:24:42 +00:00
  • 01b4e7210d
    Use abbreviated npm metadata when cooldown is disabled Andrew Nesbitt 2026-04-08 16:12:43 +01:00
  • 8b762ffb39
    Fix silent truncation of large npm metadata responses Andrew Nesbitt 2026-04-08 16:02:30 +01:00
  • 94f4a7dfa6
    Merge pull request #77 from kpfleming/sort-ecosystems-for-ui Andrew Nesbitt 2026-04-07 08:45:52 +01:00
  • a947a7546a Sort the ecosystems list for presentation in the UI sort-ecosystems-for-ui Kevin P. Fleming 2026-04-06 18:06:16 -04:00
  • e1d2331ff0
    Merge pull request #71 from git-pkgs/fix-composer-dist-urls Andrew Nesbitt 2026-04-06 19:26:16 +01:00
  • e36a92433e
    Clean up review feedback: use path.Ext for extension checks, remove dead getStripPrefix, add openArchive tests Andrew Nesbitt 2026-04-06 19:06:48 +01:00
  • 941ed51f76
    Auto-detect and strip single top-level directory prefix when browsing archives Andrew Nesbitt 2026-04-06 17:14:15 +01:00
  • b68184cbab
    Fix composer dist URL rewriting and browse source for extensionless filenames Andrew Nesbitt 2026-04-06 16:43:20 +01:00
  • bcbb883d1b
    Add failing tests for composer dist URL and shared reference bugs Andrew Nesbitt 2026-04-06 16:34:33 +01:00
  • 33d99e337b
    Merge pull request #72 from git-pkgs/bump-archives-v0.2.2 Andrew Nesbitt 2026-04-06 17:06:58 +01:00
  • 81f505757f
    Bump archives to v0.2.2 Andrew Nesbitt 2026-04-06 17:00:50 +01:00
  • 7a758b9450
    Remove redundant cooldown ecosystem list from README Andrew Nesbitt 2026-04-06 13:27:05 +01:00
  • 3bccc01776
    Merge pull request #70 from git-pkgs/add-hex-cooldown Andrew Nesbitt 2026-04-06 13:21:20 +01:00
  • 43a164ed72
    Add cooldown support for Hex Andrew Nesbitt 2026-04-06 12:55:15 +01:00
  • 9708fe31a8
    Merge pull request #69 from git-pkgs/add-rubygems-cooldown Andrew Nesbitt 2026-04-06 13:18:43 +01:00
  • cb9bbbc385
    Add cooldown support for RubyGems Andrew Nesbitt 2026-04-06 11:11:00 +01:00
  • 75ff85f2f0
    Add cooldown support for Conda (#68) Andrew Nesbitt 2026-04-06 13:16:00 +01:00
  • 70fe686953
    Add cooldown support for NuGet (#67) Andrew Nesbitt 2026-04-06 13:12:18 +01:00
  • 24d5e77443
    Fix cross-device link error when running in Docker with volumes (#66) Andrew Nesbitt 2026-04-06 13:07:31 +01:00
  • 15c133f1fa
    Fix Composer minified metadata expansion and namespaced package routing (#63) Andrew Nesbitt 2026-04-06 13:07:02 +01:00
  • e45706d808
    Track applied migrations to skip column checks on startup (#60) Andrew Nesbitt 2026-04-06 13:06:45 +01:00
  • 34009bad98
    Lazy-load HTML templates behind sync.Once (#59) Andrew Nesbitt 2026-04-06 13:06:25 +01:00
  • ec9c437498
    Correct ecosystem name in UI for Go (golang). (#64) Kevin P. Fleming 2026-04-05 11:20:57 -04:00
  • beddf8357a
    Fix startup message and add connectivity check for S3 storage (#57) main Andrew Nesbitt 2026-04-03 14:06:51 +01:00
  • 6def2e214d
    Bump actions/setup-go from 6.3.0 to 6.4.0 (#58) dependabot[bot] 2026-04-02 18:26:57 +01:00
  • 922d44b34e
    Add Cargo cooldown support (#48) Lily Young 2026-04-01 11:15:07 -06:00
  • 5e04182bbd
    Add upstream URL tests for all ecosystem download handlers (#51) Andrew Nesbitt 2026-04-01 15:22:52 +01:00