Setting the default host was implicitly handled in `normalizeHosts`; if
no hosts were provided, an empty entry was added to the list of hosts,
then passed through to `opts.ParseHost`, which handled an empty value
to set the default location (depending on TLS being enabled or XDG paths
to be used (when running with RootlessKit).
This patch makes the logic less magical:
- If no hosts are configured by the user (through CLI-flags or daemon.json),
then we append the default location.
- The handling for TLS listeners is open-coded for now; we need to decide
if we want to preserve this behavior (magically using TCP instead of a
unix-socket or named pipe if TLS is enabled).
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Explicitly reject multiple JSON documents in authentication payloads
instead of silently ignoring them. This helps notify users when the
authentication payload is incorrectly formatted.
Signed-off-by: hiroto.toyoda <hiroto.toyoda@dena.com>
Pull request 50956 (88adc28731) updated
various types in the API module from a string to a `netip.Prefix` or
`netip.Addr`. A side-effect of this was that zero values would no longer
be omitted, and instead marshaled as an empty string;
package main
import (
"encoding/json"
"fmt"
"net/netip"
)
type Foo struct {
OmitEmpty netip.Prefix `json:",omitempty"`
OmitZero netip.Prefix `json:",omitzero"`
}
func main() {
out, _ := json.Marshal(Foo{})
fmt.Println(string(out))
}
The above produces `{"OmitEmpty":""}`, not omitting the empty address.
This patch;
- updates most types to use `omitzero` instead of `omitempty`.
- adds explicit `json` names to fields.
There's one type remaining that uses `omitzero`, but it's generated by
go-swagger, which currently doesn't support `omitzero`; the `PortSummary.IP`;
335f60509f/api/types/container/port_summary.go (L12-L20)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Do not update "api" and "client" module dependencies. We keep dependency
versions low for these to stick with "MVS" (Minimum Version Selection);
https://research.swtch.com/vgo-mvs
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
The `/` is used as delimiter for the regex, so `/` literals
within the regex should ... probably be escaped.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Renovate supports JSON5 (https://json5.org), which allows comments
in JSON files.
Rename the file to be explicit about it being in JSON5 format.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
This release fixes GHSA-273p-m2cw-6833 and GHSA-4c4x-jm2x-pf9j. Note that this
drops support for fetching public keys via URL when querying the search API.
Vulnerability Fixes
- Handle malformed COSE and DSSE entries
- Drop support for fetching public keys by URL in the search index
Features
- Add support for a custom TLS config for clients (#2709)
full diff: https://github.com/sigstore/rekor/compare/v1.4.3...v1.5.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
