2.119.0

2.119.0

Release Date: September 05, 2025

Changes

• add flake attempts for the vizzini tests - Author: karthick udayakumar - SHA: d7d3c6c
• Remove broken URL from docs - Author: Maria Shaldybin - SHA: 7a7b7e6
• set enableDeclarativeHealthCheck always to true and change the order of lint/test - Author: kart2bc - SHA: ee99fe7
• fix locket property lint and order of test scripts - Author: kart2bc - SHA: 3ab696f
• Remove old property: locks.locket.enabled - Diego release - Author: kart2bc - SHA: f79d2d0
• cleanup rep require tls property - Author: kart2bc - SHA: e9255ab
• Remove old property: bpm.enabled in diego-release - Author: kart2bc - SHA: 1ad0faf

Changes for 'cnbapplifecycle'

• Update paketo buildpack locations - Author: Johannes Dillmann - SHA: 1f2925d69b464237f0c835b626b33f2a43e1fb11
• Bump github.com/buildpacks/lifecycle from 0.20.11 to 0.20.12 - Author: dependabot[bot] - SHA: b1a1db75db43c0b93300b745651fdbb0c291ccc4
• Enable CodeQL scanning - Author: Pavel Busko - SHA: 9b988125c68803e90a769096b250e6b1ba249da0
• Bump github.com/docker/docker - Author: dependabot[bot] - SHA: 4b6e752f723c1f6f7250dcd7605105d927e05524
• Bump github.com/jarcoal/httpmock from 1.3.1 to 1.4.0 - Author: dependabot[bot] - SHA: c22593c9461fc6597d57588113976c49703bb203
• Bump github.com/testcontainers/testcontainers-go from 0.34.0 to 0.37.0 - Author: dependabot[bot] - SHA: 5ff0e667a445cea024edf09a09d610369fcc72b5
• Bump github.com/docker/docker - Author: dependabot[bot] - SHA: 21150481611b81fb6b725e93ce0106da31c08fba
• Bump github.com/buildpacks/pack from 0.36.4 to 0.38.2 - Author: dependabot[bot] - SHA: dc9f91fbbd9e44f249c078fa028cb3ea0e920ba1
• Bump github.com/buildpacks/lifecycle from 0.20.8 to 0.20.11 - Author: dependabot[bot] - SHA: fbd9f2577ecc54722a8b457c0eae34ef98858313
• Move ensureWebProcessType to before build meta is written - Author: Tom Kennedy - SHA: 7b3a5958dd703a0426a75e9f74ae940ec1420c22

Changes for 'auctioneer'

• Remove old property: locks.locket.enabled - Diego release - Author: kart2bc - SHA: 85545ba
• cleanup rep require tls property (#23) - Author: Karthick Udayakumar - SHA: f98fbd1

Changes for 'bbs'

• Update staticcheck comments with latest version (#118) - Author: Maria Shaldybin - SHA: d1ca598
• gofmt - Author: Maria Shaldybin - SHA: 0ed7f35
• Regen protos for linter - Author: Brandon Roberson - SHA: 4566c2f
• update naming convention - Author: Radkov - SHA: 521c7ab
• add tests for MultipleActualLRPsByMultipleGuids endpoint - Author: Radkov - SHA: 9a1f1b0
• add validation - Author: Radkov - SHA: 5be7e8f
• get multiple lrps by multiple guids endpoint - Author: Radkov - SHA: dcaef5b
• [RFC0038] icmpv6 support in ASGs (#107) - Author: Plamen Bardarov - SHA: 1819053
• Remove old property: locks.locket.enabled - Diego release - Author: kart2bc - SHA: 5ed908e
• cleanup rep require tls property - Author: kart2bc - SHA: e88b3ec

Changes for 'credhub-cli'

• Bump go modules - Author: CF CredHub CI Pipeline - SHA: 006e3fb362ab16fa1d65be7181196682aafc99b3
• Bump go modules - Author: CF CredHub CI Pipeline - SHA: 0eb58899fb2b4f188348d83701eb5737c485a87c
• Bump go modules - Author: CF CredHub CI Pipeline - SHA: 5818ddba5dbd547315511550e833c4c0ebfb6dd1
• Bump go modules - Author: CF CredHub CI Pipeline - SHA: 61e52f0de0d82db7795a0fdf31f14ea7da00dee2
• Bump go modules - Author: CF CredHub CI Pipeline - SHA: 79ad10d5e5059c03eb380ac00961cea438f14a59

Changes for 'diego-ssh'

