Releases: mindersec/minder
Releases · mindersec/minder
v0.0.76
What's Changed
- Include provider ID in minder CLI response by @navnitms in #5029
- Add Trivy's own cache to ignore list by @puerco in #5033
- Fix the failing auth login command due to missing credentials by @rdimitrov in #5031
- Add project id foreign key to data sources tables. by @blkt in #5026
- Auto-generated DB schema update - 2024-11-25 07:52:38 by @github-actions in #5034
- build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #5035
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.2 to 2.1.3 by @dependabot in #5037
- build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.38.0 to 1.39.1 by @dependabot in #5039
- build(deps): bump github.com/google/cel-go from 0.22.0 to 0.22.1 by @dependabot in #5038
- build(deps): bump the docusaurus group in /docs with 4 updates by @dependabot in #5041
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 by @dependabot in #5036
- Kick off data sources service by @JAORMX in #5022
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 in /tools by @dependabot in #5040
- Migrate trusty eval engine to Trusty v2 API. by @blkt in #5013
- build(deps): bump github.com/charmbracelet/bubbletea from 1.2.3 to 1.2.4 by @dependabot in #5052
- build(deps): bump github.com/golangci/golangci-lint from 1.62.0 to 1.62.2 in /tools by @dependabot in #5053
- Implement
BuildDataSourceRegistry
in data sources service by @JAORMX in #5050 mindev
: Add ability to parse and use data sources by @JAORMX in #5055- Datasource Service Create by @teodor-yanev in #5056
- Add ListRuleTypesReferencesByDataSource db query by @rdimitrov in #5057
- build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot in #5059
- Instantiate data sources from the policy engine by @JAORMX in #5060
- Set required proto fields in cursor messages by @eleftherias in #5061
- Implement the Delete handler for the datasource service by @rdimitrov in #5062
- Set required proto fields in artifact messages by @eleftherias in #5063
- Implement validation functions for Data Source protobuf object by @JAORMX in #5064
- Remove
GetRest
leftover from datasources API validator. by @JAORMX in #5065 - Update the time delay when deleting an account by @rdimitrov in #5066
Full Changelog: v0.0.75...v0.0.76
v0.0.75
What's Changed
- build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 by @dependabot in #4984
- build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 in /tools by @dependabot in #4983
- build(deps): bump github.com/go-playground/validator/v10 from 10.22.1 to 10.23.0 by @dependabot in #4985
- build(deps): bump github.com/styrainc/regal from 0.29.1 to 0.29.2 by @dependabot in #4986
- build(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /docs by @dependabot in #4987
- Add Minder resource parsing using protojson and use it for data sources by @JAORMX in #4981
- Add support for labels to
minder history list
. by @blkt in #4961 - Surface ruletype validation errors to user by @eleftherias in #4989
- Add entitlements assignment at the time of project creation by @teodor-yanev in #4963
- Fix the unit tests validating for required rule type fields by @rdimitrov in #4998
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.32.5 by @dependabot in #4992
- build(deps): bump github.com/xanzy/go-gitlab from 0.113.0 to 0.114.0 by @dependabot in #4993
- Validate rule type alert during creation/update by @eleftherias in #4991
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.2 to 1.38.3 by @dependabot in #4995
- build(deps): bump github.com/bufbuild/protovalidate-go from 0.7.2 to 0.7.3 by @dependabot in #4996
- compose: Override settings so we don't need to change config by @JAORMX in #4990
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.4 to 1.28.5 by @dependabot in #4994
- Implement data source interfaces & registration in rego engine by @JAORMX in #4997
- build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot in #5005
- build(deps): bump github.com/charmbracelet/bubbletea from 1.2.2 to 1.2.3 by @dependabot in #5006
- Remove leftover printf by @JAORMX in #5007
