update version in examples and README

Author: rpardini

README.md

@@ -9,6 +9,11 @@
 A caching proxy for Docker; allows centralised management of (multiple) registries and their authentication; caches images from _any_ registry.
 Caches the potentially huge blob/layer requests (for bandwidth/time savings), and optionally caches manifest requests ("pulls") to avoid rate-limiting.
 
+### `0.7.0`: Updated July 1st, 2026
+
+- picks up updated nginx & alpine to fix a gazillion CVEs
+- merged a few PRs
+
 ### `0.6.5`: Updated late February 2025 for the "2nd Docker Apocalypse"
 
 Docker, Inc has announced a [2nd apocalypse](https://www.docker.com/blog/revisiting-docker-hub-policies-prioritizing-developer-experience/) for 1st of March'25 (it has [already been pushed back to April](https://www.theregister.com/2025/02/22/docker_hub_pull_limits/)).
@@ -71,7 +76,7 @@ for this to work it requires inserting a root CA certificate into system trusted
 ## master/:latest is unstable/beta
 
 - `:latest` and `:latest-debug` Docker tag is unstable, built from master, and amd64-only
-- Production/stable is `0.6.5`, see [0.6.5 tag on Github](https://github.com/rpardini/docker-registry-proxy/tree/0.6.5) - this image is multi-arch amd64/arm64
+- Production/stable is `0.7.0`, see [0.7.0 tag on Github](https://github.com/rpardini/docker-registry-proxy/tree/0.7.0) - this image is multi-arch amd64/arm64
 
 ## Also hosted on GitHub Container Registry (ghcr.io)
 
@@ -116,7 +121,7 @@ docker run --rm --name docker_registry_proxy -it \
        -p 0.0.0.0:3128:3128 -e ENABLE_MANIFEST_CACHE=true \
        -v $(pwd)/docker_mirror_cache:/docker_mirror_cache \
        -v $(pwd)/docker_mirror_certs:/ca \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 ### DockerHub auth
@@ -133,7 +138,7 @@ docker run --rm --name docker_registry_proxy -it \
        -v $(pwd)/docker_mirror_certs:/ca \
        -e REGISTRIES="registry.k8s.io gcr.io quay.io your.own.registry another.public.registry" \
        -e AUTH_REGISTRIES="auth.docker.io:dockerhub_username:dockerhub_password your.own.registry:username:password" \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 ### Simple registries auth (HTTP Basic auth)
@@ -161,7 +166,7 @@ docker run  --rm --name docker_registry_proxy -it \
        -v $(pwd)/docker_mirror_certs:/ca \
        -e REGISTRIES="reg.example.com git.example.com" \
        -e AUTH_REGISTRIES="git.example.com:USER:PASSWORD" \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 ### Google Container Registry (GCR) auth
@@ -184,7 +189,7 @@ docker run --rm --name docker_registry_proxy -it \
        -e AUTH_REGISTRIES_DELIMITER=";;;" \
        -e AUTH_REGISTRY_DELIMITER=":::" \
        -e AUTH_REGISTRIES="gcr.io:::_json_key:::$(cat servicekey.json);;;auth.docker.io:::dockerhub_username:::dockerhub_password" \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 ### Google Artifact Registry (GAR) auth
@@ -209,7 +214,7 @@ docker run --rm --name docker_registry_proxy -it \
        -e AUTH_REGISTRIES_DELIMITER=";;;" \
        -e AUTH_REGISTRY_DELIMITER=":::" \
        -e AUTH_REGISTRIES="us-east1-docker.pkg.dev:::_json_key:::$(cat servicekey.json);;;us-central1-docker.pkg.dev:::_json_key:::$(cat servicekey.json);;;auth.docker.io:::dockerhub_username:::dockerhub_password" \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 ### Kind Cluster
@@ -226,7 +231,7 @@ docker run --rm --name docker_registry_proxy -it \
        -p 0.0.0.0:3128:3128 -e ENABLE_MANIFEST_CACHE=true \
        -v $(pwd)/docker_mirror_cache:/docker_mirror_cache \
        -v $(pwd)/docker_mirror_certs:/ca \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 Now deploy your Kind cluster and then automatically configure the nodes with the following script :
@@ -255,7 +260,7 @@ wait $pids # Wait for all configurations to end
 docker run -d --name registry-proxy --restart=always \
 -v /tmp/registry-proxy/mirror_cache:/docker_mirror_cache \
 -v /tmp/registry-proxy/certs:/ca \
-rpardini/docker-registry-proxy:0.6.5
+rpardini/docker-registry-proxy:0.7.0
 
 export PROXY_HOST=registry-proxy
 export PROXY_PORT=3128
@@ -361,7 +366,7 @@ docker run --rm --name docker_registry_proxy -it
        -p 0.0.0.0:3128:3128 -e ENABLE_MANIFEST_CACHE=true \
        -v $(pwd)/docker_mirror_cache:/docker_mirror_cache \
        -v $(pwd)/docker_mirror_certs:/ca \
-       rpardini/docker-registry-proxy:0.6.5-debug
+       rpardini/docker-registry-proxy:0.7.0-debug
 ```
 
 - `DEBUG=true` enables the mitmweb proxy between Docker clients and the caching layer, accessible on port 8081

docs/compose/docker-compose.yml

@@ -2,7 +2,7 @@ version: '3.7'
 
 services:
   docker_registry_proxy:
-    image: rpardini/docker-registry-proxy:0.6.5 # Check and make sure this is the last released version
+    image: rpardini/docker-registry-proxy:0.7.0 # Check and make sure this is the last released version
     env_file: # This contains REGISTRIES and AUTH_REGISTRIES
       - ./secrets.env
     environment:

docs/kops/README.md

@@ -9,7 +9,7 @@ docker run --rm --name docker_registry_proxy -it \
        -p 0.0.0.0:3128:3128 -e ENABLE_MANIFEST_CACHE=true \
        -v $(pwd)/docker_mirror_cache:/docker_mirror_cache \
        -v $(pwd)/docker_mirror_certs:/ca \
-       rpardini/docker-registry-proxy:0.6.5
+       rpardini/docker-registry-proxy:0.7.0
 ```
 
 or you can run it from another cluster, maybe a management/observability one with provided yaml, in this case, you will need to change the following lines:

docs/kops/docker-registry-proxy.yaml

@@ -19,7 +19,7 @@ spec:
       serviceAccountName: default
       containers:
         - name: docker-registry-proxy
-          image: ghcr.io/rpardini/docker-registry-proxy:0.6.5
+          image: ghcr.io/rpardini/docker-registry-proxy:0.7.0
           imagePullPolicy: IfNotPresent
           env:
             - name: ENABLE_MANIFEST_CACHE