Skip to content

Releases: mindersec/minder

v0.0.20

08 Dec 09:03
0272289
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.5 to 1.25.6 by @dependabot in #1732
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.6 to 1.25.8 by @dependabot in #1768
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.4 to 1.3.5 by @dependabot in #1767
  • Remove KeyService API from Minder by @JAORMX in #1769
  • Remove revoke token functions by @JAORMX in #1770
  • Adds a bit more clarity to the getting started guide by @andresgalante in #1765
  • Auto-generated cli documentation update - 2023-11-29 11:14:55 by @github-actions in #1771
  • Extend the EvalParams interface to store ingestion result by @jhrozek in #1772
  • Make the pull-request remediator use git-go instead of plan GH API calls by @jhrozek in #1773
  • Add a gauge to count the quickstart profiles by @jhrozek in #1775
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.8 to 1.25.10 by @dependabot in #1778
  • build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #1777
  • Ignore /dist directory generated by goreleaser by @dio in #1785
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.5 to 1.3.7 by @dependabot in #1776
  • Don't double-comment on PRs by @jhrozek in #1786
  • Make sure each call to NewRand is initialized with a unique seed by @dio in #1787
  • build(deps-dev): bump @docusaurus/module-type-aliases from 3.0.0 to 3.0.1 in /docs by @dependabot in #1791
  • build(deps): bump github.com/stacklok/frizbee from 0.0.4 to 0.0.5 by @dependabot in #1788
  • build(deps): bump github.com/open-policy-agent/opa from 0.58.0 to 0.59.0 by @dependabot in #1789
  • Upgrade github-go and drop unused GH API by @jhrozek in #1792
  • Run go mod tidy to prune the old go-github version from go.mod and go.sum by @jhrozek in #1793
  • Modify mindev to have ruletype subcommand by @JAORMX in #1794
  • Introduce mindev ruletype lint command by @JAORMX in #1796
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.17 to 2.0.18 by @dependabot in #1800
  • build(deps): bump github.com/itchyny/gojq from 0.12.13 to 0.12.14 by @dependabot in #1801
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.7 to 1.3.8 by @dependabot in #1802
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.10 to 1.25.11 by @dependabot in #1799
  • Switch events configuration reference to English by @JAORMX in #1803
  • Adds commit lint to the CI by @andresgalante in #1784
  • README: add ko as a dependency for minder-server by @ethomson in #1809
  • build(deps): bump actions/checkout from 2 to 4 by @dependabot in #1811
  • build(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #1813
  • build(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1 by @dependabot in #1812
  • Remove commit lint job by @JAORMX in #1817
  • Rename Rule Type sub-commands to ruletype by @JAORMX in #1816
  • Auto-generated cli documentation update - 2023-12-05 11:09:02 by @github-actions in #1818
  • Add README to mindev command by @JAORMX in #1819
  • Simplify identity settings in config.yaml by @eleftherias in #1820
  • Auto-generated cli documentation update - 2023-12-05 10:36:13 by @github-actions in #1821
  • Add subcommand to apply profiles by @JAORMX in #1815
  • Auto-generated cli documentation update - 2023-12-05 12:40:25 by @github-actions in #1822
  • Rename groups to projects in comments and logs by @eleftherias in #1823
  • Simplify authorization and cleanup unused methods by @eleftherias in #1824
  • build(deps): bump golang from 1.21.4 to 1.21.5 by @dependabot in #1829
  • build(deps): bump github.com/styrainc/regal from 0.13.0 to 0.14.0 by @dependabot in #1828
  • Run tests in a silent mode (error only output) by @rdimitrov in #1830
  • Avoid attempting to lock deleted repos by @evankanderson in #1834
  • Avoid attempting to lock other deleted resources by @evankanderson in #1835
  • Set ProjectID for entities created during FlushAll by @evankanderson in #1838
  • build(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.0 by @dependabot in #1840
  • build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1856
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 by @dependabot in #1841
  • Remove eventer retry middleware and retrable error construct by @JAORMX in #1842
  • Remove org field and make req ctx fields optional by @teodor-yanev in #1831
  • Add username/password login, and better document setting up login in get-hacking by @evankanderson in #1861
  • Add CLI wrapper that passes in a default context and GRPC client by @JAORMX in #1857
  • build(deps): bump actions/stale from 8 to 9 by @dependabot in #1865
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 by @dependabot in #1864
  • Move common PreRun calls to cli wrapper by @JAORMX in #1866
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.8 to 1.3.9 by @dependabot in #1863

