pkg-proxy

mirrors/pkg-proxy

Watch

Fork 1

mirror of https://github.com/git-pkgs/proxy.git synced 2026-11-09 15:49:16 -05:00

Commit graph

6c9505f322

Drop cached metadata that fails its integrity check Simon Chrzanowski 2026-10-25 12:32:20 +01:00
18d2ca215a

Merge pull request #585 from simonchrz/fix/cooldown-fail-closed Andrew Nesbitt 2026-10-25 12:49:04 +00:00
ff539550a3

Merge pull request #579 from simonchrz/fix/metadata-path-case Andrew Nesbitt 2026-10-25 12:48:53 +00:00
255ba721f6

Merge pull request #591 from simonchrz/feat/mirror-pypi Andrew Nesbitt 2026-10-25 12:47:15 +00:00
775b92f1b8

Mount an emptyDir at /tmp in the Helm chart (#590) Andrew Nesbitt 2026-10-25 11:42:21 +00:00
607a55e746 Mirror PyPI packages Simon Chrzanowski 2026-10-25 12:36:36 +01:00
4402075916 Document serving cached downloads when publish times can't be read Simon Chrzanowski 2026-10-25 12:32:17 +01:00
224bce8f51 Serve cached downloads when cooldown can't read publish times Simon Chrzanowski 2026-10-25 12:31:33 +01:00
25f62da322 Queue only a row's own legacy metadata blob Simon Chrzanowski 2026-10-25 12:31:10 +01:00
f240d3023f Stream metadata cache hits for ProxyCached Simon Chrzanowski 2026-10-24 13:13:12 +02:00
3146e80fae

Merge pull request #548 from simonchrz/fix/mirror-upstream-versions Andrew Nesbitt 2026-10-25 11:09:09 +00:00
e141f16d17

Merge pull request #577 from simonchrz/fix/ssrf-forward-proxy Andrew Nesbitt 2026-10-25 11:09:02 +00:00
0fc8ae71d1

Merge main into fix/mirror-upstream-versions Andrew Nesbitt 2026-10-25 10:49:49 +00:00
847f4f351c

Merge main into fix/ssrf-forward-proxy Andrew Nesbitt 2026-10-25 10:36:38 +00:00
c6ccbcb974

Merge pull request #588 from simonchrz/refactor/shared-enrichment Andrew Nesbitt 2026-10-25 10:30:22 +00:00
fcce59c71a

Merge pull request #589 from simonchrz/refactor/purl-normalise Andrew Nesbitt 2026-10-25 10:30:17 +00:00
42584c3845

Bump registries to v0.11.1 Andrew Nesbitt 2026-10-25 10:29:20 +00:00
910dadc220

Bump registries to v0.11.1 Andrew Nesbitt 2026-10-25 10:17:37 +00:00
1b641b6e90

Bump enrichment to v0.7.4 Andrew Nesbitt 2026-10-25 10:15:58 +00:00
2a4ce12248

Bump purl to v0.1.24 and drop redundant Swift lowercasing Andrew Nesbitt 2026-10-25 10:14:03 +00:00
594c9a6afe

Mount an emptyDir at /tmp in the Helm chart Andrew Nesbitt 2026-10-25 10:10:18 +00:00
560a9918ff

Merge pull request #578 from simonchrz/fix/unambiguous-metadata-keys Andrew Nesbitt 2026-10-25 10:04:56 +00:00
bd9f376f30

Merge pull request #580 from simonchrz/fix/git-request-limits Andrew Nesbitt 2026-10-25 10:04:49 +00:00
fcac1d5fae

Refuse '?' and '#' through rejectQueryChars in APK, Debian and RPM Andrew Nesbitt 2026-10-25 09:55:14 +00:00
4d0d4a20ae

Spill large Git request bodies into the cache's temporary directory Andrew Nesbitt 2026-10-25 09:41:05 +00:00
cc4a9c4046 Merge remote-tracking branch 'origin/main' into fix/mirror-upstream-versions Simon Chrzanowski 2026-10-24 19:18:21 +02:00
c3d0448e6f Bump registries for streamed npm packuments Simon Chrzanowski 2026-10-24 19:03:38 +02:00
0b2fa83590 Use registries' forward proxy check Simon Chrzanowski 2026-10-24 19:00:57 +02:00
de308e48e0 Use purl's ComparisonForm for denylist and NuGet retention keys Simon Chrzanowski 2026-10-23 19:29:00 +02:00
fc299593ac Answer 404 for packages the registry doesn't have Simon Chrzanowski 2026-10-24 17:08:22 +02:00
94668c917b Use git-pkgs/enrichment for the enrichment API Simon Chrzanowski 2026-10-24 15:55:37 +02:00
6a988050f6

Merge pull request #587 from git-pkgs/fix-docker-mirror-inputs simon chrzanowski 2026-10-24 15:08:26 +02:00
a29f9fc234

