Skip to content

Releases: sse-secure-systems/connaisseur

Version 2.6.3

19 Aug 11:34
365ac06
Compare
Choose a tag to compare

v2.6.3

Major Scope

just fixes and updates.

Changelog

Ci

  • Fix safety for nightly scan #732

Update

  • Update jsonschema requirement from ~=4.9.1 to ~=4.12.1 #756
  • Cosign v1.10.0 to v1.11.0 #757
  • Update mkdocs-material requirement from ~=8.3.9 to ~=8.4.0 #750
  • Update setuptools requirement from ~=64.0.1 to ~=65.1.0 #755
  • Update setuptools requirement from ~=63.4.1 to ~=64.0.1 #747
  • Update pytz requirement from ~=2022.1 to ~=2022.2 #748
  • Update flask requirement from ~=2.2.1 to ~=2.2.2 #745
  • Update flask requirement from ~=2.1.3 to ~=2.2.1 #741
  • Bump prometheus-flask-exporter from 0.20.2 to 0.20.3 #738
  • Update setuptools requirement from ~=63.2.0 to ~=63.4.1 #740
  • Update pytest-asyncio requirement from ~=0.18.3 to ~=0.19.0 #735
  • Update jsonschema requirement from ~=4.9.0 to ~=4.9.1 #739
  • Update jsonschema requirement from ~=4.8.0 to ~=4.9.0 #734

What's Changed

  • ci: fix safety for nightly scan by @xopham in #732
  • update: update jsonschema requirement from ~=4.8.0 to ~=4.9.0 by @dependabot in #734
  • update: update jsonschema requirement from ~=4.9.0 to ~=4.9.1 by @dependabot in #739
  • update: update pytest-asyncio requirement from ~=0.18.3 to ~=0.19.0 by @dependabot in #735
  • update: update setuptools requirement from ~=63.2.0 to ~=63.4.1 by @dependabot in #740
  • update: bump prometheus-flask-exporter from 0.20.2 to 0.20.3 by @dependabot in #738
  • update: update flask requirement from ~=2.1.3 to ~=2.2.1 by @dependabot in #741
  • update: update flask requirement from ~=2.2.1 to ~=2.2.2 by @dependabot in #745
  • update: update pytz requirement from ~=2022.1 to ~=2022.2 by @dependabot in #748
  • update: update setuptools requirement from ~=63.4.1 to ~=64.0.1 by @dependabot in #747
  • update: update setuptools requirement from ~=64.0.1 to ~=65.1.0 by @dependabot in #755
  • update: update mkdocs-material requirement from ~=8.3.9 to ~=8.4.0 by @dependabot in #750
  • update: cosign v1.10.0 to v1.11.0 by @xopham in #757
  • update: update jsonschema requirement from ~=4.9.1 to ~=4.12.1 by @dependabot in #756
  • Release v2.6.3 by @xopham in #758

Full Changelog: v2.6.2...v2.6.3

Version 2.6.2

29 Jul 17:31
1479860
Compare
Choose a tag to compare

v2.6.2

Major Scope

Fixes and updates.

Changelog

Fix

  • Fix installation for other namespace #727
  • Add namespace to make annihilate #727

Refactor

  • Default github action for release test cluster #728

Ci

  • Added timeout after install and retries on first tests #711
  • Trivy scan of latest public image #713

Test

  • Integration test for non-default namespace installation #727
  • Compatibility with k8s v1.24 #609

Update

  • Update jsonschema requirement from ~=4.6.2 to ~=4.8.0 #726
  • Update pylint requirement from ~=2.14.4 to ~=2.14.5 (#720) #720
  • Update rsa requirement from ~=4.8 to ~=4.9 (#730) #730
  • Update flask requirement from ~=2.1.2 to ~=2.1.3 #719
  • Cosign v1.9.0 to v1.10.0 #728
  • Update setuptools requirement from ~=63.1.0 to ~=63.2.0 (#718) #718
  • Update ecdsa requirement from ~=0.17 to ~=0.18 (#715) #715
  • Update jsonschema requirement from ~=4.6.1 to ~=4.6.2 #710
  • Update pytest-mock requirement from ~=3.8.1 to ~=3.8.2 #708
  • Update setuptools requirement from ~=62.6.0 to ~=63.1.0 #706
  • Update mkdocs-material requirement from ~=8.3.8 to ~=8.3.9 #707

