🚀 New features and improvements

• Enable micrometer metrics and add one for token refresh (#639) @copilot-swe-agent[bot]
• Allow consumers to provide their executor service (#637) @jonesbusy
• Concurrency for layer pull and push (#629) @jonesbusy
• Global scopes and look for token with broader scope in the cache (#633) @jonesbusy
• Cache hit with service (#632) @jonesbusy
• Store token into caffeine cache (#631) @jonesbusy
• Tags pagination (#628) @jonesbusy

🐛 Bug fixes

• Ensure to URI escape service name (#623) @jonesbusy

👻 Maintenance

• Increase Maven central publication waitMaxTime to 2h (30mn fail too often) (#621) @jonesbusy

🚦 Tests

• Build docker-credential-fake with Go 1.26.1 (#642) @jonesbusy
• Bump zot v2.1.15 (#636) @github-actions[bot]

✍ Other changes

• Use bom and pass service and realm to token refresh (#641) @jonesbusy

📦 Dependency updates

• Build docker-credential-fake with Go 1.26.1 (#642) @jonesbusy
• Bump io.micrometer:micrometer-core from 1.15.0 to 1.16.3 (#640) @dependabot[bot]
• Bump zot v2.1.15 (#636) @github-actions[bot]
• Bump release-drafter/release-drafter from 6.3.0 to 6.4.0 (#634) @dependabot[bot]
• Bump Maven 3.9.13 (#625) @github-actions[bot]
• Bump release-drafter/release-drafter from 6.2.0 to 6.3.0 (#627) @dependabot[bot]
• Bump github/codeql-action from 4.32.5 to 4.32.6 (#626) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 (#624) @dependabot[bot]

🚀 New features and improvements

• Add utility method on ManifestDescriptor to construct manifest descriptor with Platform and Annotation from Manifest (#591) @jonesbusy
• Better support for Index artifact type (#594) @jonesbusy
• Add withArtifactType for Index (#590) @jonesbusy
• Support hierarchical credentials on AuthStore (per namespace, per repository etc) (#588) @copilot-swe-agent[bot]

🐛 Bug fixes

• Fix invalid scope on push blob (#595) @jonesbusy
• Layer annotations where not added on files during pushArtifact (#583) @jonesbusy
• Do not pull layer without title on pull artifact (#582) @jonesbusy

🚦 Tests

• Update ContainerRef.shouldDetermineEffectiveRegistry test to not be machine dependent (#596) @jonesbusy
• Add utility method on ManifestDescriptor to construct manifest descriptor with Platform and Annotation from Manifest (#591) @jonesbusy
• One more demo/test to push Jenkins library (#581) @jonesbusy
• Update demo/tests for Harbor and different Artifacts (#579) @jonesbusy
• Add test for Nexus (#578) @jonesbusy
• Add few more tests (#577) @jonesbusy
• Add test to package a standard Flux Artifact (#576) @jonesbusy

✍ Other changes

• Missing @OrasModel for reflection access (#573) @jonesbusy

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 (#585) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 (#586) @dependabot[bot]
• Bump github/codeql-action from 4.32.3 to 4.32.4 (#584) @dependabot[bot]

🚀 New features and improvements

• Allow setting short-name-mode and set mode to enforcing by default (like podman / CRI-IO) (#560) @jonesbusy
• Store resolve registry when probing descriptor and use it for copy operation (#557) @jonesbusy
• Optimize copy by passing stream with known size and digest (#552) @jonesbusy
• Rewrite any prefix subdomain like *.example.com (#545) @jonesbusy
• Add support for registry table prefix and location rewrite (without *, tag or digest yet) (#542) @jonesbusy
• Support for registry (insecure / blocked) from registries.conf (#541) @jonesbusy
• Support for alias in registries.conf (#540) @jonesbusy
• Support of unqualified-search-registries in registries.conf (#434) @jonesbusy

🐛 Bug fixes

• Ensure to use computed reference on copy (#572) @jonesbusy
• Fix copy with alias (#571) @jonesbusy
• Fix push artifact for alias (#570) @jonesbusy
• Fix getEffectiveRegistry to return registry only (#569) @jonesbusy
• Do not send Authorization header when redirecting after auth (#561) @jonesbusy
• When copy ensure to push all manifests before index (#554) @jonesbusy

