1# commit to be tagged for new release
2commit = "HEAD"
3
4project_name = "registry"
5github_repo = "distribution/distribution"
6
7# previous release
8previous = "v2.7.1"
9
10pre_release = false
11
12preface = """\
13The 2.8.0 registry release has been a long time overdue.
14This is the last 2.x release. No further active development will continue on
152.x branch. Security vulnerability patches to 2.x might be considered, but
16all active development will be focussed on v3 release due in 2022.
17This release includes a security vulnerability fix along
18with a few minor bug fixes and improvemnts in documentation and CI.
19
20See changelog below for full list of changes.
21
22### Bugfixes
23* Close the io.ReadCloser from storage driver [#3370](https://github.com/distribution/distribution/pull/3370)
24* Remove empty Content-Type header [#3297](https://github.com/distribution/distribution/pull/3297)
25* Make ipfilteredby not required in cloudfront storage middleware [#3088](https://github.com/distribution/distribution/pull/3088)
26
27### Features
28* Add reference.ParseDockerRef utility function [#3002](https://github.com/distribution/distribution/pull/3002)
29
30### CI build
31* First draft of actions based ci [#3347](https://github.com/distribution/distribution/pull/3347)
32* Fix vndr and check [#3001](https://github.com/distribution/distribution/pull/3001)
33* Improve code quality by adding linter checks [#3385](https://github.com/distribution/distribution/pull/3385)
34
35### Documentation
36* Add redirect for old URL [#3197](https://github.com/distribution/distribution/pull/3197)
37* Fix broken table [#3073](https://github.com/distribution/distribution/pull/3073)
38* Adding deprecated schema v1 instructions [#2987](https://github.com/distribution/distribution/pull/2987)
39* Change should to must in v2 spec ([#3495](https://github.com/distribution/distribution/pull/3495))
40
41### Storage drivers
42* S3 Driver: add support for ceph radosgw [#3119](https://github.com/distribution/distribution/pull/3119)
43
44### Security
45* Added flag for user configurable cipher suites [#3384](https://github.com/distribution/distribution/pull/3384)
46* Address [CVE-2020-26160](https://github.com/advisories/GHSA-w73w-5m7g-f7qc) by replacing vulnerable third-party depedency[#3466](https://github.com/distribution/distribution/pull/3466)
47* Replace math rand with crypto rand [#3531](https://github.com/distribution/distribution/pull/3531)
48* Address [CVE-2021-41190](https://github.com/advisories/GHSA-mc8v-mgrf-8f4m) by validating document type before unmarshal [GHSA-77vh-xpmg-72qh](https://github.com/distribution/distribution-ghsa-qq97-vm5h-rrhg/pull/2)
49
50### Dependency Changes
51* github.com/dgrijalva/jwt-go -> github.com/golang-jwt/jwt.git # v3.2.2 (a601269ab70c -> 4bbdd8ac624f)
52* github.com/opencontainers/image-spec -> github.com/opencontainers/image-spec # v1.0.2 (ab7389ef9f50 -> 67d2d5658fe0)
53
54Previous release can be found at [v2.7.1](https://github.com/distribution/distribution/releases/tag/v2.7.1)
55"""
View as plain text