Issues

• Docker repositories: client setup commands on the repository page, as complete as npm's and NuGet's

  enhancement
  Feature

  forgepkg/forge#662 · Filter by author schmitch opened on Oct 29, 2026 · Backlog

• Admin → Repositories: the "…" row menu of the last rows is clipped inside the table and makes the table scroll

  bug
  Bug

  forgepkg/forge#661 · Filter by author schmitch opened on Oct 29, 2026 · Backlog

• Retention: manage policies on their own, one type per policy, and attach them to repositories

  enhancement
  Feature

  forgepkg/forge#660 · Filter by author schmitch opened on Oct 29, 2026 · Backlog

• Admin → Repositories: filter by format, as Browse does, with the filters kept in the URL

  enhancement
  Feature

  forgepkg/forge#657 · Filter by author schmitch opened on Oct 29, 2026 · Backlog

• Import a raw repository's files into a hosted raw repository

  enhancement
  Feature

  forgepkg/forge#656 · Filter by author schmitch opened on Oct 29, 2026 · 2.2.0

• npm guide: moving clients and their lockfiles from Nexus or Verdaccio, with replace-registry-host and omit-lockfile-registry-resolved

  documentation
  Task

  forgepkg/forge#655 · Filter by author schmitch opened on Oct 29, 2026 · Backlog

• Set token lifetimes, Docker upload and blob expiry, group nesting depth and key rotation ages in Admin → Settings, and remove their configuration keys

  enhancement
  Feature

  forgepkg/forge#654 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Admin → Users: accept an invited user's invitation for them, with a password the administrator sets

  enhancement
  forgepkg/forge#653 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0
  

• Always serve the web UI: remove the web.enabled switch

  enhancement
  forgepkg/forge#652 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0
  

• Publishes and changes through a NuGet or npm group ignore the content selector on the caller's grant for the group; Docker pushes honor it

  bug
  Bug

  forgepkg/forge#651 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• npm audit through a group sends internal package names upstream: audits/quick, audits and nested groups' reserved prefixes are not filtered

  bugrelease blocker
  Bug

  forgepkg/forge#650 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Device authorization grant (RFC 8628): device and token endpoints and a /device approval page

  enhancement
  Feature

  forgepkg/forge#649 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Groups and content selectors: a reader sees only the members and packages they may read; raw listings name hidden entries in next

  bugrelease blocker
  Bug

  forgepkg/forge#648 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Auth realms: accept client passwords over HTTP Basic per realm, on for credential forwarding (Nexus), off otherwise

  enhancement
  Feature

  forgepkg/forge#647 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Retention: build policies from small keep and remove rules, with the size budget as one of them

  enhancement
  Feature

  forgepkg/forge#646 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Decide whether an import from a Nexus also reads Nexus' REST API for checksums, last downloads and uploaders

  enhancement
  Task

  forgepkg/forge#645 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Import an apt repository's packages into a hosted apt repository

  enhancement
  Feature

  forgepkg/forge#644 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Import an npm registry's packages into a hosted npm repository

  enhancement
  Feature

  forgepkg/forge#643 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Import through the format's own protocol (a NuGet feed, a registry's catalog) instead of Nexus' REST API, named neutrally

  enhancementrelease blocker
  Feature

  forgepkg/forge#642 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Proxies: pass the upstream's vulnerability data on (NuGetAudit, npm audit), with a switch per repository

  enhancement
  Feature

  forgepkg/forge#635 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Telemetry: OTEL_EXPORTER_OTLP_CERTIFICATE and the client-certificate variables are ignored, so a Collector that requires mTLS cannot be used

  enhancement
  forgepkg/forge#614 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Settings: a 2.0.0 install's stored anonymous allowlist mode becomes off without a word in the log or the web UI

  enhancement
  forgepkg/forge#613 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Admin image delete: deleting a whole image with many manifests is one unbounded transaction that holds every row lock

  bug
  forgepkg/forge#612 · Filter by author schmitch opened on Oct 28, 2026 · 2.2.0

• Trusted-header realms: deleting and recreating a realm strands its user accounts, and nothing moves them to the new realm

  bug
  forgepkg/forge#611 · Filter by author schmitch opened on Oct 28, 2026 · Backlog

• Registry: behind a trusted-header realm's proxy, a Bearer that is no registry token is ignored on /v2, and the request runs as the account the headers name

  bug
  forgepkg/forge#610 · Filter by author schmitch opened on Oct 28, 2026 · Backlog