Commit graph

Select branches

Hide pull requests

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

extract-portable-npm-metadata

fix-197-cooldown-scoped-purls

fix-database-log-173

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#24

#240

#241

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#257

#258

#259

#26

#260

#267

#268

#269

#27

#270

#272

#273

#275

#277

#278

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#293

#294

#296

#297

#298

#299

#3

#30

#301

#302

#304

#307

#308

#31

#310

#311

#314

#315

#316

#317

#318

#319

#32

#324

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#340

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399

#4

#40

#400

#401

#402

#404

#405

#406

#407

#408

#413

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#462

#463

#464

#465

#468

#469

#47

#470

#471

#472

#473

#475

#476

#477

#479

#48

#481

#482

#483

#484

#485

#487

#488

#489

#490

#491

#492

#493

#494

#495

#496

#5

#50

#502

#503

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#515

#516

#518

#519

#520

#527

#528

#531

#533

#534

#537

#538

#539

#540

#541

#544

#545

#546

#547

#548

#549

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#561

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#610

#611

#612

#615

#616

#618

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#649

#650

#650

#651

#653

#654

#655

#656

#658

#659

#66

#660

#661

#662

#663

#664

#666

#667

#669

#67

#671

#671

#672

#674

#675

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#687

#687

#688

#688

#689

#689

#69

#690

#690

#691

#691

#692

#692

#693

#694

#694

#696

#697

#699

#7

#70

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.9.0

v0.9.1

Mono Color

• a4702d0814
  Merge pull request #371 from git-pkgs/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/ecr-1.66.0 Andrew Nesbitt 2026-09-24 16:57:32 +01:00
• e26c2d13a7
  Merge pull request #370 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.4.0 Andrew Nesbitt 2026-09-24 16:56:43 +01:00
• a7cccff3bc
  Merge pull request #369 from git-pkgs/dependabot/github_actions/docker/setup-qemu-action-4.4.0 Andrew Nesbitt 2026-09-24 16:55:20 +01:00
• c3fc32b164
  Merge pull request #368 from git-pkgs/dependabot/github_actions/docker/setup-buildx-action-4.4.1 Andrew Nesbitt 2026-09-24 16:54:52 +01:00
• 3611ff2fa2
  build(deps): bump github.com/git-pkgs/vers from 0.7.0 to 0.7.1 dependabot[bot] 2026-09-24 15:15:18 +00:00
• fbb89c9d78
  build(deps): bump modernc.org/sqlite from 1.58.0 to 1.59.0 dependabot[bot] 2026-09-24 15:15:14 +00:00
• 2a35d3df90
  build(deps): bump github.com/git-pkgs/magic from 0.3.1 to 0.4.0 dependabot[bot] 2026-09-24 15:15:01 +00:00
• ceee79f123
  build(deps): bump github.com/git-pkgs/registries from 0.9.1 to 0.9.2 dependabot[bot] 2026-09-24 15:14:57 +00:00
• 468e9e564d
  build(deps): bump golang.org/x/net from 0.58.0 to 0.59.0 dependabot[bot] 2026-09-24 15:14:52 +00:00
• 8bbe117e84
  build(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr dependabot[bot] 2026-09-24 15:14:48 +00:00
• d14b240654
  build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 dependabot[bot] 2026-09-24 15:13:54 +00:00
• 15d5ac09b8
  build(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0 dependabot[bot] 2026-09-24 15:13:45 +00:00
