Skip to content

Releases: mindersec/minder

v0.0.60

22 Aug 09:34
d32c80c
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/stacklok/frizbee from 0.1.0 to 0.1.1 by @dependabot in #4221
  • build(deps): bump github.com/charmbracelet/bubbles from 0.17.1 to 0.19.0 by @dependabot in #4224
  • Fix issue with missing evaluation results by @dmjb in #4226
  • Fix integer overflow lint errors by @dmjb in #4227
  • Enforce central entity ID in EEA and rule eval tables by @JAORMX in #4220
  • Generate default ID for properties, ensure the ID is not NULL by @jhrozek in #4228
  • Add owner flag validation during provider enrollment by @psekar in #4107
  • build(deps): bump bufbuild/buf-action from 1.0.0 to 1.0.1 by @dependabot in #4217
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.12.1 to 0.13.0 by @dependabot in #4223
  • build(deps): bump github.com/prometheus/client_golang from 1.20.0 to 1.20.1 by @dependabot in #4222
  • build(deps): bump github.com/golangci/golangci-lint from 1.60.1 to 1.60.2 in /tools by @dependabot in #4218
  • Bump go-feature-flag. by @blkt in #4230
  • Use central entities table for EEA logic by @JAORMX in #4229
  • Auto-generated DB schema update - 2024-08-21 16:17:39 by @github-actions in #4232
  • Add certificate definition to upload sigstore cert(s) from cosign by @evankanderson in #4235
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.27.0 to 3.28.1 by @dependabot in #4237
  • build(deps): bump github/codeql-action from 3.26.3 to 3.26.4 by @dependabot in #4238
  • build(deps): bump anchore/sbom-action from 0.17.1 to 0.17.2 by @dependabot in #4239
  • Make ruletype test token's viper path unique by @JAORMX in #4236

New Contributors

Full Changelog: v0.0.59...v0.0.60

v0.0.59

21 Aug 06:20
71af872
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #4094
  • build(deps): bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #4092
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.26.0 to 3.26.1 by @dependabot in #4093
  • build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #4096
  • build(deps): bump golang.org/x/tools from 0.23.0 to 0.24.0 in /tools by @dependabot in #4097
  • build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #4091
  • build(deps): bump github.com/bufbuild/buf from 1.35.1 to 1.36.0 in /tools by @dependabot in #4098
  • Use non-deprecated buf-action in CI by @eleftherias in #4100
  • Fix migrated column on rule evaluations by @dmjb in #4102
  • Disable additional buf commands in CI by @eleftherias in #4101
  • build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #4105
  • build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1 by @dependabot in #4104
  • Allow unmanaged attributes in KC for local dev by @eleftherias in #4106
  • Fix rule_instance_id column on rule_evaluations by @dmjb in #4103
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.26.1 to 3.27.0 by @dependabot in #4109
  • Initial implementation of GitLab provider by @JAORMX in #4088
  • build(deps): bump github.com/openfga/openfga from 1.5.7 to 1.5.8 by @dependabot in #4108
  • Populate evaluation history tables with old evaluations by @dmjb in #4065
  • Revert "Populate evaluation history tables with old evaluations (#4065)" by @dmjb in #4110
  • Use non-mock selectors in executor test by @eleftherias in #4111
  • Make go mock an explicit dependency in tools by @eleftherias in #4117
  • build(deps): bump github.com/openfga/cli from 0.5.1 to 0.5.2 in /tools by @dependabot in #4112
  • Change rule_evaluations upsert to set migrated to true by @dmjb in #4124
  • build(deps): bump github.com/go-viper/mapstructure/v2 from 2.0.0 to 2.1.0 by @dependabot in #4127
  • Update docusaurus to 3.5.1 by @eleftherias in #4121
  • Unescape quotes when retrieving selectors by @eleftherias in #4128
  • Add documentation for profile selectors by @eleftherias in #4120
  • Add central entities table with properties by @JAORMX in #4123
  • Auto-generated DB schema update - 2024-08-14 08:24:45 by @github-actions in #4131
  • build(deps): bump github.com/golangci/golangci-lint from 1.59.1 to 1.60.1 in /tools by @dependabot in #4140
  • Ensure ON DELETE is properly set for the central entities table by @JAORMX in #4133
  • Address linter issues coming from govet by @JAORMX in #4138
  • Delete repos from the central entities table by @JAORMX in #4132
  • Define own type around struct{} to work around linter warning by @jhrozek in #4148
  • Add CVE-2024-42473 to trivyignore by @JAORMX in #4139
  • build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.1 by @dependabot in #4141
  • build(deps): bump k8s.io/apimachinery from 0.30.3 to 0.31.0 by @dependabot in #4146
  • build(deps): bump github.com/docker/cli from 27.1.1+incompatible to 27.1.2+incompatible by @dependabot in #4145
  • build(deps): bump github/codeql-action from 3.26.0 to 3.26.1 by @dependabot in #4143
  • build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0 by @dependabot in #4142
  • Redo migration from PR #4065 by @dmjb in #4129
  • build(deps): bump k8s.io/client-go from 0.30.3 to 0.31.0 by @dependabot in #4144
  • build(deps-dev): bump @docusaurus/module-type-aliases from 3.5.1 to 3.5.2 in /docs by @dependabot in #4137
  • build(deps): bump @docusaurus/core from 3.5.1 to 3.5.2 in /docs by @dependabot in #4134
  • build(deps): bump github.com/openfga/openfga from 1.5.8 to 1.5.9 by @dependabot in #4147
  • Update no vulnerabilities message in PR review rule by @eleftherias in #4152
  • Create/Delete pull requests in central entities table by @JAORMX in #4150
  • Handle github repository transfer events. by @blkt in #4130
  • Fix the role verb wording in the template for the invite email by @rdimitrov in #4155
  • build(deps): bump github.com/openfga/openfga from 1.5.8 to 1.5.9 in /tools by @dependabot in #4156
  • Remove outdated architecture diagram by @mesembria in #4157
  • build(deps): bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 by @dependabot in #4159
  • build(deps): bump github/codeql-action from 3.26.1 to 3.26.2 by @dependabot in #4160
  • Persist artifacts in central entity table by @JAORMX in #4161
  • Calculate profile status based on evaluation history tables by @dmjb in #4149
  • Do a noop update when updating the entities table by @jhrozek in #4162
  • build(deps): bump github.com/styrainc/regal from 0.24.0 to 0.25.0 by @dependabot in #4174
  • build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 by @dependabot in #4177
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.27 to 1.27.28 by @dependabot in #4176
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.32.3 to 1.32.4 by @dependabot in #4175
  • Change profile/rule status queries to use evaluation history table by @dmjb in #4089
  • Provider properties interface by @jhrozek in #4151
  • Update docs with GitHub App permissions by @eleftherias in #4180
  • Check for non-empty length of previous metadata by @dmjb in #4182
  • Fix issue with Alert URLs for pull requests and artifacts by @dmjb in #4183
  • Update enhancement.yml by @dussab in #4185
  • build(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1 by @dependabot in #4188
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.21.0 to 2.22.0 by @dependabot in #4189
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.21.0 to 2.22.0 in /tools by @dependabot in #4194
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.32.4 to 1.33.0 by @dependabot in #4187
  • build(deps): bump mvdan.cc/gofumpt from 0.6.0 to 0.7.0 in /tools by @dependabot in #4192
  • build(deps): bump github.com/bufbuild/buf from 1.36.0 to 1.37.0 in /tools by @dependabot in #4193
  • build(deps): bump github.com/sigstore/sigstore-go from 0.5.1 to 0.6.0 by @dependabot in #4186
  • Revert profile/rule status queries to use evaluation history table by @rdimitrov in #4195
  • Store repo license again by @jhrozek in #4190
  • Move properties fetcher methods into Provider by @JAORMX in #4181
  • Add reference to central entities table in EEA by @JAORMX in #4191
  • Auto-generated DB schema update - 2024-08-19 14:41:17 by @github-actions in #4199
  • Allow nil receiver on Properties by @jhrozek in #4198
  • Use nil evaluation state if there is no previous evaluation by @dmjb in #4197
  • Reapply reverted commits by @dmjb in #4200
  • build(deps): bump github.com/charmbracelet/bubbletea from 0.26.6 to 0.27.0 by @dependabot in #4202
    ...
Read more

