Merge branch 'main' into add-jwt-count

.github/workflows/pr_build.yaml

@@ -180,7 +180,7 @@ jobs:
  - name: Set up QEMU
  uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
  - name: Set up Docker Buildx
- uses: docker/setup-buildx-action@aa33708b10e362ff993539393ff100fa93ed6a27 # v3.5.0
+ uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
  - name: Build images
  run: make images-no-load
  - name: Export images

ADOPTERS.md

@@ -20,6 +20,7 @@ Known end users with notable contributions to the advancement of the project inc
 
 SPIFFE and SPIRE are being used by numerous other companies, both large and small, to build higher layer products and services. The list includes but is not limited to:
 
+* AccuKnox
 * Amazon
 * Arm
 * Cisco

CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [1.10.1] - 2024-08-01
+
+### Added
+
+- New Grafana dashboard template (#5188)
+- `aws_rolesanywhere_trustanchor` BundlePublisher plugin (#5048)
+
+### Changed
+
+- `spire` UpstreamAuthority to optionally use the Preferred TTL on intermediate authorities (#5264)
+- Federation endpoint to support custom bundle and certificates for authorization (#5163)
+- Small documentation improvements (#5235, #5220)
+
+### Fixed
+
+- Event-based cache to handle events missed at the cache startup (#5289)
+- LRU cache to no longer send update notifications to all subscribers (#5281)
+
 ## [1.10.0] - 2024-06-24
 
 ### Added

go.mod

@@ -3,10 +3,10 @@ module github.com/spiffe/spire
 go 1.22.3
 
 require (
- cloud.google.com/go/iam v1.1.10
- cloud.google.com/go/kms v1.18.2
- cloud.google.com/go/secretmanager v1.13.3
- cloud.google.com/go/security v1.17.2
+ cloud.google.com/go/iam v1.1.12
+ cloud.google.com/go/kms v1.18.4
+ cloud.google.com/go/secretmanager v1.13.5
+ cloud.google.com/go/security v1.17.4
  cloud.google.com/go/storage v1.43.0
  github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0
  github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0
@@ -27,7 +27,7 @@ require (
  github.com/aws/aws-sdk-go-v2/service/iam v1.34.1
  github.com/aws/aws-sdk-go-v2/service/kms v1.35.1
  github.com/aws/aws-sdk-go-v2/service/organizations v1.30.2
- github.com/aws/aws-sdk-go-v2/service/rolesanywhere v1.13.1
+ github.com/aws/aws-sdk-go-v2/service/rolesanywhere v1.14.0
  github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2
  github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.32.1
  github.com/aws/aws-sdk-go-v2/service/sts v1.30.1
@@ -59,11 +59,11 @@ require (
  github.com/imkira/go-observer v1.0.3
  github.com/jackc/pgx/v5 v5.6.0
  github.com/jinzhu/gorm v1.9.16
- github.com/lestrrat-go/jwx/v2 v2.1.0
+ github.com/lestrrat-go/jwx/v2 v2.1.1
  github.com/lib/pq v1.10.9
  github.com/mattn/go-sqlite3 v1.14.22
  github.com/mitchellh/cli v1.1.5
- github.com/open-policy-agent/opa v0.66.0
+ github.com/open-policy-agent/opa v0.67.0
  github.com/prometheus/client_golang v1.19.1
  github.com/shirou/gopsutil/v3 v3.24.5
  github.com/sigstore/cosign/v2 v2.2.4
@@ -83,8 +83,8 @@ require (
  golang.org/x/sync v0.7.0
  golang.org/x/sys v0.22.0
  golang.org/x/time v0.5.0
- google.golang.org/api v0.189.0
- google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade
+ google.golang.org/api v0.190.0
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20240730163845-b1a4ccb954bf
  google.golang.org/grpc v1.65.0
  google.golang.org/protobuf v1.34.2
  k8s.io/api v0.30.3
@@ -97,10 +97,10 @@ require (
 
 require (
  cloud.google.com/go v0.115.0 // indirect
- cloud.google.com/go/auth v0.7.2 // indirect
+ cloud.google.com/go/auth v0.7.3 // indirect
  cloud.google.com/go/auth/oauth2adapt v0.2.3 // indirect
  cloud.google.com/go/compute/metadata v0.5.0 // indirect
- cloud.google.com/go/longrunning v0.5.9 // indirect
+ cloud.google.com/go/longrunning v0.5.11 // indirect
  filippo.io/edwards25519 v1.1.0 // indirect
  github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper v0.2.0 // indirect
  github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
@@ -218,7 +218,7 @@ require (
  github.com/google/go-tdx-guest v0.3.1 // indirect
  github.com/google/gofuzz v1.2.0 // indirect
  github.com/google/logger v1.1.1 // indirect
- github.com/google/s2a-go v0.1.7 // indirect
+ github.com/google/s2a-go v0.1.8 // indirect
  github.com/google/uuid v1.6.0 // indirect
  github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
  github.com/gorilla/mux v1.8.1 // indirect
@@ -247,7 +247,7 @@ require (
  github.com/kylelemons/godebug v1.1.0 // indirect
  github.com/lestrrat-go/blackmagic v1.0.2 // indirect
  github.com/lestrrat-go/httpcc v1.0.1 // indirect
- github.com/lestrrat-go/httprc v1.0.5 // indirect
+ github.com/lestrrat-go/httprc v1.0.6 // indirect
  github.com/lestrrat-go/iter v1.0.2 // indirect
  github.com/lestrrat-go/option v1.0.1 // indirect
  github.com/letsencrypt/boulder v0.0.0-20240620165639-de9c06129bec // indirect
@@ -324,12 +324,12 @@ require (
  go.mongodb.org/mongo-driver v1.14.0 // indirect
  go.opencensus.io v0.24.0 // indirect
  go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.52.0 // indirect
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.52.0 // indirect
- go.opentelemetry.io/otel v1.27.0 // indirect
+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
+ go.opentelemetry.io/otel v1.28.0 // indirect
  go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.22.0 // indirect
- go.opentelemetry.io/otel/metric v1.27.0 // indirect
- go.opentelemetry.io/otel/sdk v1.27.0 // indirect
- go.opentelemetry.io/otel/trace v1.27.0 // indirect
+ go.opentelemetry.io/otel/metric v1.28.0 // indirect
+ go.opentelemetry.io/otel/sdk v1.28.0 // indirect
+ go.opentelemetry.io/otel/trace v1.28.0 // indirect
  go.step.sm/crypto v0.44.2 // indirect
  go.uber.org/atomic v1.11.0 // indirect
  go.uber.org/multierr v1.11.0 // indirect
@@ -338,8 +338,8 @@ require (
  golang.org/x/oauth2 v0.21.0 // indirect
  golang.org/x/term v0.22.0 // indirect
  golang.org/x/text v0.16.0 // indirect
- google.golang.org/genproto v0.0.0-20240722135656-d784300faade // indirect
- google.golang.org/genproto/googleapis/api v0.0.0-20240711142825-46eb208f015d // indirect
+ google.golang.org/genproto v0.0.0-20240730163845-b1a4ccb954bf // indirect
+ google.golang.org/genproto/googleapis/api v0.0.0-20240725223205-93522f1f2a9f // indirect
  gopkg.in/inf.v0 v0.9.1 // indirect
  gopkg.in/ini.v1 v1.67.0 // indirect
  gopkg.in/yaml.v2 v2.4.0 // indirect