What's Changed

  • update: update mkdocs-material requirement from ~=8.3.8 to ~=8.3.9 by @dependabot in #707
  • update: update setuptools requirement from ~=62.6.0 to ~=63.1.0 by @dependabot in #706
  • update: update pytest-mock requirement from ~=3.8.1 to ~=3.8.2 by @dependabot in #708
  • update: update jsonschema requirement from ~=4.6.1 to ~=4.6.2 by @dependabot in #710
  • ci: trivy scan of latest public image by @xopham in #713
  • test: compatibility with k8s v1.24 by @xopham in #609
  • ci: fix webhook unavailable errors by @xopham in #711
  • update: update ecdsa requirement from ~=0.17 to ~=0.18 by @dependabot in #715
  • update: update setuptools requirement from ~=63.1.0 to ~=63.2.0 by @dependabot in #718
  • refactor: default github action for release test cluster by @xopham in #729
  • update: cosign v1.9.0 to v1.10.0 by @xopham in #728
  • update: update flask requirement from ~=2.1.2 to ~=2.1.3 by @dependabot in #719
  • Fix installation in other namespace by @Starkteetje in #727
  • update: update rsa requirement from ~=4.8 to ~=4.9 by @dependabot in #730
  • update: update pylint requirement from ~=2.14.4 to ~=2.14.5 by @dependabot in #720
  • update: update jsonschema requirement from ~=4.6.2 to ~=4.8.0 by @dependabot in #726
  • Release v2.6.2 by @xopham in #731

Full Changelog: v2.6.1...v2.6.2

Version v2.6.1

01 Jul 16:22
e068a91
Compare
Choose a tag to compare

v2.6.1

Major Scope

Minor fixes and updates to resolve CVEs in dependencies.

For more info, read the docs 📝


Changelog

Fix

  • Slack alert template typo #685

Ci

Update

  • Update pylint requirement from ~=2.14.3 to ~=2.14.4 #704
  • Update requests requirement from ~=2.28.0 to ~=2.28.1 #705
  • Update pytest-mock requirement from ~=3.7.0 to ~=3.8.1 #700
  • Update jsonschema requirement from ~=4.6.0 to ~=4.6.1 #701
  • Cosign v1.8.0 to v1.9.0 #696
  • Update pylint requirement from ~=2.14.2 to ~=2.14.3 #693
  • Update mkdocs-material requirement from ~=8.3.6 to ~=8.3.8 #698
  • Update setuptools requirement from ~=62.4.0 to ~=62.6.0 #692
  • Update pylint requirement from ~=2.14.1 to ~=2.14.2 #688
  • Update mkdocs-material requirement from ~=8.3.3 to ~=8.3.6 #689
  • Update requests requirement from ~=2.27.1 to ~=2.28.0 #681
  • Update setuptools requirement from ~=62.3.3 to ~=62.4.0 #686
  • Bump actions/setup-python from 3 to 4 #680
  • Update setuptools requirement from ~=62.3.2 to ~=62.3.3 #678
  • Update mkdocs-material requirement from ~=8.3.2 to ~=8.3.3 #677
  • Update pylint requirement from ~=2.14.0 to ~=2.14.1 #676
  • Bump prometheus-flask-exporter from 0.20.1 to 0.20.2 #674
  • Update mkdocs-material requirement from ~=8.3.0 to ~=8.3.2 #675
  • Update jsonschema requirement from ~=4.5.1 to ~=4.6.0 #668
  • Update mkdocs-material requirement from ~=8.2.14 to ~=8.3.0 #670
  • Update setuptools requirement from ~=62.2.0 to ~=62.3.2 #662
  • Update pylint requirement from ~=2.13.8 to ~=2.14.0 #669

