Issues

• docker: repeated and concurrent manifest misses hit every upstream every time

  enhancement
  getnora-io/nora#1192 · Filter by author devitway opened on Oct 29, 2026

• docker: an upstream 429 reaches the client as an empty 404

  bug
  getnora-io/nora#1191 · Filter by author devitway opened on Oct 29, 2026

• Debian Nora system service missing reload functionality

  bug
  getnora-io/nora#1190 · Filter by author majamee opened on Oct 28, 2026

• docker: a proxied manifest miss is a 404 with an empty body, docker prints unknown:

  bug
  getnora-io/nora#1189 · Filter by author devitway opened on Oct 28, 2026

• tls.ca_cert is not applied to the S3/GCS storage client

  enhancement
  getnora-io/nora#1186 · Filter by author devitway opened on Oct 27, 2026

• nora mirror: no subcommand for Go modules

  getnora-io/nora#1185 · Filter by author devitway opened on Oct 26, 2026

• nora mirror docker fails: references an absent blob/sub-manifest

  getnora-io/nora#1184 · Filter by author devitway opened on Oct 26, 2026

• nora mirror pip and cargo do not seed what an offline client needs

  getnora-io/nora#1183 · Filter by author devitway opened on Oct 26, 2026

• Downloads wait out the object store retries while the store is down

  getnora-io/nora#1182 · Filter by author devitway opened on Oct 26, 2026

• Shutdown does not wait for cache writes already started

  getnora-io/nora#1181 · Filter by author devitway opened on Oct 26, 2026

• npm: tarball links keep the public_url of the instance that wrote them

  getnora-io/nora#1180 · Filter by author devitway opened on Oct 26, 2026

• deps: tokio 1.53.3 (RUSTSEC-2026-0386)

  getnora-io/nora#1173 · Filter by author devitway opened on Oct 25, 2026

• Go UI browsing performs redundant sequential HEAD requests on S3

  getnora-io/nora#1172 · Filter by author dsred-dev opened on Oct 24, 2026

• cargo: follow-ups after 1.4.0 (stored upstream copies, release dates for published names, unreadable entries)

  getnora-io/nora#1163 · Filter by author devitway opened on Oct 20, 2026

• Terraform network mirror: cold-cache 404 for non-HashiCorp providers — archive URL falls back to releases.hashicorp.com before metadata is cached

  bug
  getnora-io/nora#1150 · Filter by author devitway opened on Oct 19, 2026

• npm: the query string is not forwarded upstream, so npm search through NORA fails

  getnora-io/nora#1148 · Filter by author devitway opened on Oct 17, 2026

• curation: revalidating cached metadata resets a release's age in NuGet (and likely pub, Conan, Cargo, Terraform, PyPI)

  getnora-io/nora#1146 · Filter by author devitway opened on Oct 17, 2026

• design: explicit curation.mode for proxy registries, and one definition per count (1.5.0)

  getnora-io/nora#1135 · Filter by author devitway opened on Oct 17, 2026

• Support Docker image repository paths with more than two levels

  enhancement
  getnora-io/nora#1115 · Filter by author chattytak opened on Oct 14, 2026
  1

• Allow retention rules to target prerelease versions by pattern

  enhancement
  getnora-io/nora#1097 · Filter by author ismorodin opened on Oct 13, 2026

• auth: accept an OIDC ID token as the Basic-auth password (docker login, twine, Maven)

  enhancement
  getnora-io/nora#1095 · Filter by author devitway opened on Oct 13, 2026

• raw: pull-through proxy per upstream, routed by path prefix

  getnora-io/nora#1065 · Filter by author kustov-vitalik opened on Oct 11, 2026

• npm proxy on object storage: every packument request reads the whole object; a 304 revalidation reads it twice and re-uploads it

  enhancement
  getnora-io/nora#1064 · Filter by author devitway opened on Oct 10, 2026

• design: answer npm audit without an upstream from a Dozor-compiled advisory file

  air-gapdiscussionenhancement
  getnora-io/nora#1056 · Filter by author devitway opened on Oct 10, 2026
  2

• ci: mirror the certified-OS base images and pin them by digest, instead of pulling vendor registries at release time

  getnora-io/nora#1050 · Filter by author devitway opened on Oct 4, 2026