v0.0.30

What's Changed

• Add provider listing functionality by @JAORMX in #2310
• Auto-generated cli documentation update - 2024-02-09 11:25:56 by @github-actions in #2324
• Full diff ingestor by @teodor-yanev in #2325
• Update CLI table outputs for ruletype and profile by @rdimitrov in #2327

Full Changelog: v0.0.29...v0.0.30

v0.0.29

What's Changed

• Update the tmpfs path for sigstore caching in docker compose by @rdimitrov in #2267
• Add documentation for built-in roles by @eleftherias in #2258
• Cleanup unused GRPC paths from ingress by @JAORMX in #2268
• Fix documentation formatting by @eleftherias in #2269
• Allow setting custom TUF root with the minder container verify command by @jhrozek in #2270
• build(deps): bump github.com/rs/zerolog from 1.31.0 to 1.32.0 by @dependabot in #2273
• build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by @dependabot in #2272
• Add wait to ensure all entity events are executed by @Vyom-Yadav in #2274
• Fix Rule Evaluation Logic for Handling Multiple Rules of the Same Type - Part 2 (Data Backfilling) by @Vyom-Yadav in #2206
• Auto-generated DB schema update - 2024-02-05 09:49:19 by @github-actions in #2276
• build(deps): bump GoTestTools/gotestfmt-action from 02b936e80bd5b0e515b98eb8f7d998a60ccca462 to 7dd37bbcc925453b6d7465164cf3bcbd87bc691d by @dependabot in #2278
• build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 by @dependabot in #2279
• build(deps): bump github.com/styrainc/regal from 0.15.0 to 0.16.0 by @dependabot in #2280
• Add "openfga" to list of services to start by @dmjb in #2281
• build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by @dependabot in #2289
• minor: Add rule name to evaluation logs by @Vyom-Yadav in #2290
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.45.0 to 0.45.1 by @dependabot in #2288
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.22.0 to 1.23.0 by @dependabot in #2285
• Migrate to github.com/puzpuzpuz/xsync/v3 by @jhrozek in #2292
• Extend artifact processing to enable richer provenance checks by @jhrozek in #2235
• Auto-generated cli documentation update - 2024-02-07 12:48:38 by @github-actions in #2293
• Add test coverage for "nice status" middleware/interceptor by @JAORMX in #2294
• Support GH's private sigstore instance by @jhrozek in #2295
• Remove golang-based helm tests by @JAORMX in #2297
• some docs changes by @dmjb in #2296
• Verify all simple signing layers, do not filter events for .sig, enable OIDC identities by @rdimitrov in #2299
• build(deps): bump golang from 1.21.6 to 1.22.0 by @dependabot in #2308
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.23.0 to 1.23.1 by @dependabot in #2307
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.47.0 to 0.48.0 by @dependabot in #2306
• build(deps): bump golang.org/x/term from 0.16.0 to 0.17.0 by @dependabot in #2303
• build(deps): bump github.com/golangci/golangci-lint from 1.55.2 to 1.56.0 in /tools by @dependabot in #2302
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.23.0 to 1.23.1 by @dependabot in #2304
• Display name of profile when running profile create by @dmjb in #2301
• Fix user deletion logic (first minder then keycloak) by @JAORMX in #2311
• Add test coverage for OpenFGA authz driver by @JAORMX in #2291
• build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 by @dependabot in #2316
• build(deps): bump github.com/golangci/golangci-lint from 1.56.0 to 1.56.1 in /tools by @dependabot in #2315
• build(deps): bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 by @dependabot in #2321
• build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #2318
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.45.1 to 0.45.2 by @dependabot in #2320
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.47.0 to 0.48.0 by @dependabot in #2319
• Add json/yaml output to whoami by @jhrozek in #2313
• Auto-generated cli documentation update - 2024-02-09 08:52:50 by @github-actions in #2322

