v1.20.5

Overview

Maintenance 🚧

• chore: remove obsolete build tags by @csatib02 in #186
• chore: update deps by @csatib02 in #203
• chore: prepare release by @csatib02 in #206

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #181
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #184
• build(deps): bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #183
• build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in #182
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #189
• build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #188
• build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #187
• build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @dependabot in #190
• chore(deps): lock file maintenance by @renovate in #191
• build(deps): bump github/codeql-action from 3.26.2 to 3.26.5 by @dependabot in #192
• chore(deps): lock file maintenance by @renovate in #193
• build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #195
• build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 by @dependabot in #196
• build(deps): bump github/codeql-action from 3.26.5 to 3.26.6 by @dependabot in #194
• chore(deps): lock file maintenance by @renovate in #197
• chore(deps): lock file maintenance by @renovate in #198
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 7 to 8 by @dependabot in #201
• build(deps): bump cachix/install-nix-action from 27 to 28 by @dependabot in #199
• chore(deps): lock file maintenance by @renovate in #202
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @dependabot in #200
• chore(deps): lock file maintenance by @renovate in #205
• build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @dependabot in #204

Full Changelog: v1.20.4...v1.20.5

v1.20.4

Overview

The hard-coded image k8s.gcr.io/hyperkube:v1.12.1 used in the cleanup secret-cleanup job contains critical security vulnerabilities and is no longer maintained. This release adds capabilities to configure the image for the cleanup job and uses rancher/hyperkube as default image which is stable and actively maintained. We advise all users to upgrade to the latest chart release.

Security 🚩

• fix(security): enable configurable secret-cleanup job specs by @JuryA in 9691991

Features 🚀

• feat: add chart signing by @csatib02 in #173

Maintenance 🚧

• docs: CNCF onboarding by @csatib02 in #176

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #158
• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #159
• chore(deps): lock file maintenance by @renovate in #160
• build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #161
• chore(deps): lock file maintenance by @renovate in #162
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #164
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.15 to 0.46.16 by @dependabot in #163
• chore(deps): lock file maintenance by @renovate in #165
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #167
• build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8 by @dependabot in #166
• chore(deps): lock file maintenance by @renovate in #168
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 by @dependabot in #169
• build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 by @dependabot in #170
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #171
• chore(deps): lock file maintenance by @renovate in #172
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #174
• chore(deps): lock file maintenance by @renovate in #175
• chore(deps): lock file maintenance by @renovate in #177

Full Changelog: v1.20.3...v1.20.4

v1.20.3

Overview

Bug Fixes 🐛

• fix: typos in issue template by @csatib02 in #149

Maintenance 🚧

• chore: prepare for v1.20.3 by @akijakya in #157

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #110
• chore(deps): lock file maintenance by @renovate in #113
• build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.19.0 by @dependabot in #122
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.11 to 0.46.13 by @dependabot in #121
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 3 to 4 by @dependabot in #118
• chore(deps): lock file maintenance by @renovate in #115
• build(deps): bump cachix/install-nix-action from 25 to 26 by @dependabot in #114
• build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #119
• build(deps): bump actions/download-artifact from 4.1.2 to 4.1.4 by @dependabot in #112
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #117
• build(deps): bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #120
• chore(deps): lock file maintenance by @renovate in #123
• build(deps): bump azure/setup-helm from 3.5 to 4 by @dependabot in #124
• chore(deps): lock file maintenance by @renovate in #125
• build(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 by @dependabot in #126
• build(deps): bump azure/setup-helm from 4.1.0 to 4.2.0 by @dependabot in #127
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #129
• build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #128
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #130
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.13 to 0.46.14 by @dependabot in #132
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #133
• build(deps): bump actions/download-artifact from 4.1.5 to 4.1.7 by @dependabot in #135
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #134
• chore(deps): lock file maintenance by @renovate in #131
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #136
• build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @dependabot in #138
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 4 to 6 by @dependabot in #139
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #137
• build(deps): bump cachix/install-nix-action from 26 to 27 by @dependabot in #142
• build(deps): bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in #143
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #141
• chore(deps): lock file maintenance by @renovate in #140
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.14 to 0.46.15 by @dependabot in #145
• chore(deps): lock file maintenance by @renovate in #148
• build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #146
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #147
• build(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #150
• build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #151
• chore(deps): lock file maintenance by @renovate in #152
• build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #153
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 6 to 7 by @dependabot in #154
• chore(deps): lock file maintenance by @renovate in #156
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #155

Full Changelog: v1.20.2...v1.20.3

v1.20.2

Overview

Bug Fixes 🐛

• fix: remove workaround for default storage by @csatib02 in #103

Maintenance 🚧

• docs: Add issue template by @tanmay-pnaik in #33
• feat(GA): add common pipeline actions by @ramizpolic in #72
• feat(GA): Cancel previous workflow on push by @csatib02 in #106
• chore: update dependabot config by @akijakya in #101
• chore: prepare for v1.20.2 by @ramizpolic in #109

