Commit graph

Select branches

Hide pull requests

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

extract-portable-npm-metadata

fix-197-cooldown-scoped-purls

fix-database-log-173

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#24

#240

#241

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#257

#258

#259

#26

#260

#267

#268

#269

#27

#270

#272

#273

#275

#277

#278

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#293

#294

#296

#297

#298

#299

#3

#30

#301

#302

#304

#307

#308

#31

#310

#311

#314

#315

#316

#317

#318

#319

#32

#324

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#340

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399

#4

#40

#400

#401

#402

#404

#405

#406

#407

#408

#413

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#462

#463

#464

#465

#468

#469

#47

#470

#471

#472

#473

#475

#476

#477

#479

#48

#481

#482

#483

#484

#485

#487

#488

#489

#490

#491

#492

#493

#494

#495

#496

#5

#50

#502

#503

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#515

#516

#518

#519

#520

#527

#528

#531

#533

#534

#537

#538

#539

#540

#541

#544

#545

#546

#547

#548

#549

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#561

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#610

#611

#612

#615

#616

#618

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#645

#646

#647

#649

#650

#650

#651

#653

#654

#655

#656

#658

#659

#66

#660

#661

#662

#663

#664

#666

#667

#669

#67

#671

#671

#672

#674

#675

#675

#676

#677

#678

#679

#68

#680

#681

#682

#682

#683

#683

#684

#687

#687

#688

#688

#689

#689

#69

#690

#690

#691

#691

#7

#70

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.9.0

v0.9.1

Mono Color

• 44041d07a9
  Bump git-pkgs archives, enrichment, purl, registries, vulns (#215) Andrew Nesbitt 2026-07-27 12:15:57 +01:00
• d8c276de70
  Bump google.golang.org/grpc from 1.81.1 to 1.82.1 dependabot[bot] 2026-07-27 11:10:14 +00:00
• 5ec25f5781
  Bump git-pkgs archives, enrichment, purl, registries, vulns Andrew Nesbitt 2026-07-27 12:08:07 +01:00
• cf3741162f
  fix(upstream): honor npm and Cargo overrides (#200) Andrew Nesbitt 2026-07-26 19:11:24 +01:00
• 532e4925fe
  fix: proper handling of upstream registry 404s (#209) Tilian Honig 2026-07-26 20:07:46 +02:00
• 9f570bf778
  fix: consistently return 404s for all artifact types Tilian R. Honig 2026-07-23 19:02:11 +02:00
• e06f4eecbd
  Apply upstream auth to metadata requests Andrew Nesbitt 2026-07-23 17:31:26 +01:00
• 6b767d0128
  Merge pull request #211 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/vers-0.3.0 Andrew Nesbitt 2026-07-23 17:01:32 +01:00
• 4737777e80
  Merge pull request #212 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.6.0 Andrew Nesbitt 2026-07-23 16:52:51 +01:00
• 238c628b31
  Merge pull request #213 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.54.0 Andrew Nesbitt 2026-07-23 16:47:03 +01:00
• ced9c1198b
  Merge pull request #210 from git-pkgs/dependabot/github_actions/actions/setup-go-7.0.0 Andrew Nesbitt 2026-07-23 16:45:51 +01:00
• 13ae3970e9
  Bump github.com/git-pkgs/vers from 0.2.6 to 0.3.0 dependabot[bot] 2026-07-23 15:42:03 +00:00
• 7071d4fb0e
  Merge pull request #214 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/vulns-0.2.0 Andrew Nesbitt 2026-07-23 16:39:43 +01:00
