Skip to content

Releases: ClarifiedSecurity/Providentia

v24.3.3

25 Mar 10:54
072801d
Compare
Choose a tag to compare

Major changes

API changes

  • New instance metadata API is added. As mentioned in PR, this is currently in experimental stage.
    The endpoint is at /api/v3/<environment>/hosts/<host>/instances/<instance> and supports PUT and PATCH requests. The only supported field is metadata.
    The metadata field is also added to GET result on /api/v3/<environment>/hosts/<host>
  • New API endpoint /api/v3/.auth, which describes the current OpenID Connect integration configuration

UI

  • Make textareas automatically resize based on contents

Fixes

  • Numbered tags not being generated for subactors by @mromulus in #74
  • Fix bug with services API endpoint caching
  • Fix issue with VM deletion not removing second line in listing

Tooling / dependencies

  • Remove .ruby-version and update github workflows and other configuration as needed
  • chore(deps): bump postcss-preset-env from 9.5.0 to 9.5.1 by @dependabot in #70
  • chore(deps): bump sentry-ruby and sentry-rails by @dependabot in #77
  • chore(deps): bump nokogiri from 1.16.2 to 1.16.3 by @dependabot in #76
  • chore(deps): bump cssnano from 6.1.0 to 6.1.1 by @dependabot in #84
  • chore(deps): bump postcss from 8.4.35 to 8.4.38 by @dependabot in #86
  • chore(deps-dev): bump rspec-rails from 6.1.1 to 6.1.2 by @dependabot in #81
  • chore(deps): bump rouge from 4.2.0 to 4.2.1 by @dependabot in #80
  • chore(deps): bump postcss-import from 16.0.1 to 16.1.0 by @dependabot in #85
  • chore(deps): bump postcss-preset-env from 9.5.1 to 9.5.2 by @dependabot in #79
  • chore(deps): bump vite from 5.1.6 to 5.2.2 by @dependabot in #83
  • chore(deps): bump liquid from 5.4.0 to 5.5.0 by @dependabot in #87

Full Changelog: v24.3.2...v24.3.3

v24.3.2

13 Mar 13:06
47bfea8
Compare
Choose a tag to compare

Fixes

  • API issue with checks being returned multiple times, if matched by multiple subjects
  • Issue with services: cannot change from tagging subject type to anything else
  • Issue with services: displaying junk when network checks do not have protocol and ip family set
  • Issue with services: Tagging subject types not updating cache on addition or removal
  • Partial fix for UI issue where select control re-appears after update to server
  • UI issue: customization specs not showing services added to container specs
  • UI issue: unclear wording on sequential field
  • UX issue: copy from address preview unneccessarily included subnet mask

Tooling

  • Add dependabot for automatic dependency tracking
  • chore(deps): bump rack from 3.0.9 to 3.0.9.1 by @dependabot in #44
  • chore(deps-dev): bump listen from 3.8.0 to 3.9.0 by @dependabot in #45
  • chore(deps): bump rails from 7.1.3 to 7.1.3.2 by @dependabot in #46
  • chore(deps): bump turbo-rails from 2.0.2 to 2.0.4 by @dependabot in #50
  • chore(deps): bump jwt from 2.7.1 to 2.8.1 by @dependabot in #48
  • chore(deps): bump view_component from 3.10.0 to 3.11.0 by @dependabot in #47
  • chore(deps): bump postcss-preset-env from 9.3.0 to 9.4.0 by @dependabot in #52
  • chore(deps): bump @hotwired/turbo-rails from 8.0.2 to 8.0.3 by @dependabot in #58
  • chore(deps): bump postcss-nesting from 12.0.2 to 12.0.4 by @dependabot in #54
  • chore(deps): bump vite from 5.1.3 to 5.1.4 by @dependabot in #55
  • chore(deps): bump cssnano from 6.0.3 to 6.0.5 by @dependabot in #57
  • chore(deps): bump json-jwt from 1.16.5 to 1.16.6 by @dependabot in #60
  • chore(deps): bump turbo-rails from 2.0.4 to 2.0.5 by @dependabot in #67
  • chore(deps): bump pg from 1.5.5 to 1.5.6 by @dependabot in #59
  • chore(deps): bump vite from 5.1.4 to 5.1.6 by @dependabot in #69
  • chore(deps): bump @hotwired/turbo-rails from 8.0.3 to 8.0.4 by @dependabot in #68
  • chore(deps): bump cssnano from 6.0.5 to 6.1.0 by @dependabot in #64
  • chore(deps): bump postcss-preset-env from 9.4.0 to 9.5.0 by @dependabot in #63
  • chore(deps): bump postcss-nesting from 12.0.4 to 12.1.0 by @dependabot in #65