New Contributors

Full Changelog: v0.0.19...v0.0.20

v0.0.19

28 Nov 20:34
12b3c2a
Compare
Choose a tag to compare

What's Changed

  • Update README.md with quickstart screencast by @rdimitrov in #1697
  • Add option to set default selected choice for minder prompts by @rdimitrov in #1698
  • Use missingkey=error for text/template by @jhrozek in #1682
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 by @dependabot in #1701
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.20.0 to 1.21.0 by @dependabot in #1702
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.3 to 1.3.4 by @dependabot in #1700
  • build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 by @dependabot in #1699
  • Update the docs with the quickstart command by @rdimitrov in #1707
  • Remove unused empty file by @jhrozek in #1709
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 by @dependabot in #1713
  • build(deps): bump golang from 57bf74a to 4521f9d by @dependabot in #1712
  • build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #1711
  • Add PostgreSQL Messaging Pub/Sub Watermill by @teodor-yanev in #1680
  • Increase entropy of repo ID generation for tests by @JAORMX in #1717
  • Bump sqlc to 1.24.0 by @jhrozek in #1720
  • build(deps): bump golang from 4521f9d to 9baee0e by @dependabot in #1714
  • run go mod tidy by @jhrozek in #1723
  • Allow regex matching of artifacts with artifact ingester by @JAORMX in #1716
  • Return only the raw evaluation error message without prefix by @jhrozek in #1726
  • Use frizbee to add a new function ListGithubActions to the rego library by @jhrozek in #1725
  • Trigger documentation update only on release by @eleftherias in #1724
  • Update the stale action configuration by @rdimitrov in #1722
  • Add an optional violation_format to rego rules by @jhrozek in #1728
  • Add a yes flag to skip prompts for CLI commands by @hemakshis in #1730
  • Auto-generated cli documentation update - 2023-11-28 07:08:52 by @github-actions in #1731
  • build(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #1736
  • build(deps): bump mobx from 6.11.0 to 6.12.0 in /docs by @dependabot in #1738
  • build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #1734
  • build(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 in /tools by @dependabot in #1737
  • build(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 by @dependabot in #1733
  • Remove leftover branch protection API by @JAORMX in #1742
  • Tiny change to the quickstart guide by @andresgalante in #1763

New Contributors

Full Changelog: v0.0.18...v0.0.19

v0.0.18

20 Nov 12:45
82bdf69
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.0 to 0.46.1 by @dependabot in #1685
  • build(deps): bump go.opentelemetry.io/otel/sdk from 1.20.0 to 1.21.0 by @dependabot in #1688
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.10.0 to 1.11.0 by @dependabot in #1684
  • Upgrade otelgrpc to v0.46.1 by @jhrozek in #1689
  • Remove combined.yml from gitignore by @JAORMX in #1690
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 by @dependabot in #1692
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17 by @dependabot in #1691
  • build(deps): bump github.com/zitadel/oidc/v2 from 2.11.0 to 2.12.0 by @dependabot in #1693
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #1695
  • Update quickstart command message layout by @rdimitrov in #1696

Full Changelog: v0.0.17...v0.0.18

v0.0.17

16 Nov 16:05
59e7925
Compare
Choose a tag to compare

What's Changed

  • Remove trailing slash from rules-and-profiles entry in gitignore by @JAORMX in #1661
  • Re-introduce entity validation for rule types by @JAORMX in #1662
  • Add Validate check to our rule type tests by @JAORMX in #1663
  • Rename medev to mindev by @JAORMX in #1667
  • Downgrade otelgrpc to work around open-telemetry/opentelemetry-go-contrib#4547 by @jhrozek in #1668
  • Add trivyignore file with risk acceptance by @JAORMX in #1669
  • Add X-Forwarded-For to default logging by @JAORMX in #1670
  • build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools by @dependabot in #1672
  • Add support for sidecars to migrate and minder, add tests for same by @evankanderson in #1671
  • build(deps): bump golang from 81cd210 to 57bf74a by @dependabot in #1676
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/rds/auth from 1.3.2 to 1.3.3 by @dependabot in #1675
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.0 to 1.25.1 by @dependabot in #1674
  • build(deps): bump k8s.io/apimachinery from 0.28.3 to 0.28.4 by @dependabot in #1673
  • Use helm-docs to auto-generate documentation for our chart by @JAORMX in #1677
  • Add documentation for helm values by @JAORMX in #1678
  • Auto-generated helm documentation update - 2023-11-16 12:15:00 by @github-actions in #1679
  • Update package-lock.json parsing strategy by @eleftherias in #1666
  • Process entity events in exclusively and in parallel by @JAORMX in #1654
  • Auto-generated DB schema update - 2023-11-16 14:16:47 by @github-actions in #1681
  • Implement a quickstart command for minder by @rdimitrov in #1660
  • Auto-generated cli documentation update - 2023-11-16 17:40:44 by @github-actions in #1683

