Commit graph

Select branches

Hide pull requests

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

extract-portable-npm-metadata

fix-197-cooldown-scoped-purls

fix-database-log-173

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#24

#240

#241

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#257

#258

#259

#26

#260

#267

#268

#269

#27

#270

#272

#273

#275

#277

#278

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#293

#294

#296

#297

#298

#299

#3

#30

#301

#302

#304

#307

#308

#31

#310

#311

#314

#315

#316

#317

#318

#319

#32

#324

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#340

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399

#4

#40

#400

#401

#402

#404

#405

#406

#407

#408

#413

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#462

#463

#464

#465

#468

#469

#47

#470

#471

#472

#473

#475

#476

#477

#479

#48

#481

#482

#483

#484

#485

#487

#488

#489

#490

#491

#492

#493

#494

#495

#496

#5

#50

#502

#503

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#515

#516

#518

#519

#520

#527

#528

#531

#533

#534

#537

#538

#539

#540

#541

#544

#545

#546

#547

#548

#549

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#561

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#610

#611

#612

#615

#616

#618

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#649

#650

#650

#651

#653

#654

#655

#656

#658

#659

#66

#660

#661

#662

#663

#664

#666

#667

#669

#67

#671

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#687

#687

#688

#688

#689

#689

#69

#690

#691

#692

#693

#694

#696

#697

#699

#7

#70

#701

#702

#702

#703

#703

#704

#704

#705

#705

#706

#706

#707

#707

#708

#708

#709

#709

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.9.0

v0.9.1

Mono Color

• 2334a51a52
  Merge main into feat/mirror-julia Andrew Nesbitt 2026-10-26 10:33:01 +00:00
• fddef8e46e
  Merge pull request #506 from pinguinfuss/issue-467-atomic-queue Andrew Nesbitt 2026-10-26 10:27:24 +00:00
• 61df321331
  Merge pull request #606 from simonchrz/feat/mirror-helm Andrew Nesbitt 2026-10-26 10:26:53 +00:00
• 6bbccd600d
  Merge pull request #604 from simonchrz/perf/cooldown-metadata-cache Andrew Nesbitt 2026-10-26 10:25:46 +00:00
• 257d159ecf
  Release an unrecorded object's hold only once per reader Andrew Nesbitt 2026-10-26 10:19:24 +00:00
• 5953af9b05 Merge main. Main now records UpsertArtifact and its queue entry in one transaction itself, so that part of this branch is gone; ClearArtifactCache, eviction and the unrecorded refetch remain, and an unrecorded refetch counts as failed for instances waiting on its lease. Christian Heim 2026-10-26 08:57:26 +01:00
• 24acee2731 When a refetched file can be neither recorded nor queued for deletion, it is still served to everyone sharing the fetch and deleted once the last of them has closed it, so it no longer stays in storage with nothing pointing at it. A record that committed despite the reported error keeps its file. Christian Heim 2026-10-26 08:49:50 +01:00
• e070618021 Move abbreviated packument detection into internal/metadata/npm Simon Chrzanowski 2026-10-25 22:19:37 +01:00
• 8ed0edb90a Extract portable npm metadata transformations Andrew Nesbitt 2026-10-25 22:19:24 +01:00