v0.0.58

06 Aug 15:16
7ada493
Compare
Choose a tag to compare

What's Changed

  • Add entity evaluation checkpoint to the database by @JAORMX in #4050
  • Add initial structures for entity checkpoints by @JAORMX in #4049
  • Auto-generated DB schema update - 2024-07-31 15:06:43 by @github-actions in #4053
  • Fix the AWS SES migration to sdk v2 by @rdimitrov in #4054
  • Change profile validation to enforce case insensitive unique rule names by @dmjb in #4056
  • Additional DB migrations needed for evaluation history switchover by @dmjb in #4055
  • Auto-generated DB schema update - 2024-08-01 14:29:15 by @github-actions in #4057
  • Drop rule_entity_id column from rule_evaluations by @dmjb in #4058
  • Auto-generated DB schema update - 2024-08-02 07:48:45 by @github-actions in #4060
  • Align role descriptions with the docs by @rdimitrov in #4062
  • Update the email template for invitations by @rdimitrov in #4064
  • Persist checkpoints in evaluation history db by @JAORMX in #4059
  • Use Keycloak v25 image for local development by @eleftherias in #4066
  • Revert "Persist checkpoints in evaluation history db" by @rdimitrov in #4067
  • Bump trusty client to [email protected] by @puerco in #4072
  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.2 to 4.44.3 in /tools by @dependabot in #4077
  • build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 by @dependabot in #4078
  • build(deps): bump github.com/google/cel-go from 0.20.1 to 0.21.0 by @dependabot in #4079
  • build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by @dependabot in #4080
  • Swapped order of roles in user management docs by @mesembria in #4074
  • Bump trusty-sdk to v0.2.1 by @eleftherias in #4082
  • Persist checkpoints in evaluation history db. Try 2 by @JAORMX in #4083
  • build(deps): bump github.com/open-policy-agent/opa from 0.67.0 to 0.67.1 by @dependabot in #4086
  • Add integration tests for ListEvaluationHistory. by @blkt in #4076
  • Add missing column to history log tests' fixtures. by @blkt in #4087
  • build(deps): bump github.com/sqlc-dev/sqlc from 1.26.0 to 1.27.0 in /tools by @dependabot in #4085