• 3724c93626
  build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 dependabot[bot] 2026-09-24 15:13:32 +00:00
• 4ce6c37bd9 Give each fetch its own storage path montehurd 2026-09-23 14:40:13 -07:00
• e635a62e2c
  Test that GCS Delete of a missing object returns nil Andrew Nesbitt 2026-09-23 17:26:42 +01:00
• 37ef25b718
  Merge pull request #363 from montehurd/bound-eviction-pass Andrew Nesbitt 2026-09-23 17:21:06 +01:00
• cd7d92e83b
  Merge pull request #366 from abhinavgautam01/fix/mirror-cache-hit-342 Andrew Nesbitt 2026-09-23 17:19:18 +01:00
• 00a49e2c40
  Standardize the README license footer Andrew Nesbitt 2026-09-23 15:33:15 +01:00
• a55f42ec80
  fix(mirror): match cached artifacts by resolved filename abhinavgautam01 2026-09-23 17:51:49 +05:30
• c1f420aafe
  Add and align CI security and dependency automation Andrew Nesbitt 2026-09-23 10:53:57 +01:00
• 50e5cc334e
  Merge branch 'git-pkgs:main' into bound-eviction-pass montehurd 2026-09-22 14:30:58 -06:00
• e94805e9b5
  Merge pull request #365 from git-pkgs/dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.45.0 Andrew Nesbitt 2026-09-22 08:53:14 +01:00
• 65f2bf52b1
  Widen wall-clock bound in flaky probe timeout test Andrew Nesbitt 2026-09-22 08:46:40 +01:00
• 442b591349
  build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 dependabot[bot] 2026-09-22 07:38:12 +00:00
• f3445b505f
  Merge pull request #361 from git-pkgs/helm-skip-malformed-releases Andrew Nesbitt 2026-09-22 08:35:42 +01:00
• 73a98636af
  Assert omitted Helm releases are not downloadable Andrew Nesbitt 2026-09-22 08:35:20 +01:00
• e6271a8bd2
  Merge pull request #364 from abhinavgautam01/docs/apt-denylist-pinning-358 Andrew Nesbitt 2026-09-22 08:31:01 +01:00
• c753a74666
  docs: explain APT denylist limitations and version pinning abhinavgautam01 2026-09-22 12:47:37 +05:30
• ee60ab70c5
  Merge pull request #362 from montehurd/fix-handler-test-build Andrew Nesbitt 2026-09-22 07:18:31 +01:00
• 8f09c1dc30 Fix the handler test build montehurd 2026-09-21 13:51:48 -07:00
• 1001cd772b End an eviction pass that cannot evict anything montehurd 2026-09-21 13:33:31 -07:00
• e28745742c
  Merge pull request #353 from andrewmrich/arich/debian-repositories Andrew Nesbitt 2026-09-21 12:06:55 +01:00
• 8b1e7cbd32
  Omit malformed Helm chart releases instead of failing the index Andrew Nesbitt 2026-09-21 12:01:37 +01:00
• 1da2dc0bf9
  Merge pull request #359 from abhinavgautam01/fix/helm-oci-index-320 Andrew Nesbitt 2026-09-21 11:59:04 +01:00
• 54cfb30677
  Merge pull request #360 from abhinavgautam01/feat/version-denylist-358 Andrew Nesbitt 2026-09-21 11:56:14 +01:00
• 499033b973
  Exit non-zero when mirror denylist is invalid Andrew Nesbitt 2026-09-21 11:56:03 +01:00
• 548a50d56e
  feat: add exact-version package denylist abhinavgautam01 2026-09-20 14:42:30 +05:30
• 429e7458e4
  fix(helm): support OCI references in HTTP repository indexes abhinavgautam01 2026-09-19 14:39:29 +05:30
• 9788aa70bc feat(debian): report a misspelled repository name Andrew Rich 2026-09-18 16:48:18 -07:00
• b2817dc213
  Bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.4 (#356) dependabot[bot] 2026-09-17 21:08:14 +01:00
• 14b954ad8a
  Bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.4 dependabot[bot] 2026-09-17 19:04:32 +00:00
• b83bc0eed2
  Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#354) dependabot[bot] 2026-09-17 20:00:05 +01:00
• 2aad8bfcec
  Bump github.com/git-pkgs/spdx from 0.3.1 to 0.3.2 (#355) dependabot[bot] 2026-09-17 19:59:47 +01:00
• 2ae6213d3b
  Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.64.0 to 1.65.0 (#357) dependabot[bot] 2026-09-17 19:59:27 +01:00
• 4555fa2dac
  Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.64.0 to 1.65.0 dependabot[bot] 2026-09-17 15:17:52 +00:00
• 78da41a668
  Bump github.com/git-pkgs/spdx from 0.3.1 to 0.3.2 dependabot[bot] 2026-09-17 15:14:39 +00:00
• bad7d81efc
  Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 dependabot[bot] 2026-09-17 15:14:19 +00:00
• 658664a144 docs(debian): drop a stray space in a test comment Andrew Rich 2026-09-16 10:18:56 -07:00
• 46faf76ae3 docs(debian): trim comments on the named-repositories change Andrew Rich 2026-09-16 10:15:59 -07:00
• 8805cd9283
  Merge branch 'git-pkgs:main' into arich/debian-repositories Andrew Rich 2026-09-16 10:04:56 -07:00
• 2736fe03d3
  Fall back to embedded build info for Version (#352) Andrew Nesbitt 2026-09-16 09:25:19 +01:00
• 87baf13ba5
  Fall back to embedded build info for Version Andrew Nesbitt 2026-09-16 09:21:05 +01:00
• c895e5b053
  Fix NuGet cooldown enforcement for listings and downloads (#340) Abhinav Gautam 2026-09-16 12:57:44 +05:30
• 0bab9bd0af
  Separate OCI request timeout from readiness probes in loopback test (#347) Andrew Nesbitt 2026-09-16 08:21:22 +01:00
• 7835f7a7a9
  Discard a stale cache entry under the coalescing key (#348) montehurd 2026-09-16 00:20:27 -07:00
• ba45227e03
  test(database): drop every schema table in the Postgres fixture (#349) pinguinfuss 2026-09-16 09:15:02 +02:00
• 3db2cd5c71
  fix(database): set connection pool limits for Postgres (#350) pinguinfuss 2026-09-16 09:13:38 +02:00
• be2a1f05d2
  fix(server): tune the shared upstream transport defaults (#351) pinguinfuss 2026-09-16 09:11:06 +02:00
• fa3703ac00 test(database): drop every schema table in the Postgres fixture Christian Heim 2026-09-16 06:36:31 +02:00
• 2523ee971e test(database): guard the pool test against a vacuous burst Christian Heim 2026-09-16 06:31:23 +02:00
• 47b53d229a test(database): pin the pool properties instead of the wiring Christian Heim 2026-09-16 06:08:21 +02:00
• c13bf0f585 test(server): hold each burst at the upstream instead of sleeping Christian Heim 2026-09-16 06:18:35 +02:00
• 66cf9b62df fix(server): reconcile http_timeout docs and tighten the transport tests Christian Heim 2026-09-15 23:49:20 +02:00
• 050f0015ef
  refactor(nuget): address maintainer review cleanup abhinavgautam01 2026-09-16 08:58:00 +05:30
• e217644c59 fix(nuget): support legacy registration and preserve valid metadata cache abhinavgautam01 2026-09-13 21:51:32 +05:30
• 5555c8cb6f fix(nuget): enforce cooldown across metadata and downloads abhinavgautam01 2026-09-13 14:44:45 +05:30
• 5231e2ed5f Discard a stale cache entry under the coalescing key montehurd 2026-09-15 17:46:51 -07:00
• 8a51d04011 feat(debian): serve additional APT archives at /debian/{name}/ Andrew Rich 2026-09-14 15:41:13 -07:00
• 6d0e883d7a fix(database): set connection pool limits for Postgres Christian Heim 2026-09-15 23:55:13 +02:00
• 0166c14099 fix(server): tune the shared upstream transport defaults Christian Heim 2026-09-15 23:09:26 +02:00