What's Changed

  • update: update pylint requirement from ~=2.13.8 to ~=2.14.0 by @dependabot in #669
  • update: update setuptools requirement from ~=62.2.0 to ~=62.3.2 by @dependabot in #662
  • update: update mkdocs-material requirement from ~=8.2.14 to ~=8.3.0 by @dependabot in #670
  • update: update jsonschema requirement from ~=4.5.1 to ~=4.6.0 by @dependabot in #668
  • ci: show the actual config by @xopham in #672
  • ci: increase complexity test resources by @xopham in #671
  • update: update mkdocs-material requirement from ~=8.3.0 to ~=8.3.2 by @dependabot in #675
  • update: bump prometheus-flask-exporter from 0.20.1 to 0.20.2 by @dependabot in #674
  • update: update pylint requirement from ~=2.14.0 to ~=2.14.1 by @dependabot in #676
  • update: update mkdocs-material requirement from ~=8.3.2 to ~=8.3.3 by @dependabot in #677
  • update: update setuptools requirement from ~=62.3.2 to ~=62.3.3 by @dependabot in #678
  • fix: Slack alert template typo by @IAL32 in #685
  • update: bump actions/setup-python from 3 to 4 by @dependabot in #680
  • update: update setuptools requirement from ~=62.3.3 to ~=62.4.0 by @dependabot in #686
  • update: update requests requirement from ~=2.27.1 to ~=2.28.0 by @dependabot in #681
  • update: update mkdocs-material requirement from ~=8.3.3 to ~=8.3.6 by @dependabot in #689
  • update: update pylint requirement from ~=2.14.1 to ~=2.14.2 by @dependabot in #688
  • CI/ignore CVE-2022-28946 & CVE-2022-28948 by @xopham in #697
  • update: update setuptools requirement from ~=62.4.0 to ~=62.6.0 by @dependabot in #692
  • update: update mkdocs-material requirement from ~=8.3.6 to ~=8.3.8 by @dependabot in #698
  • update: update pylint requirement from ~=2.14.2 to ~=2.14.3 by @dependabot in #693
  • ci: fix safety scanner by @xopham in #703
  • update: cosign v1.8.0 to v1.9.0 by @xopham in #696
  • update: update jsonschema requirement from ~=4.6.0 to ~=4.6.1 by @dependabot in #701
  • update: update pytest-mock requirement from ~=3.7.0 to ~=3.8.1 by @dependabot in #700
  • update: update requests requirement from ~=2.28.0 to ~=2.28.1 by @dependabot in #705
  • update: update pylint requirement from ~=2.14.3 to ~=2.14.4 by @dependabot in #704
  • Release v2.6.1 by @xopham in #702

New Contributors

Full Changelog: v2.6.0...v2.6.1

Version 2.6.0

13 May 14:29
37d8533
Compare
Choose a tag to compare

v2.6.0

Major Scope

As a central focus, this release contains rekor transparency log support for cosign, updates of several dependencies, and important refactoring 🚀

For more info on rekor support, read the docs 📝


Changelog

Feat

  • Validate cosign signatures against rekor transparency log #637
  • Key interface #540

Update

  • Update pylint requirement from ~=2.13.7 to ~=2.13.8 (#650) #650
  • Update mkdocs-material requirement from ~=8.2.12 to ~=8.2.14 (#653) #653
  • Update jsonschema requirement from ~=4.4.0 to ~=4.5.1 (#652) #652
  • Update setuptools requirement from ~=62.1.0 to ~=62.2.0 (#654) #654
  • Update rsa requirement from ~=4.7.2 to ~=4.8 (#648) #648
  • Update mkdocs-material requirement from ~=8.2.11 to ~=8.2.12 (#647) #647
  • Cosign v1.7.2 to v1.8.0 #643
  • Update flask requirement from ~=2.1.1 to ~=2.1.2 (#644) #644
  • Update jinja2 requirement from ~=3.1.1 to ~=3.1.2 (#645) #645
  • Bump github/codeql-action from 1 to 2 (#640) #640
  • Update mkdocs-material requirement from ~=8.2.9 to ~=8.2.11 (#641) #641

