Skip to content

Releases: mindersec/minder

v0.0.80

12 Dec 15:55
b69d87d
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/xanzy/go-gitlab from 0.114.0 to 0.115.0 by @dependabot in #5178
  • build(deps): bump nanoid from 3.3.7 to 3.3.8 in /docs by @dependabot in #5179
  • build(deps): bump k8s.io/apimachinery from 0.31.3 to 0.31.4 by @dependabot in #5176
  • build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by @dependabot in #5174
  • build(deps): bump github/codeql-action from 3.27.6 to 3.27.7 by @dependabot in #5173
  • Allow empty version to be the same as v1 in providers by @evankanderson in #5172
  • Migrate away from github.com/xanzy/go-gitlab to gitlab.com/gitlab-org/api/client-go by @JAORMX in #5180
  • build(deps): bump k8s.io/client-go from 0.31.3 to 0.31.4 by @dependabot in #5177
  • Structured data source driver by @puerco in #5165
  • Add ingress configuration for data sources. by @blkt in #5186
  • Register the project flag for minder datasource by @rdimitrov in #5189

Full Changelog: v0.0.79...v0.0.80

v0.0.79

10 Dec 14:12
dc1d2ef
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/fergusstrange/embedded-postgres from 1.29.0 to 1.30.0 by @dependabot in #5161
  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 by @dependabot in #5162
  • Bump components' versions in docker-compose.yaml by @prezha in #5152
  • Inform user that datasource is not found when creating rule type by @JAORMX in #5163
  • Docs: Fix up logos and remove alpha note by @danbarr in #5159
  • Update guides to ensure proper perms by @prezha in #5153
  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 in /tools by @dependabot in #5160
  • Add diff ingester, increase test coverage by @evankanderson in #5168
  • Allow git ingester to work on Pull Requests as well by @JAORMX in #5170
  • Promote pull request properties by @JAORMX in #5169
  • Fix enabling repo auto registration for providers by @rdimitrov in #5171

Full Changelog: v0.0.78...v0.0.79

v0.0.78

06 Dec 12:41
07400b0
Compare
Choose a tag to compare

What's Changed

  • Set required proto fields for rules and invitations by @eleftherias in #5110
  • Get data source string from protobuf struct by @JAORMX in #5125
  • Fix dark mode background and API doc colors by @danbarr in #5126
  • build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot in #5129
  • Set required proto fields for provider and eval history by @eleftherias in #5123
  • data sources: Validate individual function updates by @JAORMX in #5131
  • Allow REST data sources to form bodies from input by @JAORMX in #5130
  • Simplify propagation of action settings by @JAORMX in #5132
  • build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0 by @dependabot in #5138
  • build(deps): bump golang.org/x/tools from 0.27.0 to 0.28.0 in /tools by @dependabot in #5134
  • build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 by @dependabot in #5137
  • Run PR check action on synchronize by @dmjb in #5140
  • Handle synchronize events for pull requests in github by @JAORMX in #5141
  • Add simple exponential backoff to data source rest driver by @JAORMX in #5142
  • Don't force default branch in deps ingest and fix segfaults by @JAORMX in #5143
  • Exclude go binary scanner from scalibr, as it sometimes panics on python repos by @evankanderson in #5150
  • Add basic pull request comment alert type by @eleftherias in #5133
  • Bump go to v1.23.4 by @prezha in #5151
  • Docs updates for Trusty rebrand by @danbarr in #5149
  • build(deps): bump path-to-regexp and express in /docs by @dependabot in #5155
  • build(deps): bump github.com/openfga/openfga from 1.8.0 to 1.8.1 by @dependabot in #5156
  • Update winget-pkg releaser details and forked repo reference by @rdimitrov in #5157