New Contributors

• @dmjb made their first contribution in #2281

Full Changelog: v0.0.28...v0.0.29

v0.0.28

What's Changed

• build(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0 by @dependabot in #2200
• build(deps): bump github.com/sigstore/sigstore-go from 0.0.0-20240108223800-a3df13b8ba29 to 0.1.0 by @dependabot in #2199
• Add ability to evaluate scores based on detailed scores for trusty by @JAORMX in #2198
• Make authz tuple deletion idempotent by @JAORMX in #2201
• Remove unused code by @jhrozek in #2202
• Allow to configure a custom sigstore tuf root by @rdimitrov in #2204
• Add new policy writer role by @JAORMX in #2203
• Solidify authz Client interface by @JAORMX in #2205
• build(deps): bump github.com/openfga/openfga from 1.4.2 to 1.4.3 in /tools by @dependabot in #2208
• Update compose-migrate action to run openfga container alongside by @Vyom-Yadav in #2209
• Upgrade OpenFGA container to v1.4.3 in docker-compose by @JAORMX in #2210
• build(deps): bump github.com/evanphx/json-patch/v5 from 5.8.1 to 5.9.0 by @dependabot in #2215
• build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 by @dependabot in #2213
• build(deps): bump mvdan.cc/gofumpt from 0.5.0 to 0.6.0 in /tools by @dependabot in #2216
• build(deps-dev): bump @docusaurus/module-type-aliases from 3.1.0 to 3.1.1 in /docs by @dependabot in #2214
• Upgrade keycloak in docker-compose to 23.0 by @JAORMX in #2211
• Define Permissions API by @JAORMX in #2217
• Fully rely on OpenFGA to delete user permissions by @JAORMX in #2207
• Print user subject on auth subcommands by @JAORMX in #2221
• Add permissions API to FGA model by @JAORMX in #2219
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 by @dependabot in #2223
• build(deps): bump github.com/google/go-containerregistry from 0.18.0 to 0.19.0 by @dependabot in #2222
• build(deps): bump anchore/sbom-action from 0.15.5 to 0.15.6 by @dependabot in #2224
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.0 to 2.19.1 in /tools by @dependabot in #2225
• Ensure roles in authz AllRoles are defined in FGA model by @JAORMX in #2220
• Bootstrap Permissions API in minder server and implement roles list by @JAORMX in #2226
• Add authorization relations in proto by @eleftherias in #2218
• build(deps): bump anchore/sbom-action from 0.15.6 to 0.15.7 by @dependabot in #2230
• build(deps): bump github.com/stacklok/frizbee from 0.0.12 to 0.0.13 by @dependabot in #2231
• Implement role assignment and removal APIs by @JAORMX in #2227
• Implement CLI for permissions by @JAORMX in #2229
• Auto-generated cli documentation update - 2024-01-31 13:44:42 by @github-actions in #2233
• Add ability to list role assignments in a project by @JAORMX in #2234
• Auto-generated cli documentation update - 2024-01-31 17:47:15 by @github-actions in #2236
• Add relation for fetching remote repos from GitHub by @eleftherias in #2237
• Fix Rule Evaluation Logic for Handling Multiple Rules of the Same Type - Part 1 (No Data Backfilling) by @Vyom-Yadav in #2161
• Move user id telemetry to token interceptor by @eleftherias in #2240
• Auto-generated DB schema update - 2024-01-31 10:34:06 by @github-actions in #2239
• Auto-generated cli documentation update - 2024-01-31 10:34:06 by @github-actions in #2238
• build(deps): bump anchore/sbom-action from 0.15.7 to 0.15.8 by @dependabot in #2243
• build(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 by @dependabot in #2242
• build(deps): bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #2241
• build(deps): bump golang from 76aadd9 to 0c22572 by @dependabot in #2244
• Fix CLI error output for role grant list by @JAORMX in #2247
• Make openfga call in authz middleware by @eleftherias in #2246
• Upgrade postgres to 16.1-alpine in docker-compose by @JAORMX in #2212
• Change the database migration CI workflow to check for the expected DB version instead by @jhrozek in #2250
• Remove unused roles database tables by @JAORMX in #2249
• Auto-generated DB schema update - 2024-02-01 13:22:35 by @github-actions in #2251
• Remove the signing keys DB table and API by @jhrozek in #2252
• Auto-generated DB schema update - 2024-02-01 13:54:40 by @github-actions in #2253
• Fix a typo in minder server in docker-compose.yaml by @rdimitrov in #2257
• build(deps): bump golang from 0c22572 to 7b575fe by @dependabot in #2263
• Get project information for users from OpenFGA by @JAORMX in #2259
• Auto-generated DB schema update - 2024-02-02 11:16:11 by @github-actions in #2264
• Add PermissionsService to ingress configuration by @JAORMX in #2265
• Correct permissions for accessing provider enroll by @eleftherias in #2266

