Skip to content
This repository was archived by the owner on Jul 12, 2023. It is now read-only.

v0.31.0
Compare
Choose a tag to compare
@sethvargo sethvargo released this 21 Jun 20:28
· 206 commits to main since this release
v0.31.0
88cac72
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Changes since v0.30.0

Bug fixes

  • Fixes a bug where some successfully issued codes on bulk upload wouldn't appear in results CSV file. (#2135, @mikehelmick)

Security

  • Add SRI integrity hashes to custom css and javascript. SRI was already present for external assets, but this includes the check on internal assets as well. (#2134, @sethvargo)
  • Add alerts for when a Cloud Run service is deployed using breakglass (without Binary Authorization). Like the HumanAccessedSecret alert, there may be legitimate reasons for a human to perform this operation, but it should be carefully checked and audited. Due to eventual consistency, the initial Terraform apply may fail due to missing metric. After 5 minutes, you can run the Terraform apply again to converge. (#2143, @sethvargo)
  • Ensure all external links specify noopener and noreferrer. (#2147, @sethvargo)
  • Migrate from unsupported JWT library to supported JWT library (#2129, @mikehelmick)
  • Scrub phone numbers from user report log lines (#2119, @mikehelmick)

User-report

  • Allows for client side user-report throttling, indicating an appropriate error on the server. (#2130, @mikehelmick)
  • More customization and localization of user-report web view. (#2131, @mikehelmick)
  • Syncs web report learn more URL from the Google ENX application feed. (#2133, @mikehelmick)

Misc

  • Remove platform field from user-report API documentation. (#2132, @mikehelmick)
  • Print a log message at the error level when html/json/csv fails to marshal. (#2140, @sethvargo)
  • Delete statistics that are more than 30 days old. This retention period can be configured by setting STATS_MAX_AGE on the cleanup service. The minimum value is 7 days and the maximum retention period is 60 days. This replaces the existing KEY_SERVER_STATS_MAX_AGE variable. (#2122, @sethvargo)
  • Fix an issue where a realm chaff event might be recorded for the wrong date. (#2124, @sethvargo)
  • Make alerts and notices more prominent in the UI. (#2146, @sethvargo)

Dependencies

Added

  • github.com/checkpoint-restore/go-criu/v5: v5.0.0
  • github.com/golang-jwt/jwt: v3.2.1+incompatible
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.1.0

Changed

Removed

  • github.com/checkpoint-restore/go-criu/v4: v4.1.0
    pec: 1c3f411
  • github.com/opencontainers/selinux: v1.8.0
  • github.com/otiai10/copy: v1.2.0
  • github.com/otiai10/curr: v1.0.0
  • github.com/otiai10/mint: v1.3.1
  • github.com/seccomp/libseccomp-golang: v0.9.1
  • github.com/syndtr/gocapability: 42c35b4
  • github.com/tenntenn/modver: v1.0.1
  • github.com/tenntenn/text/transform: 7eef512
  • github.com/vishvananda/netlink: v1.1.0
  • github.com/vishvananda/netns: 0a2b9b5
  • github.com/willf/bitset: v1.1.11
  • gopkg.in/airbrake/gobrake.v2: v2.0.9
  • gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
  • gotest.tools/v3: v3.0.2
Assets 2
Loading