• 673a581f9e Mirror Swift registry releases Simon Chrzanowski 2026-10-25 21:48:59 +01:00
• 2fed8901ae Send artifacts to the client while a cache miss is stored Simon Chrzanowski 2026-10-25 20:29:03 +01:00
• a7fa07ffdb Merge main into feat/mirror-julia Simon Chrzanowski 2026-10-25 19:40:38 +01:00
• c72e18f35c Merge main into feat/mirror-helm Simon Chrzanowski 2026-10-25 19:38:45 +01:00
• 3f83d9c0ce Mirror Julia packages Simon Chrzanowski 2026-10-25 19:37:46 +01:00
• 17e4fc763f Mirror Helm charts Simon Chrzanowski 2026-10-25 19:37:22 +01:00
• f8ee4c15b2 Merge main into perf/cooldown-metadata-cache Simon Chrzanowski 2026-10-25 19:37:00 +01:00
• 05ad702a65
  Merge pull request #595 from simonchrz/feat/git-lfs-cache Andrew Nesbitt 2026-10-25 18:32:30 +00:00
• bcda24e15c
  Document timeouts for large LFS objects Simon Chrzanowski 2026-10-25 16:53:11 +01:00
• fe4be3ccd6
  Reuse batch download URLs and stored copies for LFS objects Simon Chrzanowski 2026-10-25 16:46:40 +01:00
• 371cefa889
  Harden the Git LFS cache Simon Chrzanowski 2026-10-25 16:08:15 +01:00
• 605e27d69a
  Cache Git LFS objects Simon Chrzanowski 2026-10-25 14:57:49 +01:00
• 14a253426b Merge main into perf/cooldown-metadata-cache Simon Chrzanowski 2026-10-25 19:17:18 +01:00
• 91d0df7141
  Merge pull request #603 from simonchrz/perf/sqlite-read-pool Andrew Nesbitt 2026-10-25 18:16:26 +00:00
• 3c2449e753
  Merge pull request #601 from simonchrz/perf/shared-rate-limit-holds Andrew Nesbitt 2026-10-25 18:15:55 +00:00
• ab6040743d
  Merge pull request #600 from simonchrz/perf/helm-pypi-rewrite-cache Andrew Nesbitt 2026-10-25 18:15:25 +00:00
• 6288e6162d
  Merge pull request #599 from simonchrz/perf/oci-tag-head-revalidation Andrew Nesbitt 2026-10-25 18:15:01 +00:00
• c5b8088a48
  Merge pull request #598 from simonchrz/perf/immutable-metadata Andrew Nesbitt 2026-10-25 18:14:33 +00:00
• 9360117837
  Merge pull request #597 from simonchrz/perf/memory-quick-wins Andrew Nesbitt 2026-10-25 18:14:03 +00:00
• c17a01c214
  Merge pull request #594 from simonchrz/feat/mirror-composer-archive Andrew Nesbitt 2026-10-25 18:13:15 +00:00
• b5b36dc3af
  Merge pull request #593 from simonchrz/feat/mirror-conda Andrew Nesbitt 2026-10-25 18:12:45 +00:00
• 17ab4bbc3c
  Merge pull request #602 from simonchrz/perf/hot-path-small-fixes Andrew Nesbitt 2026-10-25 18:12:10 +00:00
• 030240bfdc
  Merge pull request #605 from simonchrz/fix/conda-bz2-cooldown Andrew Nesbitt 2026-10-25 18:11:20 +00:00
• 6cdd926a9e
  Merge pull request #592 from simonchrz/fix/mirror-file-digest Andrew Nesbitt 2026-10-25 18:10:36 +00:00
• 6347735679 Treat file::memory: URIs as in-memory and test more of the read pool Simon Chrzanowski 2026-10-25 18:14:58 +01:00
• 4b3bd6f815 Refuse unfiltered conda repodata while cooldown is on Simon Chrzanowski 2026-10-25 17:50:49 +01:00
• b09ac87264 Read gem, Hex and conda cooldown metadata through the metadata cache Simon Chrzanowski 2026-10-25 17:41:40 +01:00
• 3bf0cda238 Read SQLite through a separate read-only pool Simon Chrzanowski 2026-10-25 17:35:49 +01:00
• 3935ccd6f7 Share upstream rate-limit holds across instances Simon Chrzanowski 2026-10-25 17:34:08 +01:00
• 3afbf2444e Cache Helm and PyPI metadata rewrites Simon Chrzanowski 2026-10-25 17:32:52 +01:00
• 0b76ca248a Revalidate stale OCI tags with HEAD and share the request Simon Chrzanowski 2026-10-25 17:32:22 +01:00
