Release v0.27.1 (#1130)

* 🧹 chore(VSecM): 0 go mod update Signed-off-by: Volkan Özçelik <[email protected]> * 🧹 chore(VSecM): 0 dockerfile update Signed-off-by: Volkan Özçelik <[email protected]> * ✨ feat(VSecM): 0 Update changelog Signed-off-by: Volkan Özçelik <[email protected]> --------- Signed-off-by: Volkan Özçelik <[email protected]>
vmware-tanzu · Sep 13, 2024 · 43505e8 · 43505e8
1 parent 187ca6e
commit 43505e8
Show file tree

Hide file tree

Showing 18 changed files with 42 additions and 17 deletions.
diff --git a/dockerfiles/example/init-container.Dockerfile b/dockerfiles/example/init-container.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 COPY app /build/app
 COPY core /build/core
 COPY lib /build/lib

diff --git a/dockerfiles/example/multiple-secrets.Dockerfile b/dockerfiles/example/multiple-secrets.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 COPY app /build/app
 COPY core /build/core
 COPY lib /build/lib

diff --git a/dockerfiles/example/sdk-go.Dockerfile b/dockerfiles/example/sdk-go.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 COPY app /build/app
 COPY core /build/core
 COPY lib /build/lib

diff --git a/dockerfiles/example/sidecar.Dockerfile b/dockerfiles/example/sidecar.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 COPY app /build/app
 COPY core /build/core
 COPY lib /build/lib

diff --git a/dockerfiles/util/inspector.Dockerfile b/dockerfiles/util/inspector.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/util/keygen.Dockerfile b/dockerfiles/util/keygen.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist-fips/init-container.Dockerfile b/dockerfiles/vsecm-ist-fips/init-container.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist-fips/keystone.Dockerfile b/dockerfiles/vsecm-ist-fips/keystone.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist-fips/safe.Dockerfile b/dockerfiles/vsecm-ist-fips/safe.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist-fips/sentinel.Dockerfile b/dockerfiles/vsecm-ist-fips/sentinel.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 RUN mkdir /build
 COPY app /build/app
 COPY core /build/core

diff --git a/dockerfiles/vsecm-ist-fips/sidecar.Dockerfile b/dockerfiles/vsecm-ist-fips/sidecar.Dockerfile
@@ -10,7 +10,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 RUN mkdir /build
 COPY app /build/app
 COPY core /build/core

diff --git a/dockerfiles/vsecm-ist/init-container.Dockerfile b/dockerfiles/vsecm-ist/init-container.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist/keystone.Dockerfile b/dockerfiles/vsecm-ist/keystone.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist/safe.Dockerfile b/dockerfiles/vsecm-ist/safe.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 
 RUN mkdir /build
 COPY app /build/app

diff --git a/dockerfiles/vsecm-ist/sentinel.Dockerfile b/dockerfiles/vsecm-ist/sentinel.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 RUN mkdir /build
 COPY app /build/app
 COPY core /build/core

diff --git a/dockerfiles/vsecm-ist/sidecar.Dockerfile b/dockerfiles/vsecm-ist/sidecar.Dockerfile
@@ -9,7 +9,7 @@
 # */
 
 # builder image
-FROM golang:1.22.3-alpine3.19 AS builder
+FROM golang:1.23.1-alpine3.20 AS builder
 RUN mkdir /build
 COPY app /build/app
 COPY core /build/core

diff --git a/docs/content/timeline/changelog.md b/docs/content/timeline/changelog.md
@@ -17,6 +17,31 @@ weight = 11
 
 TBD
 
+## [0.27.1] - 2024-09-13
+
+This is a security and stability release. We have fixed several vulnerabilities
+and made the components more robust.
+
+### Added
+
+* Increased test coverage.
+* Minor bug fixes and performance improvements.
+* Documentation updates.
+
+### Changed
+
+* Updated Go to version 1.23.1 on major components. vSecM SDK remains at Go 
+  version 1.21.0 to offer compatibility with older systems. This is the smallest
+  version that we can support with the SDK without exposing vulnerabilities.
+
+### Fixed
+
+* Fixed a bug where SPIRE Server was crashing when using Helm charts and not
+  enabling persistent volumes.
+
+### Security 
+
+* Fixed GHSA-xr7q-jx4m-x55m [Private tokens could appear in logs if context containing gRPC metadata is logged in ](https://github.com/vmware-tanzu/secrets-manager/security/dependabot/21)
 
 ## [0.27.0] - 2024-07-28
 

diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/vmware-tanzu/secrets-manager
 
-go 1.22.3
+go 1.23.1
 
 require (
 	filippo.io/age v1.1.1