Posts
-
iapheaders v0.3.1 Release - Infrastructure Improvements
Introduction On January 19, 2025, we released iapheaders v0.3.1, a maintenance-focused update that strengthens the project’s build infrastructure and ensures the application runs on the latest patched version of Go. While this release doesn’t introduce new features, it represents our ongoing commitment to project health, testing coverage, and security best practices. What’s New Enhanced CI/CD Pipeline The highlight of v0.3.1 is the addition of a comprehensive Go build and test workflow. This new automated pipeline: Builds and tests the application...
Read article -
LockboxKMS v0.2.1 Released: Security Hardening and Dependency Updates
LockboxKMS v0.2.1 is now available! Released on January 19, 2025, this update brings important security improvements and keeps your encryption service running on the latest patched dependencies. What’s New Improved HTTP Error Handling The application now properly returns 404 errors for undefined URL paths instead of showing the main page. This change enhances both usability and security: Better user experience: Users who mistype URLs will see a clear “Not Found” response Reduced attack surface: Security scanners probing for exposed paths...
Read article -
Introducing gologhttpbinary v0.1.1 - A Maintenance Release with Security Enhancements
Introduction On January 19, 2025, UnitVectorY-Labs released gologhttpbinary v0.1.1, a maintenance release that builds upon the foundation laid by the initial v0.1.0 launch in November 2024. While this update doesn’t introduce new application features, it delivers important security hardening, dependency updates, and documentation improvements that make the project more robust and easier to use. gologhttpbinary is a lightweight HTTP server designed for debugging and testing scenarios. It captures incoming HTTP requests and logs the path, headers, and body (encoded as...
Read article -
clip4llm v0.0.4: Maintenance and Polish Update
We’re pleased to announce the release of clip4llm v0.0.4, published on January 19, 2025. This maintenance release focuses on infrastructure improvements and continued refinement of the build system, ensuring the tool remains secure, reliable, and well-maintained. What’s New While v0.0.4 doesn’t introduce new features, it represents important behind-the-scenes work that keeps clip4llm running smoothly: Security Update: Bumped Go runtime from 1.23.4 to 1.23.5, incorporating the latest security patches and bug fixes Enhanced Testing: Added code coverage reporting to the CI...
Read article -
gcpidentitytokenportal v0.3.0 - Kubernetes Support with Workload Identity Federation
Introducing Kubernetes Support for Multi-Cloud Deployments On January 15, 2025, we released gcpidentitytokenportal v0.3.0, a significant update that expands where you can deploy this tool beyond Google Cloud Platform. This release introduces native Kubernetes support with Workload Identity Federation and service account impersonation, enabling you to obtain GCP identity tokens from any Kubernetes cluster integrated with Google Cloud. What’s New Kubernetes Deployment Outside GCP The headline feature in v0.3.0 is the ability to run gcpidentitytokenportal in Kubernetes clusters outside of...
Read article -
JSONassertify v0.0.3 Released: Security Updates and Enhanced Stability
Introducing JSONassertify v0.0.3 We’re pleased to announce the release of JSONassertify v0.0.3, published on January 4, 2025. This maintenance release focuses on keeping your JSON testing toolkit secure and up-to-date with the latest improvements from the underlying libraries. JSONassertify continues to be a modernized fork of the popular JSONassert library, helping developers simplify JSON comparisons in unit tests—especially when testing REST interfaces. With over a decade of value from the original project, JSONassertify brings active maintenance, security updates, and continued...
Read article -
AuthZ GCP K8s Token Injector v0.1.1 Released
Introduction On January 2, 2025, we released version 0.1.1 of AuthZ GCP K8s Token Injector—a security-focused maintenance update that strengthens the build pipeline and ensures all dependencies remain current. This release maintains the core functionality you rely on while introducing important security improvements to our CI/CD workflows and updating critical dependencies including gRPC to version 1.69.2. What’s New Security Enhancements This release prioritizes supply chain security with several workflow improvements: Credential Hardening: All GitHub Actions workflows now include persist-credentials: false,...
Read article -
authzjwtbearerinjector v0.2.1 Released: Security Enhancements and Dependency Updates
Introduction On January 2, 2025, UnitVectorY-Labs released v0.2.1 of authzjwtbearerinjector. This maintenance release focuses on strengthening security posture through comprehensive dependency updates and enhanced supply chain protections, ensuring users benefit from the latest improvements in gRPC and related libraries. What’s New Release v0.2.1 brings important infrastructure updates without changing the core functionality users rely on: Security-Enhanced Dependencies Updated Go runtime from 1.23.2 to 1.23.4 Upgraded gRPC library through multiple versions (1.67.1 → 1.69.2) for improved stability and security Enhanced protocol...
Read article -
GCP Identity Token Portal v0.2.0 Released
Welcome to v0.2.0 On December 14, 2024, we released version 0.2.0 of GCP Identity Token Portal. This release focuses on maintaining a healthy, secure codebase by updating dependencies and incorporating the latest security patches from our core libraries. This maintenance release keeps your deployment current with the latest Google Cloud API libraries and cryptographic packages, ensuring you have access to the most up-to-date security improvements while maintaining full compatibility with your existing setup. What’s New While v0.2.0 doesn’t introduce new...
Read article -
LockboxKMS v0.2.0: Strengthening Our Foundation
LockboxKMS v0.2.0 was released on December 14, 2024. This release represents our ongoing commitment to security, reliability, and active maintenance of your encryption infrastructure. While it doesn’t introduce new features, it strengthens the foundation that powers your encrypted data workflows. What’s New v0.2.0 is a carefully crafted maintenance release focused on keeping LockboxKMS secure and up-to-date: Security Updates Updated golang.org/x/crypto from v0.29.0 to v0.31.0, incorporating critical security patches in this foundational cryptography library Multiple Google Cloud library updates (including cloud.google.com/go/kms...
Read article
subscribe via RSS