Preserve Docker registries and SBOM versions when mirroring Andrew Nesbitt 2026-10-24 13:06:12 +01:00
fd4f067a1b Keep legacy metadata whose blob matches its digest Simon Chrzanowski 2026-10-24 13:10:40 +02:00
d64bfc6d36 Refuse '?' and '#' in paths in more handlers Simon Chrzanowski 2026-10-24 08:03:45 +02:00
aa0460a15b Bound Hex and gem cooldown reads by the metadata size limit Simon Chrzanowski 2026-10-24 08:13:58 +02:00
09e41d0272 Fail closed in gem, Hex and PyPI cooldown Simon Chrzanowski 2026-10-24 08:11:25 +02:00
77bd66acab Bound Git requests by their body and response progress Simon Chrzanowski 2026-10-24 08:09:47 +02:00
d2c6587996 Hash path-based metadata cache keys Simon Chrzanowski 2026-10-24 08:02:07 +02:00
562ffb3ecd

Merge pull request #586 from simonchrz/fix/gem-filename-length Andrew Nesbitt 2026-10-24 11:44:41 +01:00
319253a1ce

Merge pull request #584 from simonchrz/fix/gem-index-gzip Andrew Nesbitt 2026-10-24 11:44:26 +01:00
1c3f1aa255

Merge pull request #583 from simonchrz/fix/verify-all-digests Andrew Nesbitt 2026-10-24 11:44:04 +01:00
cefdbe6b70

Merge pull request #582 from simonchrz/fix/npm-tarball-unverified Andrew Nesbitt 2026-10-24 11:43:41 +01:00
5d9df6047c

Merge pull request #581 from simonchrz/fix/generic-auth-paths Andrew Nesbitt 2026-10-24 11:43:11 +01:00
9ef99e2ebc

Merge pull request #576 from simonchrz/fix/registry-token-scope Andrew Nesbitt 2026-10-24 11:38:40 +01:00
08e9e7ddea

Merge pull request #574 from simonchrz/fix/mirror-csrf-ui-framing Andrew Nesbitt 2026-10-24 11:35:18 +01:00
4a1e4fe4e4

Merge pull request #573 from simonchrz/feat/maven-cooldown Andrew Nesbitt 2026-10-24 11:34:46 +01:00
b855c5b744

Merge pull request #572 from simonchrz/fix/flaky-tests Andrew Nesbitt 2026-10-24 11:33:34 +01:00
7aee2bb078

Merge pull request #571 from git-pkgs/docs/oci-pull-only Andrew Nesbitt 2026-10-24 11:33:00 +01:00
44b81a2f1e

Merge pull request #570 from simonchrz/feat/fetch-leases Andrew Nesbitt 2026-10-24 11:32:37 +01:00
81fbbe6c28

Merge pull request #569 from simonchrz/fix/multi-replica-locks Andrew Nesbitt 2026-10-24 11:31:59 +01:00
4bc42c4fb1

Merge pull request #561 from simonchrz/feat/conda-shards Andrew Nesbitt 2026-10-24 11:31:31 +01:00
e59e7358e9

Merge a524fa95fb into 0ef7312d3c Mohamed labib labiadh 2026-10-24 11:30:26 +01:00
ce39583784 Verify Helm charts before they are cached Simon Chrzanowski 2026-10-24 08:12:59 +02:00
ff10ab3491 Verify sha512 OCI digests and refuse ones that can't be checked Simon Chrzanowski 2026-10-24 08:12:59 +02:00
13cb62c236 Store metadata under a hash of its cache key Simon Chrzanowski 2026-10-24 08:09:25 +02:00
9500c5b5a4 Check upstream destinations sent through a forward proxy Simon Chrzanowski 2026-10-24 08:07:13 +02:00
b6d7575b88 Don't fetch npm tarballs whose packument can't be read Simon Chrzanowski 2026-10-24 08:06:10 +02:00
2ea8915e06 Filter gzipped gem compact indexes under cooldown Simon Chrzanowski 2026-10-24 08:03:16 +02:00
112e9c89ec Require generic_paths for generic upstreams with credentials Simon Chrzanowski 2026-10-24 08:02:22 +02:00
aa3adbfa63 Bound the registry token and challenge caches Simon Chrzanowski 2026-10-24 08:02:10 +02:00
351fe7c0b5 Send registry tokens only to the token service's own registry Simon Chrzanowski 2026-10-24 08:00:48 +02:00
f27fe1193d Refuse overlong gem filenames Simon Chrzanowski 2026-10-24 07:59:32 +02:00
9a788958ec Refuse framing of the web UI Simon Chrzanowski 2026-10-24 07:48:08 +02:00
003c76049f Require a JSON content type to start mirror jobs Simon Chrzanowski 2026-10-24 07:48:08 +02:00
faecb56c85 Polish Maven cooldown after review Simon Chrzanowski 2026-10-23 20:53:06 +02:00
f81274b499 Describe how Maven publish times are read Simon Chrzanowski 2026-10-23 20:07:53 +02:00
78f614e82c Read a Maven version's time from its .pom download Simon Chrzanowski 2026-10-23 19:50:34 +02:00
e6c4a3e57a Document Maven cooldown Simon Chrzanowski 2026-10-23 19:38:28 +02:00
74f8eb378b Apply cooldown to Maven Simon Chrzanowski 2026-10-23 19:38:28 +02:00
562faac436 Split Maven metadata fetch from its response Simon Chrzanowski 2026-10-23 19:38:28 +02:00
e0cb94641f Make the git cache's RefreshWait test independent of timing Simon Chrzanowski 2026-10-23 19:34:09 +02:00
cdd3bea338 Cut the relay connection on any upstream copy error Simon Chrzanowski 2026-10-23 19:34:09 +02:00
35df59f8f2 Wait for background jobs before closing the database at shutdown Simon Chrzanowski 2026-10-23 19:34:09 +02:00
0acc41490e Stop mirror jobs before a job store test cleans up Simon Chrzanowski 2026-10-23 19:34:09 +02:00
64162c77d8 Keep detached lease waits alive and stop waiting on a failed fetch Simon Chrzanowski 2026-10-23 19:19:22 +02:00
743289c8ca Let an interrupted mirror schedule run again Simon Chrzanowski 2026-10-23 19:07:32 +02:00
eb5ff1a9da Accept only relative paths in a conda shard index's base URLs Simon Chrzanowski 2026-10-23 19:06:07 +02:00
f0548d107f