Full Changelog: v0.0.57...v0.0.58

v0.0.57

31 Jul 11:57
84efc7e
Compare
Choose a tag to compare

What's Changed

  • Auto-generated cli documentation update - 2024-07-18 14:17:31 by @github-actions in #3931
  • Allow authenticated users without Minder projects to accept credentials by @evankanderson in #3909
  • Rename comment to description in profile's selector message by @jhrozek in #3919
  • build(deps): bump mobx from 6.13.0 to 6.13.1 in /docs by @dependabot in #3935
  • Add the protobuf message and the selector API by @jhrozek in #3797
  • Add from/to filters to minder history list. by @blkt in #3928
  • Fix entity id in ListEvaluationHistory RPC. by @blkt in #3933
  • Auto-generated cli documentation update - 2024-07-19 10:39:44 by @github-actions in #3937
  • Sizes of cursors and pages are integers in REST. by @blkt in #3938
  • Remove unnecessary type conversion causing errors. by @blkt in #3939
  • Trim quotes when returning selector comments by @jhrozek in #3940
  • Add tests to evaluation log entries conversion. by @blkt in #3941
  • Use rule instance table in executor by @dmjb in #3899
  • Make selectors available in mindev by @jhrozek in #3943
  • Add a DB function to delete all selectors for a profile by @jhrozek in #3942
  • Expand profile handlers with selector support by @jhrozek in #3944
  • build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #3945
  • Respect the action overrides by @dmjb in #3946
  • Default security advisory alerts to Off by @dmjb in #3947
  • Ensure role exists before we try to remove the role assignment by @rdimitrov in #3949
  • Remove unused function and its tests. by @dmjb in #3951
  • Remove even more unused code by @dmjb in #3952
  • build(deps): bump github.com/bufbuild/buf from 1.34.0 to 1.35.0 in /tools by @dependabot in #3955
  • build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @dependabot in #3960
  • build(deps): bump bufbuild/buf-setup-action from 1.34.0 to 1.35.0 by @dependabot in #3959
  • build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 by @dependabot in #3958
  • build(deps): bump github.com/docker/cli from 27.0.3+incompatible to 27.1.0+incompatible by @dependabot in #3956
  • Remove unused SQL query ListProfilesByProjectID by @dmjb in #3954
  • Add evaluation id to ListEvaluationHistory RPC. by @blkt in #3950
  • Remove use of entity_profile_rules table by @dmjb in #3905
  • Fix ListEvaluationHistory RPC faulty navigation to next page. by @blkt in #3967
  • Align sort inversion with pagination direction. by @blkt in #3968
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.1 by @dependabot in #3970
  • Decouple from/to filtering in history log RPC. by @blkt in #3929
  • Log evaluation history by default by @dmjb in #3973
  • Add docs for user management and invitations (#3837) by @rdimitrov in #3972
  • Enable history log rpc. by @blkt in #3974
  • build(deps): bump github.com/docker/cli from 27.1.0+incompatible to 27.1.1+incompatible by @dependabot in #3969
  • build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.31.1 to 1.31.2 by @dependabot in #3957
  • Update openfga's entity_reconcile and remote_repo_get to require the editor role by @rdimitrov in #3977
  • build(deps): bump github.com/aws/aws-sdk-go from 1.55.1 to 1.55.2 by @dependabot in #3981
  • build(deps): bump bufbuild/buf-setup-action from 1.35.0 to 1.35.1 by @dependabot in #3982
  • build(deps): bump github.com/bufbuild/buf from 1.35.0 to 1.35.1 in /tools by @dependabot in #3985
  • build(deps): bump github.com/stacklok/frizbee from 0.0.20 to 0.1.0 by @dependabot in #3984
  • Accept filters multiple times in history list. by @blkt in #3979
  • Auto-generated cli documentation update - 2024-07-25 09:00:27 by @github-actions in #3986
  • Add entity_type column to evaluation_rule_entities by @dmjb in #3980
  • build(deps): bump github.com/sigstore/sigstore-go from 0.4.0 to 0.5.1 by @dependabot in #3983
  • Auto-generated DB schema update - 2024-07-25 09:17:38 by @github-actions in #3989
  • Remove migration_profile_backfill_log table by @dmjb in #3990
  • Auto-generated DB schema update - 2024-07-25 09:35:43 by @github-actions in #3991
  • Log errors from history service by @dmjb in #3992
  • Disambiguate entity type in history log query. by @blkt in #3994
  • Add profile ID to latest_evaluation_statuses by @dmjb in #3993
  • Auto-generated DB schema update - 2024-07-25 11:51:22 by @github-actions in #3997
  • Change selectors.New to not return an error by @jhrozek in #3995
  • Add rule_entity_id to rule_evaluations by @dmjb in #3999
  • Add PullRequest as available entity for selectors by @jhrozek in #4000
  • Auto-generated DB schema update - 2024-07-25 13:55:48 by @github-actions in #4001
  • Add history purge command to minder server cli. by @blkt in #3976
  • Add more context around repo lookup failures by @dmjb in #4002
  • build(deps): bump github.com/aws/aws-sdk-go from 1.55.2 to 1.55.3 by @dependabot in #4006
  • build(deps): bump github.com/open-policy-agent/opa from 0.66.0 to 0.67.0 by @dependabot in #4005
  • build(deps): bump sigs.k8s.io/release-utils from 0.8.3 to 0.8.4 by @dependabot in #4007
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.21.0 by @dependabot in #4008
  • build(deps): bump github/codeql-action from 3.25.13 to 3.25.14 by @dependabot in #4009
  • Return structured errors from the selectors API by @jhrozek in #3998
  • Update local Keycloak image to match deployed config by @eleftherias in #4011
  • Take selectors into use in executor by @jhrozek in #4004
  • Log errors when listing repositories by @dmjb in #4020
  • Re-apply #4010 by @evankanderson in #4019
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.0 to 2.1.1 by @dependabot in #4025
  • build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 by @dependabot in #4023
  • Add severity to rule in ListEvaluationHistory RPC. by @blkt in #4014
  • build(deps): bump github.com/openfga/openfga from 1.5.6 to 1.5.7 by @dependabot in #4024
  • build(deps): bump github.com/fergusstrange/embedded-postgres from 1.27.0 to 1.28.0 by @dependabot in #4026
  • Surface selector check errors to handlers by @jhrozek in #4021
  • Add converter for PR selector by @eleftherias in #4028
  • Extend test cases for selectors with multivalued selections by @jhrozek in #4022
  • Drop entity_profile_rules table by @dmjb in #3963
  • Auto-generated DB schema update - 2024-07-29 12:38:06 by @github-actions in #4030
  • Backfill entity_type in evaluation_rule_entities by @dmjb in #3996
  • Add GetProfileByName RPC by @JAORMX in #4029
  • Backfill latest_evaluation_statuses with profile_id by @dmjb in #4031
  • Auto-generated cli documentation update - 2024-07-29 16:19:31 by @github-actions in #4032...
Read more