- Validate ruletype remediation during creation/update by @eleftherias in #5003
- build(deps): bump the docusaurus group in /docs with 4 updates by @dependabot in #5004
- Use correct structure to validate data sources input by @JAORMX in #5010
- Decouple Trusty engine from Trusty SDK structs. by @blkt in #5011
- Remove unused RetrieveProperty function by @navnitms in #5014
- build(deps): bump k8s.io/client-go from 0.31.2 to 0.31.3 by @dependabot in #5018
- build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in #5016
- Implement REST datasource driver by @JAORMX in #5009
- Add migration for data sources. by @blkt in #5008
- Auto-generated DB schema update - 2024-11-21 13:21:56 by @github-actions in #5021
- build(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8 by @dependabot in #5023
- Add data sources to ruletype API by @JAORMX in #5019
- Expect
GetContext
for context v2 resources by @JAORMX in #5025 - Add datasources CLI stubs by @teodor-yanev in #5020
- Auto-generated cli documentation update - 2024-11-22 15:49:21 by @github-actions in #5027
- Add more queries for managing bundles and subscriptions by @rdimitrov in #5028
New Contributors
Full Changelog: v0.0.74...v0.0.75
v0.0.74
What's Changed
- Update oapi-codegen to v2.4.1 by @alexandear in #4947
- build(deps): bump github.com/charmbracelet/bubbletea from 1.2.1 to 1.2.2 by @dependabot in #4957
- build(deps): bump github.com/zitadel/oidc/v3 from 3.32.1 to 3.33.0 by @dependabot in #4955
- build(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by @dependabot in #4954
- cli: Print rule types as applyable YAML by @JAORMX in #4936
- Print YAML with 2 spaces for indentation by @JAORMX in #4958
- build(deps): bump github.com/styrainc/regal from 0.28.0 to 0.29.0 by @dependabot in #4956
- Allow creating/applying ruletypes from standard input by @JAORMX in #4959
- build(deps): bump github.com/bufbuild/buf from 1.46.0 to 1.47.0 in /tools by @dependabot in #4967
- build(deps): bump github.com/zitadel/oidc/v3 from 3.33.0 to 3.33.1 by @dependabot in #4968
- cli: Print profiles as applyable YAML by @JAORMX in #4960
- Validate JQ query during ruletype creation/update by @eleftherias in #4966
- Add tests for rego validation in ruletypes by @eleftherias in #4969
- build(deps): bump github/codeql-action from 3.27.3 to 3.27.4 by @dependabot in #4978
- build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #4977
- build(deps): bump github.com/bufbuild/buf from 1.47.0 to 1.47.2 in /tools by @dependabot in #4971
- Add more code docs for the
required
field validation by @JAORMX in #4979 - Fix properties update validation by @JAORMX in #4980
- build(deps): bump github.com/styrainc/regal from 0.29.0 to 0.29.1 by @dependabot in #4974
- build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /tools by @dependabot in #4972
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.3 to 1.28.4 by @dependabot in #4976
- build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.35.1-20240920164238-5a7b106cbb87.1 to 1.35.2-20240920164238-5a7b106cbb87.1 by @dependabot in #4975
- build(deps): bump the otel group with 2 updates by @dependabot in #4973
- Add data sources protobuf by @JAORMX in #4962
- Kick off CRUD API & Minder API Authz by @teodor-yanev in #4970
- Rule Type schema validation: change library and apply defaults by @JAORMX in #4953
- Exclude profiles with labels from history. by @blkt in #4910
New Contributors
- @alexandear made their first contribution in #4947
Full Changelog: v0.0.73...v0.0.74
v0.0.73
What's Changed
- Deprecate unused provider field in proto by @eleftherias in #4878
- Add proto validation for UUIDs by @eleftherias in #4880
- Add proto validation for integers by @rdimitrov in #4879
- Deprecate the port proto message by @rdimitrov in #4881
- Update ignore_empty to either use .ignore = IGNORE_IF_DEFAULT_VALUE or remove by @evankanderson in #4883
- Have run-docker-teardown respect services variable by @evankanderson in #4884
- Fix nil flag client, and warn about use in future by @evankanderson in #4885
- Sort profile status table by entities by @evankanderson in #4886
