Bump zot v2.1.22

[github-actions]

Bump zot test container

Update the value in the TestImages.java file

1 file(s) updated with "ghcr.io/project-zot/zot-minimal:v2.1.22": * src/test/java/land/oras/utils/TestImages.java

v2.1.22

## What's Changed
* ci: replace HELM_PUSH_TOKEN with App token and verified API commits by @andaaron in https://github.com/project-zot/zot/pull/4409
* chore(deps): bump the github-actions group with 6 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4411
* fix: set Strict-Transport-Security header on TLS responses by @ravi-ciroos in https://github.com/project-zot/zot/pull/4414
* chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in https://github.com/project-zot/zot/pull/4415
* fix(authn): avoid session CookieStore panic for anonymous UI clients by @andaaron in https://github.com/project-zot/zot/pull/4418
* fix: skip invalid repo dirs like lost+found during storage walks by @andaaron in https://github.com/project-zot/zot/pull/4419
* chore: fix dependabot alerts by @rchincha in https://github.com/project-zot/zot/pull/4424
* feat(sync): sparse multi-arch indexes with periodic platforms filter by @andaaron in https://github.com/project-zot/zot/pull/4410
* feat(auth): allow bearer with API keys and OIDC for humans by @matheuscscp in https://github.com/project-zot/zot/pull/4243
* ci: fix nightly by @andaaron in https://github.com/project-zot/zot/pull/4425
* chore(deps): bump the github-actions group with 4 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4426
* fix(zb): create and remove a dedicated temp dir for test blobs by @warisshaikh1 in https://github.com/project-zot/zot/pull/4428
* fix(storage): 404 when S3 dedupe stubs resolve to empty content by @andaaron in https://github.com/project-zot/zot/pull/4432
* chore: fix dependabot alerts by @rchincha in https://github.com/project-zot/zot/pull/4439
* chore: fix dependabot alerts by @rchincha in https://github.com/project-zot/zot/pull/4441
* fix(scanner): synchronize trivy scans by @rchincha in https://github.com/project-zot/zot/pull/4440
* fix(storage): repair equal-size corrupted manifests on re-upload by @Lcos-000 in https://github.com/project-zot/zot/pull/4443
* test(scanner): fix flaky concurrent ScanImage coalescing test by @andaaron in https://github.com/project-zot/zot/pull/4446
* fix(gc): validate cosign tag subject digest before use in removeReferrer by @rchincha in https://github.com/project-zot/zot/pull/4445
* fix(storage): keep digests pullable after last-tag overwrite (#4444) by @andaaron in https://github.com/project-zot/zot/pull/4447
* test: stabilize apikey expiry test by @andaaron in https://github.com/project-zot/zot/pull/4450
* fix(api): list tags after a last value that is not a tag by @omlahore in https://github.com/project-zot/zot/pull/4448
* chore(deps): bump the go-dependencies group with 12 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4458
* feat(sync): seed on-demand sync sessions with locally-stored blobs by @kwohlfahrt in https://github.com/project-zot/zot/pull/4420
* fix(api): return 404 when deleting a manifest in a missing repo by @omlahore in https://github.com/project-zot/zot/pull/4460
* fix(storage): list repositories after a last value that is not a repo by @omlahore in https://github.com/project-zot/zot/pull/4455
* fix(meta): avoid DeleteSignature panic when signature type is missing by @andaaron in https://github.com/project-zot/zot/pull/4459
* feat(sync): add onDemandInBackground for non-blocking on-demand sync by @andaaron in https://github.com/project-zot/zot/pull/4451
* feat: add zot healthcheck for distroless container probes by @andaaron in https://github.com/project-zot/zot/pull/4461
* chore(deps): bump github.com/containerd/containerd/v2 from 2.3.5 to 2.3.6 by @dependabot[bot] in https://github.com/project-zot/zot/pull/4462
* feat(server): notify systemd when ready by @andaaron in https://github.com/project-zot/zot/pull/4464
* fix(meta): update repo info when index manifests are added after the index by @rophy in https://github.com/project-zot/zot/pull/4470
* fix(storage): repair remote dedupe origin on manifest re-upload by @Lcos-000 in https://github.com/project-zot/zot/pull/4457
* fix(auth): never proxy local api keys to upstream token service by @matheuscscp in https://github.com/project-zot/zot/pull/4473
* fix(api): report the whole upload in the Range of a streamed PATCH by @omlahore in https://github.com/project-zot/zot/pull/4476