v0.0.56

18 Jul 11:59
409ac76
Compare
Choose a tag to compare

What's Changed

  • Remove deduplication logic in evaluation history by @dmjb in #3893
  • Use project as targeting key, propagate message context through entity evaluation by @evankanderson in #3827
  • Require entity-type in profile status get to avoid permafail by @puerco in #3868
  • build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 by @dependabot in #3896
  • build(deps): bump slsa-framework/slsa-verifier from 2.5.1 to 2.6.0 by @dependabot in #3897
  • build(deps): bump anchore/sbom-action from 0.16.1 to 0.17.0 by @dependabot in #3898
  • Auto-generated DB schema update - 2024-07-15 18:32:14 by @github-actions in #3894
  • Cache RuleTypeEngine instances in Executor by @dmjb in #3741
  • Add tests for UpdateRole by @eleftherias in #3902
  • Show where roadmap is and how to request a feature by @lukehinds in #3900
  • Move ActionOpt types into a subpackage of profiles by @dmjb in #3901
  • Use simpler query to determine if rule type is in use by @dmjb in #3903
  • Use rule_instances table in CountProfilesByEntityType query by @dmjb in #3904
  • Add tests for RemoveRole by @eleftherias in #3907
  • build(deps): bump github.com/styrainc/regal from 0.23.1 to 0.24.0 by @dependabot in #3911
  • build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #3910
  • Don't require the provider name when auto-enrolling repositories by @jhrozek in #3906
  • Updates the Install Minder Server documentation by @mesembria in #3880
  • Don't URL escape the package name when getting versions by @JAORMX in #3915
  • Add tests for AssignRole by @eleftherias in #3912
  • Upgrade go-github to v63 by @JAORMX in #3916
  • Removed option from minder history list. by @blkt in #3917
  • Fix potential race condition in rule type engine cache by @dmjb in #3918
  • build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 by @dependabot in #3920
  • build(deps): bump styled-components from 6.1.11 to 6.1.12 in /docs by @dependabot in #3921
  • build(deps): bump k8s.io/client-go from 0.30.2 to 0.30.3 by @dependabot in #3922
  • build(deps): bump github.com/openfga/openfga from 1.5.5 to 1.5.6 by @dependabot in #3924
  • Fix typos in documentation by @eleftherias in #3926
  • Add support for cursors to minder history list. by @blkt in #3925
  • Add format output for role grant and update by @rdimitrov in #3930

New Contributors

Full Changelog: v0.0.55...v0.0.56

v0.0.55

15 Jul 12:42
3be7c67
Compare
Choose a tag to compare

What's Changed

  • Update openfga entity_reconcile to require the admin role by @rdimitrov in #3818
  • build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /tools by @dependabot in #3820
  • build(deps): bump anchore/sbom-action from 0.16.0 to 0.16.1 by @dependabot in #3821
  • build(deps): bump actions/setup-node from 4.0.2 to 4.0.3 by @dependabot in #3822
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.16 to 1.54.17 by @dependabot in #3824
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.25.1 to 3.26.0 by @dependabot in #3825
  • build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.31.0 to 1.31.1 by @dependabot in #3823
  • Fix project creation conflict during user creation by @rdimitrov in #3815
  • Regenerate minder authz by @jhrozek in #3828
  • GetProfileByProjectAndID includes selectors by @jhrozek in #3833
  • Add First and Last name to the user identity object by @rdimitrov in #3832
  • Added ListEvaluationHistory RPC implementation. by @blkt in #3784
  • Artifact tag matcher: Curb complexity when parsing regexps from user input by @puerco in #3836
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.17 to 1.54.18 by @dependabot in #3845
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.11.0 to 0.11.1 by @dependabot in #3844
  • build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #3841
  • Sort the authz roles in ListRoles response by @rdimitrov in #3857
  • Extend the db-to-pb profile code to include selectors by @jhrozek in #3854
  • Add a flag for informing if sending the email invite was skipped by @rdimitrov in #3859
  • Timestamps for evaluation statuses have time zone. by @blkt in #3858
  • CheckHealth RPC now logs error when failing. by @blkt in #3860
  • Use Version 2 config for sqlc.yaml by @dmjb in #3861
  • Fix issues with mapping of TIMESTAMPZ[] postgres type by @dmjb in #3863
  • Change ListEvaluationHistory to use default project ID by @dmjb in #3865
  • Move messages only used to generate Go structs out of minder.proto by @jhrozek in #3830
  • ListHistoryEvaluation filtering fixes. by @blkt in #3866
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.17.0 to 1.18.0 by @dependabot in #3871
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.11.1 to 0.12.0 by @dependabot in #3870
  • Add history list subcommand to CLI by @dmjb in #3867
  • Auto-generated cli documentation update - 2024-07-12 10:25:04 by @github-actions in #3872
  • ListEvaluationHistory now enforces max page size. by @blkt in #3873
  • Some prep work for further changes to the executor by @dmjb in #3874
  • Set the auto_registration.entities.repository.enabled option to true when calling repo register --all by @jhrozek in #3876
  • Replace several internal protobufs with Go structs by @dmjb in #3878
  • Wire new Release + SDLC Core Entities by @puerco in #3839
  • Print provider config in provider get, if any by @jhrozek in #3881
  • Track evaluation times in executor by @dmjb in #3882
  • Auto-generated cli documentation update - 2024-07-12 19:24:31 by @github-actions in #3883
  • Fix offline token command flags not working by @rdimitrov in #3879
  • Auto-generated cli documentation update - 2024-07-15 10:16:24 by @github-actions in #3888
  • build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #3887
  • build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.3.1 to 3.4.0 by @dependabot in #3886
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.12.0 to 0.12.1 by @dependabot in #3885
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.18 to 1.54.19 by @dependabot in #3884
  • Revert "Replace several internal protobufs with Go structs (#3878)" by @JAORMX in #3890
  • Add Execution ID in the executor's evaluation param logs by @JAORMX in #3889
  • Give metric attributes unique names by @dmjb in #3891
  • Fix remediation/alert counter by @dmjb in #3892

