Skip to content

Latest commit

 

History

History
222 lines (124 loc) · 9.76 KB

CHANGELOG.md

File metadata and controls

222 lines (124 loc) · 9.76 KB

1.4.0 (March 11, 2023)

IMPROVEMENTS:

  • Add revoke_on_delete field to config/admin path. This enable automatic revocation of admin access token when set to true. This field will also be set to true if admin access token is rotated. Issue: #86 PR: #161

BUG FIXES:

  • Fix default_ttl and max_ttl for config/user_token path fall back logic. Issue: #159 PR: #162

1.3.0 (Feburary 27, 2023)

IMPROVEMENTS:

  • Add support for username specific user token configuration path: config/user_token/<username>
  • Add ability to override access_token in config/user_token/<username> path.
  • Add refresh_token field to allow manual refreshing of access token.
  • When access token expires, plugin now attempts to get a new access token using the refresh token
  • Update README with more details documentation for all paths

BUG FIXES:

  • Fix refreshable and include_reference_token parameters not working for user token. Issue: #154
  • Fix default_ttl, max_ttl, etc. logic and applies to token expiration (when applicable).

PR: 155

1.2.0 (January 10, 2023)

IMPROVEMENTS:

  • Add refreshable and include_reference_token parameters to both roles/<role name> and user_token/<username> paths. PR: 144
  • Bump jfrog/artifactory-jcr from 7.71.8 to 7.71.9 in /scripts PR: 143
  • Bump golang.org/x/crypto from 0.14.0 to 0.17.0 PR: 142
  • Bump github.com/hashicorp/go-hclog from 1.6.1 to 1.6.2 PR: 141
  • Bump jfrog/artifactory-jcr from 7.71.5 to 7.71.8 in /scripts PR: 140
  • Bump github.com/hashicorp/go-hclog from 1.5.0 to 1.6.1 PR: 139
  • Bump jfrog/artifactory-jcr from 7.71.4 to 7.71.5 in /scripts PR: 138

1.1.4 (November 22, 2023)

BUG FIXES:

  • bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 PR: 137

1.1.3 (October 30, 2023)

BUG FIXES:

  • Bump google.golang.org/grpc from 1.57.0 to 1.57.1 PR: 131
  • Bump jfrog/artifactory-jcr from 7.68.14 to 7.71.3 in /scripts PR: 132
  • Bump github.com/docker/docker from 24.0.5+incompatible to 24.0.7+incompatible PR: 133

1.1.2 (October 12, 2023)

BUG FIXES:

  • Bump golang.org/x/net from 0.8.0 to 0.17.0 PR: 129

1.1.1 (September 25, 2023)

BUG FIXES:

  • Bump github.com/hashicorp/vault/sdk from 0.9.1 to 0.10.0 PR: 128

1.1.0 (July 25, 2023)

IMPROVEMENTS:

  • Add the artifactory/user_token/ path to support users obtaining tokens for themselves. PR: #113

1.0.0 (May 15, 2023)

BREAKING CHANGES:

  • GitHub repository renamed to 'vault-plugin-secrets-artifactory'. Issue: #80 PR: #101

0.3.1 (May 11, 2023)

IMPROVEMENTS:

  • Add new, optional, field bypass_artifactory_tls_verification to config/admin path. This allows bypassing TLS connection verification with Artifactory instance. PR: #100

0.3.0 (May 10, 2023)

IMPROVEMENTS:

  • Update release process to publish the binaries directly (without zipping). The checksums file now contain checksums for the binaries (vs the zip file). Issue: #81 PR: #99

0.2.17 (April 25, 2023)

IMPROVEMENTS:

  • Add support for optional username and description to token rotation. PR: #85

BUG FIXES:

  • Fix premature export of JFROG_ACCESS_TOKEN env var in makefile. PR: #77
  • Fix parsing of admin usernames with /. PR: #78
  • Additional makefile fixes. PR: #79

0.2.16 (April 20, 2023)

IMPROVEMENTS:

  • Add version suffix for development build (-dev+<git short hash>). PR: #74
  • Update Vault API module to 1.9.1. PR: #75

0.2.15 (April 18, 2023)

IMPROVEMENTS:

  • Fix empty strings for optional attributes when reading roles. PR: #66
  • Fix inconsistent use of env vars for acceptance tests. PR: #71

0.2.14 (April 18, 2023)

IMPROVEMENTS:

  • Upgrade dependencies to latest version.
  • Update Go minimum version to 1.18 (which we have been using for a while now).

PR: #65

0.2.13 (March 30, 2023)

IMPROVEMENTS:

  • Sign release checksums file with GPG key. Release also include public key for signature verification.

PR: #54

0.2.12 (March 23, 2023)

IMPROVEMENTS:

  • Plugin now reports its version to Vault server. You can see it with vault plugin list command.
  • Remove version number from the binary file name (now artifactory-secrets-plugin, vs artifactory-secrets-plugin_v0.2.6) now that it registers as 'versioned' plugin with Vault server.
  • Update README on how to register plugin to reflect this change of binary name.
  • Update Makefile to use GoRelease (same as GitHub Action) to build binary for development process.

PR: #53

0.2.11 (March 20, 2023)

IMPROVEMENTS:

  • Switch to using POSTing JSON (instead of form) when creating token.
  • expires_in and force_revocable fields are now opt-in.

Issue: #50 PR: #52

0.2.10 (March 13, 2023)

BUG FIXES:

  • Temporarily disable force_revocable due to revoke token failing. Issue: #50 PR: #51

0.2.9 (March 13, 2023)

IMPROVEMENTS:

PR: #47

0.2.8 (March 13, 2023)

IMPROVEMENTS:

  • Add support for force_revocable flag available in Artifactory 7.50.3+. PR: #45

0.2.7 (February 27, 2023)

BUG FIXES:

  • Fix revoke token error check only for HTTP status code 200. Now it errors only for status code >= 400. Also include token ID in logs and error message. PR: #41

0.2.6 (February 23, 2023)

IMPROVEMENTS:

  • Include additional token information when reading from config. PR: #39

0.2.5 (February 22, 2023)

IMPROVEMENTS:

  • Use username from current token for new token during rotation. PR: #34
  • Add env vars to make command make setup works. PR: #37

0.2.4 (February 21, 2023)

IMPROVEMENTS:

  • Update golang.org/x/net and golang.org/x/crypto modules to latest version. PR: #32 Dependabot alerts: 1, 2, 3, 4

0.2.3 (January 31, 2023)

BUG FIXES:

  • Fix breakage introduced in 0.2.0 where default port fallback was incorrectly handled. PR: #29

0.2.2 (January 24, 2023)

BUG FIXES:

  • Fix HTTP response body not closed before root certificate error is returned. PR: #28

0.2.1 (January 11, 2023)

BUG FIXES:

  • Fix HTTP response body not closed, thus leading to memory leak. PR: #26

0.2.0 (November 30, 2022)

IMPROVEMENTS:

  • Add support for rotating Artifactory admin token. Issue: #14 PR: #17