• Fix error message - Author: Maria Shaldybin - SHA: bd398c2
• Fix sshd tests with error wording - Author: Maria Shaldybin - SHA: 3a36901
• Fix other error matching testst - Author: Maria Shaldybin - SHA: 5542e25
• More error wording change - Author: Maria Shaldybin - SHA: 4b24269
• Update wording for error match - Author: Maria Shaldybin - SHA: 1853596

Changes for 'ecrhelper'

• Ignore deprecated aws-sdk-go until we switch to aws-sdk-go-v2 - Author: Maria Shaldybin - SHA: ea2026f

Changes for 'executor'

• set enableDeclarativeHealthCheck always to true - Author: kart2bc - SHA: a447769
• [RFC0038] Support container IPv6 address and icmpv6 NetOut rules (#112) - Author: Plamen Bardarov - SHA: e1d6469
• add missing return statement - Author: Pavel Busko - SHA: 3192fb1
• Do not read entire file in memory for hash calculation - Author: Pavel Busko - SHA: f876f3f

Changes for 'inigo'

• Ignore delete errors - Author: Maria Shaldybin - SHA: dea0a5c
• Rename healthcheck binary to exe on windows - Author: Maria Shaldybin - SHA: fc6e947
• Use real healthcheck instead dummy - Author: Maria Shaldybin - SHA: 085e77e
• Add route-emitter UUID on V1 component maker - Author: Maria Shaldybin - SHA: 9f8b6a2
• Add missing UUID - Author: Maria Shaldybin - SHA: f1dbd14
• Fix duration type - Author: Maria Shaldybin - SHA: 5847559
• Set required DeclarativeHealthCheckDefaultTimeout - Author: Maria Shaldybin - SHA: 87a044b
• set enableDeclarativeHealthCheck always to true (#55) - Author: Karthick Udayakumar - SHA: 14ef7aa
• cleanup rep require tls property - Author: kart2bc - SHA: a052e5d

Changes for 'rep'

• Allow unhandled requests for garden health check test - Author: Maria Shaldybin - SHA: 27ad8ea
• Listen on 127.0.0.1 for test locket server - Author: Maria Shaldybin - SHA: 4040cd1
• Regen certs - Author: Brandon Roberson - SHA: a0f184c
• set enableDeclarativeHealthCheck always to true - Author: kart2bc - SHA: 269e3ce
• cleanup rep require tls property - Author: kart2bc - SHA: ed91bcc

Changes for 'route-emitter'

• Regen certs - Author: Brandon Roberson - SHA: 26f4ea3
• Remove old property: locks.locket.enabled - Diego release - Author: kart2bc - SHA: deed0a2
• cleanup rep require tls property - Author: kart2bc - SHA: da6fe9a

Changes for 'vizzini'

• Retry on connection errors - Author: Maria Shaldybin - SHA: 2728f90
• Retry on i/o timeouts when getting index - Author: Maria Shaldybin - SHA: 896223b
• fix flaky tests for vizzini (#18) - Author: Karthick Udayakumar - SHA: ac8ded8
• set enableDeclarativeHealthCheck always to true (#17) - Author: Karthick Udayakumar - SHA: 4148372

Blob Updates

• Bumped blob 'jq/jq-1.8.1-linux-amd64.tgz' to 'jq/jq-1.8.0-linux-amd64.tgz'

Go Package Updates

• Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.44.0' to 'v0.38.0'
• Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.49.0' to 'v0.42.0'
• Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.58.0' to 'v0.53.0'
• Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.54.0' to 'v2.47.0'
• Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.46.0' to 'v1.40.0'
• Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.45.0' to 'v0.38.0'
• Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20250818133441-006e3fb362ab' to 'v0.0.0-20250609132220-beec578d3f6d'
• Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.65.0' to 'v0.52.0'
• Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.66.0' to 'v0.57.0'
• Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.61.0' to 'v0.52.0'
• Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.49.0' to 'v0.43.0'
• Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.49.0' to 'v0.42.0'
• Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20250904200541-47838cd97b9c' to 'v0.0.0-20250604020255-2f07acb6e208'
• Bumped go.mod package 'code.cloudfoundry.org/go-diodes' from 'v0.0.0-20250901213313-bd708234e594' to 'v0.0.0-20250505082646-e4c2d772c2ec'
• Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.75.0' to 'v0.69.0'
• Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20250904201253-46f1db7abef6' to 'v0.0.0-20250604020826-30b5a859f9dd'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.46.0' to 'v3.39.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.48.0' to 'v0.42.0'
• Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.34.0' to 'v0.29.0'
• Removed go.mod package 'github.com/Masterminds/semver/v3' version 'v3.4.0'
• Bumped go.mod package 'github.com/aws/aws-sdk-go' from 'v1.55.8' to 'v1.55.7'
  *...

2.118.0

2.118.0

Release Date: June 12, 2025

Changes

• Bumped to golang 1.24.4
• Bumped to jq 1.8
• Go Dependency bumps
• ⚠️ Removes the ability to configure logging.format.timestamp. All logging timestamps are now in rfc3339 format for readability. Thanks @kart2bc!
• Adds the ability to specify a default timeout when using declarative healthchecks in the event an app does not specify one.

Bosh Job Spec changes:

diff --git a/jobs/auctioneer/spec b/jobs/auctioneer/spec
index 1fac48936..e7445644b 100644
--- a/jobs/auctioneer/spec
+++ b/jobs/auctioneer/spec
@@ -99,10 +99,6 @@ properties:
     description: When set, the auctioneer attempts to claim a lock from the Locket API.
     default: true
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false
diff --git a/jobs/bbs/spec b/jobs/bbs/spec
index 49ad1d095..e80ffc064 100644
--- a/jobs/bbs/spec
+++ b/jobs/bbs/spec
@@ -163,10 +163,6 @@ properties:
     description: Maximum number of files (including sockets) the BBS process may have open.
     default: 100000
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
diff --git a/jobs/file_server/spec b/jobs/file_server/spec
index f530805b3..460201389 100644
--- a/jobs/file_server/spec
+++ b/jobs/file_server/spec
@@ -60,10 +60,6 @@ properties:
   tls.key:
     description: "PEM-encoded tls key"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "Whether component should use the v2 loggregator API when sending data to the metron agent instead of the 'legacy' v1 API."
     default: false
diff --git a/jobs/locket/spec b/jobs/locket/spec
index 640651ffb..6c50d6346 100644
--- a/jobs/locket/spec
+++ b/jobs/locket/spec
@@ -67,10 +67,6 @@ properties:
   diego.locket.sql.ca_cert:
     description: "Bundle of CA certificates for the Locket to verify the SQL server SSL certificate when connecting via SSL"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false
diff --git a/jobs/rep/spec b/jobs/rep/spec
index c7e46eeb5..11d203b4c 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -215,6 +215,9 @@ properties:
   diego.executor.max_log_lines_per_second:
     description: "EXPERIMENTAL: Maximum log lines allowed per second per app instance. Default value of 0 will disable rate limiting. Minimum recommended value is 100."
     default: 0
+  diego.executor.declarative_healthcheck_default_timeout:
+    description: "Default timeout for declarative healthcheck. This value is used when the LRP spec does not specify a timeout. Only used if 'enable_declarative_healthcheck' is set to true."
+    default: "1s"
 
   diego.rep.bbs.api_location:
     description: "Address of the BBS server"
@@ -332,10 +335,6 @@ properties:
     default: []
     example: [ "169.254.0.2:15001" ]
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 3383a8bf4..161bc2821 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -61,10 +61,6 @@ properties:
     description: "Add more permissive ACLs to directories that are bind mounted into containers. Required for Windows 2016 cells"
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   logging.max_data_string_length:
     description: "Length in bytes above which logged strings will be truncated. If set to 0, turns off truncation."
     default: 640
@@ -207,6 +203,9 @@ properties:
   diego.executor.max_log_lines_per_second:
     description: "EXPERIMENTAL: Maximum log lines allowed per second per app instance. Default value of 0 will disable rate limiting. Minimum recommended value is 100."
     default: 0
+  diego.executor.declarative_healthcheck_default_timeout:
+    description: "Default timeout for declarative healthcheck. This value is used when the LRP spec does not specify a timeout. Only used if 'enable_declarative_healthcheck' is set to true."
+    default: "1s"
 
   diego.rep.bbs.api_location:
     description: "Address of the BBS server"
diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec
index df1b8383c..e35eddfb4 100644
--- a/jobs/route_emitter/spec
+++ b/jobs/route_emitter/spec
@@ -105,10 +105,6 @@ properties:
     description: "Experimental: Enable the route-emitter to emit registrations for internal DNS-based service discovery."
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   tcp.enabled:
     description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API."
     default: false
diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec
index 9db9e8b69..e5a7ac46d 100644
--- a/jobs/route_emitter_windows/spec
+++ b/jobs/route_emitter_windows/spec
@@ -91,10 +91,6 @@ properties:
     description: "The name of the Diego job referenced by this spec (DO NOT override)"
     default: "route_emitter_windows"
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   syslog_daemon_config.address:
     description: "Syslog host"
     default: ""
diff --git a/jobs/ssh_proxy/spec b/jobs/ssh_proxy/spec
index cd39dbd52..fe63cfa97 100644
--- a/jobs/ssh_proxy/spec
+++ b/jobs/ssh_proxy/spec
@@ -120,10 +120,6 @@ properties:
     description: "Connect directly to container IP instead of to the host IP and external port. Suitable only for deployments in which the gorouters and TCP routers can route directly to the container IP of instances."
     default: false
 
-  logging.format.timestamp:
-    description: "Format for timestamp in component logs. Valid values are 'unix-epoch' and 'rfc3339'."
-    default: "unix-epoch"
-
   loggregator.use_v2_api:
     description: "True to use local metron agent gRPC v2 API. False to use UDP v1 API."
     default: false

✨ Built with go 1.24.4

Full Changelog: v2.117.0...v2.118.0

Resources

• Download release 2.118.0 from bosh.io.

2.117.0

2.117.0

Release Date: May 06, 2025

Changes

• Upgrade to go 1.24
• New property: diego.rep.extra_root_fs_dir (thanks @winkingturtle-vmw!)
  • Directory for extra desired root fses to be used by rep
• New properties: diego.executor.proxy_healthcheck_interval and diego.executor.enable_container_proxy_healthcheck (thanks @Viktor-Velkov!)
  • Configuration for envoy proxy healthchecks
• cnbapplifecycle is now a standalone module
• Add BBS Advanced Metrics #996 (thanks @n-sandalski and @PlamenDoychev!)

Bosh Job Spec changes:

diff --git a/jobs/bbs/spec b/jobs/bbs/spec
index 9204a8d4c..49ad1d095 100644
--- a/jobs/bbs/spec
+++ b/jobs/bbs/spec
@@ -147,6 +147,18 @@ properties:
     description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server."
     default: 22
 
+  diego.bbs.metrics.advanced_metrics.enabled:
+    description: Enables emitting BBS Metrics per specified routes/endpoints in advanced_metrics, useful for debugging issues. May impact performances.
+    default: false
+
+  diego.bbs.metrics.advanced_metrics.route_config.request_count:
+    description: Set the routes for which request_count should be emitted. If empty, no request_count metrics will be emitted.
+    default: []
+
+  diego.bbs.metrics.advanced_metrics.route_config.request_latency:
+    description: Set the routes for which request_latency should be emitted. If empty, no request_latency metrics will be emitted.
+    default: []
+
   limits.open_files:
     description: Maximum number of files (including sockets) the BBS process may have open.
     default: 100000
diff --git a/jobs/rep/spec b/jobs/rep/spec
index ecff35fa5..c7e46eeb5 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -57,6 +57,9 @@ properties:
   diego.rep.sidecar_rootfs_path:
     description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/var/vcap/packages/cflinuxfs4/rootfs.tar'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
     default: ""
+  diego.rep.extra_root_fs_dir:
+    description: "dir to scan for extra rootfs to be loaded by rep"
+    default: "/var/vcap/store/rootfses"
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default:
@@ -138,6 +141,12 @@ properties:
   diego.executor.use_schedulable_disk_size:
     description: "Use total space available to containers reported by Garden. If false the total size of image plugin store minus max_cache_size_in_bytes is used."
     default: false
+  diego.executor.proxy_healthcheck_interval:
+    description: "Interval that checks envoy responsiveness every 30s."
+    default: "30s"
+  diego.executor.enable_container_proxy_healthcheck:
+    description: "When set, enables the liveness health check for the envoy proxy in the container."
+    default: false
   diego.executor.garden.address:
     description: "Garden server listening address."
     default: /var/vcap/data/garden/garden.sock
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index d34483c0b..3383a8bf4 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -48,6 +48,9 @@ properties:
   diego.rep.sidecar_rootfs_path:
     description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/tmp/windows2012R2'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
     default: ""
+  diego.rep.extra_root_fs_dir:
+    description: "dir to scan for extra rootfs to be loaded by rep"
+    default: "/var/vcap/store/rootfses"
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default: []
@@ -133,6 +136,12 @@ properties:
   diego.executor.use_schedulable_disk_size:
     description: "Use total space available to containers reported by Garden. If false the total size of image plugin store minus max_cache_size_in_bytes is used."
     default: false
+  diego.executor.proxy_healthcheck_interval:
+    description: "Interval that checks envoy responsiveness."
+    default: "30s"
+  diego.executor.enable_container_proxy_healthcheck:
+    description: "When set, enables the liveness health check for the envoy proxy in the container."
+    default: false
   diego.executor.garden.address:
     description: "Garden server listening address."
     default: 127.0.0.1:9241
diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 901e5236d..b42ae9d49 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
 ---
 name: vizzini
 packages:
-  - golang-1.23-linux
+  - golang-1.24-linux
   - vizzini
 
 templates:

✨ Built with go 1.24.2

Full Changelog: v2.116.0...v2.117.0

Resources

• Download release 2.117.0 from bosh.io.

