Merge pull request #3909 from distribution/2.8.2-beta-release-notes

Add 2.8.2-beta.1 release notes

.mailmap

@@ -44,6 +44,8 @@ Thomas Berger <loki@lokis-chaos.de> Thomas Berger <tbe@users.noreply.github.com>
 Samuel Karp <skarp@amazon.com> Samuel Karp <samuelkarp@users.noreply.github.com>
 Justin Cormack <justin.cormack@docker.com>
 sayboras <sayboras@yahoo.com>
-CrazyMax <github@crazymax.dev>
 CrazyMax <github@crazymax.dev> <1951866+crazy-max@users.noreply.github.com>
-CrazyMax <github@crazymax.dev> <crazy-max@users.noreply.github.com>
+Hayley Swimelar <hswimelar@gmail.com>
+Jose D. Gomez R <jose.gomez@suse.com>
+Shengjing Zhu <zhsj@debian.org>
+Silvin Lubecki <31478878+silvin-lubecki@users.noreply.github.com>

releases/v2.8.2-beta.toml

@@ -0,0 +1,40 @@
+# commit to be tagged for new release
+commit = "HEAD"
+
+project_name = "registry"
+github_repo = "distribution/distribution"
+
+# previous release
+previous = "v2.8.1"
+
+pre_release = false
+
+preface = """\
+Welcome to the 2.8.2-beta.1 release of registry!
+
+The 2.8.2-beta.1 registry release fixes several security vulnerabilities.
+The Go runtime has been bumped to 1.19.
+
+See the changelog below for full list of changes.
+
+### Bugfixes
+
+* Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815))
+* Add code to handle pagination of parts. Fixes max layer size of 10GB bug ([#3893](https://github.com/distribution/distribution/pull/3893))
+
+### Runtime
+
+* Update to go1.19.9 ([#3908](https://github.com/distribution/distribution/pull/3908))
+* Dockerfile: update xx to v1.2.1 ([#3907](https://github.com/distribution/distribution/pull/3907))
+
+### Security
+
+* Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
+* Fix runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
+
+### Dependency Changes
+
+This release has no dependency changes
+
+Previous release can be found at [v2.8.1](https://github.com/distribution/distribution/releases/tag/v2.8.1)
+"""

version/version.go

@@ -8,7 +8,7 @@ var Package = "github.com/docker/distribution"
 // the latest release tag by hand, always suffixed by "+unknown". During
 // build, it will be replaced by the actual version. The value here will be
 // used if the registry is run after a go get based install.
-var Version = "v2.8.1+unknown"
+var Version = "v2.8.2-beta.1+unknown"
 
 // Revision is filled with the VCS (e.g. git) revision being used to build
 // the program at linking time.