What's Changed

• v3.13.8 Changelog Bump by @github-actions[bot] in #4205

Full Changelog: v3.13.7...v3.13.8

What's Changed

• ui: Add Mirroring to ui (PROJQUAY-8886) by @bcaton85 in #4130
• konflux: hermetic script (PROJQUAY-0000) by @Marcusk19 in #4135
• [redhat-3.14] api: add missing read permissions for readonly superuser (PROJQUAY-9156) by @openshift-cherrypick-robot in #4137
• update tekton task refs by @Marcusk19 in #4139
• [redhat-3.14] alembic: Install certs during alembic migrations (PROJQUAY-9135) by @openshift-cherrypick-robot in #4143
• federationuser(ldap): avoid doing LDAP lookups for Robot accounts (PROJQUAY-5137) by @bcaton85 in #4147
• v3.14.4 Changelog Bump by @github-actions[bot] in #4155
• chore: add hermetic param to run oci script (PROJQUAY-0000) by @Marcusk19 in #4170

Full Changelog: v3.14.3...v3.14.4

What's Changed

• v3.9.14 Changelog Bump by @github-actions[bot] in #4168

Full Changelog: v3.9.13...v3.9.14

What's Changed

• [redhat-3.15] alembic: Install certs during alembic migrations (PROJQUAY-9135) by @openshift-cherrypick-robot in #4128
• [redhat-3.15] proxycache: include hidden manifests when querying for child manifests on tag creation (PROJQUAY-8536) by @openshift-cherrypick-robot in #4101
• [redhat-3.15] ui: Add Mirroring to ui (PROJQUAY-8886) by @openshift-cherrypick-robot in #4129
• [redhat-3.15] api: add missing read permissions for readonly superuser (PROJQUAY-9156) by @openshift-cherrypick-robot in #4138
• ui: enabling modelcard by default (PROJQUAY-9059) by @bcaton85 in #4142
• [redhat-3.15] federationuser(ldap): avoid doing LDAP lookups for Robot accounts (PROJQUAY-5137) by @openshift-cherrypick-robot in #4145
• v3.15.1 Changelog Bump by @github-actions[bot] in #4154
• [redhat-3.15] deps: updating cryptography (PROJQUAY-9008) by @openshift-cherrypick-robot in #4156
• downgrading maturin required for new version of cryptography by @bcaton85 in #4157
• Adding calver to requirements-build.txt by @bcaton85 in #4163

Full Changelog: v3.15.0...v3.15.1

What's Changed

• v3.10.13 Changelog Bump by @github-actions[bot] in #4144

Full Changelog: v3.10.12...v3.10.13

What's Changed

• healthcheck: add option to check preferred storage during instance check (PROJQUAY-5074) by @kleesc in #2854
• api: looking up layer by artifact type (PROJQUAY-8644) by @bcaton85 in #3701
• chore: upgrade jinja to 3.1.6 (PROJQUAY-8657) by @jonathankingfc in #3706
• [Feature] storage: Modify the STS S3 implementation of the storage backend to use Web Identity Tokens when available (PROJQUAY-8576) by @bouchardmathieu-qc in #3670
• bug: Fix security url template variable (PROJQUAY-8650) by @ibazulic in #3707
• bug: Adding allow hidden flag while looking up for manifests (PROJQUAY-8536) by @deshpandevlab in #3722
• billing: stop modifying subscription list that is being iterated over (PROJQUAY-8712) by @Marcusk19 in #3725
• nit: change ModelCard to Model Card (PROJQUAY-8716) by @kleesc in #3727
• chore: add test case for PROJQUAY-8712 (PROJQUAY-8712) by @Marcusk19 in #3728
• deps: bump gunicorn (PROJQUAY-8726) by @sayalibhavsar in #3731
• fix(ui): corrected pull column alignment in tag view (PROJQUAY-8623) by @sayalibhavsar in #3730
• healthchecks: Use httpGet for liveness and readiness probe checks (PROJQUAY-8747) by @Sunandadadi in #3743
• modelcard: Setting model card feature to false by default by @Sunandadadi in #3744
• operations: added ELB calculations to ALB based SLO timeseries (PROJQUAY-8508) by @deshpandevlab in #3747
• operations: corrected metric expression to span over all targets (PROJQUAY-8508) by @deshpandevlab in #3749
• operations: removing unused datasources (PROJQUAY-8508) by @deshpandevlab in #3750
• healthcheck: Make gunicorn health check timeout configurable (PROJQUAY-8757) by @Sunandadadi in #3746
• deploy: Adding graceful shutdown on pods (PROJQUAY-8760) by @Sunandadadi in #3753
• storage: Enable multipart upload for Google Cloud Storage (PROJQUAY-6862) by @ibazulic in #3748
• ui: render modelcard markdown tables (PROJQUAY-8680) by @kleesc in #3708
• marketplace: free tier integration for reconciler (PROJQUAY-5698) by @Marcusk19 in #3589
• db: moving get user repo permissions query to read replica (PROJQUAY-8792) by @Sunandadadi in #3772
• Revert "deploy: Adding graceful shutdown on pods (PROJQUAY-8760)" by @Sunandadadi in #3775
• Revert "healthcheck: Make gunicorn health check timeout configurable (PROJQUAY-8757)" by @Sunandadadi in #3774
• Revert "healthchecks: Use httpGet for liveness and readiness probe checks (PROJQUAY-8747)" by @Sunandadadi in #3776
• scripts: clean up old container in frontend build script (PROJQUAY-0000) by @Marcusk19 in #3777
• db: moving get user from username query to read replica (PROJQUAY-8792) by @Sunandadadi in #3773
• db: moving robot search query to read replica (PROJQUAY-8792) by @Sunandadadi in #3781
• reconciler: fix typo in exception type (PROJQUAY-0000) by @Marcusk19 in #3779
• chore: move github runners to ubuntu-22.04 (PROJQUAY-8805) by @Sunandadadi in #3783
• db: moving get sorted matching repos and find repos to garbage collect to read replica (PROJQUAY-8792) by @Sunandadadi in #3782
• bug: make changes to taghistory page to accept manually entered date (PROJQUAY-8633) by @sayalibhavsar in #3752
• db: revert get_namespace_user from read replica (PROJQUAY-8792) by @Sunandadadi in #3796
• db: moving robot search and find repo to garbage collect queries to read replica (PROJQUAY-8792) by @Sunandadadi in #3795
• reconciler: fix exception when user api is called with empty email (PROJQUAY-5698) by @Marcusk19 in #3798
• reconciler: Remove database calls for storing/changing web customer ids (PROJQUAY-0000) by @Marcusk19 in #3799
