From 769f5fb01d04f5e52ec103836e3eee2d69a1ea49 Mon Sep 17 00:00:00 2001
From: devitway <devitway@gmail.com>
Date: Sun, 15 Mar 2026 21:50:14 +0000
Subject: [PATCH] docs: update CHANGELOG and README for v0.2.29 upstream auth

---
 CHANGELOG.md | 22 ++++++++++++++++++++++
 README.md    |  7 +++++++
 2 files changed, 29 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 10a6556..1cd4651 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,28 @@ All notable changes to NORA will be documented in this file.
 
 ---
 
+## [0.2.29] - 2026-03-15
+
+### Added / Добавлено
+- **Upstream Authentication**: All registry proxies now support Basic Auth credentials for private upstream registries
+- **Аутентификация upstream**: Все прокси реестров теперь поддерживают Basic Auth для приватных upstream-реестров
+  - Docker: `NORA_DOCKER_UPSTREAMS="https://registry.corp.com|user:pass"`
+  - Maven: `NORA_MAVEN_PROXIES="https://nexus.corp.com/maven2|user:pass"`
+  - npm: `NORA_NPM_PROXY_AUTH="user:pass"`
+  - PyPI: `NORA_PYPI_PROXY_AUTH="user:pass"`
+- **Plaintext credential warning**: NORA logs a warning at startup if credentials are stored in config.toml instead of env vars
+- **Предупреждение о plaintext credentials**: NORA логирует предупреждение при старте, если credentials хранятся в config.toml вместо переменных окружения
+
+### Changed / Изменено
+- Extracted `basic_auth_header()` helper for consistent auth across all protocols
+- Вынесен хелпер `basic_auth_header()` для единообразной авторизации всех протоколов
+
+### Removed / Удалено
+- Removed unused `DockerAuth::fetch_with_auth()` method (dead code cleanup)
+- Удалён неиспользуемый метод `DockerAuth::fetch_with_auth()` (очистка мёртвого кода)
+
+---
+
 ## [0.2.28] - 2026-03-13
 
 ### Fixed / Исправлено
diff --git a/README.md b/README.md
index f548506..0d8d060 100644
--- a/README.md
+++ b/README.md
@@ -173,6 +173,13 @@ nora migrate --from local --to s3
 | `NORA_RATE_LIMIT_GENERAL_BURST` | 200 | General burst size |
 | `NORA_SECRETS_PROVIDER` | env | Secrets provider (`env`) |
 | `NORA_SECRETS_CLEAR_ENV` | false | Clear env vars after reading |
+| `NORA_DOCKER_UPSTREAMS` | `https://registry-1.docker.io` | Docker upstreams (`url\|user:pass,...`) |
+| `NORA_DOCKER_PROXY_TIMEOUT` | 60 | Docker upstream timeout (seconds) |
+| `NORA_MAVEN_PROXIES` | `https://repo1.maven.org/maven2` | Maven upstreams (`url\|user:pass,...`) |
+| `NORA_NPM_PROXY` | `https://registry.npmjs.org` | npm upstream URL |
+| `NORA_NPM_PROXY_AUTH` | - | npm upstream auth (`user:pass`) |
+| `NORA_PYPI_PROXY` | `https://pypi.org/simple/` | PyPI upstream URL |
+| `NORA_PYPI_PROXY_AUTH` | - | PyPI upstream auth (`user:pass`) |
 
 ### config.toml