v0.4.19

Changelog

Dependency Updates

• 4386bfd: feat(deps): bump github.com/prometheus/client_golang (#218) (@dependabot[bot])
• fb9302d: feat(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#207) (@dependabot[bot])

Other Work

• 7c38f5d: --- (#215) (@dependabot[bot])
• 7571bea: associate tls.ConnectionState with a token Request (@johnabass)
• ef6cb59: enforce TLS peer certificate presence for trust (@johnabass)
• cfd9272: expose the tls.Conn state in the request's context (@johnabass)
• d3de698: removed deprecated fx.Logger options (@johnabass)

v0.4.18

Changelog

Other Work

• 01698f8: request but do not verify client certs (@johnabass)

v0.4.17

Changelog

Other Work

• 01698f8: request but do not verify client certs (@johnabass)

v0.4.14 2023-02-06

• Update configs and documentation for the introduction of OTLP in Candlelight #137
• Correct Bad Usage of LoggerIn that broke Themis #136

v0.4.13 2022-12-01

• Disable TLS 1.0 and 1.1 by default. Configuration can reenable.
• Disable ciphers vulnerable to SWEET32.

v0.4.12 2022-11-30

• Fix Deprecated FX Logger, Add Zap Logging #107
• Replace package xlog with sallust #123
• Replace go-kit/log with uber zap #121
• CVE-2022-32149 (High) detected in golang.org/x/text-v0.3.7 #117

v0.4.11 2022-10-31

• Remove several unused build files and update the docker images to work. #122

v0.4.10 2022-10-28

• Update dependencies.
• Fix the docker container so it has configuration in the right place.

v0.4.9 2022-10-07

• Patch failing docker image, fix linter issues, fix breaking unit tests & changes #104

v0.4.8 2022-06-29

• Migrated to github.com/golang-jwt/jwt to address a security vulnerability. #78
• Updated spec file and rpkg version macro to be able to choose when the 'v' is included in the version. #80
• Updated transport.go to send a 400 error if there is an issue parsing the URL. #47
• Allow any peer certificate to pass validation, instead of requiring all of them to pass. #91