What's Changed

  • update: update mkdocs-material requirement from ~=8.2.9 to ~=8.2.11 by @dependabot in #641
  • update: bump github/codeql-action from 1 to 2 by @dependabot in #640
  • update: update jinja2 requirement from ~=3.1.1 to ~=3.1.2 by @dependabot in #645
  • update: update flask requirement from ~=2.1.1 to ~=2.1.2 by @dependabot in #644
  • update: cosign v1.7.2 to v1.8.0 by @xopham in #643
  • feat: key interface by @phbelitz in #540
  • update: update mkdocs-material requirement from ~=8.2.11 to ~=8.2.12 by @dependabot in #647
  • update: update rsa requirement from ~=4.7.2 to ~=4.8 by @dependabot in #648
  • update: update setuptools requirement from ~=62.1.0 to ~=62.2.0 by @dependabot in #654
  • update: update jsonschema requirement from ~=4.4.0 to ~=4.5.1 by @dependabot in #652
  • update: update mkdocs-material requirement from ~=8.2.12 to ~=8.2.14 by @dependabot in #653
  • update: update pylint requirement from ~=2.13.7 to ~=2.13.8 by @dependabot in #650
  • feat: validate cosign signatures against rekor transparency log by @xopham in #637
  • Release v2.6.0 by @xopham in #657

Full Changelog: v2.5.3...v2.6.0

Version 2.5.3

22 Apr 12:06
21232a2
Compare
Choose a tag to compare

v2.5.3

Major Scope

The release patches dependencies and contains some minor bug fixes


Changelog

Fix

  • Fix commit parsing #600

Build

  • Remove transitive dependency pinning #632
  • Fix commit parsing #600
  • Improve output #600
  • Default to latest two tags for changelog #600

Ci

Docs

  • Refactor release.md #600

Update

  • Cosign v1.7.1 to v1.7.2 #635
  • Bump codecov/codecov-action from 3.0.0 to 3.1.0 #631
  • Update pylint requirement from ~=2.13.5 to ~=2.13.7 (#630) #630
  • Bump prometheus-client from 0.14.0 to 0.14.1 (#627) #627
  • Update setuptools requirement from ~=62.0.0 to ~=62.1.0 (#629) #629
  • Update mkdocs-material requirement from ~=8.2.8 to ~=8.2.9 (#628) #628
  • Bump actions/download-artifact from 2 to 3 (#626) #626
  • Bump actions/upload-artifact from 2 to 3 (#625) #625
  • Update setuptools requirement from ~=61.3.0 to ~=62.0.0 (#613) #613
  • Bump codecov/codecov-action from 2.1.0 to 3.0.0 (#621) #621
  • Update pylint requirement from ~=2.13.4 to ~=2.13.5 (#618) #618
  • Cosign v1.6.0 to v1.7.1 #617
  • Update prometheus-flask-exporter requirement from ~=0.19.0 to ==0.20.1 and pin prometheus-client to ==0.14.0 #620
  • Update pylint requirement from ~=2.13.0 to ~=2.13.4 (#611) #611
  • Update setuptools requirement from ~=61.0.0 to ~=61.3.0 (#610) #610
  • Update flask requirement from ~=2.0.3 to ~=2.1.1 (#608) #608
  • Update jinja2 requirement from ~=3.1.0 to ~=3.1.1 (#603) #603
  • Update mkdocs-material requirement from ~=8.2.7 to ~=8.2.8 (#604) #604
  • Update pytest-asyncio requirement from ~=0.18.2 to ~=0.18.3 (#601) #601

What's Changed

Full Changelog: v2.5.2...v2.5.3

Version 2.5.2

25 Mar 13:41
09fd237
Compare
Choose a tag to compare

v2.5.2

Major Scope

Centrally, this release fixes two important bugs:


Changelog

Fix

  • exclude k8s CRDs from parent resource check #590
  • digest confusion at high load #589

Update

  • python dev dependencies #598
  • update jinja2 requirement from ~=3.0.3 to ~=3.1.0 #595
  • update pytz requirement from ~=2021.3 to ~=2022.1 #586
  • update mkdocs-material requirement from ~=8.2.5 to ~=8.2.7 #593
  • cosign v1.5.2 to v1.6.0 #570
  • update setuptools requirement from ~=60.9.3 to ~=60.10.0 #581
  • update prometheus-flask-exporter requirement (#579) #579

Ci

Docs

  • fix create image pull secret command #585
  • add clarity re generating registry credential secrets #578

What's Changed

New Contributors

Full Changelog: v2.5.1...v2.5.2

Version 2.5.1

09 Mar 19:56
d15ad66
Compare
Choose a tag to compare

v2.5.1

Major Scope

This Release mainly fixes a bug (#575) in cosign validator authentication to the registry that was introduced in v2.5.0 (#428): #576