New Contributors

Full Changelog: v24.3.1...v24.3.2

v24.3.1

20 Feb 12:54
4ce56e4
Compare
Choose a tag to compare

Fixes

  • Fix issue with hostname generation, replace _ with -
  • Fix slug generation for Services, add scope to Exercises to avoid collisions for services with same name

Full Changelog: v24.3...v24.3.1

v24.3

19 Feb 09:44
52b31df
Compare
Choose a tag to compare

UI Changes

  • UI update by @mromulus in #43
    Major update to VM listing view
  • Make dark mode user toggle-able

Fixes

  • Avoid duplicate entry creation from tom-select control, closes #35 by @mromulus in #40
  • Fix empty exercise state by @mromulus in #41
  • UI z-index issue with search backdrop and header
  • Issue with updating existing Service-s

API changes

Tooling

  • Update to Yarn 4
  • Update Rails to 7.1.3
  • Update gems and JS dependencies

Full Changelog: v24.2...v24.3

v24.2

24 Jan 09:47
83d7acf
Compare
Choose a tag to compare

UI changes

  • Make actor filter dropdown more noticable in VM index page

Fixes

  • Remove actor links if user does not have correct permissions
  • Fix specs listing in capabilities UI
  • Fix segment deploy counter chip to show correct offset
  • Fix environment cloning functionality
  • Fix docs page regression due to Rails upgrade

Tooling

  • Update keycloak to 23 series
  • Update rubygems with CVE-s

Full Changelog: v24.1...v24.2

v24.1

04 Jan 11:24
1e9fa73
Compare
Choose a tag to compare

Fixes

  • UI - missing address prefixes for unique local and link-local addresses
  • Default address mode for networks without IP pools is now IPv4 DHCP
  • Capability selection - reference to old method name, missing cache invalidation and wrong ordering in UI

Tooling

  • Update to Ruby 3.3.0 and enable YJIT
  • Update JS and Ruby libraries, including Turbo 8.0
  • Update stimulus UI components

Other

  • Refactor papertrail version model to cause less conflicts

Full Changelog: v23.10.1...v24.1

v23.10.1

05 Dec 14:23
1b2ecb6
Compare
Choose a tag to compare

Fixes

  • exception with VM page without numbered_by
  • rubocop and brakeman warnings

Tooling

  • Add CI with tests and linting

Full Changelog: v23.10...v23.10.1

v23.10

05 Dec 11:28
182e74f
Compare
Choose a tag to compare

Fixes

  • Fix search - caused by leftover ServiceCheck and SpecialCheck references in code
  • cache invalidation bugs on ServiceSubjects
  • VirtualMachine update error due to missing numbered_by parameter

UI

  • hide network map link from UI until it is stable again

Tooling

  • Update Ruby and JS dependencies

Full Changelog: v23.9...v23.10

v23.9

02 Nov 09:15
56dff7b
Compare
Choose a tag to compare

Fixes

  • Network UI for dynamic addresses by @mromulus in #30
  • Numerous issues with numbered_by disappearing on VirtualMachine models
  • Wrong numbering source used in certain scenarios

API Changes

  • Add numbered configurations to actors API

Tooling

  • Add import-db command to Makefile

Other

  • Remove legacy code - ServiceCheck, SpecialCheck, Team

Full Changelog: v23.8...v23.9

v23.8

13 Oct 11:05
31194a9
Compare
Choose a tag to compare

Major changes

The tooling updates enable deploying Providentia with the nova.core role for production. The production example in this repository is meant for local use only and has insecure default settings.

Fixes

  • Network size changing causing exceptions
  • Add more page titles
  • AddressPool update from new state by @mromulus in #27
  • Fix for numbered actors NICs by @AllRWeak in #22
  • First start experience improvements by @mromulus in #28
  • Global search for non-admin users

Documentation

  • Reference nova.core Ansible collection

Tooling

  • Remove dependency on credentials.yml.enc and master.key

Other

  • Add single node clustering support by @mromulus in #29
    This enables setting custom deploy count to 1, with inventory using sequential format, allowing for more flexible roles in Ansible downstream

New Contributors

Full Changelog: v23.7...v23.8