Full Changelog: v0.0.27...v0.0.28

v0.0.27

What's Changed

• Implement Cursor-Based Pagination in ListRepositories Endpoint by @Vyom-Yadav in #2097
• Auto-generated DB schema update - 2024-01-17 10:31:02 by @github-actions in #2136
• Switch to offline Sigstore verification and set TimestampVerificationData to nil by @rdimitrov in #2131
• Update proto files for pagination by @eleftherias in #2138
• Add middleware that populates project in context by @eleftherias in #2139
• Revert "Update proto files for pagination (#2138)" by @eleftherias in #2141
• Add project relationships to FGA model by @JAORMX in #2140
• build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 by @dependabot in #2148
• build(deps): bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.21.0 to 1.22.0 by @dependabot in #2143
• Remove EntityContext pointers and replace with struct references by @evankanderson in #2142
• build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.21.0 to 1.22.0 by @dependabot in #2147
• Bump go.opentelemetry.io/otel/exporters/prometheus from 0.44.0 to 0.45.0 by @eleftherias in #2150
• build(deps): bump anchore/sbom-action from 0.15.3 to 0.15.4 by @dependabot in #2152
• build(deps): bump k8s.io/apimachinery from 0.29.0 to 0.29.1 by @dependabot in #2156
• build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.11.0 to 1.12.0 by @dependabot in #2153
• build(deps): bump github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.11.0 to 1.12.0 by @dependabot in #2154
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.46.1 to 0.47.0 by @dependabot in #2155
• build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.46.1 to 0.47.0 by @dependabot in #2157
• Add BusinessTelemetry to authenticated RPC calls by @rdimitrov in #2117
• Create initial configuration for authz and create store as part of migration by @JAORMX in #2110
• build(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 by @dependabot in #2162
• Don't default to minder as default store ID is authz configuration by @JAORMX in #2163
• Actually run authz tests by @JAORMX in #2165
• Checkout back to the original branch to reset the filesystem preventing ingest cache from corrupting by @Vyom-Yadav in #2160
• Add authorization JSON model workflow by @JAORMX in #2166
• Move OpenFGA interactions to authz package by @JAORMX in #2164
• rego: Add new function to list files using a glob pattern by @JAORMX in #2158
• Initialize model on migration by @JAORMX in #2168
• Remove superadmin role by @eleftherias in #2169
• build(deps): bump anchore/sbom-action from 0.15.4 to 0.15.5 by @dependabot in #2174
• build(deps): bump github.com/openfga/go-sdk from 0.3.3 to 0.3.4 by @dependabot in #2172
• build(deps): bump k8s.io/client-go from 0.29.0 to 0.29.1 by @dependabot in #2173
• Skeleton of Authz client interface to enable integration by @JAORMX in #2175
• Add rego function to detect file types by @JAORMX in #2180
• Add new rego function called file.walk by @JAORMX in #2181
• Implement Write and Delete tuple functions for OpenFGA Authz Client by @JAORMX in #2177
• Add a mindev command to verify containers by @jhrozek in #2178
• Update: telemetry field to be string by @teodor-yanev in #2184
• Create new docs entry under "Using Minder" for using Minder with GHAS by @meganbruce in #2185
• build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @dependabot in #2188
• build(deps): bump github.com/openfga/cli from 0.2.4 to 0.2.5 in /tools by @dependabot in #2186
• build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #2187
• build(deps): bump golang from 5f5d61d to 76aadd9 by @dependabot in #2189
• Move authorization logic to interceptor by @eleftherias in #2183
• Remove unused org owner enum by @eleftherias in #2190
• rego: Return true for file.exists for directories too by @JAORMX in #2191
• Hook up authz tuple writing to Minder server by @JAORMX in #2179
• Set up OpenFGA as authz client implementation for minder server by @JAORMX in #2192
• Update authz configuration example by @JAORMX in #2193
• build(deps): bump bufbuild/buf-setup-action from 1.28.1 to 1.29.0 by @dependabot in #2196
• build(deps): bump github.com/bufbuild/buf from 1.28.1 to 1.29.0 in /tools by @dependabot in #2197
• Add migration step for minder users to FGA tuples by @JAORMX in #2194
• Support GitHub attestation endpoint by @jhrozek in #2195