• 674528a25e Skip the pushed artifact lookup when hosting is disabled Simon Chrzanowski 2026-10-25 17:32:22 +01:00
• fd0d9a5df2 Answer PyPI download cooldown from stored upload times Simon Chrzanowski 2026-10-25 17:29:22 +01:00
• 2b62037834 Serve immutable Go and RPM metadata without revalidation Simon Chrzanowski 2026-10-25 17:29:22 +01:00
• 6d39461d3b Set the Go memory limit from the cgroup limit Simon Chrzanowski 2026-10-25 17:25:56 +01:00
• 23f48c5563 Answer HEAD on a cached artifact without opening it Simon Chrzanowski 2026-10-25 17:27:05 +01:00
• a5868f1e91 Read metadata into a buffer of its known size Simon Chrzanowski 2026-10-25 17:24:24 +01:00
• 486768ba19 Use smaller upload buffers for S3 and Azure Simon Chrzanowski 2026-10-25 17:22:23 +01:00
• 77bec54bb5 Verify cache hits against the content hash only Simon Chrzanowski 2026-10-25 17:19:53 +01:00
• a2889d40a0 Log per-handler request lines at debug level Simon Chrzanowski 2026-10-25 17:21:11 +01:00
• ae9cf36f26 Mirror Composer releases Simon Chrzanowski 2026-10-25 14:36:43 +01:00
• 749934eb6c Mirror conda packages Simon Chrzanowski 2026-10-25 14:25:40 +01:00
• 16ae3deb1c Check mirrored files against their own SHA-256 Simon Chrzanowski 2026-10-25 14:25:35 +01:00
• 7bc4a27ef1
  Merge pull request #575 from simonchrz/fix/metadata-hit-memory Andrew Nesbitt 2026-10-25 12:57:54 +00:00
• 6c9505f322
  Drop cached metadata that fails its integrity check Simon Chrzanowski 2026-10-25 12:32:20 +01:00
• 18d2ca215a
  Merge pull request #585 from simonchrz/fix/cooldown-fail-closed Andrew Nesbitt 2026-10-25 12:49:04 +00:00
• ff539550a3
  Merge pull request #579 from simonchrz/fix/metadata-path-case Andrew Nesbitt 2026-10-25 12:48:53 +00:00
• 255ba721f6
  Merge pull request #591 from simonchrz/feat/mirror-pypi Andrew Nesbitt 2026-10-25 12:47:15 +00:00
• 775b92f1b8
  Mount an emptyDir at /tmp in the Helm chart (#590) Andrew Nesbitt 2026-10-25 11:42:21 +00:00
• 607a55e746 Mirror PyPI packages Simon Chrzanowski 2026-10-25 12:36:36 +01:00
• 4402075916 Document serving cached downloads when publish times can't be read Simon Chrzanowski 2026-10-25 12:32:17 +01:00
• 224bce8f51 Serve cached downloads when cooldown can't read publish times Simon Chrzanowski 2026-10-25 12:31:33 +01:00
• 25f62da322 Queue only a row's own legacy metadata blob Simon Chrzanowski 2026-10-25 12:31:10 +01:00
• f240d3023f Stream metadata cache hits for ProxyCached Simon Chrzanowski 2026-10-24 13:13:12 +02:00
• 3146e80fae
  Merge pull request #548 from simonchrz/fix/mirror-upstream-versions Andrew Nesbitt 2026-10-25 11:09:09 +00:00
• e141f16d17
  Merge pull request #577 from simonchrz/fix/ssrf-forward-proxy Andrew Nesbitt 2026-10-25 11:09:02 +00:00
• 0fc8ae71d1
  Merge main into fix/mirror-upstream-versions Andrew Nesbitt 2026-10-25 10:49:49 +00:00
• 847f4f351c
  Merge main into fix/ssrf-forward-proxy Andrew Nesbitt 2026-10-25 10:36:38 +00:00
• c6ccbcb974
  Merge pull request #588 from simonchrz/refactor/shared-enrichment Andrew Nesbitt 2026-10-25 10:30:22 +00:00
• fcce59c71a
  Merge pull request #589 from simonchrz/refactor/purl-normalise Andrew Nesbitt 2026-10-25 10:30:17 +00:00
• 42584c3845
  Bump registries to v0.11.1 Andrew Nesbitt 2026-10-25 10:29:20 +00:00
• 910dadc220
