Athenz v1.10.59 Release

What's Changed

• fetch verification key from server during access token validation for 1.10.x-jetty9 by @RikuyaMatsumura in #2369
• 1.10.x release - update dependencies + unit tests by @havetisyan in #2413

Full Changelog: v1.10.58...v1.10.59
This version was not published in Maven Central. Instead please use v1.10.60 Release

Athenz v1.11.46 Release

What's Changed

• for notification emails expand groups and delegated role membership by @havetisyan in #2388
• replace interface{} with string for zms-cli import operations by @havetisyan in #2391
• support proxy principal spiffe uri in access token requests by @havetisyan in #2392
• new bit to disable notifications over a week away by @havetisyan in #2393
• Extract and reuse duplicate helper function ExtractSignerInfo. by @zhaoyonghe in #2324
• for groups to disable expiry notfs look for both expiration/reminder tags by @havetisyan in #2397
• msd api to return kubernetes network policy object by @abvaidya in #2396

Full Changelog: v1.11.45...v1.11.46

Athenz v1.11.45 Release

What's Changed

• fix add/edit tags for policy and service by @jimmytsang in #2358
• failure with insert principal where 2 roles are created simultaneously with the same new member by @havetisyan in #2365
• oidc response - make redirect uri optional if json output is requested by @havetisyan in #2367
• failure with insert principal where 2 roles are created simultaneously with the same new member by @havetisyan in #2368
• Fix service tags tab hiding other tabs by @jimmytsang in #2361
• Add GetZone from meta endpoint for gcp by @YuchenWang01 in #2366
• double encoding name parameter for deleteStaticWorkload by @jimmytsang in #2370
• bump awssdk from 2.20.162 to 2.21.6 for netty vuln by @ysknkd in #2372
• new zms-cli option show-domain-attrs to display domain attributes by @havetisyan in #2376
• remove redirect-uri from fetch id token call since it's optional for json output by @havetisyan in #2375
• fix membership approval email view in gmail by @havetisyan in #2377
• adding support for service_name.service_namespace.svc in K8S san dns by @abvaidya in #2378
• allow updating the last_reviewed_date for role/group through meta api by @havetisyan in #2381
• clean-up hostname verifier support in zts java client by @havetisyan in #2382
• Temporary network issue causes aws temp creds stop refreshing by @havetisyan in #2379
• replacing wix-embedded-mysql with testcontainers-java by @abvaidya in #2384
• update jetty/java/go deps to their latest releases by @havetisyan in #2386

Full Changelog: v1.11.44...v1.11.45

Athenz v1.11.44 Release

What's Changed

• add fetcherError null check, debug only if there is error by @jimmytsang in #2347
• fetch verification key from server during access token validation by @ricordanza in #2323
• Creating a PR Template file by @oohsai in #2344
• Make KeyRefresher's background thread more efficient by @jeffreytolar in #2346
• Bump golang.org/x/net from 0.16.0 to 0.17.0 by @dependabot in #2345
• Fix pr template by @hiragi-gkuth in #2350
• change the athenz-zpe-java-client jacoco coverage threshold from 0.8711 to 0.8702 by @ricordanza in #2349
• fix 'make deploy-local' by @hiragi-gkuth in #2348
• provide domain authz for expanded role lookup by @havetisyan in #2351
• Update go zpe README.md by @WindzCUHK in #2356
• updated go/grpc and java dependencies by @havetisyan in #2357
• Update LY Corporation name (formerly known as Yahoo! Japan) by @WindzCUHK in #2360
• Add microsegmentation to services table (Copied from Noy) by @jimmytsang in #2342
• provide zms endpoint to return list of roles and groups for review by @havetisyan in #2355
• Introduce new endpoint to search workloads by domain and services by @rajeshal in #2352
• msd go client sync up with rdl by @havetisyan in #2362

New Contributors

• @oohsai made their first contribution in #2344
• @rajeshal made their first contribution in #2352

