We’re pleased to announce the release of gcpidentitytokenportal v0.4.1, published on May 7, 2025. This maintenance release continues our commitment to keeping your GCP identity token portal secure, stable, and up-to-date with the latest improvements from the Go and Google Cloud ecosystems.

What’s New

While v0.4.1 doesn’t introduce new features, it delivers important behind-the-scenes updates that benefit all users:

Dependency Security Updates

  • Google Cloud SDK libraries: Updated google.golang.org/api from v0.218.0 to v0.231.0, incorporating the latest bug fixes and security patches from Google’s official Go client libraries
  • OAuth2 improvements: Bumped golang.org/x/oauth2 from v0.25.0 to v0.29.0, ensuring your token vending flows leverage the most recent OAuth2 protocol improvements
  • Security packages: Updated critical security dependencies including golang.org/x/crypto and related networking libraries

Runtime Modernization

  • Go 1.24.3: The application now runs on Go 1.24.3, advancing from Go 1.23.5. This upgrade brings performance improvements, bug fixes, and the latest security patches from the Go team

Documentation Polish

  • New badges: The README now features GitHub release and license badges for quicker access to project information
  • Updated examples: Docker and Kubernetes deployment examples now reflect current version references

Why It Matters

Maintenance releases like v0.4.1 are essential for production deployments. By staying current with dependency updates, you benefit from:

  • Security hardening: Each updated dependency may contain important security patches that protect your token generation workflows
  • Proven stability: The included Google Cloud and OAuth2 libraries have been battle-tested across thousands of applications
  • No breaking changes: This is a drop-in upgrade. Your existing configurations, environment variables, and deployment patterns work exactly as before

For teams running gcpidentitytokenportal in production—whether on GCP with built-in service accounts, using service account key files, or leveraging Kubernetes Workload Identity Federation—this release ensures your token portal continues to operate with the latest underlying library improvements.

Upgrade Instructions

Upgrading to v0.4.1 is straightforward:

Docker:

docker pull ghcr.io/unitvectory-labs/gcpidentitytokenportal:v0.4.1

Kubernetes:

kubectl set image deployment/gcpidentitytokenportal \
  gcpidentitytokenportal=ghcr.io/unitvectory-labs/gcpidentitytokenportal:v0.4.1

No configuration changes are required. All existing environment variables (GOOGLE_APPLICATION_CREDENTIALS, PORT) and YAML configuration options remain unchanged.

This post was AI-generated using the unsloth/Qwen3.5-122B-A10B-GGUF:Q4_K_M model. Release v0.4.1 was published on May 7, 2025. Source: UnitVectorY-Labs/gcpidentitytokenportal. Generated by release-storyteller.