v0.15.1

Release notes for v0.15.1

Changelog since v0.15.0

Changes by Kind

Security

• ATTENTION SERVER OPERATORS:
  This release will print ERROR level log messages if there are verification certificates where the issuer matches, but the audience field does not match. In the next release these mismatches will be hard failures. If you find a mismatch, work with your verification server operators to resolve any issues before deploying the release after this one. (#1122, @mikehelmick)
• Export padding is persisted to the database to ensure stability over time. (#1119, @mikehelmick)

Documentation

• Documented release cadence changed from weekly to bi-weekly. (#1120, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.15.0

Changes since v0.14.0

• Handle a nil pointer in export analyzer tool (#1123, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.14.0

Release notes for main

Documentation

Changelog since v0.13.0

Changes by Kind

Major

• API Behavior Change :: SymptomOnsetInterval from the publish request will be used if present and valid even if the verification certificate contains a symptom onset date. This allows apps to ask users their symptom onset date as well. (#1103, @mikehelmick)

Minor

• BUG FIX: Revision tokens will still be returned if publish happens twice on the same day and a device is not releasing same day keys. This is unlikely to have any impact on production devices based on known usage patterns. (#1112, @mikehelmick)
• Generate service mirrors v1 API more closely now. (#1109, @mikehelmick)
• Document setting versioning and lifecycle on Terraform state (#1100, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.13.0

Release notes for main

Documentation

Changelog since v0.12.1

Changes by Kind

Security

• Require client connections use TLS 1.2+ (#1093, @sethvargo)

Other

• Add export importers to the admin console (#1085, @sethvargo)
• Use different envvars to trigger integration tests (#1086, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.12.1

Changes since v0.12.0

Admin Console

• Add export importers to the admin console (#1085, @sethvargo)

Deployment

• Add mirror service to deployment (#1081, @sethvargo)
• Bump builder to use 32 CPUs when building. (#1083, @sethvargo)

Misc

• Ensure map is initialized preventing runtime panic (#1078, @sethvargo)
• Adds ability to only export non-travelers. (#1072, @jeremyfaller)
• Bug fixes: Export-importer job bug fixes. Prevents duplicate files from being scheduled. May require you to delete files from your importfiles table. (#1076, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.12.0

Release notes for main

Documentation

Changelog since v0.11.1

Changes by Kind

Critical change

• BEHAVIOR CHANGE:
  Two new environment variables, USE_DEFAULT_SYMPTOM_ONSET_DAYS and DEFAULT_SYMPTOM_ONSET_DAYS.
  If enabled, TEKs that previously would have a null value for days since symptom onset will receive the default value.

  This new functionality is enabled by default in this release. (#1060, @mikehelmick)

Export / Import changes

• Bug fixes: Export-importer job bug fixes. Prevents duplicate files from being scheduled. May require you to delete files from your importfiles table. (#1076, @mikehelmick)
• Recreate ExcludeRegions in exports. This will allow situations where traveling users can be excluded in an export. (#1067, @jeremyfaller)

Mirror service

• Mirror service terraform config for key server migration. (#1074, @mikehelmick)
• New: Mirror service cmd/mirror for mirroring an export directory from one key server to another. (#1070, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.11.1

Changes since v0.11.0

Breaking changes

• Behavior change! Two new environment variables,
  USE_DEFAULT_SYMPTOM_ONSET_DAYS and DEFAULT_SYMPTOM_ONSET_DAYS. If enabled,
  TEKs that previously would have a null value for days since symptom onset will
  receive the default value.

  This new functionality is enabled by default in this release. (#1060, @mikehelmick)

• Changes in the Terraform configuration will cause SSL certificates to re-provision. This could cause downtime depending on your configuration. (#1056, @sethvargo)

New services

• Terraform for export-importer service (#1053, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.11.0

Changes since v0.10.0

Breaking changes

• Upgraded federation API to support v1.5 EN fields and revised keys. This is not backwards compatible with the previous version of federation and pivots the data differently based on the traveler bit and v1 publish API that puts keys typically in a single region. (#986, @mikehelmick)

Federation

• Add new server that can import export files generated from other key servers (including possibly other implementations). (#1044, @mikehelmick)