- build(deps): bump anchore/sbom-action from 0.17.6 to 0.17.7 by @dependabot in #4888
- build(deps): bump github.com/xanzy/go-gitlab from 0.112.0 to 0.113.0 by @dependabot in #4887
- Remove unimplemented rpc from proto file by @eleftherias in #4889
- Add proto validation for names by @eleftherias in #4890
- Add proto validation for artifact filtering via from by @rdimitrov in #4892
- Add proto validation for invite codes by @rdimitrov in #4893
- Add proto validation for cursor indexes by @rdimitrov in #4891
- Update proto validations for from and cursor fields by @rdimitrov in #4895
- build(deps): bump github.com/google/cel-go from 0.21.0 to 0.22.0 by @dependabot in #4896
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.1 to 1.28.2 by @dependabot in #4900
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.0 to 1.38.1 by @dependabot in #4898
- Add proto validation for RepositoryService by @rdimitrov in #4902
- Validate rego when parsing rule types by @JAORMX in #4906
- Add proto validation for OAuthService by @rdimitrov in #4901
- Add proto validation for Projects by @rdimitrov in #4909
- Add proto validation for EvalResultRequest by @rdimitrov in #4908
- Add proto validation for Providers by @rdimitrov in #4911
- Add proto validation for entity type in ProvidersService by @rdimitrov in #4903
- build(deps): bump github.com/charmbracelet/bubbletea from 1.1.2 to 1.2.0 by @dependabot in #4912
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.2 to 1.28.3 by @dependabot in #4913
- build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by @dependabot in #4914
- build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by @dependabot in #4916
- build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.0 by @dependabot in #4915
- Add proto validation for evaluation history filters by @eleftherias in #4904
- Fix type from
trusty-sdk-go
. by @blkt in #4917 - Update the project validation and return a user visible error if email validation fails by @rdimitrov in #4918
- Make description optional for project create and update by @rdimitrov in #4920
- Add validation for jq eval type by @JAORMX in #4919
- Add proto validation for ProfileService by @rdimitrov in #4905
- Bump
trusty-sdk-go
to latest release. by @blkt in #4922 - Allow for the ' character in names and descriptions by @rdimitrov in #4923
- Fix validation for getting profile by name by @rdimitrov in #4924
- Fix linting errors for golangci-lint v1.62 by @rdimitrov in #4933
- build(deps): bump github.com/google/osv-scalibr from 0.1.4-0.20241022131720-b583481e91a8 to 0.1.4 by @dependabot in #4897
- build(deps): bump the otel group with 9 updates by @dependabot in #4925
- build(deps): bump golang.org/x/tools from 0.26.0 to 0.27.0 in /tools by @dependabot in #4926
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.1 to 1.38.2 by @dependabot in #4927
- build(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 by @dependabot in #4928
- build(deps): bump golang.org/x/mod from 0.21.0 to 0.22.0 by @dependabot in #4930
- build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot in #4931
- build(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by @dependabot in #4932
- build(deps): bump github.com/golangci/golangci-lint from 1.61.0 to 1.62.0 in /tools by @dependabot in #4929
- Upgrade to golang 1.23.3 by @JAORMX in #4934
- Add proto validation for RuleType by @rdimitrov in #4907
- Allow display names to have brackets by @rdimitrov in #4937
- build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.37.1 to 1.38.0 by @dependabot in #4938
- build(deps): bump github.com/charmbracelet/bubbletea from 1.2.0 to 1.2.1 by @dependabot in #4939
- build(deps): bump github.com/openfga/openfga from 1.7.0 to 1.8.0 by @dependabot in #4942
- build(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by @dependabot in #4940
- build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in #4941
- Update the embedded secret_scanning ruletype used in quickstart by @rdimitrov in #4946
- Update proto validations by @rdimitrov in #4948
- Allow repo names to start with . by @rdimitrov in #4950
Full Changelog: v0.0.72...v0.0.73