New Contributors

• @meganbruce made their first contribution in #2185

Full Changelog: v0.0.26...v0.0.27

v0.0.26

What's Changed

• Derive ruletype response from DB entry by @eleftherias in #2130
• build(deps): bump github.com/openfga/cli from 0.2.3 to 0.2.4 by @dependabot in #2133
• build(deps): bump github.com/evanphx/json-patch/v5 from 5.8.0 to 5.8.1 by @dependabot in #2134
• build(deps): bump golang from 6fbd2d3 to 5f5d61d by @dependabot in #2132
• Add overrides for enabling alerts and remediations when creating profiles by @JAORMX in #2129
• Auto-generated cli documentation update - 2024-01-17 10:56:53 by @github-actions in #2135

Full Changelog: v0.0.25...v0.0.26

v0.0.25

What's Changed

• Bump sigstore-go version by @rdimitrov in #2106
• Remove double-wrapping of "provider error" by @evankanderson in #2112
• Remove duplicate top level context by @eleftherias in #2107
• Repository deletion should remove the associated webhook by @Vyom-Yadav in #2109
• Initial implementation of telemetry store watermill middleware by @JAORMX in #2101
• build(deps): bump golang.org/x/tools from 0.16.1 to 0.17.0 in /tools by @dependabot in #2113
• build(deps): bump golang from ffbb0b8 to 6fbd2d3 by @dependabot in #2114
• build(deps): bump github.com/openfga/cli from 0.2.2 to 0.2.3 by @dependabot in #2115
• Move EntityInfoWrapper to a separate package to avoid import loop by @jhrozek in #2116
• Rule evaluator business telemetry by @jhrozek in #2104
• build(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0 by @dependabot in #2123
• build(deps): bump github.com/go-playground/validator/v10 from 10.16.0 to 10.17.0 by @dependabot in #2122
• Cleanup entity context by @eleftherias in #2124
• Change auth scope owner for user requests by @eleftherias in #2126
• Allow retrieval of suggested patch version in patchLocatorFormatter interface by @gregfurman in #2127

