mirrors/pkg-proxy
Watch
1
0
Fork
You've already forked pkg-proxy
 1
mirror of https://github.com/git-pkgs/proxy.git synced 2026-11-12 00:59:16 -05:00
Code Issues Releases Packages Wiki Activity
1,187 commits 25 branches 18 tags 10 MiB
Commit graph

1,187 commits

This branch
This branch
All branches
Author SHA1 Message Date
Milas Bowman
f82ec69006
 		fix(storage): restore Azure/GCS direct serve signing 2026-11-06 20:06:36 -05:00
Milas Bowman
909e2e464a
 		fix(s3): signatures for alternate hosts 2026-11-06 19:28:45 -05:00
Andrew Nesbitt
292ecc1488
 		Correct package manager configuration examples 2026-11-06 22:36:47 +00:00
Simon Chrzanowski
b0566aa456 Fail a mirror whose refresh is past max_repo_size 
The repository is dropped once released, so a cached commit in it would
not be served for long.
 2026-11-06 13:00:31 +01:00
Simon Chrzanowski
c037fb9e8b Note that git.max_size can evict a mirrored repository sooner 2026-11-06 12:04:14 +01:00
Simon Chrzanowski
90ba3f9fd1 Say which commits fail to mirror without fetching by ID 2026-11-06 11:44:22 +01:00
Simon Chrzanowski
abe94017a1 Renew wanted refs of mirrored commits and count refreshes that fetched 
Mirroring a commit on no branch or tag again writes a fresh wanted ref, so
its 7 days count from the last mirror run. A cached repository whose refresh
fetched new commits is no longer reported as cached.
 2026-11-06 11:36:42 +01:00
Andrew Nesbitt
563f58e5cc
 		Merge pull request #666 from git-pkgs/cooldown-profiles 
Add cooldown profiles selected by registry URL
 2026-11-06 09:59:37 +00:00
Andrew Nesbitt
691088b947
 		Merge pull request #658 from git-pkgs/hide-stats-connection-details 
Remove connection details from stats response
 2026-11-06 09:40:43 +00:00
Andrew Nesbitt
c2dd16903a
 		Share publish indexes across cooldown profiles 2026-11-06 09:38:07 +00:00
Andrew Nesbitt
0ed91b5872
 		Redact storage passwords in startup logs 2026-11-06 09:20:43 +00:00
Simon Chrzanowski
03be03b8fe Mirror pkg:git commits into the git cache 
proxy mirror, mirror API jobs and SBOMs take pkg:git/{host}/{path}@{commit}
and cache the repository and commit in the cache /git serves, so a later
clone is a cache hit, also with the upstream down. Part of #403.
 2026-11-06 07:48:51 +01:00
Andrew Nesbitt
79be33049a
 		Add cooldown profiles selected by registry URL 2026-11-05 21:42:44 +00:00
Andrew Nesbitt
6f6ffcb364
 		Merge pull request #533 from pinguinfuss/issue-521-download-cooldown 
Check cooldown on artifact downloads for cargo, gem, hex, pub, conda and helm
 2026-11-05 21:20:14 +00:00
Andrew Nesbitt
61ac273862
 		Check primary metadata before allowing untimed downloads 2026-11-05 20:00:19 +00:00
simon chrzanowski
a1021a6cd7
 		Merge pull request #663 from git-pkgs/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/ecr-1.67.1 
Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.66.5 to 1.67.1
 2026-11-05 19:41:40 +01:00
Andrew Nesbitt
b9dcbd27fc
 		Handle cooldown lookup failures and reuse download indexes 2026-11-05 18:41:03 +00:00
Christian Heim
3ab7dcc1dc
 		The UTC test compares the zone offset, since Postgres reads TIMESTAMP back as a fixed +0000 zone rather than time.UTC. 2026-11-05 18:30:44 +00:00
Christian Heim
5db16cbb99
 		Conda reads repodata as a stream for the download check, under the same bound as the repodata filter, so a repodata.json over metadata_max_size no longer lets a package in cooldown through. If even the compressed copy is too large to cache, the check streams it from upstream. 2026-11-05 18:30:44 +00:00
Christian Heim
89c60abd1a
 		Conda now checks each package file against its own timestamp, because builds of one version differ. Conda repodata and helm indexes are parsed once per cached document instead of on every download. 2026-11-05 18:30:43 +00:00
Christian Heim
3456b394be
 		Cargo, gem, hex, pub, conda and helm now check cooldown on artifact downloads too, so a version inside the window is withheld even when it was cached before. Publish times are stored in UTC. Fixes #521. 2026-11-05 18:30:42 +00:00
dependabot[bot]
550a908d88
 		Bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.66.5 to 1.67.1 
Bumps [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) from 1.66.5 to 1.67.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ecr/v1.66.5...service/s3/v1.67.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.67.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-05 18:23:50 +00:00
simon chrzanowski
7a1f25932a
 		Merge pull request #662 from git-pkgs/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/config-1.33.12 
Bump github.com/aws/aws-sdk-go-v2/config from 1.33.9 to 1.33.12
 2026-11-05 19:18:37 +01:00
simon chrzanowski
3a4dd48934
 		Merge pull request #661 from git-pkgs/dependabot/github_actions/zizmorcore/zizmor-action-0.8.0 
Bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0
 2026-11-05 19:18:32 +01:00
simon chrzanowski
8a819ca54c
 		Merge pull request #660 from git-pkgs/dependabot/github_actions/docker/login-action-4.7.0 
Bump docker/login-action from 4.6.0 to 4.7.0
 2026-11-05 19:18:27 +01:00
simon chrzanowski
c871b7ca05
 		Merge pull request #659 from git-pkgs/dependabot/docker/alpine-3.24.3 
Bump alpine from 3.24.2 to 3.24.3
 2026-11-05 19:18:23 +01:00
Simon Chrzanowski
0300ad2522 Limit APKINDEX to maxIndexBytes once decompressed 2026-11-05 17:44:12 +01:00
Simon Chrzanowski
14d04955b4 Match wheels on any of their alternative tags 2026-11-05 17:43:33 +01:00
Simon Chrzanowski
0f26841f56 Keep blobs of scheduled images from retention 
A mirror run that finds a blob cached records it in mirrored_at, which
retention counts as use. LRU eviction keeps using last_accessed_at, so
#508's decision not to count mirror runs as cache hits stands.