• 5ae5eab031
  Bump github.com/git-pkgs/vulns from 0.1.6 to 0.2.0 dependabot[bot] 2026-07-23 15:14:10 +00:00
• c3f1577017
  Bump modernc.org/sqlite from 1.53.0 to 1.54.0 dependabot[bot] 2026-07-23 15:14:01 +00:00
• d9b7a30294
  Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 dependabot[bot] 2026-07-23 15:13:53 +00:00
• 60c72be65e
  Bump actions/setup-go from 6.5.0 to 7.0.0 dependabot[bot] 2026-07-23 15:13:49 +00:00
• 4f713e3d49
  fix: proper handling of upstream registry 404s Tilian R. Honig 2026-07-23 17:04:00 +02:00
• 0a3b9e58f2
  Merge pull request #201 from git-pkgs/fix-197-cooldown-scoped-purls Andrew Nesbitt 2026-07-17 18:18:54 -07:00
• cdbd1a9369 Canonicalize cooldown lookup PURLs to match config fix-197-cooldown-scoped-purls Andrew Nesbitt 2026-07-17 18:11:47 -07:00
• 785c989f12
  Merge pull request #206 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/enrichment-0.5.0 Andrew Nesbitt 2026-07-17 10:23:03 -07:00
• 41ef27907e
  Bump github.com/git-pkgs/enrichment from 0.4.1 to 0.6.0 dependabot[bot] 2026-07-17 15:20:18 +00:00
• 95b4e34ebe
  Merge pull request #204 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/purl-0.1.14 Andrew Nesbitt 2026-07-17 08:19:09 -07:00
• 61b91fbebb
  Merge pull request #203 from git-pkgs/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.1 Andrew Nesbitt 2026-07-17 08:18:12 -07:00
• 4e0575a3ab
  Merge pull request #202 from git-pkgs/dependabot/docker/golang-1.26.5-alpine Andrew Nesbitt 2026-07-17 08:15:36 -07:00
• a79ec25bc9
  Merge pull request #205 from git-pkgs/dependabot/github_actions/docker/login-action-4.4.0 Andrew Nesbitt 2026-07-16 09:50:50 -07:00
• df997e5825
  Bump docker/login-action from 4.3.0 to 4.4.0 dependabot[bot] 2026-07-16 15:14:14 +00:00
• 96e113213d
  Bump github.com/git-pkgs/purl from 0.1.13 to 0.1.14 dependabot[bot] 2026-07-16 15:14:12 +00:00
• ec3cc35795
  Bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 dependabot[bot] 2026-07-16 15:14:06 +00:00
• cdf075695f
  Bump golang from 1.26.4-alpine to 1.26.5-alpine dependabot[bot] 2026-07-16 15:14:00 +00:00
• 23a7f5f250 Preserve npm scope separators in download URLs Andrew Nesbitt 2026-07-13 17:22:33 -07:00
• be15a0f826 Fix cooldown overrides for scoped package PURLs Andrew Nesbitt 2026-07-13 17:11:04 -07:00
• 0313ffa9eb fix(upstream): honor npm and cargo overrides Andrew Nesbitt 2026-07-13 16:57:04 -07:00
• 23364bd44a
  Merge pull request #196 from ychampion/fix-go-proxy-not-found-status Andrew Nesbitt 2026-07-12 23:32:24 +01:00
• 5b959d14b9 Preserve Go proxy fallback for missing modules ychampion 2026-07-10 22:59:15 +00:00
• 18c711b4d3
  Merge pull request #195 from git-pkgs/fix-filesystem-storage-path-validation Andrew Nesbitt 2026-07-09 17:46:32 +01:00
• 98150ea576
  Name empty path validation subtest Andrew Nesbitt 2026-07-09 17:41:05 +01:00
• 41465968cb
  Validate filesystem storage paths Andrew Nesbitt 2026-07-09 17:36:18 +01:00
• 95bb9d897a
  Merge pull request #193 from git-pkgs/dependabot/github_actions/goreleaser/goreleaser-action-7.2.3 Andrew Nesbitt 2026-07-09 17:19:29 +01:00
• 16e778970f
  Merge pull request #192 from git-pkgs/dependabot/github_actions/docker/login-action-4.3.0 Andrew Nesbitt 2026-07-09 16:41:34 +01:00
• a13e3ecaf1
  Merge pull request #191 from git-pkgs/dependabot/go_modules/golang.org/x/sync-0.22.0 Andrew Nesbitt 2026-07-09 16:41:08 +01:00