Full Changelog: v0.0.77...v0.0.78

v0.0.77

03 Dec 14:06
8c13a67
Compare
Choose a tag to compare

What's Changed

  • Dependency ingester by @puerco in #5058
  • build(deps): bump github.com/google/osv-scalibr from 0.1.4 to 0.1.5 by @dependabot in #5069
  • Add test for API field validation by @eleftherias in #5071
  • Add Datasources Update by @teodor-yanev in #5072
  • Add data sources service to server. by @blkt in #5073
  • Move PullRequest to internal proto file by @eleftherias in #5067
  • cli: Validate data sources before server calls by @JAORMX in #5074
  • Validate Data Sources when creating rules. by @blkt in #5068
  • data sources: Add API validation on writes and update by name by @JAORMX in #5076
  • Remove ValidateRuleTypeReferences from data sources service by @JAORMX in #5077
  • Implement the Create handler for data sources by @rdimitrov in #5079
  • Don't require context in API calls by @eleftherias in #5081
  • Set required proto fields in invite and authz messages by @eleftherias in #5078
  • Remove unused BranchProtection message by @eleftherias in #5083
  • Implement the rest of the handlers for data sources by @rdimitrov in #5080
  • Add insert statement for rule_type_data_sources. by @blkt in #5082
  • Fix on delete cascade in rule_type_data_sources. by @blkt in #5085
  • Fix race in deps branch test by @puerco in #5087
  • Introduce a dependency extractor abstraction by @puerco in #5092
  • Delay data sources initialization, wire ingestion to init by @puerco in #5091
  • Set required proto fields in repositories by @eleftherias in #5086
  • Pass context with ingestion to data sources by @puerco in #5093
  • Set required proto field for user and provider token by @eleftherias in #5096
  • build(deps): bump github.com/itchyny/gojq from 0.12.16 to 0.12.17 by @dependabot in #5102
  • Enable CreateDataSource and UpdateDataSource API calls to complete by @puerco in #5101
  • Explicitly check server name in client TLS configuration by @JAORMX in #5095
  • Add delete statement for rule_type_data_sources. by @blkt in #5097
  • Set required proto fields for profiles by @eleftherias in #5099
  • Add test for listing ruletypes by @eleftherias in #5106
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.5 to 1.28.6 by @dependabot in #5104
  • Set required proto fields for ruletypes by @eleftherias in #5108
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.3 to 1.38.4 by @dependabot in #5103
  • Set required proto fields for project and entity evals by @eleftherias in #5109
  • build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2 in /tools by @dependabot in #5112
  • Fix missing data source id in update by @puerco in #5115
  • datasource :Fix panic in transaction subsystem by @puerco in #5114
  • build(deps): bump github.com/openfga/cli from 0.6.1 to 0.6.2 in /tools by @dependabot in #5116
  • Add data source processing to rule update/create. by @blkt in #5111
  • Use Data Source ID only to check for rule type references by @JAORMX in #5121
  • Default project ID for data source create/update by @JAORMX in #5122

Full Changelog: v0.0.76...v0.0.77

v0.0.76

27 Nov 13:58
27464ee
Compare
Choose a tag to compare

What's Changed

  • Include provider ID in minder CLI response by @navnitms in #5029
  • Add Trivy's own cache to ignore list by @puerco in #5033
  • Fix the failing auth login command due to missing credentials by @rdimitrov in #5031
  • Add project id foreign key to data sources tables. by @blkt in #5026
  • Auto-generated DB schema update - 2024-11-25 07:52:38 by @github-actions in #5034
  • build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #5035
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.2 to 2.1.3 by @dependabot in #5037
  • build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.38.0 to 1.39.1 by @dependabot in #5039
  • build(deps): bump github.com/google/cel-go from 0.22.0 to 0.22.1 by @dependabot in #5038
  • build(deps): bump the docusaurus group in /docs with 4 updates by @dependabot in #5041
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 by @dependabot in #5036
  • Kick off data sources service by @JAORMX in #5022
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.23.0 to 2.24.0 in /tools by @dependabot in #5040
  • Migrate trusty eval engine to Trusty v2 API. by @blkt in #5013
  • build(deps): bump github.com/charmbracelet/bubbletea from 1.2.3 to 1.2.4 by @dependabot in #5052
  • build(deps): bump github.com/golangci/golangci-lint from 1.62.0 to 1.62.2 in /tools by @dependabot in #5053
  • Implement BuildDataSourceRegistry in data sources service by @JAORMX in #5050
  • mindev: Add ability to parse and use data sources by @JAORMX in #5055
  • Datasource Service Create by @teodor-yanev in #5056
  • Add ListRuleTypesReferencesByDataSource db query by @rdimitrov in #5057
  • build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot in #5059
  • Instantiate data sources from the policy engine by @JAORMX in #5060
  • Set required proto fields in cursor messages by @eleftherias in #5061
  • Implement the Delete handler for the datasource service by @rdimitrov in #5062
  • Set required proto fields in artifact messages by @eleftherias in #5063
  • Implement validation functions for Data Source protobuf object by @JAORMX in #5064
  • Remove GetRest leftover from datasources API validator. by @JAORMX in #5065
  • Update the time delay when deleting an account by @rdimitrov in #5066