Full Changelog: v0.0.54...v0.0.55

v0.0.54

09 Jul 14:29
35760c7
Compare
Choose a tag to compare

What's Changed

  • Do not allow removing the last admin role of a project by @rdimitrov in #3715
  • Disable the assignRole functionality if User Management is enabled by @rdimitrov in #3714
  • Allow a user to remove their own role from a project by @rdimitrov in #3716
  • Store alert and remediation history by @dmjb in #3713
  • Reuse the previous invite code when updating an invitation by @rdimitrov in #3719
  • build(deps): bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #3729
  • docs: switch to npm by @ethomson in #3732
  • Update roadmap in documentation by @ethomson in #3733
  • Fix npm run serve example in the docs' README by @jhrozek in #3734
  • Add database table and methods for profile selectors by @jhrozek in #3731
  • Auto-generated DB schema update - 2024-06-27 21:26:09 by @github-actions in #3736
  • build(deps): bump github.com/open-policy-agent/opa from 0.65.0 to 0.66.0 by @dependabot in #3737
  • Define API structures for evaluation history by @dmjb in #3647
  • Split message handling logic out of Executor by @dmjb in #3730
  • Deduplicate event handler and executor unit tests by @dmjb in #3740
  • Documentation updates by @ethomson in #3738
  • Update documentation site to underline hyperlinks in content area by @ethomson in #3742
  • build(deps): bump github.com/openfga/cli from 0.5.0 to 0.5.1 in /tools by @dependabot in #3745
  • build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #3744
  • build(deps): bump mobx from 6.12.4 to 6.12.5 in /docs by @dependabot in #3743
  • Initial implementation of the invite email sending service by @rdimitrov in #3735
  • build(deps): bump github.com/docker/cli from 26.1.4+incompatible to 27.0.3+incompatible by @dependabot in #3754
  • build(deps): bump github.com/aws/aws-sdk-go from 1.53.21 to 1.54.12 by @dependabot in #3753
  • build(deps): bump redocusaurus from 2.1.0 to 2.1.1 in /docs by @dependabot in #3752
  • Add ProjectRoles field to GetUserResponse by @rdimitrov in #3755
  • Include the email template in the event message by @rdimitrov in #3756
  • Update the terms and privacy URLs in the invite email by @rdimitrov in #3760
  • Do not try to fill roles if project has none by @rdimitrov in #3761
  • build(deps): bump mobx from 6.12.5 to 6.13.0 in /docs by @dependabot in #3763
  • build(deps): bump go.opentelemetry.io/otel/metric from 1.27.0 to 1.28.0 by @dependabot in #3764
  • build(deps): bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 by @dependabot in #3765
  • build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #3766
  • build(deps): bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0 by @dependabot in #3768
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.27.0 to 1.28.0 by @dependabot in #3767
  • Use the correct org display name for invitations by @rdimitrov in #3769
  • Invite email: color and padding changes by @ethomson in #3771
  • Separate jwt functionality into its own package by @eleftherias in #3770
  • Show the subject display name along with the ID in minder role by @rdimitrov in #3772
  • Updates to the protocol documentation (and its generator) by @ethomson in #3747
  • build(deps): bump docker/build-push-action from 6.2.0 to 6.3.0 by @dependabot in #3776
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.52.0 to 0.53.0 by @dependabot in #3778
  • build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.27.0 to 1.28.0 by @dependabot in #3779
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.52.0 to 0.53.0 by @dependabot in #3781
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.12 to 1.54.14 by @dependabot in #3780
  • build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.30.0 to 1.31.0 by @dependabot in #3777
  • Add unit test for GetInviteDetails by @eleftherias in #3773
  • Consider the environment when generating the invite URLs by @rdimitrov in #3783
  • Validate the Auth URL by @lukehinds in #3787
  • Add the selector message to the protobuf by @jhrozek in #3785
  • Fix project display name when listing invitations by @eleftherias in #3788
  • Fix project display name when resolving invite by @eleftherias in #3789
  • Add unit tests for ListInvitations and ResolveInvitation by @eleftherias in #3790
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.49.0 to 0.50.0 by @dependabot in #3793
  • build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 by @dependabot in #3792
  • build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #3791
  • build(deps): bump golang.org/x/tools from 0.22.0 to 0.23.0 in /tools by @dependabot in #3798
  • build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #3801
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.14 to 1.54.15 by @dependabot in #3800
  • build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.2.0 to 3.3.1 by @dependabot in #3799
  • Extend the Profile List database calls to include selectors by @jhrozek in #3786
  • Increase CLI context timeout to 20s by @eleftherias in #3803
  • Bump minder to go 1.22.5 by @dmjb in #3804
  • build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by @dependabot in #3805
  • build(deps): bump sigs.k8s.io/release-utils from 0.8.2 to 0.8.3 by @dependabot in #3807
  • build(deps): bump github.com/aws/aws-sdk-go from 1.54.15 to 1.54.16 by @dependabot in #3808
  • build(deps): bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in #3809
  • build(deps): bump github.com/norwoodj/helm-docs from 1.13.1 to 1.14.2 in /tools by @dependabot in #3810
  • build(deps): bump github.com/stacklok/trusty-sdk-go from 0.1.0 to 0.1.1 by @dependabot in #3806
  • Fix broken documentation links by @eleftherias in #3811
  • Update error message when no project is specified by @eleftherias in #3813

