moby/vendor
Sebastiaan van Stijn 1bd0805099
vendor: github.com/docker/distribution v2.8.2
CI

- Dockerfile: fix filenames of artifacts

Bugfixes

-  Fix panic in inmemory driver
-  Add code to handle pagination of parts. Fixes max layer size of 10GB bug
-  Parse http forbidden as denied
-  Revert "registry/client: set Accept: identity header when getting layers

Runtime

- Update to go1.19.9
- Dockerfile: update xx to v1.2.1 ([#3907](https://github.com/distribution/distribution/pull/3907))

Security

- Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16
- Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](521ea3d973)

full diff: https://github.com/docker/distribution/compare/v2.8.1...v2.8.2

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

bump to release/2.8

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 7821d2d788)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-07-15 19:20:47 +02:00
..
archive/tar vendor: update stdlib archive/tar for go1.19.2 2023-02-27 11:28:45 -05:00
cloud.google.com/go bump cloud.google.com/go v-0.44.3 2020-10-01 23:47:11 +00:00
code.cloudfoundry.org/clock bump docker/swarmkit 59163bf75df38489d4a10392265d27156dc473c5 2019-04-15 18:04:36 +02:00
github.com vendor: github.com/docker/distribution v2.8.2 2023-07-15 19:20:47 +02:00
go.etcd.io/bbolt vendor bbolt v1.3.5 2020-07-30 16:39:59 +00:00
go.opencensus.io bump google.golang.org/api v0.8.0 2020-10-01 23:47:15 +00:00
golang.org/x [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 2022-05-11 14:17:46 +02:00
google.golang.org bump google.golang.org/api v0.8.0 2020-10-01 23:47:15 +00:00
gotest.tools/v3 vendor: gotest.tools v3.0.3 2020-11-23 12:33:57 +01:00