• gc: garbage collect manifests not targetted by any tags when deleting repository (PROJQUAY-8136) by @kleesc in #3797
• chore: update moment version in cdn (PROJQUAY-8781) by @jonathankingfc in #3766
• proxy: moving manifest check to after upstream manifest fetch (PROJQUAY-8536) by @bcaton85 in #3814
• dockerfile: dockerfile changes for konflux (PROJQUAY-8804) by @Marcusk19 in #3817
• db: optimize _get_user_repo_permissions to send to read replica (PROJQUAY-8839) by @syed in #3818
• logging: fix unreferenced variable from logging (PROJQUAY-8136) by @kleesc in #3819
• endpoints(v1/superuser/config): adding a full config dump for compliance reasons (PROJQUAY-4559) by @michaelalang in #3253
• utils(config/schema): updating schema for validation on /api/v1/superuser/config endpoint (PROJQUAY-4559) by @michaelalang in #3255
• config: Add feature flag for user events (PROJQUAY-8839) by @syed in #3830
• db: use iterator chain for _get_user_repo_permissions (PROJQUAY-8839) by @syed in #3822
• dockerfile: set GOPATH env var before running go build in dockerfile (PROJQUAY-8789) by @Marcusk19 in #3802
• Reverting PROJQUAY-8536 by @bcaton85 in #3833
• deploy: add anti-affinity for registry-proxy pods (PROJQUAY-8839) by @syed in #3838
• dashboard: removed unused panels from slo dashboard (PROJQUAY-8881) by @deshpandevlab in #3847
• deploy: add nodeselector to quay pods (PROJQUAY-8839) by @syed in #3851
• deploy: remove anti-affinitfy for registry proxy (PROJQUAY-8839) by @syed in #3852
• storage: Increase proxy JWT expiry to 10 minutes (PROJQUAY-8894) by @ibazulic in #3865
• util: Add opentelemetry support (PROJQUAY-8902) by @kleesc in #3863
• deps: updating angular to 1.6.4 (PROJQUAY-8781) by @bcaton85 in #3872
• tracing: default to using http/protobuf for otlp (PROJQUAY-8902) by @kleesc in #3878
• otel: fix dynatrace issue (PROJQUAY-8902) by @Marcusk19 in #3877
• migration: alter id column type for table manifestblob by @Sunandadadi in #3885
• migration: adding conditional check on manifestblob alter column type by @Sunandadadi in #3886
• deps: upgrading gevent (PROJQUAY-8938) by @bcaton85 in #3928
• cve: bumping cross-spawn to 6.0.6 and 7.0.6 (PROJQUAY-8210) by @de1987 in #3932
• build: add artifacts lockfile (PROJQUAY-8931) by @Marcusk19 in #3889
• proxycache(permissions): CVE-2025-4374 (PROJQUAY-8892) by @michaelalang in #3941
• build: rpm lock for konflux builds (PROJQUAY-8930) by @Marcusk19 in #3888
• chore: add systemName parameter to subscription create call (PROJQUAY-0000) by @Marcusk19 in #3955
• dockerfile: Fix permissions of passwd (PROJQUAY-8794) by @jonathankingfc in #3931
• chore: reconciler lock match frequency (PROJQUAY-8933) by @Marcusk19 in #3965
• deploy: Adding graceful shutdown on pods (PROJQUAY-8760) by @Sunandadadi in #3831
• build: move quay to python 3.12 (PROJQUAY-8800) by @syed in #3780
• build: Add rust build dependencies for cryptography (PROJQUAY-8804) by @Marcusk19 in #3954
• build: updating hack script for gathering python dependencies on konflux (PROJQUAY-8804) by @Marcusk19 in #3950
• ci: adding branch sync job by @bcaton85 in #3969
• ci: adding git fetch to sync branches ci job by @bcaton85 in #3970
• ci: configuring user by @bcaton85 in #3971
• ci: getting full commit history and adding additional logging by @bcaton85 in #3972
• ci: updating release pipeline to generate correct changelog by @bcaton85 in #3973
• app: Alert user if TESTING is not properly set (PROJQUAY-8123) by @ibazulic in #3343
• deploy: adding nodeselector for debug deployment (PROJQUAY-8954) by @Sunandadadi in #3974
• Adding separate requirements-build-osbs.txt file for build dependencies by @bcaton85 in #3997
• deps: updating cython and cffi by @bcaton85 in https://github....