Full Changelog: v0.0.53...v0.0.54

v0.0.53

26 Jun 10:43
cae4b26
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump mobx from 6.12.3 to 6.12.4 in /docs by @dependabot in #3622
  • Reconcile entity registration by @teodor-yanev in #3562
  • Upgrade to zitadel/oidc/v3 by @JAORMX in #3627
  • Add display name for permission roles and use it in ListRoles by @rdimitrov in #3629
  • Create an InviteService by @rdimitrov in #3628
  • Decouple Action Engine from Rule Type Engine by @dmjb in #3599
  • Take into account hierarchy when dealing with rule types by @JAORMX in #3626
  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.1 to 4.44.2 in /tools by @dependabot in #3631
  • build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3632
  • build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #3633
  • Add UpdateRole rpc and an expired flag to Invitations by @rdimitrov in #3600
  • Set evaluation errpr immediately after evaluation by @dmjb in #3635
  • Handle nil values from Trusty API by @eleftherias in #3638
  • build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #3640
  • build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #3639
  • build(deps): bump ko-build/setup-ko from 0.6 to 0.7 by @dependabot in #3641
  • build(deps): bump ws from 7.5.9 to 7.5.10 in /docs by @dependabot in #3642
  • build(deps): bump github.com/openfga/go-sdk from 0.4.0 to 0.5.0 by @dependabot in #3643
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.21 to 2.1.0 by @dependabot in #3644
  • Various changes to the eval history schema service by @dmjb in #3637
  • Auto-generated DB schema update - 2024-06-18 10:19:56 by @github-actions in #3646
  • Updating provider config by @jhrozek in #3468
  • Fall back to $XDG_CONFIG_PATH/minder/config.yaml when reading configuration by @JAORMX in #3645
  • Auto-generated cli documentation update - 2024-06-18 15:18:38 by @github-actions in #3648
  • build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1 by @dependabot in #3652
  • build(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 by @dependabot in #3653
  • build(deps): bump github.com/stacklok/frizbee from 0.0.19 to 0.0.20 by @dependabot in #3655
  • Bump go to v1.22.4 by @eleftherias in #3657
  • build(deps): bump github.com/openfga/openfga from 1.5.4 to 1.5.5 by @dependabot in #3654
  • Implement RPC endpoint to list child projects by @JAORMX in #3650
  • Add name validation for projects by @JAORMX in #3658
  • Implement set-project subcommand by @JAORMX in #3656
  • Auto-generated cli documentation update - 2024-06-19 14:16:14 by @github-actions in #3660
  • Add db queries related to the user_invites table by @rdimitrov in #3662
  • Store most recent evaluation time in dedicated column by @dmjb in #3661
  • Update make password-login to add an email and attributes by @rdimitrov in #3663
  • Auto-generated DB schema update - 2024-06-19 15:56:42 by @github-actions in #3664
  • Log evaluation history in new tables by @dmjb in #3659
  • Add email and is_accepted to invitation-related proto messages by @rdimitrov in #3665
  • Add function for generating user invites by @rdimitrov in #3667
  • Implement ListInvitations and ResolveInvitation APIs for UserService by @rdimitrov in #3666
  • Implement GetInviteDetails by @rdimitrov in #3668
  • Update the auth invite CLI commands by @rdimitrov in #3674
  • Update the project role CLI commands to support invitations by @rdimitrov in #3675
  • Auto-generated cli documentation update - 2024-06-19 21:49:04 by @github-actions in #3677
  • build(deps): bump github.com/openfga/cli from 0.4.1 to 0.5.0 in /tools by @dependabot in #3678
  • Update AssignRole, RemoveRole and add new UpdateRole handlers by @rdimitrov in #3672
  • Added minder provider update CLI command. by @blkt in #3676
  • Auto-generated cli documentation update - 2024-06-20 12:49:24 by @github-actions in #3679
  • Provider update should let back end infer the project ID by @jhrozek in #3680
  • build(deps): bump github.com/charmbracelet/bubbletea from 0.26.4 to 0.26.5 by @dependabot in #3683
  • build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2 by @dependabot in #3684
  • Add docs for provider auto-registration by @jhrozek in #3682
  • Add an --all flag to the repo-register command by @jhrozek in #3681
  • Auto-generated cli documentation update - 2024-06-21 10:35:53 by @github-actions in #3685
  • Remove path parameters from RemoveRole by @rdimitrov in #3686
  • Use URLEncoding instead of Std for base64 by @rdimitrov in #3687
  • build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0 by @dependabot in #3691
  • build(deps): bump bufbuild/buf-setup-action from 1.33.0 to 1.34.0 by @dependabot in #3692
  • build(deps): bump github.com/bufbuild/buf from 1.33.0 to 1.34.0 in /tools by @dependabot in #3694
  • build(deps): bump redocusaurus from 2.0.2 to 2.1.0 in /docs by @dependabot in #3695
  • build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.1.0 to 3.2.0 by @dependabot in #3693
  • Define evaluation metrics by @dmjb in #3688
  • Proto updates related to user management by @rdimitrov in #3696
  • Add helper functions for getting token and mail from context by @rdimitrov in #3697
  • Add helper functions for checking/setting invite expiration by @rdimitrov in #3698
  • Fix issue with multiple entity IDs by @dmjb in #3699
  • Move EngineContext outside of the engine package by @dmjb in #3701
  • Make invite command visible by @rdimitrov in #3702
  • Auto-generated cli documentation update - 2024-06-24 18:21:37 by @github-actions in #3704
  • build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @dependabot in #3705
  • build(deps): bump github.com/charmbracelet/bubbletea from 0.26.5 to 0.26.6 by @dependabot in #3706
  • Refactor UpdateRole and add display names to invite-related responses by @rdimitrov in #3689
  • Auto-generated cli documentation update - 2024-06-25 10:18:33 by @github-actions in #3707
  • Do not allow for users to self-resolve their own invitations by @rdimitrov in #3709
  • Do not return the invite code when listing role assignments and set display name defaults by @rdimitrov in #3710
  • Start using new eval history table by @dmjb in #3703