• c4f2b89290
  Merge pull request #190 from git-pkgs/dependabot/github_actions/docker/build-push-action-7.3.0 Andrew Nesbitt 2026-07-09 16:40:19 +01:00
• bb9e560b46
  Merge pull request #194 from git-pkgs/dependabot/github_actions/docker/metadata-action-6.2.0 Andrew Nesbitt 2026-07-09 16:39:00 +01:00
• 383d2089cf
  Bump docker/metadata-action from 6.1.0 to 6.2.0 dependabot[bot] 2026-07-09 15:14:26 +00:00
• defe1ec96d
  Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 dependabot[bot] 2026-07-09 15:14:16 +00:00
• ea4eea4b11
  Bump docker/login-action from 4.2.0 to 4.3.0 dependabot[bot] 2026-07-09 15:14:07 +00:00
• f7b5dd2028
  Bump golang.org/x/sync from 0.21.0 to 0.22.0 dependabot[bot] 2026-07-09 15:14:04 +00:00
• df3ad91848
  Bump docker/build-push-action from 7.2.0 to 7.3.0 dependabot[bot] 2026-07-09 15:13:56 +00:00
• 38e2ff4ae4
  Merge pull request #188 from git-pkgs/http-timeout-config Andrew Nesbitt 2026-07-07 18:38:18 +01:00
• cb8caa81d2
  Merge pull request #189 from git-pkgs/bump-x-net Andrew Nesbitt 2026-07-07 18:38:03 +01:00
• 1a18dd4635
  Bump golang.org/x/net to v0.56.0 bump-x-net Andrew Nesbitt 2026-07-07 17:53:35 +01:00
• 0ae63066e2
  Make upstream HTTP timeout configurable http-timeout-config Andrew Nesbitt 2026-07-07 17:48:36 +01:00
• 1e6f0bbf8e implement registry.k8s.io as virtual registry proof of concept Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 41ce55e696 handler: make authentication for container registry optional Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 758c4c7673 handler: extract helper method authReq for upstream container requests Maximilian Gaß 2026-07-07 11:09:07 +02:00
• 95318dedff
  Merge pull request #181 from git-pkgs/dependabot/github_actions/actions/setup-go-6.5.0 Andrew Nesbitt 2026-07-02 16:44:01 +01:00
• b45757ea86
  Merge pull request #180 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.5.7 Andrew Nesbitt 2026-07-02 16:41:52 +01:00
• a8c0562c97
  Bump actions/setup-go from 6.4.0 to 6.5.0 dependabot[bot] 2026-07-02 15:13:48 +00:00
• 81d19b7632
  Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 dependabot[bot] 2026-07-02 15:13:19 +00:00
• 7888296193
  Merge pull request #178 from philippdieter/main Andrew Nesbitt 2026-07-01 18:13:01 +01:00
• 787b76dfe7 Fix Composer 404 on minified metadata and add debug logging Philipp Dieter 2026-06-30 13:25:49 +02:00
• bb214bb7b2
  Bump git-pkgs and third-party dependencies (#177) v0.5.1 Andrew Nesbitt 2026-06-29 14:43:49 +01:00
• c59d40d896
  Bump git-pkgs and third-party dependencies bump-deps Andrew Nesbitt 2026-06-29 14:37:15 +01:00
• f4a8c5606a
  Fix package redirection to '/ui/packages' (#169) Bruno Clermont 2026-06-26 07:54:00 -04:00
• ca2514991d
  fix(composer): resolve *-dev versions from the ~dev metadata file (#174) wickedOne 2026-06-26 13:51:08 +02:00
• b2011c0a54
  Log actual database config instead of sqlite path (#176) Andrew Nesbitt 2026-06-26 07:42:30 -04:00
• 67571a2ac8 Log actual database config instead of sqlite path fix-database-log-173 Andrew Nesbitt 2026-06-25 13:03:50 -04:00
• 795edb4f91
  Bump actions/checkout from 6.0.3 to 7.0.0 (#175) dependabot[bot] 2026-06-25 11:28:18 -04:00
• 24adebf6b6
  Bump actions/checkout from 6.0.3 to 7.0.0 dependabot[bot] 2026-06-25 15:13:30 +00:00
• b5e8e63a02