Full Changelog: v1.11.43...v1.11.44

Athenz v1.11.43 Release

What's Changed

• DB names are lower case for last notification time check by @havetisyan in #2318
• Extract and export ClientTLSConfigFromPEM. by @zhaoyonghe in #2321
• Show msd error by @mendi160 in #2317
• Fix delete static workload by @mendi160 in #2315
• fix user service users map by @dvirguttman in #2319
• Make project labels selectable on GCP login page by @jeffreytolar in #2320
• skip loading on parent component for msd edit by @jimmytsang in #2322
• updated rdl schemas by @abvaidya in #2326
• log x509 cert serial number in the access log files by @havetisyan in #2325
• Add support for CIDR blocks and fix search for static instances by @MartinTrojans in #2327
• add role description tooltip by @dvirguttman in #2304
• unit test for jwt with none algorithm by @havetisyan in #2329
• Fix gcp login initially loading error no roles incorrectly by @jimmytsang in #2330
• sanitize error logs by @jimmytsang in #2333
• When user selects scope aws, disable report mode by @jimmytsang in #2328
• support omit-domain flag in sia through ATHENZ_SIA_OMIT_DOMAIN env va… by @havetisyan in #2336
• add logic to skip packages during publish by @havetisyan in #2337
• using a dedicated regex for msd static workload name validation by @abvaidya in #2338
• fix test access token signing key to 2048bit+ for valid testing by @ysknkd in #2339
• update java/go dependencies to their latest releases by @havetisyan in #2341

New Contributors

• @zhaoyonghe made their first contribution in #2321

Full Changelog: v1.11.42...v1.11.43

Athenz v1.11.42 Release

What's Changed

• zts server code cleanup - replace deprecated calls, etc by @havetisyan in #2294
• server common library code cleanup - replace deprecated calls, etc by @havetisyan in #2299
• zms server code cleanup - replace deprecated calls, etc by @havetisyan in #2295
• container library code cleanup - replace deprecated calls, etc by @havetisyan in #2296
• auth-core library code cleanup - replace deprecated calls, etc by @havetisyan in #2297
• common libraries code cleanup - replace deprecated calls, etc by @havetisyan in #2298
• libs/go/zmscli: fix dropped errors by @alrs in #2301
• handle assertion conditions in putPolicy api by @mendi160 in #2300
• update jacoco code coverage percentages by @havetisyan in #2303
• make sure only one notification run per-day by @havetisyan in #2305
• new static instance type - service_subnet by @abvaidya in #2307
• Add support for policy tags. by @royelbaum in #2210
• Add accountId, projectNumber, launchTime in raw.Doc by @YuchenWang01 in #2309
• Add support for service tag by @royelbaum in #2237
• Add new fields to hostdoc.Doc by @YuchenWang01 in #2311
• utils/zts-svccert: fix dropped errors by @alrs in #2312
• new store-token-option to store access token without quotes by @havetisyan in #2313

New Contributors

• @YuchenWang01 made their first contribution in #2309

Full Changelog: v1.11.41...v1.11.42

Athenz v1.10.58 Release

#2306 add constructor to allow proxy configuration

remove nodejs/npm from install steps since we're not building UI anymore from the 1.10.x branch

Athenz v1.11.41 Release

What's Changed

• [skip ci] use better env variable to get just the tag name by @abvaidya in #2286
• create sbom for athenz components by @abvaidya in #2287
• add constructor to allow proxy configuration by @ysknkd in #2284
• fix review group page error with expiry settings by @jimmytsang in #2289
• include assertion conditions in get policy response by @mendi160 in #2285
• consolidate all email notifications so the user gets only one email p… by @havetisyan in #2288
• support getting SIA access token config from env variable by @havetisyan in #2290
• new buildSSLContext method based on ca/cert/key pem strings by @havetisyan in #2291
• dump description in zms-cli show-role command by @dvirguttman in #2293
• update jetty/java/go dependencies to their latest releases by @havetisyan in #2292

Full Changelog: v1.11.40...v1.11.41

Athenz v1.11.40 Release

What's Changed

• add a new static validator type in msd by @abvaidya in #2278
• ability to add members by searching for their names by @dvirguttman in #2272
• improve error logging when validating role cert csr by @havetisyan in #2279
• Add search capability for Add Group component by @dvirguttman in #2280
• libs/go/sia/agent/devel/ztsmock: fix dropped error by @alrs in #2283

New Contributors

• @alrs made their first contribution in #2283

Full Changelog: v1.11.39...v1.11.40

Athenz v1.11.39 Release

What's Changed

• include gcp instance name in identity cert uri by @havetisyan in #2270
• Update product Id link by @jimmytsang in #2271
• allow aws attestion role only include service name by @havetisyan in #2273
• [skip ci] docker build using actions by @abvaidya in #2274
• provide config option to specify external creds providers by @havetisyan in #2275
• remove item from fetch queue if zts reports bad request by @havetisyan in #2276
• avoid ConcurrentModificationExceptions when processing domain updates by @havetisyan in #2277

Full Changelog: v1.11.38...v1.11.39