📝 Documentation updates

• Add some documentation about registries.conf (#564) @jonesbusy

👻 Maintenance

• Ensure to pass resolved target registries for pushArtifact (#566) @jonesbusy
• Use streaming copy for config during copy and ensure to set target (2) and extract to copy method (#559) @jonesbusy
• Use streaming copy for config during copy and ensure to set target (#558) @jonesbusy
• Only try to parse Error if we get JSON content type (#555) @jonesbusy
• Ensure HTTP status code is not lost when catching exception (#550) @jonesbusy

🚦 Tests

• Ensure HTTP status code is not lost when catching exception (#550) @jonesbusy
• Add test for Helm chart extraction (Issue COMPRESS-705) (#538) @jonesbusy
• Migrate to testcontainers v2 (#536) @jonesbusy

📦 Dependency updates

• Bump ch.qos.logback:logback-classic from 1.5.31 to 1.5.32 (#553) @dependabot[bot]
• Bump github/codeql-action from 4.32.2 to 4.32.3 (#549) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.31 (#547) @dependabot[bot]
• Bump junit.version from 6.0.2 to 6.0.3 (#546) @dependabot[bot]
• Migrate to testcontainers v2 (#536) @jonesbusy
• Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 (#530) @dependabot[bot]

🚀 New features and improvements

• Add Platform model and some filtering utils for Index (#527) @jonesbusy

🐛 Bug fixes

• Do not rely on Docker-Content-Digest when getting manifests (#526) @jonesbusy
• Avoid HEAD request before getting blobs (#525) @jonesbusy

👻 Maintenance

• Avoid log binary response (#524) @jonesbusy

📦 Dependency updates

• Bump github/codeql-action from 4.32.1 to 4.32.2 (#528) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 (#529) @dependabot[bot]

🐛 Bug fixes

• Support for access_token and reduce call to auth store (#517) @jonesbusy
• Compute digest index and avoid Docker-Content-Digest when missing (#516) @jonesbusy
• Implement test for ECR multi-arch image and fix possible content length missing (#515) @jonesbusy

👻 Maintenance

• Overly permissive regular expression range for artifact type validation (#466) @jonesbusy

🚦 Tests

• Add test for Azure CR (#520) @jonesbusy
• Implement test for ECR multi-arch image and fix possible content length missing (#515) @jonesbusy
• Bump zot v2.1.14 (#502) @github-actions[bot]
• Bump zot v2.1.13 (#490) @github-actions[bot]
• Bump zot v2.1.12 (#485) @github-actions[bot]
• Bump zot v2.1.11 (#465) @github-actions[bot]

📦 Dependency updates

🐛 Bug fixes

• Fix wrong credStore format (#456) @jonesbusy

🚦 Tests

• Bump zot v2.1.10 (#436) @github-actions[bot]
• Bump zot v2.1.9 (#435) @github-actions[bot]

📦 Dependency updates

• Bump updatecli/updatecli-action from 2.94.0 to 2.95.0 (#454) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21 (#455) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.1 to 3.0.2 (#451) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0 (#452) @dependabot[bot]
• Bump junit.version from 6.0.0 to 6.0.1 (#450) @dependabot[bot]
• Bump github/codeql-action from 4.31.0 to 4.31.2 (#449) @dependabot[bot]
• Bump com.github.luben:zstd-jni from 1.5.7-5 to 1.5.7-6 (#445) @dependabot[bot]
• Bump updatecli/updatecli-action from 2.93.0 to 2.94.0 (#446) @dependabot[bot]
• Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#447) @dependabot[bot]
• Bump github/codeql-action from 4.30.9 to 4.31.0 (#448) @dependabot[bot]
• Bump tools.jackson:jackson-bom from 3.0.0 to 3.0.1 (#444) @dependabot[bot]
• Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 (#437) @dependabot[bot]
• Bump github/codeql-action from 4.30.8 to 4.30.9 (#438) @dependabot[bot]
• Bump zot v2.1.10 (#436) @github-actions[bot]
• Bump zot v2.1.9 (#435) @github-actions[bot]

📝 Documentation updates

• Update badges (#357) @jonesbusy

👻 Maintenance

• Don't use EA anymore for Java 25 (#405) @jonesbusy
• Add unqualified flag on container ref (#397) @jonesbusy
• Test build on Java 21 and Java 25 (#396) @jonesbusy
• Fix maven maven on deploy-javadoc (#362) @jonesbusy
• Ensure to checkout before reading the maven version (#361) @jonesbusy

🚦 Tests

• Bump zot v2.1.8 (#383) @github-actions[bot]
• Bump zot v2.1.7 (#370) @github-actions[bot]
• Bump zot v2.1.6 (#364) @github-actions[bot]

📦 Dependency updates