  fix(composer): resolve *-dev versions from the ~dev metadata file wickedOne 2026-06-24 17:21:15 +02:00
• e289faed06
  Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#170) dependabot[bot] 2026-06-18 16:57:42 +01:00
• 8aa6d758a8
  Bump modernc.org/sqlite from 1.51.0 to 1.52.0 (#171) dependabot[bot] 2026-06-18 16:57:32 +01:00
• 22c9df6374
  Bump alpine from 3.24.0 to 3.24.1 (#172) dependabot[bot] 2026-06-18 16:57:21 +01:00
• 5f3f8884fe
  Bump alpine from 3.24.0 to 3.24.1 dependabot[bot] 2026-06-18 15:14:12 +00:00
• 3f9d816908
  Bump modernc.org/sqlite from 1.51.0 to 1.52.0 dependabot[bot] 2026-06-18 15:14:10 +00:00
• 196e2161a1
  Bump golang.org/x/sync from 0.20.0 to 0.21.0 dependabot[bot] 2026-06-18 15:14:04 +00:00
• 873364485f
  Fix package redirection to '/ui/packages' Bruno Clermont 2026-06-17 16:15:02 -04:00
• 167c8ee82c
  Add pluggable artifact scanner hook with OSV reference scanner Anthony ARNAUD 2026-06-12 11:43:16 -04:00
• f3897749df
  Add GCS storage backend with Workload Identity support Anthony A. 2026-06-11 13:35:19 -04:00
• d968f4ad47
  Bump alpine from 3.23.4 to 3.24.0 (#166) dependabot[bot] 2026-06-11 16:26:36 +01:00
• fc245fd975
  Bump github.com/git-pkgs/enrichment from 0.2.3 to 0.3.0 (#165) dependabot[bot] 2026-06-11 16:26:29 +01:00
• 50ea557ce8
  Bump gocloud.dev from 0.45.0 to 0.46.0 (#164) dependabot[bot] 2026-06-11 16:26:21 +01:00
• cb18df5bac
  Bump actions/checkout from 6.0.2 to 6.0.3 (#163) dependabot[bot] 2026-06-11 16:26:10 +01:00
• 4f9c2ddae4
  Bump alpine from 3.23.4 to 3.24.0 dependabot[bot] 2026-06-11 15:15:27 +00:00
• bf3a59ee9a
  Bump github.com/git-pkgs/enrichment from 0.2.3 to 0.3.0 dependabot[bot] 2026-06-11 15:14:50 +00:00
• a6637e3bbf
  Bump gocloud.dev from 0.45.0 to 0.46.0 dependabot[bot] 2026-06-11 15:14:41 +00:00
• d8e72cd9a8
  Bump actions/checkout from 6.0.2 to 6.0.3 dependabot[bot] 2026-06-11 15:14:17 +00:00
• 8c28b02035
  Polish UI: lucide icons, sticky footer, hamburger nav, clickable logo (#162) v0.5.0 Andrew Nesbitt 2026-06-07 16:44:30 +01:00
• 330a76a68a
  Polish UI: lucide icons, sticky footer, hamburger nav, clickable logo ui-polish Andrew Nesbitt 2026-06-07 16:41:45 +01:00
• da4fa2fc98
  Add PROXY_UI_URL for separate UI/package URL advertisement (#161) Andrew Nesbitt 2026-06-07 16:12:43 +01:00
• 386423a431
  Add PROXY_UI_URL for separate UI/package URL advertisement Andrew Nesbitt 2026-06-07 15:49:21 +01:00
• 08d975c397
  Mount web UI under /ui (#148) Andrew Nesbitt 2026-06-07 15:47:29 +01:00
• 94ba4aba41
  Bump grpc, otel, and aws-sdk-go-v2 to address security advisories (#154) Andrew Nesbitt 2026-06-07 15:44:52 +01:00
• fbe82f3605
  Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 (#157) dependabot[bot] 2026-06-07 13:51:26 +01:00
• 13be66fd5d
  README: nginx example for splitting UI auth from package endpoints Andrew Nesbitt 2026-06-06 11:28:07 +01:00
• 609b511a2d
  Drop deprecated middleware.RealIP Andrew Nesbitt 2026-06-06 11:06:09 +01:00
• 67190c1a8e
  Bump modernc.org/sqlite from 1.50.1 to 1.51.0 (#159) dependabot[bot] 2026-06-05 09:38:37 +01:00
• 31b513538f
  Bump golang from 1.26.3-alpine to 1.26.4-alpine (#156) dependabot[bot] 2026-06-05 09:38:29 +01:00
• e5fbd6ef69
  Bump docker/login-action from 4.1.0 to 4.2.0 (#160) dependabot[bot] 2026-06-05 09:36:59 +01:00
• 6fa2d95f73
  Bump docker/metadata-action from 6.0.0 to 6.1.0 (#158) dependabot[bot] 2026-06-05 09:36:36 +01:00