Releases: ClarifiedSecurity/Providentia
Releases · ClarifiedSecurity/Providentia
v24.3.3
Major changes
- Address calculation changes by @mromulus in #88
- Add exclude option for service subjects by @mromulus in #91
- Instance metadata by @mromulus in #92
API changes
- New instance metadata API is added. As mentioned in PR, this is currently in experimental stage.
The endpoint is at/api/v3/<environment>/hosts/<host>/instances/<instance>
and supports PUT and PATCH requests. The only supported field ismetadata
.
The metadata field is also added to GET result on/api/v3/<environment>/hosts/<host>
- New API endpoint
/api/v3/.auth
, which describes the current OpenID Connect integration configuration
UI
- Make textareas automatically resize based on contents
Fixes
- Numbered tags not being generated for subactors by @mromulus in #74
- Fix bug with services API endpoint caching
- Fix issue with VM deletion not removing second line in listing
Tooling / dependencies
- Remove .ruby-version and update github workflows and other configuration as needed
- chore(deps): bump postcss-preset-env from 9.5.0 to 9.5.1 by @dependabot in #70
- chore(deps): bump sentry-ruby and sentry-rails by @dependabot in #77
- chore(deps): bump nokogiri from 1.16.2 to 1.16.3 by @dependabot in #76
- chore(deps): bump cssnano from 6.1.0 to 6.1.1 by @dependabot in #84
- chore(deps): bump postcss from 8.4.35 to 8.4.38 by @dependabot in #86
- chore(deps-dev): bump rspec-rails from 6.1.1 to 6.1.2 by @dependabot in #81
- chore(deps): bump rouge from 4.2.0 to 4.2.1 by @dependabot in #80
- chore(deps): bump postcss-import from 16.0.1 to 16.1.0 by @dependabot in #85
- chore(deps): bump postcss-preset-env from 9.5.1 to 9.5.2 by @dependabot in #79
- chore(deps): bump vite from 5.1.6 to 5.2.2 by @dependabot in #83
- chore(deps): bump liquid from 5.4.0 to 5.5.0 by @dependabot in #87
Full Changelog: v24.3.2...v24.3.3
v24.3.2
Fixes
- API issue with checks being returned multiple times, if matched by multiple subjects
- Issue with services: cannot change from tagging subject type to anything else
- Issue with services: displaying junk when network checks do not have protocol and ip family set
- Issue with services: Tagging subject types not updating cache on addition or removal
- Partial fix for UI issue where select control re-appears after update to server
- UI issue: customization specs not showing services added to container specs
- UI issue: unclear wording on sequential field
- UX issue: copy from address preview unneccessarily included subnet mask
Tooling
- Add dependabot for automatic dependency tracking
- chore(deps): bump rack from 3.0.9 to 3.0.9.1 by @dependabot in #44
- chore(deps-dev): bump listen from 3.8.0 to 3.9.0 by @dependabot in #45
- chore(deps): bump rails from 7.1.3 to 7.1.3.2 by @dependabot in #46
- chore(deps): bump turbo-rails from 2.0.2 to 2.0.4 by @dependabot in #50
- chore(deps): bump jwt from 2.7.1 to 2.8.1 by @dependabot in #48
- chore(deps): bump view_component from 3.10.0 to 3.11.0 by @dependabot in #47
- chore(deps): bump postcss-preset-env from 9.3.0 to 9.4.0 by @dependabot in #52
- chore(deps): bump @hotwired/turbo-rails from 8.0.2 to 8.0.3 by @dependabot in #58
- chore(deps): bump postcss-nesting from 12.0.2 to 12.0.4 by @dependabot in #54
- chore(deps): bump vite from 5.1.3 to 5.1.4 by @dependabot in #55
- chore(deps): bump cssnano from 6.0.3 to 6.0.5 by @dependabot in #57
- chore(deps): bump json-jwt from 1.16.5 to 1.16.6 by @dependabot in #60
- chore(deps): bump turbo-rails from 2.0.4 to 2.0.5 by @dependabot in #67
- chore(deps): bump pg from 1.5.5 to 1.5.6 by @dependabot in #59
- chore(deps): bump vite from 5.1.4 to 5.1.6 by @dependabot in #69