Changelog

Fix

  • broken cosign authentication for registries #576

Update

  • update mkdocs-material requirement from ~=8.2.4 to ~=8.2.5 #574
  • update pytest-asyncio requirement from ~=0.18.1 to ~=0.18.2 #569
  • update mkdocs-material requirement from ~=8.2.3 to ~=8.2.4 #568

What's Changed

  • update: update mkdocs-material requirement from ~=8.2.3 to ~=8.2.4 by @dependabot in #568
  • update: update pytest-asyncio requirement from ~=0.18.1 to ~=0.18.2 by @dependabot in #569
  • update: update mkdocs-material requirement from ~=8.2.4 to ~=8.2.5 by @dependabot in #574
  • fix: broken cosign validator authentication for registries by @xopham in #576
  • Release 2.5.1 by @xopham in #577

Full Changelog: v2.5.0...v2.5.1

Version 2.5.0

02 Mar 13:30
7154d1a
Compare
Choose a tag to compare

v2.5.0 - 🚨 Critical Fix for Service Interruption due to unexpected API change 🚨

Major Scope

🚨 Release contains a critical fix for a service interruption due to an unexpected API change by docker.io: #564. helm upgrade is not functional due to the issue and upgrade must be performed via helm uninstall followed by helm install. For more information, checkout #566.

This release also contains several several notable new features and improvements:

  • exposing prometheus metrics (see docs): #508
  • cosign support for ambient credentials/workload identities (see docs): #551
  • cosign support for multiple signers of a single image (see docs): #428
  • cosign KMS support goes GA (see docs): #558
  • reinvocation policy for objects mutated during admission (see docs): #518
  • less noisy logging: #501

Changelog

Feat

  • enforce/require/allow multiple container image signers for cosign #428
  • cosign kms support reaches GA #558
  • add reinvocationPolicy option #518
  • Support cosign --k8s-keychain flag #551
  • silent healthz endpoints logging #501
  • prometheus metrics #508

Update

  • connaisseur (chart v1.3.0, image v2.5.0) #562
  • bump actions/checkout from 2 to 3 #565
  • bump actions/setup-python from 2 to 3 #561
  • update mkdocs-material requirement from ~=8.2.1 to ~=8.2.3 #559
  • cosign v1.5.1 to v1.5.2 #556
  • update setuptools requirement from ~=60.9.2 to ~=60.9.3 #552
  • update mkdocs-material requirement from ~=8.1.11 to ~=8.2.1 #553
  • update setuptools requirement from ~=60.8.2 to ~=60.9.2 #549
  • update flask requirement from ~=2.0.2 to ~=2.0.3 #544
  • update pytest-asyncio requirement from ~=0.18.0 to ~=0.18.1 #536
  • update mkdocs-material requirement from ~=8.1.10 to ~=8.1.11 #537
  • update setuptools requirement from ~=60.8.1 to ~=60.8.2 #535
  • update pytest-subprocess requirement from ~=1.4.0 to ~=1.4.1 #534

Test

  • reset values.yaml after test #563
  • added tests for logging wrapper #545
  • Make IT exectuable and rename complexity files #554
  • fix unset variable in preconfig integration test #542

Ci

  • run nightly scans on released version #567
  • Expose k8s logs when integration test fails #555

Fix

  • disable aiohttp content type check #564
  • add missing config schema fields #476

Docs

  • fix contributing guide link in pr template #557
  • Add explanation for k8s api path #554

Build

  • Fix typo in Makefile #554

What's Changed

New Contributors

Full Changelog: v2.4.1...v2.5.0

Version 2.4.1

08 Feb 14:20
6845fe7
Compare
Choose a tag to compare

v2.4.1

Major Scope

The release includes important updates to fix some bugs and vulnerabilities in dependencies:

Changelog

Ci

  • fix changelogger for non-semantic commits #529

Update

  • upgrade to debian, ca-certificates, wget #524
  • update pytest-asyncio requirement from ~=0.17.2 to ~=0.18.0 #526
  • update mkdocs-material requirement from ~=8.1.9 to ~=8.1.10 #523
  • update setuptools requirement from ~=60.7.1 to ~=60.8.1 #522
  • update pytest-subprocess requirement from ~=1.3.2 to ~=1.4.0 #517
  • update setuptools requirement from ~=60.5.0 to ~=60.7.1 #515
  • update mkdocs-material requirement from ~=8.1.7 to ~=8.1.9 #506
  • update pytest-mock requirement from ~=3.6.1 to ~=3.7.0 #505
  • cosign v1.5.0 to v1.5.1 #509
  • cosign v1.4.1 to v1.5.0 #502

Test

  • fix stresstest failure due to node w/o DCT #528
  • fix pytest-subprocess renaming failures #517

Docs

  • automate version warning of docs #520

Fix

  • updated REST path for core api group #514
  • corrected typo in ClusterRole helm template #510

What's Changed

  • update: cosign v1.4.1 to v1.5.0 by @xopham in #502
  • fix: corrected typo in ClusterRole helm template by @hsuchan in #510
  • Update/cosign 1.5.1 by @xopham in #509
  • update: update pytest-mock requirement from ~=3.6.1 to ~=3.7.0 by @dependabot in #505
  • update: update mkdocs-material requirement from ~=8.1.7 to ~=8.1.9 by @dependabot in #506
  • update: update setuptools requirement from ~=60.5.0 to ~=60.7.1 by @dependabot in #515
  • fix: updated REST path for core api group by @hsuchan in #514
  • Update/pytest subprocess by @xopham in #517
  • Docs/version warnings by @xopham in #520
  • test: fix stresstest failure due to node w/o DCT by @xopham in #528
  • update: update setuptools requirement from ~=60.7.1 to ~=60.8.1 by @dependabot in #522
  • update: update mkdocs-material requirement from ~=8.1.9 to ~=8.1.10 by @dependabot in #523
  • update: update pytest-asyncio requirement from ~=0.17.2 to ~=0.18.0 by @dependabot in #526
  • update: debian bullseye, ca-certificates, wget by @tluimes in #524
  • ci: fix changelogger for non-semantic commits by @phbelitz in #529
  • Release v2.4.1 by @xopham in #530

New Contributors

Full Changelog: v2.4.0...v2.4.1

Version 2.4.0

24 Jan 16:03
eaa1643
Compare
Choose a tag to compare

v2.4.0

Ci

  • allowlisting for GMS-2021-101 #495
  • test compatibility with Kubernetes v1.23 #429
  • ci: fix release pipeline #497

Update

  • update pytest-asyncio requirement from ~=0.17.0 to ~=0.17.2 #490
  • update mkdocs-material requirement from ~=8.1.6 to ~=8.1.7 #489
  • version bump #494
  • update mkdocs-material requirement from ~=8.1.4 to ~=8.1.6 #482
  • update jsonschema requirement from ~=4.3.3 to ~=4.4.0 #483
  • update pytest-asyncio requirement from ~=0.16.0 to ~=0.17.0 #484
  • update aioresponses requirement from ~=0.7.2 to ~=0.7.3 #480
  • update setuptools requirement from ~=60.3.1 to ~=60.5.0 #478
  • update setuptools requirement from ~=60.2.0 to ~=60.3.1 #475
  • update requests requirement from ~=2.27.0 to ~=2.27.1 #473
  • update cheroot requirement from ~=8.5.2 to ~=8.6.0 #472
  • update requests requirement from ~=2.26.0 to ~=2.27.0 #471
  • update jsonschema requirement from ~=4.3.1 to ~=4.3.3 #470
  • update mkdocs-material requirement from ~=8.1.2 to ~=8.1.4 #469
  • update setuptools requirement from ~=59.6.0 to ~=60.2.0 #467

Feat

  • support extra configuration in helm chart #491
  • implement imagePullSecrets for private container registries #468

Test

  • Remove integration test namespaces during cleanup #487
  • Allow local execution of integration test #486
  • Remove unusable 'all' integration test #486
  • Split stress test #486
  • Remove superfluous comment
    #487

Refactor

  • Make use label more specific to Connaisseur #486
  • helm/values.yaml indentation consistency #486

Docs

  • Fix integration test documentation #486
  • Fix capitalization #477

New Contributors

Full Changelog: v2.3.0...v2.4.0