Full Changelog: v0.0.75...v0.0.76

v0.0.75

22 Nov 18:38
c6efd48
Compare
Choose a tag to compare

What's Changed

  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 by @dependabot in #4984
  • build(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 in /tools by @dependabot in #4983
  • build(deps): bump github.com/go-playground/validator/v10 from 10.22.1 to 10.23.0 by @dependabot in #4985
  • build(deps): bump github.com/styrainc/regal from 0.29.1 to 0.29.2 by @dependabot in #4986
  • build(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /docs by @dependabot in #4987
  • Add Minder resource parsing using protojson and use it for data sources by @JAORMX in #4981
  • Add support for labels to minder history list. by @blkt in #4961
  • Surface ruletype validation errors to user by @eleftherias in #4989
  • Add entitlements assignment at the time of project creation by @teodor-yanev in #4963
  • Fix the unit tests validating for required rule type fields by @rdimitrov in #4998
  • build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.32.5 by @dependabot in #4992
  • build(deps): bump github.com/xanzy/go-gitlab from 0.113.0 to 0.114.0 by @dependabot in #4993
  • Validate rule type alert during creation/update by @eleftherias in #4991
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.38.2 to 1.38.3 by @dependabot in #4995
  • build(deps): bump github.com/bufbuild/protovalidate-go from 0.7.2 to 0.7.3 by @dependabot in #4996
  • compose: Override settings so we don't need to change config by @JAORMX in #4990
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.4 to 1.28.5 by @dependabot in #4994
  • Implement data source interfaces & registration in rego engine by @JAORMX in #4997
  • build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot in #5005
  • build(deps): bump github.com/charmbracelet/bubbletea from 1.2.2 to 1.2.3 by @dependabot in #5006
  • Remove leftover printf by @JAORMX in #5007
  • Validate ruletype remediation during creation/update by @eleftherias in #5003
  • build(deps): bump the docusaurus group in /docs with 4 updates by @dependabot in #5004
  • Use correct structure to validate data sources input by @JAORMX in #5010
  • Decouple Trusty engine from Trusty SDK structs. by @blkt in #5011
  • Remove unused RetrieveProperty function by @navnitms in #5014
  • build(deps): bump k8s.io/client-go from 0.31.2 to 0.31.3 by @dependabot in #5018
  • build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in #5016
  • Implement REST datasource driver by @JAORMX in #5009
  • Add migration for data sources. by @blkt in #5008
  • Auto-generated DB schema update - 2024-11-21 13:21:56 by @github-actions in #5021
  • build(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8 by @dependabot in #5023
  • Add data sources to ruletype API by @JAORMX in #5019
  • Expect GetContext for context v2 resources by @JAORMX in #5025
  • Add datasources CLI stubs by @teodor-yanev in #5020
  • Auto-generated cli documentation update - 2024-11-22 15:49:21 by @github-actions in #5027
  • Add more queries for managing bundles and subscriptions by @rdimitrov in #5028

New Contributors

Full Changelog: v0.0.74...v0.0.75

v0.0.74

18 Nov 06:38
290dc7d
Compare
Choose a tag to compare

What's Changed

  • Update oapi-codegen to v2.4.1 by @alexandear in #4947
  • build(deps): bump github.com/charmbracelet/bubbletea from 1.2.1 to 1.2.2 by @dependabot in #4957
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.32.1 to 3.33.0 by @dependabot in #4955
  • build(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by @dependabot in #4954
  • cli: Print rule types as applyable YAML by @JAORMX in #4936
  • Print YAML with 2 spaces for indentation by @JAORMX in #4958
  • build(deps): bump github.com/styrainc/regal from 0.28.0 to 0.29.0 by @dependabot in #4956
  • Allow creating/applying ruletypes from standard input by @JAORMX in #4959
  • build(deps): bump github.com/bufbuild/buf from 1.46.0 to 1.47.0 in /tools by @dependabot in #4967
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.33.0 to 3.33.1 by @dependabot in #4968
  • cli: Print profiles as applyable YAML by @JAORMX in #4960
  • Validate JQ query during ruletype creation/update by @eleftherias in #4966
  • Add tests for rego validation in ruletypes by @eleftherias in #4969
  • build(deps): bump github/codeql-action from 3.27.3 to 3.27.4 by @dependabot in #4978
  • build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #4977
  • build(deps): bump github.com/bufbuild/buf from 1.47.0 to 1.47.2 in /tools by @dependabot in #4971
  • Add more code docs for the required field validation by @JAORMX in #4979
  • Fix properties update validation by @JAORMX in #4980
  • build(deps): bump github.com/styrainc/regal from 0.29.0 to 0.29.1 by @dependabot in #4974
  • build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /tools by @dependabot in #4972
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.3 to 1.28.4 by @dependabot in #4976
  • build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.35.1-20240920164238-5a7b106cbb87.1 to 1.35.2-20240920164238-5a7b106cbb87.1 by @dependabot in #4975
  • build(deps): bump the otel group with 2 updates by @dependabot in #4973
  • Add data sources protobuf by @JAORMX in #4962
  • Kick off CRUD API & Minder API Authz by @teodor-yanev in #4970
  • Rule Type schema validation: change library and apply defaults by @JAORMX in #4953
  • Exclude profiles with labels from history. by @blkt in #4910