• 69f36bfa58
  Separate OCI request timeout from readiness probes in loopback test Andrew Nesbitt 2026-09-15 21:28:55 +01:00
• 0089917485
  Stop writing fileblob's .attrs sidecar (#328) montehurd 2026-09-15 12:07:18 -07:00
• 44361300d3
  Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#346) dependabot[bot] 2026-09-15 20:05:41 +01:00
• 1f75f1b46c
  Drop stale comment about declining colon keys on Windows Andrew Nesbitt 2026-09-15 20:03:39 +01:00
• eb45cd532b
  Fix duplicate fetches and 502s on concurrent cache misses (#329) montehurd 2026-09-15 11:59:03 -07:00
• 6e75319ede
  Bump google.golang.org/grpc from 1.83.1 to 1.83.2 dependabot[bot] 2026-09-15 18:55:22 +00:00
• 8696a257f5
  fix(handler): let the ProxyCached path request a per-call Accept-Encoding (#324) pinguinfuss 2026-09-15 20:50:44 +02:00
• 58fdb17914
  Drop unused cachedMeta.contentEncoding and fix stale doc reference Andrew Nesbitt 2026-09-15 19:49:14 +01:00
• 623ff3e685 Clear legacy sidecars for keys fileblob escapes montehurd 2026-09-14 22:02:04 -07:00
• a4be9e0574 Fail the concurrency test if its writer stops montehurd 2026-09-14 21:26:04 -07:00
• f076bc4e53 Wait for the leader's fetch instead of sleeping montehurd 2026-09-14 21:25:13 -07:00
• 8634c00803 Lock the mock fetcher's bookkeeping montehurd 2026-09-14 21:25:13 -07:00
• 1e10dc8a16 Recheck the cache before running a shared fetch montehurd 2026-09-14 16:26:31 -07:00
• f4f74ce89d Explain why failed sidecar cleanup does not fail the store montehurd 2026-09-14 16:19:31 -07:00
• 6fae5bfb46 Make the panic coalescing test deterministic montehurd 2026-09-14 16:10:28 -07:00
• 5b5fcbd63c Normalize digest case in the coalescing key montehurd 2026-09-14 16:00:19 -07:00
• f29c9166b5
  Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.61.0 to 1.64.0 (#334) dependabot[bot] 2026-09-13 23:05:55 -04:00
• 83e7e8047e
  Bump golang.org/x/sync from 0.22.0 to 0.23.0 (#335) dependabot[bot] 2026-09-13 23:05:38 -04:00
• 15ecf093e9
  Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.61.0 to 1.64.0 dependabot[bot] 2026-09-14 02:42:37 +00:00
• 74e38f2033
  Bump golang.org/x/sync from 0.22.0 to 0.23.0 dependabot[bot] 2026-09-14 02:41:49 +00:00
• 66a6d812cc
  Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#330) dependabot[bot] 2026-09-13 22:38:31 -04:00
• 0935c1561a
  Bump github.com/aws/aws-sdk-go-v2/config from 1.32.40 to 1.33.2 (#336) dependabot[bot] 2026-09-13 22:37:54 -04:00
• dc1ce8d8fc
  Bump modernc.org/sqlite from 1.57.0 to 1.58.0 (#337) dependabot[bot] 2026-09-13 22:36:45 -04:00
• 8d3dacf68b
  Bump azure/setup-helm from 4.3.1 to 5.0.1 (#332) dependabot[bot] 2026-09-10 16:34:26 -04:00
• f0580d9fb1
  Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#331) dependabot[bot] 2026-09-10 16:33:58 -04:00
• 7e4b13ce52
  Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#333) dependabot[bot] 2026-09-10 16:33:49 -04:00
• 268d42adbb
  Bump modernc.org/sqlite from 1.57.0 to 1.58.0 dependabot[bot] 2026-09-10 15:17:23 +00:00
• 6d3776bca7
  Bump github.com/aws/aws-sdk-go-v2/config from 1.32.40 to 1.33.2 dependabot[bot] 2026-09-10 15:17:15 +00:00
• 4354971f8a
  Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 dependabot[bot] 2026-09-10 15:14:29 +00:00
• b8107daa46
  Bump azure/setup-helm from 4.3.1 to 5.0.1 dependabot[bot] 2026-09-10 15:14:20 +00:00