Dependency Updates ⬆️

View all dependency changes

• build(deps): bump aquasecurity/trivy-action from 0.14.0 to 0.15.0 by @dependabot in #74
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.6 to 0.46.8 by @dependabot in #75
• chore(deps): lock file maintenance by @renovate in #70
• build(deps): bump cachix/install-nix-action from 23 to 24 by @dependabot in #73
• build(deps): bump aquasecurity/trivy-action from 0.15.0 to 0.16.0 by @dependabot in #77
• chore(deps): lock file maintenance by @renovate in #80
• build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #81
• build(deps): bump actions/download-artifact from 3.0.2 to 4.1.0 by @dependabot in #82
• build(deps): bump actions/download-artifact from 4.1.0 to 4.1.1 by @dependabot in #88
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.8 to 0.46.9 by @dependabot in #87
• build(deps): bump actions/upload-artifact from 4.0.0 to 4.3.0 by @dependabot in #95
• build(deps): bump actions/cache from 3.3.2 to 4.0.0 by @dependabot in #92
• build(deps): bump cachix/install-nix-action from 24 to 25 by @dependabot in #91
• build(deps): bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @dependabot in #86
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.9 to 0.46.11 by @dependabot in #93
• build(deps): bump DeterminateSystems/magic-nix-cache-action from 2 to 3 by @dependabot in #96
• chore(deps): lock file maintenance by @renovate in #97
• build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 by @dependabot in #98
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #100
• build(deps): bump actions/download-artifact from 4.1.1 to 4.1.2 by @dependabot in #99
• chore(deps): lock file maintenance by @renovate in #107
• chore(deps): lock file maintenance by @renovate in #108
• build(deps): bump haya14busa/action-cond from 1.1.1 to 1.2.1 by @dependabot in #104
• chore(deps): lock file maintenance by @renovate in #105

New Contributors

• @csatib02 made their first contribution in #103

Full Changelog: v1.20.1...v1.20.2

v1.20.1

Changes

• chore: updated K8s and Vault versions to latest by @akijakya in #5
• chart: updated Vault version, pin bank-vaults version by @akijakya in #8
• Remove vault-config.yml conversion to json by @kirillplis in #16
• feat: Allow for TLS in other namespaces by @tanmay-pnaik in #18
• ci: apply flake updates by @sagikazarmark in #21
• chore: Use verified publisher image hashicorp/vault by @tanmay-pnaik in #20
• ci: update to latest Vault versions in matrix by @akijakya in #22
• chore: Update Vault to 1.14.0 by @tanmay-pnaik in #23
• chore: Update to ghcr.io/bank-vaults/bank-vaults:1.20.0 by @tanmay-pnaik in #27
• chore: Update to hashicorp/vault:1.14.1 by @tanmay-pnaik in #28
• docs: Add PR template by @tanmay-pnaik in #32
• chore: add codeowners by @ramizpolic in #44
• chore: fix codeowners by @ramizpolic in #45
• docs: update helm docs by @ramizpolic in #55
• feat: verify pull request by @ramizpolic in #53
• docs: fix installation and templates by @ramizpolic in #66
• chore: cleanup readme and makefile by @ramizpolic in #67

Dependencies

• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #9
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.0 to 0.43.4 by @dependabot in #10
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #56
• build(deps): bump docker/login-action from 2.2.0 to 3.0.0 by @dependabot in #47
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.13 to 0.46.1 by @dependabot in #57
• chore(deps): lock file maintenance by @renovate in #39
• build(deps): bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in #46
• build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in #58
• chore(deps): lock file maintenance by @renovate in #60
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.1 to 0.46.5 by @dependabot in #62
• build(deps): bump github.com/gruntwork-io/terratest from 0.46.5 to 0.46.6 by @dependabot in #65
• build(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.14.0 by @dependabot in #64
• chore(deps): lock file maintenance by @renovate in #63
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #43
• build(deps): bump aquasecurity/trivy-action from 0.11.2 to 0.12.0 by @dependabot in #41
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #49
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in #51
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.9 to 0.43.11 by @dependabot in #31
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.11 to 0.43.12 by @dependabot in #34
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #35
• Improve vault chart README.md by @arpad-csepi in #36
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.12 to 0.43.13 by @dependabot in #38
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #40
• build(deps): bump cachix/install-nix-action from 22 to 23 by @dependabot in #42
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.4 to 0.43.5 by @dependabot in #11
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.5 to 0.43.6 by @dependabot in #12
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.6 to 0.43.7 by @dependabot in #13
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.8 to 0.43.9 by @dependabot in #24
• build(deps): bump github.com/gruntwork-io/terratest from 0.43.7 to 0.43.8 by @dependabot in #17

New Contributors

• @akijakya made their first contribution in #5
• @kirillplis made their first contribution in #16
• @tanmay-pnaik made their first contribution in #18
• @arpad-csepi made their first contribution in #36
• @ramizpolic made their first contribution in #44

Full Changelog: v1.20.0...v1.20.1

v1.20.0

Project migrated 🎉 🎉 🎉

This is the first release after splitting and migrating the project to it's new home.

Most changes are related to the relocation, so this is mostly a maintenance release.