v2.1.17

What's Changed

• fix(api): return 416 for bad upload range on PUT; fix GET upload Range at size zero by @andaaron in #3983
• feat(zb): Support for TTFB measurement + on-demand sync tests by @vrajashkr in #3929
• fix(api): recognize Docker Compose/Buildx User-Agent in v2 challenge workaround by @gjed in #3992
• chore: fix dependabot alerts by @rchincha in #3990
• feat(auth): support OIDC RP-Initiated Logout by @krjakbrjak in #3975
• fix(security): enhance timeout configurations and body size limits fo… by @rchincha in #3984
• Improve zli CVE diff output by @AkashKumar7902 in #3994
• chore: fix dependabot alerts by @rchincha in #4020
• Support multipart range blob pulls by @AkashKumar7902 in #3995
• fix(sync): apply tag filters before destination mapping by @AkashKumar7902 in #4003
• Multipart download enhancements by @andaaron in #4021
• docs(config): reference generated config schema by @AkashKumar7902 in #4015
• feat(cosign): add support for cosign bundle by @rchincha in #4023
• feat(auth): map OpenID groups claim by @AkashKumar7902 in #3999
• test: refactor countingReader into partialReaderOpenTracker and partialReaderReadCloser by @andaaron in #4027
• fix(auth): refine OIDC identity handling and claim-mapping logs by @andaaron in #4028
• feat(api): log session/audit subject from UserAccessControl by @andaaron in #4029
• refactor(zli): add typed ~/.zot config layer and strict validation by @andaaron in #4030
• refactor(build): move build metadata to pkg/buildinfo by @andaaron in #4045
• feat(zli): add config list/show/get/set/reset and isolate deprecated syntax by @andaaron in #4037
• fix(zli config): print help for missing args by @andaaron in #4046
• feat(authz): introduce conditional access control via CEL by @matheuscscp in #4040
• ci: sync go 1.26 images to ghcr.io/project-zot/golang by @andaaron in #4049
• ci: fix golangci-lint install URL by @andaaron in #4052
• chore: fix dependabot alerts by @rchincha in #4048
• fix: downgrade expected missing-blob HEAD logging from error to debug by @rchincha in #4056
• chore: fix dependabot alerts by @rchincha in #4059
• fix(lint): silence deprecated gomodguard linter warning by @benoittgt in #4070
• feat(metrics): add Prometheus GC metrics by @benoittgt in #3863
• chore: fix dependabot alerts by @rchincha in #4072
• chore: bump zui version by @rchincha in #4074

New Contributors

• @gjed made their first contribution in #3992
• @krjakbrjak made their first contribution in #3975
• @AkashKumar7902 made their first contribution in #3994

Full Changelog: v2.1.16...v2.1.17