Full Changelog: v0.0.24...v0.0.25

v0.0.24

What's Changed

• Make webhook tests more resilient by @JAORMX in #2024
• Remove POC related comments by @JAORMX in #2025
• Don't execute actions when running mindev ruletype test by @JAORMX in #2023
• Re-introduce variadic parameters to table API by @JAORMX in #2022
• build(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 by @dependabot in #2020
• Switch to horizontal tables for profile settings by @rdimitrov in #2027
• Remove crypto provenance and key generation utils by @rdimitrov in #2028
• Print profiles in one table instead of several by @JAORMX in #2030
• Show rule type details vertically in get call by @JAORMX in #2029
• entity event handler test fixes by @JAORMX in #2026
• Implement a DLQ for Watermill messaging by @teodor-yanev in #1994
• Add docs for minder CLI configuration by @rdimitrov in #2031
• Add metric for message processing latency by @eleftherias in #1956
• Add CI job that makes sure that go mod tidy is run by @JAORMX in #2032
• Add flag for identity server base URL by @eleftherias in #2033
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 by @dependabot in #2037
• build(deps): bump styled-components from 6.1.2 to 6.1.3 in /docs by @dependabot in #2036
• build(deps): bump google.golang.org/protobuf from 1.31.1-0.20231027082548-f4a6c1f6e5c1 to 1.32.0 in /tools by @dependabot in #2035
• build(deps): bump github.com/daixiang0/gci from 0.12.0 to 0.12.1 in /tools by @dependabot in #2039
• build(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 by @dependabot in #2041
• build(deps): bump styled-components from 6.1.3 to 6.1.6 in /docs by @dependabot in #2042
• build(deps): bump clsx from 2.0.0 to 2.1.0 in /docs by @dependabot in #2044
• Refactor eventer middleware by @teodor-yanev in #2048
• Update CONTRIBUTING.md by @dussab in #2055
• build(deps): bump github.com/go-critic/go-critic from 0.10.0 to 0.11.0 in /tools by @dependabot in #2058
• Update config.yml by @dussab in #2054
• build(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2 by @dependabot in #2057
• build(deps): bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @dependabot in #2056
• Add instructions for updating webhook configuration for minder server by @Vyom-Yadav in #2046
• Fix: Docs - Update quickstart.md by @mdp in #2053
• Create a config structure for the minder CLI by @Vyom-Yadav in #2043
• Use project ID in context and as CLI flag by @eleftherias in #2061
• Update generated docs by @eleftherias in #2062
• Add DLQ metrics by @teodor-yanev in #2052
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.1 to 2.19.0 by @dependabot in #2066
• Refactor DLQ eventer observability func by @teodor-yanev in #2069
• Add dedicated test for to reproduce #2067 and another one to test cli by @JAORMX in #2068
• Refactor vulncheck's Eval() to address high cyclomatic complexity by @gregfurman in #2050
• Warn users when the target environment for the CLI is staging by @AGMETEOR in #2071
• build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 by @dependabot in #2074
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.18.1 to 2.19.0 in /tools by @dependabot in #2064
• build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 by @dependabot in #2073
• Split token validation and authorization middleware by @eleftherias in #2063
• Add MINDER_CONFIG env var for minder client, and docs on configuration by @evankanderson in #2034
• repo register --name should skip already registered repositories by @Vyom-Yadav in #2045
• No longer print usage once the minder command has started doing real work by @evankanderson in #2072
• Handle null values in config file to prevent incorrect data retrieval from viper store by @Vyom-Yadav in #2075
• build(deps-dev): bump @docusaurus/module-type-aliases from 3.0.1 to 3.1.0 in /docs by @dependabot in #2076
• build(deps): bump github.com/styrainc/regal from 0.14.0 to 0.15.0 by @dependabot in #2077
• Pipe a CLI warning to stderr by @jhrozek in #2079
• Remove unused protos by @eleftherias in #2080
• Add TelemetryStore interface by @evankanderson in #2059
• build(deps): bump github.com/cloudflare/circl from 1.3.6 to 1.3.7 by @dependabot in #2081
• Update README.md by @gregfurman in #2084
• build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 by @dependabot in #2090
• build(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0 by @dependabot in #2089
• build(deps): bump github/codeql-action from 3.22.12 to 3.23.0 by @dependabot in #2087
• build(deps): bump anchore/sbom-action from 0.15.2 to 0.15.3 by @dependabot in #2086
• build(deps): bump follow-redirects from 1.15.2 to 1.15.4 in /docs by @dependabot in #2092
• build(deps): bump styled-components from 6.1.6 to 6.1.8 in /docs by @dependabot in #2085
• Remove context from user CRUD requests by @eleftherias in #2082
• build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.18 to 2.0.19 by @dependabot in #2088
• build(deps): bump github.com/sqlc-dev/sqlc from 1.24.0 to 1.25.0 in /tools by @dependabot in #2065
• Add OpenFGA deployment to docker-compose by @JAORMX in #2093
• Remove unused endpoint token for web by @eleftherias in #2094
• Remove unused protos for web exchange by @eleftherias in #2095
• Add the ability to enable/disable payload logging (default disabled) by @evankanderson in #2083
• Increase size of latency buckets, add tests for exported Eventer metrics. by @evankanderson in #2091
• build(deps): bump github.com/openfga/cli from 0.2.1 to 0.2.2 by @dependabot in #2100
• build(deps): bump golang from 1.21.5 to 1.21.6 by @dependabot in #2099
• minor: Add comment for handling missing config file and directories by @Vyom-Yadav in #2098
• Use provider and project from context by @eleftherias in #2096
• Update column name for the rule type list table by @rdimitrov in #2102
• build(deps): bump golang from 7026fb7 to ffbb0b8 by @dependabot in #2108

New Contributors

• @Vyom-Yadav made their first contribution in #2046
• @mdp made their first contribution in #2053
• @gregfurman made their first contribution in #2050
• @AGMETEOR made their first contribution in #2071

Full Changelog: v0.0.23...v0.0.24

v0.0.23

What's Changed

• Auto-generated cli documentation update - 2023-12-21 11:15:12 by @github-actions in #2003
• Drop glossy table code by @JAORMX in #2006
• Change the profile get/list output format by @JAORMX in #2005
• Replace table layout strings with type by @JAORMX in #2007
• Use variadic parameters for the table interface by @JAORMX in #2008
• Revert "Use variadic parameters for the table interface (#2008)" by @rdimitrov in #2010
• Don't print informational message on stdout by @jhrozek in #2011
• Print Details, not Description when a rpc error is caught by @jhrozek in #2013
• Add a flag to delete an account non-interactively by @jhrozek in #2014
• Auto-generated cli documentation update - 2023-12-22 07:19:48 by @github-actions in #2016
• build(deps): bump github/codeql-action from 3.22.11 to 3.22.12 by @dependabot in #2017
• build(deps): bump github.com/norwoodj/helm-docs from 1.11.3 to 1.12.0 in /tools by @dependabot in #2015
• Add newline to No config file present, using default values. by @JAORMX in #2021