Full Changelog: v0.0.52...v0.0.53

v0.0.52

14 Jun 06:38
328e2a1
Compare
Choose a tag to compare

What's Changed

  • Trusty: Block on deprecated, expose provenance by @puerco in #3422
  • Update Trusty PR evaluator/ruletype documentation by @puerco in #3423
  • Add fuzz test for JQ eval by @AdamKorcz in #3445
  • Add fuzzer for github event parsers by @AdamKorcz in #3440
  • Add fuzz test for diff ingester parser by @AdamKorcz in #3441
  • add fuzz test for crypto package by @AdamKorcz in #3442
  • add fuzz test for authz package by @AdamKorcz in #3443
  • add fuzz test for auth package by @AdamKorcz in #3444
  • Add fuzz test for rego evaluator by @AdamKorcz in #3439
  • build(deps): bump bufbuild/buf-setup-action from 1.32.1 to 1.32.2 by @dependabot in #3453
  • build(deps): bump github.com/bufbuild/buf from 1.32.1 to 1.32.2 in /tools by @dependabot in #3452
  • Implement process for migrating keys and algorithms by @dmjb in #3435
  • Extend the GitHub App configuration with an autoRegistration object by @jhrozek in #3449
  • build(deps): bump github.com/open-feature/go-sdk from 1.11.0 to 1.12.0 by @dependabot in #3457
  • Make github webhook easier to extend with new events for auto registration. by @blkt in #3346
  • Add Makefile target to generate encryption key by @JAORMX in #3464
  • build(deps): bump github.com/charmbracelet/bubbletea from 0.26.3 to 0.26.4 by @dependabot in #3471
  • Events of type "repository" now avoid checking hook id. by @blkt in #3463
  • Remove algorithm from crypto config by @dmjb in #3467
  • Rerun make gen by @dmjb in #3472
  • Add cron jobs to helm chart to purge and rotate secrets by @JAORMX in #3460
  • Add db host CLI argument to newly included jobs by @JAORMX in #3474
  • Auto-generated helm documentation update - 2024-05-31 09:57:21 by @github-actions in #3475
  • Auto-generated helm documentation update - 2024-05-31 11:45:36 by @github-actions in #3473
  • User minder-config for secret cleanup/rotation jobs by @JAORMX in #3477
  • Use minder-config for rotation job by @JAORMX in #3479
  • Actually mount key directory in rotation job by @JAORMX in #3480
  • Add a workflow that checks if make gen was run by @rdimitrov in #3476
  • Log error when unable to fetch credentials by @jhrozek in #3481
  • Add extra debug logging for DB connection in minder-server by @dmjb in #3478
  • Use fallback key ID when key version is empty by @dmjb in #3482
  • build(deps): bump github.com/openfga/go-sdk from 0.3.7 to 0.4.0 by @dependabot in #3469
  • Webhook handler always logs contextual information. by @blkt in #3483
  • Add API endpoint definitions for Minder invitation flow by @evankanderson in #3450
  • Define rule instance table for Minder by @dmjb in #3459
  • Auto-generated DB schema update - 2024-05-31 14:56:09 by @github-actions in #3484
  • Run make gen by @JAORMX in #3487
  • build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #3497
  • build(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.21.0 by @dependabot in #3496
  • build(deps): bump github.com/itchyny/gojq from 0.12.15 to 0.12.16 by @dependabot in #3495
  • build(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 by @dependabot in #3494
  • Adjust the AutoRegistration protobuf message to be more FE friendly by @jhrozek in #3504
  • Update protoc and regenerate by @jhrozek in #3505
  • Consider project hierarchy in profile evaluation by @JAORMX in #3499
  • Bump docusaurus from 3.3.2 to 3.4.0 by @eleftherias in #3507
  • Add ContextV2 protobuf structure by @JAORMX in #3506
  • build(deps): bump github.com/go-viper/mapstructure/v2 from 2.0.0-alpha.1 to 2.0.0 by @dependabot in #3514
  • Validate config before provider creation by @jhrozek in #3513
  • build(deps): bump github.com/openfga/openfga from 1.5.3 to 1.5.4 by @dependabot in #3515
  • Switch the pinned action support to use the new frizbee version by @rdimitrov in #3465
  • Creating providers with config by @jhrozek in #3334
  • Recover from panics from the control plane by @JAORMX in #3519
  • Move profile and ruletype logic out of engine package by @dmjb in #3520
  • build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 by @dependabot in #3525
  • build(deps): bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by @dependabot in #3528
  • Move auth offline-token to a separate package by @rdimitrov in #3522
  • build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 by @dependabot in #3524
  • build(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @dependabot in #3526
  • build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #3527
  • build(deps): bump golang.org/x/tools from 0.21.0 to 0.22.0 in /tools by @dependabot in #3529
  • build(deps): bump github.com/deepmap/oapi-codegen/v2 from 2.1.0 to 2.2.0 in /tools by @dependabot in #3530
  • Add UserManagement feature flag by @rdimitrov in #3532
  • Webhook handler now processes installation_repositories events by @blkt in #3447
  • Validate provider config when creating the OAuth provider or the GitHub App provider. by @jhrozek in #3535
  • Add ClusterfuzzLite by @AdamKorcz in #3521
  • Replace unpinned actions with pinned action by @stacklokbot in #3537
  • User API: Add missing project display name and description by @puerco in #3451
  • Dual write rule instances to new and old tables by @dmjb in #3486
  • Change fuzzing test to avoid leaving files around by @dmjb in #3539
  • Remove the now-unused CreateGitHubOAuthProvider by @jhrozek in #3540
  • Check OpenID audience when validating token. by @evankanderson in #3541
  • build(deps): bump google/clusterfuzzlite from 82652fb49e77bc29c35da1167bb286e93c6bcc05 to 884713a6c30a92e5e8544c39945cd7cb630abcd1 by @dependabot in #3545
  • Marshall provider config back to JSON from parsed structures to strip extra keys by @jhrozek in #3544
  • build(deps): bump github.com/openfga/cli from 0.4.0 to 0.4.1 in /tools by @dependabot in #3547
  • Migrate existing rule instances into rule_instances table by @dmjb in #3534
  • Add database migration for the user_invites table by @rdimitrov in #3536
  • Minder CLI - New commands for auth invite - list, accept code and decline code by @rdimitrov in #3551
  • Auto-generated DB schema update - 2024-06-07 09:00:06 by @github-actions in #3553
  • build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #3554
  • Removes unneeded Registered field by @ChrisJBurns in #3563
  • build(deps): bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /tools by @dependabot in #3564
  • Delete profiles before deleting project by @dmjb in #3561
  • Define evaluation history schemas by @dmjb in #3565
  • Auto-generated DB schema update - 2024-06-10 11:34:39 by @github-actions in #3566
  • build(deps): bump github.com/sigstore/sigstore-go from 0.3.0 to 0.4.0 by @dependabot i...
Read more