v0.0.72
What's Changed
- Skip rule test files by @rdimitrov in #4836
- Simplify logic for required branch parameter to gh_branch_protection by @evankanderson in #4801
- build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.1 to 2.1.2 by @dependabot in #4832
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.0 to 1.37.1 by @dependabot in #4839
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.0 to 1.28.1 by @dependabot in #4837
- Add a YQ-powered remediation function by @jhrozek in #4830
- build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.37.0 to 1.37.1 by @dependabot in #4833
- Fix a 0.2% natschannel_test flake with some forced scheduler sleeps by @evankanderson in #4841
- build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.7 to 1.4.0 by @dependabot in #4842
- build(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 by @dependabot in #4844
- build(deps): bump github.com/bufbuild/buf from 1.45.0 to 1.46.0 in /tools by @dependabot in #4843
- Measure coverage for
pkg
folder. by @blkt in #4845 - build(deps): bump github.com/zitadel/oidc/v3 from 3.31.0 to 3.32.0 by @dependabot in #4847
- build(deps): bump github.com/openfga/openfga from 1.6.1 to 1.7.0 by @dependabot in #4848
- Add flag-driven event publisher by @evankanderson in #4784
- Add support for proto message validation by @rdimitrov in #4840
- Validate the user invitation HTML templates by @rdimitrov in #4835
- Allow proto email to be empty by @rdimitrov in #4852
- Fix proto validations for project and display_name by @rdimitrov in #4854
- build(deps): bump github.com/open-policy-agent/opa from 0.69.0 to 0.70.0 by @dependabot in #4857
- build(deps): bump github.com/charmbracelet/lipgloss from 0.13.1 to 1.0.0 by @dependabot in #4855
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.1 to 1.38.0 by @dependabot in #4858
- build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.34.2-20240920164238-5a7b106cbb87.2 to 1.35.1-20240920164238-5a7b106cbb87.1 by @dependabot in #4856
- Remove duplicated if statement in NewEventer by @rdimitrov in #4859
- Fix the set bundle version query for the subscriptions table by @rdimitrov in #4860
- Add email field validation to protos by @eleftherias in #4861
- Add proto validation for project ID by @eleftherias in #4862
- Add pkg/querier package by @rdimitrov in #4849
- build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #4865
- build(deps): bump github.com/zitadel/oidc/v3 from 3.32.0 to 3.32.1 by @dependabot in #4866
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 in /tools by @dependabot in #4868
- build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.0 to 1.4.1 by @dependabot in #4867
- build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 by @dependabot in #4864
- Fix docs references in README.md by @staceypotter in #4863
- Add proto validation for entity IDs by @eleftherias in #4869
- Add proto validation for profile ID by @eleftherias in #4870
- Update docusaurus to 3.6.0 by @eleftherias in #4875
- Group docusaurus PRs into a single update group by @rdimitrov in #4876
- build(deps): bump path-to-regexp from 1.8.0 to 1.9.0 in /docs by @dependabot in #4877
Full Changelog: v0.0.71...v0.0.72
v0.0.71
What's Changed
- build(deps): bump k8s.io/client-go from 0.31.1 to 0.31.2 by @dependabot in #4803
- build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #4802
- build(deps): bump cookie and express in /docs by @dependabot in #4806
- Move config from internal to pkg by @rdimitrov in #4805
- Move selectors from internal/engine to pkg/engine by @rdimitrov in #4813
- Move getting a logger from config to the config package by @rdimitrov in #4816
- Move ruletypes from internal to pkg by @rdimitrov in #4810
- Document mindev entity schema by @ethomson in #4820
- Propagate project and entity information to rule evaluation logs by @evankanderson in #4818
- ko-build/ko broke their latest v0.17.0 release by @evankanderson in #4822
- build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in #4827
- build(deps): bump actions/setup-node from 4.0.4 to 4.1.0 by @dependabot in #4825
- build(deps): bump github.com/charmbracelet/bubbletea from 1.1.1 to 1.1.2 by @dependabot in #4823
- build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.36.1 to 1.37.0 by @dependabot in #4824
- build(deps): bump coverallsapp/github-action from 2.3.3 to 2.3.4 by @dependabot in #4826
- Move profiles from internal to pkg by @rdimitrov in #4811
- Move events from internal to pkg by @rdimitrov in #4812
- Fix
mindev ruletype lint
. by @blkt in #4828
Full Changelog: v0.0.70...v0.0.71
v0.0.70
What's Changed
- build(deps): bump mermaid from 10.8.0 to 10.9.3 in /docs by @dependabot in #4792
- Apply a bunch of dependabot updates by @evankanderson in #4791
- Fix auto-generated keycloak client by @JAORMX in #4796
- mindev: Add new subcommand to validate ruletype updates by @JAORMX in #4790
- build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in #4797
- Make
minder ruletype
apply
/create
smarter by @JAORMX in #4798 - build(deps): bump github.com/openfga/go-sdk from 0.6.2 to 0.6.3 by @dependabot in #4795
- Expose a helper to run a JQ expression on YAML input through our Rego library by @jhrozek in #4793
- build(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7 in /docs by @dependabot in #4799
- build(deps): bump github.com/charmbracelet/lipgloss from 0.13.0 to 0.13.1 by @dependabot in #4794
Full Changelog: v0.0.69...v0.0.70
v0.0.69
What's Changed
- Auto-generated cli documentation update - 2024-10-17 13:33:06 by @github-actions in #4774
- Change defaults for pull request rules by @eleftherias in #4773
- build(deps): bump github.com/yuin/goldmark from 1.7.7 to 1.7.8 by @dependabot in #4767
- build(deps): bump mobx from 6.13.4 to 6.13.5 in /docs by @dependabot in #4765
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.43 to 1.28.0 by @dependabot in #4768
- build(deps): bump coverallsapp/github-action from 2.3.1 to 2.3.3 by @dependabot in #4770
- build(deps): bump the otel group with 2 updates by @dependabot in #4766
- Add another mirror for Trivy DB in security.yml by @rdimitrov in #4776
- build(deps): bump github.com/nats-io/nats-server/v2 from 2.10.21 to 2.10.22 by @dependabot in #4779
- build(deps): bump github.com/stacklok/frizbee from 0.1.3 to 0.1.4 by @dependabot in #4778
- build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0 by @dependabot in #4777
- build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0 in /tools by @dependabot in #4780
- build(deps): bump @mdx-js/react from 3.0.1 to 3.1.0 in /docs by @dependabot in #4782
- build(deps): bump github.com/open-feature/go-sdk from 1.13.0 to 1.13.1 by @dependabot in #4781
- build(deps): bump anchore/sbom-action from 0.17.4 to 0.17.5 by @dependabot in #4789
- Introduce
ResourceMeta
and general resource parsing by @JAORMX in #4783
Full Changelog: v0.0.68...v0.0.69
v0.0.68
v0.0.67
What's Changed
- build(deps): bump the otel group with 2 updates by @dependabot in #4747
- build(deps): bump github.com/xanzy/go-gitlab from 0.111.0 to 0.112.0 by @dependabot in #4749
- Output test coverage from unit tests action by @JAORMX in #4752
- build(deps): bump github.com/yuin/goldmark from 1.7.4 to 1.7.6 by @dependabot in #4748
- Re-enable NATS test by @evankanderson in #4746
- build(deps): bump github.com/yuin/goldmark from 1.7.6 to 1.7.7 by @dependabot in #4758
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.36.2 to 1.37.0 by @dependabot in #4760
- build(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #4759
- build(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 by @dependabot in #4757
- build(deps): bump anchore/sbom-action from 0.17.3 to 0.17.4 by @dependabot in #4756
- build(deps): bump mobx from 6.13.3 to 6.13.4 in /docs by @dependabot in #4754
- Add request id to logs. by @blkt in #4461
- Add evaluation error to security advisory by @eleftherias in #4761
- Display request ids in the CLI. by @blkt in #4763
- Deprecate pushing a brew formula to stacklok/tap by @rdimitrov in #4769
- Update Copyright headers, add workflow to enforce by @puerco in #4764
- Revert "Temporarily remove migration check" by @puerco in #4771
- Implement Minder TestKit by @JAORMX in #4762
Full Changelog: v0.0.66...v0.0.67