Document that the OCI handler is pull-only Andrew Nesbitt 2026-10-23 17:34:15 +01:00
0ef7312d3c

Merge pull request #568 from simonchrz/perf/composer-download-cache-first Andrew Nesbitt 2026-10-23 16:51:15 +01:00
e050fbfa24

Merge pull request #567 from simonchrz/fix/npm-search-and-abbreviated Andrew Nesbitt 2026-10-23 16:48:33 +01:00
d87f857856

Merge pull request #566 from simonchrz/perf/cooldown-rewrite-cache Andrew Nesbitt 2026-10-23 16:45:19 +01:00
183b07e14d

Merge pull request #565 from simonchrz/fix/julia-registry-refresh Andrew Nesbitt 2026-10-23 16:44:27 +01:00
20e648f4b7

Merge pull request #564 from simonchrz/feat/go-cooldown Andrew Nesbitt 2026-10-23 16:43:12 +01:00
84111c387a Fetch each cache miss once across instances Simon Chrzanowski 2026-10-23 16:54:54 +02:00
3fcdb0b652 Close the SQLite test databases in the lock tests Simon Chrzanowski 2026-10-23 16:30:43 +02:00
b907ef0abf Run the Postgres tests in CI Simon Chrzanowski 2026-10-23 16:23:54 +02:00
d02ad9b2ba Coordinate instances sharing a Postgres database Simon Chrzanowski 2026-10-23 16:15:24 +02:00
f4cab2d302 Cache cooldown metadata rewrites for a minute Simon Chrzanowski 2026-10-23 13:24:58 +02:00
be50be27e2 Serve cached Composer releases without a metadata lookup Simon Chrzanowski 2026-10-23 13:22:56 +02:00
8dcd194c39 Fix npm search routing and abbreviated packuments under cooldown Simon Chrzanowski 2026-10-23 13:22:49 +02:00
5b1c53b24d Refresh the Julia name map only from the advertised registry Simon Chrzanowski 2026-10-23 13:09:31 +02:00
a787913727 Fail closed in Go cooldown and key stored times by escaped path Simon Chrzanowski 2026-10-23 12:46:39 +02:00
4d74ad6113 Apply cooldown to Go modules Simon Chrzanowski 2026-10-23 12:40:19 +02:00
96cc1ee87f Serve conda sharded repodata through cooldown and the cache Simon Chrzanowski 2026-10-23 12:07:01 +02:00
7c6f97c89f

Merge pull request #545 from simonchrz/feat/freebsd Andrew Nesbitt 2026-10-23 10:09:11 +01:00
e361eccf45

Merge pull request #546 from simonchrz/build/freebsd-release Andrew Nesbitt 2026-10-23 10:07:31 +01:00
2dd02a6ef3

Merge pull request #549 from simonchrz/fix/mirror-ecosystem-names Andrew Nesbitt 2026-10-23 09:37:27 +01:00
a960a5f9ac

Merge pull request #550 from simonchrz/fix/mirror-resolver-upstreams Andrew Nesbitt 2026-10-23 09:36:34 +01:00
ec497bef6a

Merge pull request #554 from simonchrz/fix/dot-segments Andrew Nesbitt 2026-10-23 09:34:37 +01:00