- chore(deps): bump @hotwired/turbo-rails from 8.0.3 to 8.0.4 by @dependabot in #68
- chore(deps): bump cssnano from 6.0.5 to 6.1.0 by @dependabot in #64
- chore(deps): bump postcss-preset-env from 9.4.0 to 9.5.0 by @dependabot in #63
- chore(deps): bump postcss-nesting from 12.0.4 to 12.1.0 by @dependabot in #65
New Contributors
- @dependabot made their first contribution in #44
Full Changelog: v24.3.1...v24.3.2
v24.3.1
Fixes
- Fix issue with hostname generation, replace _ with -
- Fix slug generation for
Service
s, add scope toExercise
s to avoid collisions for services with same name
Full Changelog: v24.3...v24.3.1
v24.3
UI Changes
Fixes
- Avoid duplicate entry creation from tom-select control, closes #35 by @mromulus in #40
- Fix empty exercise state by @mromulus in #41
- UI z-index issue with search backdrop and header
- Issue with updating existing
Service
-s
API changes
Tooling
- Update to Yarn 4
- Update Rails to 7.1.3
- Update gems and JS dependencies
Full Changelog: v24.2...v24.3
v24.2
UI changes
- Make actor filter dropdown more noticable in VM index page
Fixes
- Remove actor links if user does not have correct permissions
- Fix specs listing in capabilities UI
- Fix segment deploy counter chip to show correct offset
- Fix environment cloning functionality
- Fix docs page regression due to Rails upgrade
Tooling
- Update keycloak to 23 series
- Update rubygems with CVE-s
Full Changelog: v24.1...v24.2
v24.1
Fixes
- UI - missing address prefixes for unique local and link-local addresses
- Default address mode for networks without IP pools is now IPv4 DHCP
- Capability selection - reference to old method name, missing cache invalidation and wrong ordering in UI
Tooling
- Update to Ruby 3.3.0 and enable YJIT
- Update JS and Ruby libraries, including Turbo 8.0
- Update stimulus UI components
Other
- Refactor papertrail version model to cause less conflicts
Full Changelog: v23.10.1...v24.1
v23.10.1
Fixes
- exception with VM page without numbered_by
- rubocop and brakeman warnings
Tooling
- Add CI with tests and linting
Full Changelog: v23.10...v23.10.1
v23.10
Fixes
- Fix search - caused by leftover
ServiceCheck
andSpecialCheck
references in code - cache invalidation bugs on
ServiceSubjects
VirtualMachine
update error due to missing numbered_by parameter
UI
- hide network map link from UI until it is stable again
Tooling
- Update Ruby and JS dependencies
Full Changelog: v23.9...v23.10
v23.9
Fixes
- Network UI for dynamic addresses by @mromulus in #30
- Numerous issues with numbered_by disappearing on VirtualMachine models
- Wrong numbering source used in certain scenarios
API Changes
- Add numbered configurations to actors API
Tooling
- Add import-db command to Makefile
Other
- Remove legacy code - ServiceCheck, SpecialCheck, Team
Full Changelog: v23.8...v23.9
v23.8
Major changes
The tooling updates enable deploying Providentia with the nova.core role for production. The production example in this repository is meant for local use only and has insecure default settings.
Fixes
- Network size changing causing exceptions
- Add more page titles
- AddressPool update from new state by @mromulus in #27
- Fix for numbered actors NICs by @AllRWeak in #22
- First start experience improvements by @mromulus in #28
- Global search for non-admin users
Documentation
- Reference nova.core Ansible collection
Tooling
- Remove dependency on credentials.yml.enc and master.key
Other
- Add single node clustering support by @mromulus in #29
This enables setting custom deploy count to 1, with inventory using sequential format, allowing for more flexible roles in Ansible downstream
New Contributors
Full Changelog: v23.7...v23.8