* fix(api): reject manifest pushes with an invalid path tag by @omlahore in https://github.com/project-zot/zot/pull/4475
* chore(deps): bump the github-actions group with 5 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4478
* fix(cve): don't read MetaDB inside the scan generator's FilterTags filter by @rophy in https://github.com/project-zot/zot/pull/4483
* test: hash test htpasswd credentials with the minimum bcrypt cost by @rophy in https://github.com/project-zot/zot/pull/4481
* fix(api): don't overflow the tags/list page end for a large n by @omlahore in https://github.com/project-zot/zot/pull/4489
* fix(storage): return an empty referrers index for a namespace without a repo by @omlahore in https://github.com/project-zot/zot/pull/4488
* test(stress): pull alpine from project GHCR instead of ECR Public by @andaaron in https://github.com/project-zot/zot/pull/4490
* test(gc): start the scheduler before stopping it in runSchedulerUntil by @rophy in https://github.com/project-zot/zot/pull/4494
* bug: treat cosign attestations as referrers, not signatures by @FStelzer in https://github.com/project-zot/zot/pull/4492
* test(race): fix race condition when running dynamodb tests by @andaaron in https://github.com/project-zot/zot/pull/4496
* fix(storage): keep remote dedupe origins from being emptied on rebuild by @andaaron in https://github.com/project-zot/zot/pull/4465
* fix(cli): don't ignore SIGCHLD, so child processes can be waited for by @cbirkhold in https://github.com/project-zot/zot/pull/4499
* fix(build): tag the image make docker-image builds by @omlahore in https://github.com/project-zot/zot/pull/4501
* chore(deps): bump the go-dependencies group with 10 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4503
* fix(storage): avoid remote-cache races during concurrent dedupe uploads by @andaaron in https://github.com/project-zot/zot/pull/4504
* fix(storage): classify driver errors as missing, transient, or permanent by @andaaron in https://github.com/project-zot/zot/pull/4474
* fix(meta): stop storing signature layers in MetaDB, verify from storage by @FStelzer in https://github.com/project-zot/zot/pull/4493
* fix: complete GC when repository metadata is absent by @mvanhorn in https://github.com/project-zot/zot/pull/4500
* test(metrics): disable dedupe in TestPopulateStorageMetrics by @andaaron in https://github.com/project-zot/zot/pull/4509
* fix(zb): treat unexpected EOF as a timeout-class failure by @andaaron in https://github.com/project-zot/zot/pull/4510
* fix(sync): surface on-demand upstream errors by @andaaron in https://github.com/project-zot/zot/pull/4507
* fix(storage): stop collapsing blob I/O to bare ErrBlobNotFound by @andaaron in https://github.com/project-zot/zot/pull/4505
* fix(zb): retry timeout-class errors on seed image uploads by @andaaron in https://github.com/project-zot/zot/pull/4511
* fix(api): map storage Transient to 503, not client 404 by @andaaron in https://github.com/project-zot/zot/pull/4512
* chore(deps): bump the github-actions group with 7 updates by @dependabot[bot] in https://github.com/project-zot/zot/pull/4516
* fix(api): return MANIFEST_BLOB_UNKNOWN for a manifest with a missing blob by @omlahore in https://github.com/project-zot/zot/pull/4515
* fix(storage): fail closed on GC, dedupe, and incomplete listings by @andaaron in https://github.com/project-zot/zot/pull/4514
* chore: bump zui version by @rchincha in https://github.com/project-zot/zot/pull/4519
* fix: improve input validation by @rchincha in https://github.com/project-zot/zot/pull/4521

## New Contributors
* @ravi-ciroos made their first contribution in https://github.com/project-zot/zot/pull/4414
* @warisshaikh1 made their first contribution in https://github.com/project-zot/zot/pull/4428
* @omlahore made their first contribution in https://github.com/project-zot/zot/pull/4448
* @kwohlfahrt made their first contribution in https://github.com/project-zot/zot/pull/4420
* @rophy made their first contribution in https://github.com/project-zot/zot/pull/4470
* @FStelzer made their first contribution in https://github.com/project-zot/zot/pull/4492
* @cbirkhold made their first contribution in https://github.com/project-zot/zot/pull/4499
* @mvanhorn made their first contribution in https://github.com/project-zot/zot/pull/4500

**Full Changelog**: https://github.com/project-zot/zot/compare/v2.1.21...v2.1.22

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!