• feat(apikey): apikeyMaxLifetime caps the lifetime of API keys (#4690)latestno API changesDocs6a2e68c2026-11-10 21:29
• fix(apikey): refuse to create API keys with API key authentication (#4685)1Docsaa38f3f2026-11-10 19:41

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • POST/zot/auth/apikey
    • info

      added the non-success response with the status 403

• feat(api): accept digest-algorithm on blob upload POST (#4594)1Docs2c390b32026-10-27 06:41

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • POST/v2/{name}/blobs/uploads
    • info

      added the new optional query request parameter digest-algorithm

• fix(api): map storage Transient to 503, not client 404 (#4512)23Docsecb82392026-10-05 06:23

  Change detail

  23 changes across 13 operations

  AllBreakingWarningInfo

  • DELETE/v2/{name}/blobs/{digest}
    • info

      added the non-success response with the status 404

    • info

      added the non-success response with the status 405

    • info

      added the non-success response with the status 500

    • info

      added the non-success response with the status 503

  • GET/v2/{name}/blobs/{digest}
    • info

      added the non-success response with the status 400

    • info

      added the non-success response with the status 404

    • info

      added the non-success response with the status 500

  View all changes (23)
• fix(sync): surface on-demand upstream errors (#4507)2Docse04f56b2026-10-03 19:03

  Change detail

  2 changes across 2 operations

  AllBreakingWarningInfo

  • GET/v2/{name}/manifests/{reference}
    • info

      added the non-success response with the status 503

  • HEAD/v2/{name}/manifests/{reference}
    • info

      added the non-success response with the status 503

• feat(mgmt): expose allowAnonymousAccess in auth config (#4368)no API changesDocsd9dc30c2026-08-30 21:28
• perf: drop the index walk on blob Content-Type (#4350)no API changesDocsfe0679d2026-08-25 06:54
• v1.1.1no API changesDocs2026-07-17 12:27
• fix(api): align blob, manifest, and referrers handling with OCI conformance (#4165)6Docs3fa61042026-06-26 04:29

  No leveled API changes in this revision.

• fix(security): enhance timeout configurations and body size limits fo… (#3984)2Docs934b22d2026-04-26 19:23
• feat(auth): support OIDC RP-Initiated Logout (#3975)no API changesDocs8282aef2026-04-25 20:19
• fix(api): return 416 for bad upload range on PUT; fix GET upload Range at size zero (#3983)2Docs9ba59552026-04-20 05:24
• fix(security): limit API key creation body to 4 KiB (INPUT-2) (#3978)1Docseadc9b62026-04-18 17:39
• fix(security): limit manifest PUT body to 4 MiB (INPUT-1) (#3977)1Docs35c29b92026-04-17 20:10
• feat: support pushing multiple tags for a single manifest (#3885)2310Docsa5cc8ab2026-03-29 18:13
• chore: update image and dist specs to v1.1.1 (#3023)no API changesDocs2a4edde2025-03-13 08:06
• fix(oras)!: remove ORAS artifact references support (#2294)1Docs18235ca2024-03-06 20:16
• chore: update image-spec and dist spec to 1.1.0 (#2255)no API changesDocs4e5db842024-02-20 11:27
• fix(apikey): show api key configuration in mgmt API (#2138)no API changesDocscff74572023-12-14 17:54
• feat(cli): add command to interogate the server version and other details (#1709)no API changesDocs83f287d2023-11-22 17:25
• feat: use the "zot" namespace for the authentication url (#1947)44Docs7ce5a742023-10-20 12:30
• refactor: Reduce zb binary size (#1783)no API changesDocs48bf7f62023-09-13 07:28
• feat: upload cosign public key and notation certificates to cloud (#1744)1Docs5a3fac42023-09-08 07:03
• refactor(authz): use a struct for user access control info operations (#1682)1Docsc6b822f2023-09-01 18:13
• feat(apikey): added route to list user api keys (#1708)1Docs6926bdd2023-08-29 16:38
• feat(authn): add generic oidc and allow customizable name (#1691)no API changesDocs289acfa2023-08-24 09:33
• fix(ci/cd): detect uncommited swagger docs (#1724)no API changesDocsca290472023-08-23 16:21
• fix: swagger Makefile target broken on darwin (#1701)1Docse510df72023-08-15 20:07
• refactor(extensions)!: refactor the extensions URLs and errors (#1636)15Docs77149aa2023-08-02 18:58
• feat: upload certificates and public keys for verifying signatures (#1485)2Docs41b05c62023-07-06 11:57
• fix: removed quotation marks from enum in swagger docs (#1539)no API changesDocsaab14962023-06-20 12:32
• fix: added swagger doc generation for mgmt and userprefs (#1530)2Docsaa16c952023-06-19 17:43
• fix: referrers now appears in swagger generated docs (#1488)12Docs622dde92023-06-12 17:32
• fix: removed references to old dist-spec (#1128)no API changesDocs976ccfc2023-01-31 17:35
• Remove from Response header Range the 'bytes' stringno API changesDocs0f386f02022-06-29 08:12
• ext: use distribution spec route prefix for extension api233Docs36c96312022-02-24 20:31
• swagger: rename 'docs/' to 'swagger/'131516Docs8f3d7d32021-10-20 21:01

Revisions go back to the API's first capture.