v0.0.51

27 May 15:10
db00a0f
Compare
Choose a tag to compare

What's Changed

  • Remove versioner in favor of adding the function to the providers by @JAORMX in #3345
  • Improve error handling for GetCredentialStateForProvider by @dmjb in #3373
  • Update .goreleaser.yaml to fix a deprecation warning by @rdimitrov in #3375
  • Add provider store and provider manager code to create new providers by @jhrozek in #3377
  • Enhanced GitHub webhook handler tests. by @blkt in #3370
  • build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #3383
  • build(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 by @dependabot in #3384
  • Add new helm variables for new crypto config by @dmjb in #3378
  • Skip alerts if provider does not support it by @JAORMX in #3386
  • Add a CreateProvider rpc handler by @jhrozek in #3385
  • Add VerifyProviderTokenIdentity to the GitHubProviderService by @jhrozek in #3389
  • Pass configuration when enrolling a provider with a token by @jhrozek in #3388
  • build(deps): bump bufbuild/buf-setup-action from 1.32.0 to 1.32.1 by @dependabot in #3395
  • build(deps): bump github.com/bufbuild/buf from 1.32.0 to 1.32.1 in /tools by @dependabot in #3394
  • build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 in /tools by @dependabot in #3393
  • build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.26.0 to 1.27.0 by @dependabot in #3398
  • Fix data race in TestProviderManager_CreateFromConfig by @jhrozek in #3402
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.51.0 to 0.52.0 by @dependabot in #3399
  • Switch to AES-256-GCM encryption for secrets by @dmjb in #3356
  • Fix erroneous lookup in github webhook handler. by @blkt in #3403
  • Simplify crypto config structure by @dmjb in #3404
  • build(deps): bump github.com/styrainc/regal from 0.21.3 to 0.22.0 by @dependabot in #3405
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.51.0 to 0.52.0 by @dependabot in #3406
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.16.0 to 1.17.0 by @dependabot in #3407
  • build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #3409
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.26.0 to 1.27.0 by @dependabot in #3408
  • Trusty: Support blocking PRs through reviews by @puerco in #3392
  • Move provider OAuth config under server.Config by @jhrozek in #3410
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0 by @dependabot in #3415
  • build(deps): bump github.com/rs/zerolog from 1.32.0 to 1.33.0 by @dependabot in #3418
  • build(deps): bump github.com/goccy/go-json from 0.10.2 to 0.10.3 by @dependabot in #3416
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.48.0 to 0.49.0 by @dependabot in #3417
  • Further enhancing webhook handler tests. by @blkt in #3414
  • Bump go to v1.22.3 by @prezha in #3419
  • Fix packer tests by @prezha in #3421
  • Fix Makefiles by @prezha in #3420
  • build(deps): bump github.com/charmbracelet/bubbletea from 0.26.2 to 0.26.3 by @dependabot in #3424
  • build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 by @dependabot in #3425
  • build(deps): bump github.com/open-feature/go-sdk-contrib/providers/go-feature-flag from 0.1.36 to 0.1.37 by @dependabot in #3426
  • build(deps): bump github.com/golangci/golangci-lint from 1.58.2 to 1.59.0 in /tools by @dependabot in #3428
  • Fix reading fallback values for providers, set environment variables by @jhrozek in #3429
  • Rename the enroll flag from config to provider-config by @jhrozek in #3431
  • Auto-generated cli documentation update - 2024-05-27 11:50:47 by @github-actions in #3432
  • Branch Protection: Error out if an empty branch is given by @JAORMX in #3433
  • Actually return an error on branch protection get by @JAORMX in #3434
  • Branch protection remediation now uses default branch if none provided. by @blkt in #3436

Full Changelog: v0.0.50...v0.0.51