Full Changelog: v0.0.22...v0.0.23

v0.0.22

What's Changed

• Set documentation for context appropriately by @JAORMX in #1939
• Reset timeout for each file processed by ruletype create/apply by @JAORMX in #1938
• Update docs for profile status command by @eleftherias in #1940
• Take into account frizbee configuration in repository by @JAORMX in #1943
• Upgrade golangci-lint to v1.55.2 in CI by @JAORMX in #1948
• Remove invalid validation for projects in reconcilers by @JAORMX in #1947
• Don't attempt to reopen a PR after updating a branch if it already exists by @jhrozek in #1944
• Use a dedicated GH API call to get the e-mail address by @jhrozek in #1951
• Add CODEOWNERS to minder by @JAORMX in #1941
• Use zerolog everywhere by @JAORMX in #1952
• Log successful event handling in watermill middleware by @JAORMX in #1953
• Default to v1 and profile if profile type or version are not set to fix old clients by @jhrozek in #1954
• Security Process for Minder by @lukehinds in #1955
• Add discord badge by @lukehinds in #1958
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #1963
• build(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @dependabot in #1964
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 in /tools by @dependabot in #1962
• build(deps): bump github.com/spf13/viper from 1.18.1 to 1.18.2 by @dependabot in #1965
• Allow tools to depend on targets in the rest of the minder repo by @evankanderson in #1959
• Fix "Get Hacking" page service name by @teodor-yanev in #1966
• Artifact list: filter per repo by @jhrozek in #1967
• Upgrade frizbee to v0.1.12 by @JAORMX in #1968
• Pass through error messages from AuthFromMD for debugging by @evankanderson in #1960
• Add simplified FGA model and tests for same by @evankanderson in #1790
• Auto-generated cli documentation update - 2023-12-19 15:14:07 by @github-actions in #1969
• Minder CLI improvements - table interface, refactor use of flags, context, etc. by @rdimitrov in #1919
• Auto-generated cli documentation update - 2023-12-19 17:19:23 by @github-actions in #1971
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #1972
• Fix alert docs and update key value column width by @rdimitrov in #1973
• Fix styling for discord badge in Readme by @rdimitrov in #1975
• Fix pull_request remediation from branch by @jhrozek in #1976
• build(deps): bump golang from 2ff79bc to 1a9d253 by @dependabot in #1980
• build(deps): bump google.golang.org/grpc from 1.60.0 to 1.60.1 by @dependabot in #1978
• build(deps): bump styled-components from 6.1.1 to 6.1.2 in /docs by @dependabot in #1981
• Quickstart updates - bump timeout and show all registered repos by @rdimitrov in #1977
• Remove config parsing from mindev by @JAORMX in #1983
• Replace unpinned actions with pinned action by @stacklokbot in #1984
• Add table output to artifact get, make it the default by @jhrozek in #1986
• Auto-generated cli documentation update - 2023-12-20 13:56:42 by @github-actions in #1987
• Ensure output format is supported at artifact_get.go by @rdimitrov in #1988
• build(deps): bump github/codeql-action from 1743d02c67be5a24134dacfe540706cbe6652208 to b374143c1149a9115d881581d29b8390bbcbb59c by @dependabot in #1996
• build(deps): bump peaceiris/actions-gh-pages from 4a2e02b36f31d8974a0d09d3bb9f3172aa2d0d0d to 373f7f263a76c20808c831209c920827a82a2847 by @dependabot in #1997
• build(deps): bump github.com/golang-migrate/migrate/v4 from 4.16.2 to 4.17.0 by @dependabot in #1999
• build(deps): bump golang from 1a9d253 to 672a228 by @dependabot in #1998
• build(deps): bump github.com/open-policy-agent/opa from 0.59.0 to 0.60.0 by @dependabot in #2000
• Add type to diff ingester protobuf by @JAORMX in #1993
• Fix screenshots for OAuth app creation (social and provider enrollment) by @rdimitrov in #1995
• Surface git clone errors as failures if the branch doesn't exist by @JAORMX in #2001
• Deploy docs on merges to main by @JAORMX in #2002
• Add get-by-name to artifact get by @jhrozek in #1990