  Bump registries to v0.11.1 Andrew Nesbitt 2026-10-25 10:17:37 +00:00
• 1b641b6e90
  Bump enrichment to v0.7.4 Andrew Nesbitt 2026-10-25 10:15:58 +00:00
• 2a4ce12248
  Bump purl to v0.1.24 and drop redundant Swift lowercasing Andrew Nesbitt 2026-10-25 10:14:03 +00:00
• 594c9a6afe
  Mount an emptyDir at /tmp in the Helm chart Andrew Nesbitt 2026-10-25 10:10:18 +00:00
• 560a9918ff
  Merge pull request #578 from simonchrz/fix/unambiguous-metadata-keys Andrew Nesbitt 2026-10-25 10:04:56 +00:00
• bd9f376f30
  Merge pull request #580 from simonchrz/fix/git-request-limits Andrew Nesbitt 2026-10-25 10:04:49 +00:00
• fcac1d5fae
  Refuse '?' and '#' through rejectQueryChars in APK, Debian and RPM Andrew Nesbitt 2026-10-25 09:55:14 +00:00
• 4d0d4a20ae
  Spill large Git request bodies into the cache's temporary directory Andrew Nesbitt 2026-10-25 09:41:05 +00:00
• cc4a9c4046 Merge remote-tracking branch 'origin/main' into fix/mirror-upstream-versions Simon Chrzanowski 2026-10-24 19:18:21 +02:00
• c3d0448e6f Bump registries for streamed npm packuments Simon Chrzanowski 2026-10-24 19:03:38 +02:00
• 0b2fa83590 Use registries' forward proxy check Simon Chrzanowski 2026-10-24 19:00:57 +02:00
• de308e48e0 Use purl's ComparisonForm for denylist and NuGet retention keys Simon Chrzanowski 2026-10-23 19:29:00 +02:00
• fc299593ac Answer 404 for packages the registry doesn't have Simon Chrzanowski 2026-10-24 17:08:22 +02:00
• 94668c917b Use git-pkgs/enrichment for the enrichment API Simon Chrzanowski 2026-10-24 15:55:37 +02:00
• 6a988050f6
  Merge pull request #587 from git-pkgs/fix-docker-mirror-inputs simon chrzanowski 2026-10-24 15:08:26 +02:00
• a29f9fc234
  Preserve Docker registries and SBOM versions when mirroring Andrew Nesbitt 2026-10-24 13:06:12 +01:00
• fd4f067a1b Keep legacy metadata whose blob matches its digest Simon Chrzanowski 2026-10-24 13:10:40 +02:00
• d64bfc6d36 Refuse '?' and '#' in paths in more handlers Simon Chrzanowski 2026-10-24 08:03:45 +02:00
• aa0460a15b Bound Hex and gem cooldown reads by the metadata size limit Simon Chrzanowski 2026-10-24 08:13:58 +02:00
• 09e41d0272 Fail closed in gem, Hex and PyPI cooldown Simon Chrzanowski 2026-10-24 08:11:25 +02:00
• 77bd66acab Bound Git requests by their body and response progress Simon Chrzanowski 2026-10-24 08:09:47 +02:00
• d2c6587996 Hash path-based metadata cache keys Simon Chrzanowski 2026-10-24 08:02:07 +02:00
• 562ffb3ecd
  Merge pull request #586 from simonchrz/fix/gem-filename-length Andrew Nesbitt 2026-10-24 11:44:41 +01:00
• 319253a1ce
  Merge pull request #584 from simonchrz/fix/gem-index-gzip Andrew Nesbitt 2026-10-24 11:44:26 +01:00
• 1c3f1aa255
  Merge pull request #583 from simonchrz/fix/verify-all-digests Andrew Nesbitt 2026-10-24 11:44:04 +01:00
• cefdbe6b70
  Merge pull request #582 from simonchrz/fix/npm-tarball-unverified Andrew Nesbitt 2026-10-24 11:43:41 +01:00
• 5d9df6047c
  Merge pull request #581 from simonchrz/fix/generic-auth-paths Andrew Nesbitt 2026-10-24 11:43:11 +01:00
• 9ef99e2ebc
  Merge pull request #576 from simonchrz/fix/registry-token-scope Andrew Nesbitt 2026-10-24 11:38:40 +01:00
• 08e9e7ddea
  Merge pull request #574 from simonchrz/fix/mirror-csrf-ui-framing Andrew Nesbitt 2026-10-24 11:35:18 +01:00
• 4a1e4fe4e4
  Merge pull request #573 from simonchrz/feat/maven-cooldown Andrew Nesbitt 2026-10-24 11:34:46 +01:00