Skip to content

chore(deps): bump github.com/distribution/distribution/v3 from 3.1.0 to 3.1.1#37

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/github.com/distribution/distribution/v3-3.1.1
Closed

chore(deps): bump github.com/distribution/distribution/v3 from 3.1.0 to 3.1.1#37
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/github.com/distribution/distribution/v3-3.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps github.com/distribution/distribution/v3 from 3.1.0 to 3.1.1.

Release notes

Sourced from github.com/distribution/distribution/v3's releases.

v3.1.1

Welcome to the v3.1.1 release of registry!

This is a stable release

Please try out the release binaries and report any issues at https://github.com/distribution/distribution/issues.

Notable Changes

  • Fixes CVE-2026-41888
  • Bounds-check the file basename in PurgeUploads Walk callback
  • Add S3 Express One Zone support to the S3 storage driver (#4858)
  • Fix tag list endpoint in proxy mode (#4846)
  • Clamp oversized n query parameter in proxy mode instead of returning 400 (#4856)

See the full changelog below for the full list of changes.

What's Changed

New Contributors

Full Changelog: distribution/distribution@v3.1.0...v3.1.1

Commits
  • 9a8d98b chore(release): prepare for v3.1.1 release (#4864)
  • d3c0df9 chore(release): prepare for v3.1.1 release
  • e09ff10 Merge commit from fork
  • 8baf3e0 fix: prevent tag deletion when storage.delete.enabled is false
  • f3af4de fix(storage): bounds-check the file basename in PurgeUploads Walk callback (#...
  • 72c88bc fix(storage): bounds-check the file basename in PurgeUploads Walk callback
  • 1b5e226 feat(s3): add express zone one support to S3 driver (#4858)
  • afd2bf0 fix(proxy): clamp oversized n query param instead of returning 400 (#4856)
  • 835c1c5 feat(s3): add express zone one support to S3 driver
  • 0f3e627 build(deps): bump docker/bake-action from 7.0.0 to 7.1.0 (#4853)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 4, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 4, 2026

Codecov Report

❌ Patch coverage is 62.06897% with 110 lines in your changes missing coverage. Please review.
✅ Project coverage is 49.09%. Comparing base (bcfd7d4) to head (92c98b5).
⚠️ Report is 2 commits behind head on main.

Files with missing lines Patch % Lines
pkg/controller/token/token.go 61.77% 76 Missing and 10 partials ⚠️
pkg/controller/utils.go 71.42% 11 Missing and 5 partials ⚠️
boot.go 0.00% 6 Missing ⚠️
pkg/healthsrv/server.go 0.00% 1 Missing ⚠️
pkg/sshd/server.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main      #37      +/-   ##
==========================================
+ Coverage   47.84%   49.09%   +1.25%     
==========================================
  Files          34       35       +1     
  Lines        1555     1829     +274     
==========================================
+ Hits          744      898     +154     
- Misses        775      878     +103     
- Partials       36       53      +17     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

duanhongyi and others added 2 commits May 12, 2026 10:35
Bumps [github.com/distribution/distribution/v3](https://github.com/distribution/distribution) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/distribution/distribution/releases)
- [Commits](distribution/distribution@v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: github.com/distribution/distribution/v3
  dependency-version: 3.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/distribution/distribution/v3-3.1.1 branch from f58441f to 92c98b5 Compare May 12, 2026 02:36
@duanhongyi duanhongyi force-pushed the main branch 2 times, most recently from 4b8bb5b to b9e6bc8 Compare May 12, 2026 06:35
@duanhongyi duanhongyi closed this May 12, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 12, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/distribution/distribution/v3-3.1.1 branch May 12, 2026 06:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant