Diego v2.63.0

Changes

• Pass log config in container spec to garden, so that vxlan-policy-agent can send app logs

Resources

• Download release v2.63.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d816bd14c9ca957f020381643f362d062ef60550.

Diego v2.62.0

Resources

• Download release v2.62.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d816bd14c9ca957f020381643f362d062ef60550.

Diego v2.61.0

NOTE on release version

Diego release v2.60.0 does not exist; never had, never will. One of our engineers accidentally pressed a button in our CI to bump the version number independent of actually releasing anything. 🙃 Sorry! 🙇

Resources

• Download release v2.61.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ e20e11dd243f57555e3e0ad281e6797fbfde8152.

Changes

• Addresses CVE-2022-23806 and CVE-2022-23772 by bumping golang package to include go 1.17.8, (#614)

✨ Built with golang 1.17.8

v2.59.0

Resources

• Download release v2.59.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d92d82e6404eb7455c71083f262c364a6bed55be.

Changes

• Deprecate start and evacuate_running endpoints @moleske (#617)
• Ensure containers can eventually communicate over TLS using application internal route even if synchronous communication fails.
  • ⚠️ This introduces a new migration to the BBS for the first time in nearly 4 years. Once you deploy this version you can not easily rollback.

✨ Built with golang 1.17.5

v2.58.1

SAME AS v2.59.0

• This version was created by accident in our automation.
• Please use diego-release v2.59.0 instead

v2.58.0

Resources

• Download release v2.58.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d92d82e6404eb7455c71083f262c364a6bed55be.

Changes

• Route emitter's healthcheck_address no longer accepts leading zeros @ameowlia @geofffranks (#616)

✨ Built with golang 1.17.5

v2.57.0

Resources

• Download release v2.57.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d92d82e6404eb7455c71083f262c364a6bed55be.

Changes

• Addresses CVE-2021-43816 by bumping containerd to v1.5.9 @jrussett (#612)

✨ Built with golang 1.17.5

v2.56.0

Resources

• Download release v2.56.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ d92d82e6404eb7455c71083f262c364a6bed55be.

Changes

• C2C certificate is regenerated when internal routes are updated (#588)

v2.55.0

Resources

• Download release v2.55.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ 91641085d9ecd3df125dafa3c5ba61ffafb3d825.

Changes

• Containers can communicate over TLS using application internal route (#587)
• Bumps golang x/crypto and x/net pkgs (#605)
• Only use passwd auth if NATS requires it (#610)

Dependencies

• Bump Golang to go1.17.5 (#611)

v2.54.0

Resources

• Download release v2.54.0 from bosh.io.
• Verified with cloudfoundry/cf-deployment @ 91641085d9ecd3df125dafa3c5ba61ffafb3d825.

Changes

• bump diego-ssh uaa-go-client (#596)
• Rep: Bump task result file size max to 50k (#601)
• Executor: (BugFix) Envoy 1.19 should use original TCP connection pool, so that it can accept more than 1024 downstream connections (#604)

Dependencies

• Bump Golang to go1.17.3 (#599)