New Contributors

• @stacklokbot made their first contribution in #1984

Full Changelog: v0.0.21...v0.0.22

v0.0.21

What's Changed

• Point Trusty helm chart default to public instance by @evankanderson in #1833
• Auto-generated helm documentation update - 2023-12-08 10:56:39 by @github-actions in #1867
• Tidy the helm chart strings for the docs by @rdimitrov in #1868
• Auto-generated helm documentation update - 2023-12-08 11:18:54 by @github-actions in #1869
• Deprecate the "update" subcommands in favour of "apply" in minder CLI by @rdimitrov in #1870
• Auto-generated cli documentation update - 2023-12-08 12:12:46 by @github-actions in #1871
• Make status a sub-command of profile by @eleftherias in #1873
• Get default provider from those enrolled in project by @eleftherias in #1859
• Auto-generated cli documentation update - 2023-12-08 14:46:39 by @github-actions in #1875
• Auto-generated cli documentation update - 2023-12-08 14:48:06 by @github-actions in #1876
• Add CodeQL scanning to Minder by @JAORMX in #1877
• build(deps): bump github.com/go-critic/go-critic from 0.9.0 to 0.10.0 in /tools by @dependabot in #1888
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.26.0 to 1.26.1 by @dependabot in #1884
• build(deps): bump golang from 58e14a9 to ae34fbf by @dependabot in #1883
• build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 by @dependabot in #1882
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #1886
• build(deps): bump github.com/daixiang0/gci from 0.11.2 to 0.12.0 in /tools by @dependabot in #1887
• build(deps): bump github.com/spf13/viper from 1.18.0 to 1.18.1 by @dependabot in #1885
• Skip actions on error in the executor by @JAORMX in #1814
• Always return response from github_rest's Do() by @jhrozek in #1890
• Don't ExitNicelyOnError on the sub-commands by @JAORMX in #1889
• Replace cli utilities print functions for cobra's by @JAORMX in #1891
• Remove unused crypto config by @eleftherias in #1893
• Replace cosign with sigstore-go by @rdimitrov in #1806
• Add back nonce period config value by @eleftherias in #1896
• Re-enable proto compatibility checks by @evankanderson in #1895
• Retire message Provider -- it is not used by @evankanderson in #1898
• Remove cloud provider provided database password by @JAORMX in #1897
• Use terminal width for Minder output by @evankanderson in #1899
• Remove GetDBURI and cached connection string by @evankanderson in #1900
• Avoid over-large allocation in EncryptBytes by @evankanderson in #1901
• build(deps): bump github.com/stacklok/frizbee from 0.0.5 to 0.0.7 by @dependabot in #1903
• build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.0 by @dependabot in #1904
• Remove kubernetes dependency from repo register sub-command by @JAORMX in #1907
• Setup go in CodeQL action by @JAORMX in #1906
• build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 by @dependabot in #1905
• Add provider to FlushAll call in aggregator by @JAORMX in #1909
• Make pull request remediations extendable, add action pinning remediation by @jhrozek in #1808
• Refactor-add context to grpc reqests v2 by @teodor-yanev in #1911
• build(deps): bump github.com/stacklok/frizbee from 0.0.7 to 0.0.9 by @dependabot in #1915
• build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #1914
• build(deps): bump golang from ae34fbf to 2ff79bc by @dependabot in #1912
• build(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #1916
• build(deps): bump golang.org/x/tools from 0.16.0 to 0.16.1 in /tools by @dependabot in #1913
• Add default branch as a repository field by @JAORMX in #1908
• Auto-generated DB schema update - 2023-12-13 11:17:23 by @github-actions in #1917
• Split minder server and CLI config by @eleftherias in #1918
• Auto-generated helm documentation update - 2023-12-13 19:04:20 by @github-actions in #1921
• build(deps): bump k8s.io/apimachinery from 0.28.4 to 0.29.0 by @dependabot in #1927
• build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #1925
• build(deps): bump github.com/charmbracelet/bubbles from 0.16.1 to 0.17.1 by @dependabot in #1928
• Split files in pull_request remediation golang package by @JAORMX in #1929
• Add protobuf for configuring the actions tag-to-sha replacement by @JAORMX in #1926
• Add validation for profile's type and version by @JAORMX in #1930
• Add excludes configuration for frizbee by @JAORMX in #1931
• Create context between steps in quickstart by @jhrozek in #1924
• Parse GitHub Action exclusion from rule def by @JAORMX in #1934
• Fix GetProfileById auth perms by @JAORMX in #1937

Full Changelog: v0.0.20...v0.0.21