v5

CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ### v5.0.0
 
-- upgrade to Go 1.9.2
+- build porter with Go 1.9.2
 - default to `--pids-limit=4096`
 
 ### v4.9.0
@@ -61,7 +61,7 @@
 
 - HAProxy stats endpoint auth is now randomized
 - re-enabled keep-alive between HAProxy and containers
-- building on go 1.8
+- build porter with Go 1.8
 - added STANDARD_IA to secrets and CFN template uploads
 
 ### v4.1.1
@@ -110,7 +110,7 @@
 
 - additional UPDATE steady states allow ASG matching
 - any UPDATE in progress state causes hot swap to fail
-- mac binaries are now built with Go 1.7.3
+- build porter with Go 1.7.3
 - match currently promoted stack's ASG size for provisioning and hot swap
 
 ### v3.0.1

MIGRATING.md

@@ -3,6 +3,12 @@ Migration
 
 Read the [release notes](RELEASE_NOTES.md) for context on these changes.
 
+v4 to v5
+--------
+
+No migration steps are needed unless you hit
+[`pids_limit`](docs/detailed_design/config-reference.md#pids_limit)
+
 v3 to v4
 --------
 

RELEASE_NOTES.md

@@ -2,6 +2,19 @@ See the [CHANGELOG](CHANGELOG.md) for a complete list of changes.
 
 `porter` is [semantically versioned](http://semver.org/spec/v2.0.0.html)
 
+v5.0
+====
+
+`docker run` now includes a default `--pids-limit=4096` to protect against fork
+bombs
+
+This shouldn't be a breaking change for normal applications but it's possible
+which is why there's a major version bump.
+
+`--pids-limit` can't be disabled but can be increased from the default by
+defining [`pids_limit`](docs/detailed_design/config-reference.md#pids_limit)
+on the `container`
+
 v4.9
 ====