Dependencies

Added

• github.com/PuerkitoBio/purell: v1.0.0
• github.com/PuerkitoBio/urlesc: 5bd2802
• github.com/emicklei/go-restful: ff4f55a
• github.com/go-logr/logr: v0.1.0
• github.com/go-openapi/jsonpointer: 46af16f
• github.com/go-openapi/jsonreference: 13c6e35
• github.com/go-openapi/spec: 6aced65
• github.com/go-openapi/swag: 1d0bd11
• github.com/mailru/easyjson: d5b7844
• github.com/munnerz/goautoneg: a547fc6
• k8s.io/gengo: 0689ccc
• sigs.k8s.io/structured-merge-diff/v3: 43c19bb

Changed

• contrib.go.opencensus.io/exporter/ocagent: v0.7.0 → f8c219d
• contrib.go.opencensus.io/exporter/prometheus: v0.2.0 → 6bcf6f8
• github.com/Microsoft/go-winio: v0.4.14 → fc70bd9
• github.com/asaskevich/govalidator: f9ffefc → 475eaeb
• github.com/elazarl/goproxy: c4fc265 → 947c36d
• github.com/evanphx/json-patch: 5858425 → v4.2.0+incompatible
• github.com/frankban/quicktest: v1.4.1 → v1.8.1
• github.com/google/gofuzz: v1.0.0 → v1.1.0
• github.com/googleapis/gnostic: 0c51083 → v0.1.0
• github.com/gorilla/mux: v1.7.4 → v1.8.0
• github.com/gorilla/sessions: v1.2.0 → v1.2.1
• github.com/kelseyhightower/envconfig: v1.3.0 → v1.4.0
• github.com/smartystreets/assertions: b2de0cb → v1.0.0
• gopkg.in/yaml.v3: 9f266ea → eeeca48
• k8s.io/api: d687e77 → v0.18.7-rc.0
• k8s.io/apimachinery: 760d184 → v0.18.7-rc.0
• k8s.io/klog: 8e90cee → v1.0.0
• k8s.io/kube-openapi: b3a7cee → 61e04a5
• sigs.k8s.io/yaml: v1.1.0 → v1.2.0

Removed

Nothing has changed.

v0.10.0

Release notes for main

Documentation

Changelog since v0.9.2

Changes by Kind

Uncategorized

• Bugfix: handle nil JWKS URI values. (#1020, @mikehelmick)
• Update admin console UI and styles (#1032, @sethvargo)

Dependencies

• Update to Go 1.15.2 (#1029, @sethvargo)

Added

• github.com/jeremyfaller/puddle: 91d0159
• github.com/jmespath/go-jmespath/internal/testify: v1.5.1

Changed

• cloud.google.com/go/storage: v1.11.0 → v1.12.0
• cloud.google.com/go: v0.65.0 → v0.66.0
• github.com/Azure/azure-sdk-for-go: v46.0.0+incompatible → v46.3.0+incompatible
• github.com/Azure/go-autorest/autorest/adal: v0.9.2 → v0.9.4
• github.com/Azure/go-autorest/autorest/azure/auth: v0.5.1 → v0.5.2
• github.com/Azure/go-autorest/autorest/azure/cli: v0.4.0 → v0.4.1
• github.com/Azure/go-autorest/autorest: v0.11.4 → v0.11.6
• github.com/aws/aws-sdk-go: v1.34.19 → v1.34.30
• github.com/golang/snappy: v0.0.1 → v0.0.2
• github.com/google/pprof: 1a94d86 → acf8798
• github.com/grpc-ecosystem/grpc-gateway: v1.14.8 → v1.15.0
• github.com/jmespath/go-jmespath: v0.3.0 → v0.4.0
• github.com/prometheus/common: v0.13.0 → v0.14.0
• github.com/prometheus/procfs: v0.1.3 → v0.2.0
• github.com/sethvargo/go-envconfig: v0.3.1 → v0.3.2
• github.com/ugorji/go/codec: v1.1.7 → v1.1.8
• github.com/ugorji/go: v1.1.7 → v1.1.8
• go.uber.org/atomic: v1.6.0 → v1.7.0
• go.uber.org/multierr: v1.5.0 → v1.6.0
• golang.org/x/net: 62affa3 → 328152d
• golang.org/x/tools: acefd22 → 463111b
• google.golang.org/api: v0.30.0 → v0.32.0
• google.golang.org/genproto: 0bd0a95 → a14c0a9
• google.golang.org/grpc: v1.31.1 → v1.32.0

Removed

• github.com/jackc/puddle: v1.1.1

v0.9.2

Release v0.9.2

Changelog since v0.9.1

Changes by Kind

Bugfixes and improvements

• Bugfix: handle nil JWKS URI values. (#1020, @mikehelmick)
• Export file signatures will be ordered with the most recently created one first. Documented updated expectations around files with multiple signers. (#1019, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.