What's Changed

• build: Konflux-3.12 (PROJQUAY-8968) by @Marcusk19 in #4015
• [redhat-3.12] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9091) by @aroyoredhat in #4114
• v3.12.11 Changelog Bump by @github-actions[bot] in #4124

Full Changelog: v3.12.10...v3.12.11

What's Changed

• [redhat-3.11] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9092) by @aroyoredhat in #4115
• v3.11.12 Changelog Bump by @github-actions[bot] in #4120

Full Changelog: v3.11.11...v3.11.12

What's Changed

• chore(deps): update konflux references by @red-hat-konflux[bot] in #3915
• [redhat-3.13] build: rpm lock for konflux builds (PROJQUAY-8930) by @openshift-cherrypick-robot in #3985
• [redhat-3.13] build: Add rust build dependencies for cryptography (PROJQUAY-8804) by @openshift-cherrypick-robot in #3980
• cherrypick: updating hack script for gathering python dependencies on konflux (PROJQUAY-0000) by @Marcusk19 in #3979
• [redhat-3.13] build: add artifacts lockfile (PROJQUAY-8931) by @openshift-cherrypick-robot in #3937
• [redhat-3.13] ci: Oci fix (PROJQUAY-0000) by @openshift-cherrypick-robot in #4026
• [redhat-3.13] dockerfile: set GOPATH env var before running go build in dockerfile (PROJQUAY-8789) by @openshift-cherrypick-robot in #4017
• [redhat-3.13] ci: fixing app type import (PROJQUAY-8991) by @openshift-cherrypick-robot in #4035
• build: Konflux 3.13 (PROJQUAY-8969) by @Marcusk19 in #4032
• [redhat-3.13] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9090) by @aroyoredhat in #4112
• v3.13.7 Changelog Bump by @github-actions[bot] in #4119

Full Changelog: v3.13.6...v3.13.7

What's Changed

• chore(deps): update konflux references by @red-hat-konflux[bot] in #3915
• [redhat-3.13] build: rpm lock for konflux builds (PROJQUAY-8930) by @openshift-cherrypick-robot in #3985
• [redhat-3.13] build: Add rust build dependencies for cryptography (PROJQUAY-8804) by @openshift-cherrypick-robot in #3980
• cherrypick: updating hack script for gathering python dependencies on konflux (PROJQUAY-0000) by @Marcusk19 in #3979
• [redhat-3.13] build: add artifacts lockfile (PROJQUAY-8931) by @openshift-cherrypick-robot in #3937
• [redhat-3.13] ci: Oci fix (PROJQUAY-0000) by @openshift-cherrypick-robot in #4026
• [redhat-3.13] dockerfile: set GOPATH env var before running go build in dockerfile (PROJQUAY-8789) by @openshift-cherrypick-robot in #4017
• [redhat-3.13] ci: fixing app type import (PROJQUAY-8991) by @openshift-cherrypick-robot in #4035
• build: Konflux 3.13 (PROJQUAY-8969) by @Marcusk19 in #4032
• [redhat-3.13] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9090) by @aroyoredhat in #4112
• v3.13.7 Changelog Bump by @github-actions[bot] in #4119

Full Changelog: v3.13.6...v3.13.7

What's Changed

• [redhat-3.10] proxycache(permissions): CVE-2025-4374 (PROJQUAY-8892) by @openshift-cherrypick-robot in #3963
• [redhat-3.10] build: Add rust build dependencies for cryptography (PROJQUAY-8804) by @openshift-cherrypick-robot in #3983
• cherrypick: updating hack script for gathering python dependencies on konflux (PROJQUAY-8804) by @Marcusk19 in #3989
• [redhat-3.10] build: add artifacts lockfile (PROJQUAY-8931) by @openshift-cherrypick-robot in #3934
• [redhat-3.10] build: rpm lock for konflux builds (PROJQUAY-8930) by @openshift-cherrypick-robot in #3995
• [redhat-3.10] dockerfile: set GOPATH env var before running go build in dockerfile (PROJQUAY-8789) by @openshift-cherrypick-robot in #4011
• deps: upgrading gevent (PROJQUAY-8938) by @bcaton85 in #4031
• ci: fixing app type import (PROJQUAY-8991) by @bcaton85 in #4038
• build: Konflux 3.10 (PROJQUAY-8960) by @Marcusk19 in #3990
• v3.10.12 Changelog Bump by @github-actions[bot] in #4093
• [redhat-3.10] deps: update pbkdf2 to version 3.1.3 (PROJQUAY-9093) by @aroyoredhat in #4116

Full Changelog: v3.10.11...v3.10.12