All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
2.4.0 - 2024-05-30
- Support for Windows TAS envrionments. cyberark/cloudfoundry-conjur-buildpack#184
- Project Go version bumped to 1.22, and support for deprecated Go version 1.20 removed. cyberark/cloudfoundry-conjur-buildpack#183
2.3.0 - 2023-10-06
- Support for TAS 4.0 and 5.0, and associated
cflinuxfs4
stack. cyberark/cloudfoundry-conjur-buildpack#178
- Project Go version bumped to 1.20, and support for deprecated Go version 1.17 removed. cyberark/cloudfoundry-conjur-buildpack#178
2.2.8 - 2023-06-21
- Upgrade golang.org/x/net to v0.10.0, golang.org/x/text to v0.9.0, golang.org/x/sys to v0.8.0, rack to 3.0.1, spring-boot to 3.0.6, and java to 17 cyberark/cloudfoundry-conjur-buildpack#172
- Update ruby in ci/parse-changelog.sh from 2.5 to 3.1 cyberark/cloudfoundry-conjur-buildpack#170
2.2.7 - 2023-03-02
- Upgdate spring-boot and Golang dependencies. Upgrade test app to Ruby 3 and update ruby dependencies. cyberark/cloudfoundry-conjur-buildpack#164
- Upgrade sinatra to 2.2.3 in /tests/integration/apps/ruby to resolve CVE-2022-45442 cyberark/cloudfoundry-conjur-buildpack#159
2.2.6 - 2022-11-23
- Added replace statement to prune gopkg.in/yaml.v2 v2.2.2 in favor of v2.2.8 cyberark/cloudfoundry-conjur-buildpack#153
- Added replace statement to prune gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c from dependency tree in favor of v3.0.1 cyberark/cloudfoundry-conjur-buildpack#152
- Updated Summon, golang.org/x/net, and golang.org/x/text dependencies cyberark/cloudfoundry-conjur-buildpack#156
- Updated tests/integration/apps/java to use Spring Framework 2.7.5 cyberark/cloudfoundry-conjur-buildpack#155
2.2.5 - 2022-09-07
- Updated conjur-env dependencies to latest versions (github.com/cyberark/summon -> v0.9.4, github.com/stretchr/testify -> v1.8.0) cyberark/cloudfoundry-conjur-buildpack#149
2.2.4 - 2022-06-16
- Updated conjur-api-go to 0.10.1 and summon to 0.9.3 in conjur-env/go.mod cyberark/cloudfoundry-conjur-buildpack#145
- Updated Spring in tests/integration/apps/java to 2.7.0 cyberark/cloudfoundry-conjur-buildpack#144
- Updated conjur-env dependencies to latest versions (github.com/cyberark/summon -> v0.9.2, github.com/stretchr/testify -> v1.7.2) cyberark/cloudfoundry-conjur-buildpack#143
2.2.3 - 2022-06-07
- Project Go version bumped to 1.17, and support for deprecated Go versions 1.14.x and 1.15.x removed. cyberark/cloudfoundry-conjur-buildpack#137
- Updated conjur-api-go to version 0.10.0 cyberark/cloudfoundry-conjur-buildpack#140
- Updated sinatra in ruby test app to 2.2.0 cyberark/cloudfoundry-conjur-buildpack#135
- Golang-based Docker images bumped to version
1.17.9-stretch
cyberark/cloudfoundry-conjur-buildpack#137
2.2.2 - 2022-01-03
- Updated conjur-api-go to version 0.8.1 cyberark/cloudfoundry-conjur-buildpack#131
2.2.1 - 2020-06-24
- Fixed scrambled error messages (e.g. with invalid line numbers) that were generated whenever the Cloudfoundry Buildpack encountered errors while parsing environment variable settings after retrieving secrets variables from Conjur. cyberark/cloudfoundry-conjur-buildpack#120
2.2.0 - 2020-03-01
- Support for using Summon environments in the
secrets.yml
file. Users can now divide their secrets.yml files into sections for each environment and specify the secrets to load at runtime using the newSECRETS_YAML_ENVIRONMENT
environment variable. See the README for more information. cyberark/cloudfoundry-conjur-buildpack#44