Fixes #648.
 2026-11-05 17:39:19 +01:00
Simon Chrzanowski
6d971716d9 Describe the looser file kind matching 2026-11-05 17:20:16 +01:00
Simon Chrzanowski
34524a4056 Limit a refreshed index to 512 MiB once decompressed 2026-11-05 17:20:06 +01:00
Simon Chrzanowski
f8c5fa9a1d Match wheels on OS and architecture, and conda builds without the hash anywhere 2026-11-05 17:18:56 +01:00
dependabot[bot]
06dd126211
 		Bump github.com/aws/aws-sdk-go-v2/config from 1.33.9 to 1.33.12 
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.33.9 to 1.33.12.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.33.9...config/v1.33.12)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-05 15:15:18 +00:00
dependabot[bot]
d5dbd7a95a
 		Bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.7.1 to 0.8.0.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](85b2b9fb8e...53290badfa)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-05 15:14:03 +00:00
dependabot[bot]
12c5cc9e4c
 		Bump docker/login-action from 4.6.0 to 4.7.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.6.0 to 4.7.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](dbcb813823...81c6f93d4b)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-05 15:14:00 +00:00
dependabot[bot]
17355d2227
 		Bump alpine from 3.24.2 to 3.24.3 
Bumps alpine from 3.24.2 to 3.24.3.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-05 15:13:42 +00:00
Andrew Nesbitt
308cc133ab
 		Remove connection details from stats response 2026-11-05 15:09:16 +00:00
Simon Chrzanowski
55f1b1e2da Reject a negative mirror.refresh.max_bytes 2026-11-05 14:53:36 +01:00
Simon Chrzanowski
010ed4761a Skip index entries whose path leaves the repository 2026-11-05 13:51:07 +01:00
Simon Chrzanowski
6f3e8c6f7e Merge remote-tracking branch 'origin/main' into feat/mirror-refresh 
# Conflicts:
#	internal/database/schema.go
 2026-11-05 13:50:08 +01:00
Andrew Nesbitt
6c8fb35ab7
 		Merge pull request #626 from simonchrz/feat/project-inventory 
Add a project inventory built from uploaded SBOMs
 2026-11-05 12:36:54 +00:00
Simon Chrzanowski
17c2d52500 Note that refreshing Debian, Alpine and RPM needs cache_metadata 2026-11-05 12:34:36 +01:00
Simon Chrzanowski
903fd94df9 Test that apk index errors leave out the URL 2026-11-05 12:34:32 +01:00
Simon Chrzanowski
eb34a1ac6f Name the apk repository, not its URL, in index errors 2026-11-05 12:33:46 +01:00
Simon Chrzanowski
5c46a39b2d Merge remote-tracking branch 'origin/main' into feat/mirror-refresh 
# Conflicts:
#	internal/database/schema.go
 2026-11-05 12:21:49 +01:00
Simon Chrzanowski
4d70793351 Name the apk repository in mirror errors 2026-11-05 11:56:42 +01:00
Simon Chrzanowski
c20f64ebaa Keep the apk namespace for the mirror's repository lookup 
The inventory drops the namespace from apk names so they match the
handler's, but the apk mirror picks the upstream.apk repository from it.
 2026-11-05 10:48:44 +01:00
Simon Chrzanowski
1e916bf334 Merge remote-tracking branch 'origin/main' into feat/project-inventory 2026-11-05 10:47:14 +01:00
Simon Chrzanowski
60872fe990 Use sbom v0.1.9 2026-11-05 09:34:02 +01:00
Andrew Nesbitt
fba9e036df
 		Merge pull request #656 from simonchrz/feat/mirror-apk 
Mirror Alpine packages
 2026-11-05 08:24:32 +00:00