2.116.0

2.116.0

Release Date: March 28, 2025

Changes

• bump go version

✨ Built with go 1.23.7

Full Changelog: v2.115.0...v2.116.0

Resources

• Download release 2.116.0 from bosh.io.

2.115.0

2.115.0

Release Date: February 24, 2025

Changes

• Expose configuration option to select rootfs used for container's sidecar processes. This configuration resolves the following issue 983 observed on systems running with multiple FS stacks.

Thanks to @Ivo1116 , @PlamenDoychev!

Bosh Job Spec changes:

diff --git a/jobs/rep/spec b/jobs/rep/spec
index 012234e12..ecff35fa5 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -54,6 +54,9 @@ properties:
     default: false
   diego.rep.preloaded_rootfses:
     description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden"
+  diego.rep.sidecar_rootfs_path:
+    description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/var/vcap/packages/cflinuxfs4/rootfs.tar'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
+    default: ""
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default:
diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec
index 4a7dfefc6..d34483c0b 100644
--- a/jobs/rep_windows/spec
+++ b/jobs/rep_windows/spec
@@ -45,6 +45,9 @@ properties:
     description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden"
     default:
       - windows2012R2:/tmp/windows2012R2
+  diego.rep.sidecar_rootfs_path:
+    description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/tmp/windows2012R2'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses"
+    default: ""
   diego.rep.rootfs_providers:
     description: "Array of schemes for which the underlying garden can support arbitrary root filesystems"
     default: []

✨ Built with go 1.23.6

Full Changelog: v2.114.0...v2.115.0

Resources

• Download release 2.115.0 from bosh.io.

2.114.0

2.114.0

Release Date: February 18, 2025

Changes

• Add support to Diego for file-based service bindings - #990 - Thank you @klapkov , @dimitardimitrov13!

Bosh Job Spec changes:

diff --git a/jobs/rep/spec b/jobs/rep/spec
index 0737d9d1a..012234e12 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -22,7 +22,8 @@ templates:
   tls.key.erb: config/certs/tls.key
   tls_ca.crt.erb: config/certs/tls_ca.crt
   indicators.yml.erb: config/indicators.yml
-
+  volume_mounted_files.erb: bin/volume_mounted_files
+  
 packages:
   - pid_utils
   - rep

✨ Built with go 1.23.6

Full Changelog: v2.113.0...v2.114.0

Resources

• Download release 2.114.0 from bosh.io.

2.113.0

2.113.0

Release Date: February 03, 2025

Changes

• ⚠️ BREAKING CHANGE⚠️ : [email protected] has been removed from the default allowed ciphers for ssh-proxy. cloudfoundry/diego-ssh#62 Thank you @DimitarSch
• Bump dependencies
• #986 Keep filepath-securejoin at v0.3.6 until runc is compatible with v0.4.0 (thanks @winkingturtle-vmw)

✨ Built with go 1.23.5

Full Changelog: v2.112.0...v2.113.0

Resources

• Download release 2.113.0 from bosh.io.

2.112.0

2.112.0

Release Date: January 03, 2025

Changes

• Bump dependancies.

✨ Built with go 1.23.4

Full Changelog: v2.111.0...v2.112.0

Resources

• Download release 2.112.0 from bosh.io.

2.111.0

2.111.0

Release Date: December 19, 2024

Changes

• Bump envoy from 1.32.2 to 1.32.3. Envoy v1.32.3 contains multiple CVE fixes.
• Bump dependancies

✨ Built with go 1.23.4

Full Changelog: v2.110.0...v2.111.0

Resources

• Download release 2.111.0 from bosh.io.

2.110.0

2.110.0

Release Date: December 10, 2024

Changes

• Dependency bumps

✨ Built with go 1.23.4

Full Changelog: v2.109.0...v2.110.0

Resources

• Download release 2.110.0 from bosh.io.