- Support for using the Buildpack with Conjur Enterprise v4. We recommend users migrate to Dynamic Access Provider v11+ or Conjur OSS v1+. cyberark/cloudfoundry-conjur-buildpack#86
2.1.6 - 2020-01-11
- A
manifest.yml
has been added, allowing for the usage of buildpack-packager and other native CloudFoundry features. Please refer tomanifest.yml
for information on dependencies and deprecation notices thereof, as well as a list of files included in the Buildpack. cyberark/cloudfoundry-conjur-buildpack#79
- The project has been reorganized to respect Cloudfoundry Buildpack
best practices and improve maintainability. This also should
reduce overall build times, and slightly reduces the size
of the Conjur Buildpack
.ZIP
. PR cyberark/cloudfoundry-conjur-buildpack#99 - The default go version has been bumped to
1.15.x
in the manifest, with other supported version listed as well. cyberark/cloudfoundry-conjur-buildpack#41 - Release tags will now be auto-archived in the
latest
branch. Users consuming this buildpack via the online buildpack functionality should now point their manifests to thelatest
branch and only consume release versions of this buildpack. cyberark/cloudfoundry-conjur-buildpack#101
- Support for using the Conjur Buildpack with Conjur Enterprise v4 is now deprecated. Support will be removed in the next release. cyberark/cloudfoundry-conjur-buildpack#73
2.1.5 - 2020-11-06
- Buildpack can no longer expose secret values when the secrets.yml includes an invalid variable name. Security Advisory
2.1.4 - 2020-07-16
- Go dependencies updated for the
conjur-env
binary. cyberark/cloudfoundry-conjur-buildpack#66
2.1.3 - 2020-01-29
- Added a NOTICES.txt file for open source acknowledgements that is included in the release ZIP file
- The buildpack now properly reads Conjur credentials from
VCAP_SERVICES
whenVCAP_SERVICES
contains credentials for other services with the same field names (e.g.version
). - Go version for the
conjur-env
binary bumped to 1.13.6 - Go dependencies updated for the
conjur-env
binary
2.1.2 - 2019-10-28
- Buildpack supply step now scans build directory for candidate secrets.yml files and reports them to the output.
- The runtime location for
secrets.yml
can now be configured by setting theSECRETS_YAML_PATH
environment variable for the Cloud Foundry application. See the README for more information.
2.1.1 - 2019-05-15
- Go version for online buildpack bumped to 1.12
2.1.0 - 2019-05-13
- Buildpack now searches for
secrets.yml
inBOOT-INF/classes/
to better support Java applications by default. - Added support to use the Conjur buildpack as an online buildpack by referencing the github repository directly. See the README for more information.
- Buildpack now copies the secrets retrieval profile script into the application directory. This works around a missing feature in the Java buildpack, where it does not correctly source from the buildpacks profile directories.
- Go version of conjur-env binary bumped to 1.12
- Go binary updated to use native os homedir method instead of mitchellh lib
2.0.1 - 2019-03-19
- bin/compile script is made executable
2.0.0 - 2019-02-15
- Buildpack is converted to a supply buildpack to support multi-buildpack usage
- Conjur-env binary dependencies are updated
- Conjur-env binary converted to use Go modules
1.0.0 - 2018-03-01
- Buildpack uses
conjur-env
binary built from the guts ofsummon
andconjur-api-go
instead of installing Summon and Summon-Conjur each time it is invoked.
0.3.0 - 2018-02-13
- Added support for v4 Conjur
0.2.0 - 2018-01-29
- Added supporting files and documentation for the custom buildpack use case
- The first tagged version.