Full Changelog: v0.0.16...v0.0.17

v0.0.16

15 Nov 12:11
d8c9ae8
Compare
Choose a tag to compare

What's Changed

  • Set SIGSTORE_NO_CACHE=true in minder by @rdimitrov in #1611
  • Auto-generated cli documentation update - 2023-11-09 12:31:12 by @github-actions in #1612
  • Makes issue templates forms by @andresgalante in #1578
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.3 to 1.23.0 by @dependabot in #1613
  • Add switch to migrate up/down to do one step migration, add migrate version by @jhrozek in #1614
  • docs: adds prerequisites to the register a repo getting started page by @andresgalante in #1615
  • Adds a link to docs readme to contribution guidelines by @andresgalante in #1616
  • Convert owner name to lowercase when building container image reference by @JAORMX in #1617
  • Update README.md by @dussab in #1622
  • Add issuer_url for running minder outside of docker-compose by @rdimitrov in #1620
  • Return EvaluatioError, not generic error on finding vulnerable or low-scoring packages by @jhrozek in #1619
  • Implement profile update by @JAORMX in #1566
  • Auto-generated cli documentation update - 2023-11-13 13:48:59 by @github-actions in #1629
  • WIP: Upgrade otel dependencies by @jhrozek in #1628
  • Auto-generated DB schema update - 2023-11-13 13:48:59 by @github-actions in #1630
  • build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools by @dependabot in #1623
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.9.0 to 1.10.0 by @dependabot in #1627
  • build(deps): bump mobx from 6.10.2 to 6.11.0 in /docs by @dependabot in #1624
  • build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.19.0 to 1.20.0 by @dependabot in #1625
  • Add a stored procedure to handle entity deletions by @jhrozek in #1618
  • Normalize python package names before sending to OSV by @eleftherias in #1634
  • Link PRs with rule_evaluation_status properly by @jhrozek in #1635
  • build(deps): bump github.com/sigstore/cosign/v2 from 2.2.0 to 2.2.1 by @dependabot in #1585
  • build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.9.0 to 1.10.0 by @dependabot in #1637
  • build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.19.0 to 1.20.0 by @dependabot in #1640
  • build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.46.0 by @dependabot in #1638
  • build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #1639
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.23.0 to 1.24.0 by @dependabot in #1641
  • Log the full remediation and alert error by @jhrozek in #1643
  • Suggest smallest delta in PR vulnerability check by @eleftherias in #1632
  • Remove IsProtected for roles and projects and other authz functions by @rdimitrov in #1646
  • Auto-generated DB schema update - 2023-11-14 14:22:49 by @github-actions in #1647
  • Print project list as multiple rows in whoami subcommand by @JAORMX in #1648
  • Handle PR statuses when setting branch protection rules by @jhrozek in #1644
  • Print multiple projects in auth login subcommand by @JAORMX in #1649
  • Add a repository count gauge by @jhrozek in #1651
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.0 by @dependabot in #1656
  • Don't log skipping rules as errors by @jhrozek in #1658

Full Changelog: v0.0.15...v0.0.16

v0.0.15

09 Nov 10:48
925e7ba
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.0.14...v0.0.15

v0.0.14

06 Nov 15:53
ca84dd1
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.13...v0.0.14

v0.0.13

06 Nov 11:28
71f1c1e
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.12...v0.0.13

v0.0.12

05 Nov 15:24
9c3f815
Compare
Choose a tag to compare

What's Changed

  • Fix GitHub Actions deprecated warnings by @rdimitrov in #1463
  • Point CLI to production by default by @JAORMX in #1460
  • Make ingress annotations configurable by @JAORMX in #1467
  • Update README.md and other docs by @rdimitrov in #1468
  • Pass the staging/prod build tag through a Makefile env variable by @jhrozek in #1466
  • Reference the minder docs from a SA minder alert by @rdimitrov in #1469
  • Don't print informational values to stdout by @jhrozek in #1472
  • Don't reuse the configured Trusty http endpoint for the PR reply, use a constant instead by @jhrozek in #1473
  • Add pypi vulnerability check configuration to the example profile by @jhrozek in #1471

Full Changelog: v0.0.11...v0.0.12

v0.0.11

04 Nov 11:21
87281fe
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.10...v0.0.11