/orca/docs/changelog/Recent content in Virtual Registry Changelog on Varnish OrcaHugo -- gohugo.ioen-USWed, 17 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.13.1/Wed, 17 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.13.1/Released: 2026-06-17 Varnish version: 6.0.18r2 Artifact Firewall version: 0.3.2 Fixed Pass JFrog UI requests straight through, so flows like npm login --auth-type web are no longer misclassified as package requests and blocked./orca/docs/changelog/0.13.0/Tue, 16 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.13.0/Released: 2026-06-16 Varnish version: 6.0.18r2 Artifact Firewall version: 0.3.2 Added NuGet (V3) registry support: caching and Artifact Firewall enforcement, including under JFrog Artifactory virtual repos. Fixed Enforce Artifact Firewall rules when Orca fronts a JFrog Artifactory virtual repo (npm, pypi, maven). The Artifactory path prefix previously left the firewall with incorrect package coordinates, so denied packages were allowed./orca/docs/changelog/0.12.1/Sat, 13 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.12.1/Released: 2026-06-13 Varnish version: 6.0.18r2 Artifact Firewall version: 0.3.2 Added Added Virtual Registry options redirects.deny_unknown_hosts and redirects.extra_known_hosts to restrict /redirectz upstream hosts and transparent redirect targets to configured remotes and extras. Fixed Fixed /redirectz cache entries being keyed only on the path, so responses fetched from one upstream host could be served on requests targeting a different host at the same path./orca/docs/changelog/0.12.0/Thu, 11 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.12.0/Released: 2026-06-11 Varnish version: 6.0.18r2 Artifact Firewall version: 0.3.1 Added Added short-lived caching of GitHub GraphQL API (POST /graphql) query responses, keyed by request body. Schema introspection queries get a longer TTL, while mutations, subscriptions, and rateLimit queries bypass the cache. Added preserve_host option to remotes. When enabled, the original request Host header is forwarded to the remote while the connection still targets the remote url. Useful when a single backend routes internally on the Host./orca/docs/changelog/0.11.0/Wed, 03 Jun 2026 00:00:00 +0000/orca/docs/changelog/0.11.0/Released: 2026-06-03 Varnish version: 6.0.18r1 Artifact Firewall version: 0.3.1 Added Added support for caching Debian apt artifacts. Added disable_cache option to disable artifact caching on a per-registry basis. Added support for caching responses from the GitHub REST API on GitHub.com and GitHub Enterprise Server (GHES). This includes metadata endpoints, SHA-addressed git objects and source archives, and release-asset and Actions artifact downloads served via signed-blob redirects. Added HMAC signing of /redirectz URL matrix parameters, emitted as an additional ;sig=./orca/docs/changelog/0.10.0/Mon, 11 May 2026 00:00:00 +0000/orca/docs/changelog/0.10.0/Released: 2026-05-11 Varnish version: 6.0.17r3 Artifact Firewall version: 0.2.2 Added Added new Virtual Registry option cache_req_body_limit to set the maximum request body size to buffer for cacheable POSTs (e.g. git-upload-pack). Added Git URL cache key normalization. The URL part of Git cache keys is now lowercased and .git extension agnostic. Added Git request body cache key normalization. For small request bodies (<10k), agent and session-id telemetry attributes are excluded from the cache key./orca/docs/changelog/0.9.0/Tue, 21 Apr 2026 00:00:00 +0000/orca/docs/changelog/0.9.0/Released: 2026-04-21 Varnish version: 6.0.16r13 Added Added Supervisor packages and Orca Docker image for arm64. Added support for caching Git LFS objects. This includes rewriting LFS batch API download URLs to route through the Virtual Registry, where objects are cached as immutable content-addressed downloads. Added support for caching PHP/Composer artifacts. This includes rewriting absolute URLs in Composer manifests with the Virtual Registry base_url, enabling caching of both dist archive downloads and source repository clones./orca/docs/changelog/0.8.3/Mon, 13 Apr 2026 00:00:00 +0000/orca/docs/changelog/0.8.3/Released: 2026-04-13 Varnish version: 6.0.16r13 Added Added varnish-supervisor packages for Debian Trixie Added varnish-supervisor packages for RHEL 10 Fixed Fixed an issue where interrupting the supervisor during VCL loading would hang for 30 seconds before exiting./orca/docs/changelog/0.8.2/Mon, 23 Mar 2026 00:00:00 +0000/orca/docs/changelog/0.8.2/Released: 2026-03-23 Varnish version: 6.0.16r13 Added Added --validate flag which validates the config and exits. Added stricter config validation. Fixed Fixed missing support for custom CA server URLs. Fixed an issue where some parts of the configuration would ignore