New Contributors

Full Changelog: v0.0.73...v0.0.74

v0.0.73

12 Nov 14:47
cda126f
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.72...v0.0.73

v0.0.72

05 Nov 14:26
107599c
Compare
Choose a tag to compare

What's Changed

  • Skip rule test files by @rdimitrov in #4836
  • Simplify logic for required branch parameter to gh_branch_protection by @evankanderson in #4801
  • build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.1.1 to 2.1.2 by @dependabot in #4832
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.0 to 1.37.1 by @dependabot in #4839
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.28.0 to 1.28.1 by @dependabot in #4837
  • Add a YQ-powered remediation function by @jhrozek in #4830
  • build(deps): bump github.com/thomaspoignant/go-feature-flag from 1.37.0 to 1.37.1 by @dependabot in #4833
  • Fix a 0.2% natschannel_test flake with some forced scheduler sleeps by @evankanderson in #4841
  • build(deps): bump github.com/ThreeDotsLabs/watermill from 1.3.7 to 1.4.0 by @dependabot in #4842
  • build(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 by @dependabot in #4844
  • build(deps): bump github.com/bufbuild/buf from 1.45.0 to 1.46.0 in /tools by @dependabot in #4843
  • Measure coverage for pkg folder. by @blkt in #4845
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.31.0 to 3.32.0 by @dependabot in #4847
  • build(deps): bump github.com/openfga/openfga from 1.6.1 to 1.7.0 by @dependabot in #4848
  • Add flag-driven event publisher by @evankanderson in #4784
  • Add support for proto message validation by @rdimitrov in #4840
  • Validate the user invitation HTML templates by @rdimitrov in #4835
  • Allow proto email to be empty by @rdimitrov in #4852
  • Fix proto validations for project and display_name by @rdimitrov in #4854
  • build(deps): bump github.com/open-policy-agent/opa from 0.69.0 to 0.70.0 by @dependabot in #4857
  • build(deps): bump github.com/charmbracelet/lipgloss from 0.13.1 to 1.0.0 by @dependabot in #4855
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/sesv2 from 1.37.1 to 1.38.0 by @dependabot in #4858
  • build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.34.2-20240920164238-5a7b106cbb87.2 to 1.35.1-20240920164238-5a7b106cbb87.1 by @dependabot in #4856
  • Remove duplicated if statement in NewEventer by @rdimitrov in #4859
  • Fix the set bundle version query for the subscriptions table by @rdimitrov in #4860
  • Add email field validation to protos by @eleftherias in #4861
  • Add proto validation for project ID by @eleftherias in #4862
  • Add pkg/querier package by @rdimitrov in #4849
  • build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #4865
  • build(deps): bump github.com/zitadel/oidc/v3 from 3.32.0 to 3.32.1 by @dependabot in #4866
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 in /tools by @dependabot in #4868
  • build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.0 to 1.4.1 by @dependabot in #4867
  • build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 by @dependabot in #4864
  • Fix docs references in README.md by @staceypotter in #4863
  • Add proto validation for entity IDs by @eleftherias in #4869
  • Add proto validation for profile ID by @eleftherias in #4870
  • Update docusaurus to 3.6.0 by @eleftherias in #4875
  • Group docusaurus PRs into a single update group by @rdimitrov in #4876
  • build(deps): bump path-to-regexp from 1.8.0 to 1.9.0 in /docs by @dependabot in #4877

Full Changelog: v0.0.71...v0.0.72

v0.0.71

25 Oct 13:42
1bc9af5
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.0.70...v0.0.71