Introduction

On November 22, 2025, we released version v0.4.3 of the GCP Identity Token Portal. This maintenance release focuses on keeping your deployment secure and up-to-date with the latest dependency patches and infrastructure improvements.

The GCP Identity Token Portal continues to provide a simple web interface for vending Google Cloud Platform identity tokens with flexible audience configuration. Whether you’re running on GCP with built-in service accounts, outside GCP with JSON key files, or on Kubernetes using Workload Identity Federation, this release ensures your container runs on the latest, most secure tooling.

What’s New

This is a maintenance release with no new features or user-facing changes. However, it includes important updates that keep your deployment running smoothly:

Updated Toolchain

  • Go version upgraded from 1.25.3 to 1.25.4 for improved compiler reliability and security patches

Security & Dependencies

  • Google Cloud API library updated through multiple minor versions (0.252.0 → 0.256.0)
  • Cryptographic utilities package updated (golang.org/x/crypto: 0.43.0 → 0.45.0)
  • Related transitive dependencies refreshed to their latest compatible versions

CI/CD Improvements

  • GitHub Actions actions/checkout updated from v5 to v6 across all build workflows

Why It Matters

While this release doesn’t introduce new functionality, maintenance updates like these are critical for:

  • Security: Keeping dependencies current ensures you benefit from the latest security patches in the Google Cloud SDK ecosystem and cryptographic libraries
  • Reliability: Updated build tooling reduces the risk of subtle bugs and compatibility issues
  • Compliance: Regular dependency updates help maintain security compliance standards in production environments

The automated dependency management process via Dependabot means these updates are delivered promptly and tested thoroughly before release.

Upgrade Instructions

Upgrading to v0.4.3 is straightforward with no breaking changes or configuration modifications required:

# Pull the new Docker image
docker pull ghcr.io/unitvectory-labs/gcpidentitytokenportal:v0.4.3

# Or update your container reference
ghcr.io/unitvectory-labs/gcpidentitytokenportal:v0.4.3

This is a drop-in replacement - all existing configurations, environment variables, and deployment setups remain fully compatible. No action is required beyond updating your image tag.

Installation

If you’re new to GCP Identity Token Portal, get started with the latest Docker image:

docker run -p 8080:8080 ghcr.io/unitvectory-labs/gcpidentitytokenportal:v0.4.3

Visit our GitHub repository for complete documentation on deployment options and configuration.

This release announcement was AI-generated using the unsloth/Qwen3.5-122B-A10B-GGUF:Q4_K_M model on March 18, 2026. Original release v0.4.3 published November 22, 2025. Generated by release-storyteller.