unknown fields instead of exiting with an error. Fixed an issue where NPM clients would revalidate their local manifest cache instead of using the new one sent by the Artifact Firewall./orca/docs/changelog/0.8.1/Thu, 12 Mar 2026 00:00:00 +0000/orca/docs/changelog/0.8.1/Released: 2026-03-12 Varnish version: 6.0.16r13 Added Added preparations for Artifact Firewall becoming generally available. Changed Setting base_url to either http:// or https:// without a domain now determines the scheme of client redirects. This is useful for deployments where the Virtual Registry is deployed behind a TLS terminating proxy, especially when preserve_subdomain is used for the Virtual Registry remotes./orca/docs/changelog/0.8.0/Thu, 05 Mar 2026 00:00:00 +0000/orca/docs/changelog/0.8.0/Released: 2026-03-05 Varnish version: 6.0.16r12 Added Added Cluster option (premium). Added dns_ttl option to remotes. This can be used to override the DNS resolution interval indicated by DNS records. Added routes option to virtual registries. A route is a glob pattern (fnmatch) that enables more flexible registry routing, where only subdomain-based routing was available before. The subdomain routing still has the highest order of precedence, with routes being matched against the Host header in order of appearance./orca/docs/changelog/0.7.1/Fri, 27 Feb 2026 00:00:00 +0000/orca/docs/changelog/0.7.1/Released: 2026-02-27 Varnish version: 6.0.16r12 Fixed Fixed an issue where some OCI uploads with Docker clients would fail due to an absolute POST redirect being rewritten with a different prefix than the initial challenge. This caused the Docker client to omit the Authorization header on subsequent PATCH requests, resulting in the upload being aborted with a 401 response. Absolute redirects from the registry are now rewritten as relative redirects. Fixed an issue where some base_url rewrites would not restore the original Host header on fetch to the remote./orca/docs/changelog/0.7.0/Mon, 23 Feb 2026 00:00:00 +0000/orca/docs/changelog/0.7.0/Released: 2026-02-23 Varnish version: 6.0.16r10 Added Added OTEL logs support via the otel.logs configuration block. Logs are exported to a configurable OTLP endpoint and do not require a license. Added configurable trace sampling via the otel.tracing.sampler configuration option. Supported samplers: always_on, always_off, traceidratio, parentbased_always_on, parentbased_always_off, parentbased_traceidratio. Ratio-based samplers accept an otel.tracing.sampler_arg value between 0.0 and 1.0. Added a cache invalidation yKeys for resource types. All objects now get a resource_manifest, resource_package or resource_other key./orca/docs/changelog/0.6.3/Wed, 17 Dec 2025 00:00:00 +0000/orca/docs/changelog/0.6.3/Released: 2025-12-17 Varnish version: 6.0.16r8 Fixed Loosen Varnish version license restrictions to ease installation from deb and rpm packages when a new version of varnish-plus is released. Each varnish-supervisor release targets a specific minimum version of Varnish, but it should be possible to use a newer version of varnish-plus than the minimum version./orca/docs/changelog/0.6.2/Mon, 01 Dec 2025 00:00:00 +0000/orca/docs/changelog/0.6.2/Released: 2025-12-01 Varnish version: 6.0.16r7 Fixed Fixed a syntax error in the VCL./orca/docs/changelog/0.6.1/Mon, 01 Dec 2025 00:00:00 +0000/orca/docs/changelog/0.6.1/Released: 2025-12-01 Varnish version: 6.0.16r7 Fixed Fixed the version for the embedded Virtual Registry license./orca/docs/changelog/0.6.0/Thu, 27 Nov 2025 00:00:00 +0000/orca/docs/changelog/0.6.0/Released: 2025-11-27 Varnish version: 6.0.16r7 Added Added support for persisted storage categories. Added optional book_size to tune the size of persisted storage books. Added default_ttl, default_grace, and default_keep options for Virtual Registries to override the global varnish.params with the same name. Like the global params, these only apply to responses that don’t have an explicit cache policy or Cache-Control header from the remote registry. Changed The configuration format for varnish./orca/docs/changelog/0.5.0/Fri, 14 Nov 2025 00:00:00 +0000/orca/docs/changelog/0.5.0/Released: 2025-11-14 Varnish version: 6.0.16r6 Added Improved cache policy for PyPi. *.whl, *.tar.gz, and *.zip objects are now cached indefinitely while */simple/* is explicitly treated as uncacheable. Fixed Files under /etc/varnish now has the correct varnish owner in Docker. Cache invalidation yKeys for registry name and package type are now created properly. Private repositories are no longer treated as public when the private repository caching feature is disabled./orca/docs/changelog/0.4.0/Tue, 04 Nov 2025 00:00:00 +0000/orca/docs/changelog/0.4.0/Released: 2025-11-04 Varnish version: 6.0.16r4 Added Initial release.