Posts
-
Introducing lockboxkms: Simple, Secure Encryption via Google Cloud KMS
We are excited to announce the launch of lockboxkms, released on October 20, 2024. lockboxkms is a lightweight, web-based utility designed to simplify how you encrypt sensitive data using the Google Cloud Key Management Service (KMS). By providing a streamlined interface for encryption, lockboxkms removes the friction of interacting with complex cloud consoles or command-line tools for everyday encryption tasks. What it does lockboxkms serves as a dedicated “encryption portal” for your team. It is intentionally designed as a one-way...
Read article -
Strengthening the Foundation: authzjwtbearerinjector v0.2.0
On October 17, 2024, we released v0.2.0 of authzjwtbearerinjector. This update is a dedicated maintenance release focused on improving the internal structure and security posture of the service, ensuring a more stable and maintainable foundation for future growth. What’s new This release focuses on “under-the-hood” improvements rather than new feature flags: Architectural Refactoring: We have reorganized the internal codebase, splitting the monolithic internal package into dedicated modules for caching, configuration, JWT handling, logging, OAuth communication, and RSA operations. Dependency Updates:...
Read article -
jwt-bearer-token-vendor v1.0.1: Maintenance Update
On October 12, 2024, we released version v1.0.1 of jwt-bearer-token-vendor. This is a maintenance release dedicated to keeping our internal dependencies current, ensuring the action remains stable and compatible with the latest GitHub Actions environment. What’s new This release focuses exclusively on updating the core libraries used to build and run the action: Updated @actions/core: We’ve bumped the GitHub Actions toolkit library to version 1.11.1. Updated @vercel/ncc: The bundling tool has been updated to version 0.38.2 to ensure the distribution...
Read article -
Improving Reliability and Guidance: authzjwtbearerinjector v0.1.1
On October 11, 2024, we released v0.1.1 of authzjwtbearerinjector. This maintenance update focuses on enhancing the reliability of the token refresh process and providing clearer documentation to help users deploy and configure the service more effectively. What’s new Reliable Token Refreshing: We fixed a bug where the SOFT_TOKEN_LIFETIME defaulted to 0. It now correctly defaults to 0.5, meaning tokens are refreshed when 50% of their lifetime remains, preventing unexpected authentication failures. Enhanced Documentation: The README has been significantly expanded. We’ve...
Read article -
Introducing hellorest: The Minimalist's Tool for Infrastructure Testing
On October 10, 2024, we are excited to announce the launch of hellorest, a minimal REST API designed specifically for developers and DevOps engineers who need a predictable, lightweight service to validate their infrastructure. Whether you are testing a new deployment pipeline, verifying network connectivity, or configuring a load balancer, hellorest provides the simplest possible baseline to ensure your environment is working as expected. What is hellorest? hellorest is a trivial “Hello World” service written in Go. It does one...
Read article -
Introducing authzjwtbearerinjector: Seamless Token Injection for Envoy Proxy
We are excited to announce the launch of authzjwtbearerinjector on October 10, 2024. This new project provides a robust way to automate the acquisition and injection of OAuth 2.0 tokens into requests flowing through the Envoy Proxy, significantly simplifying how you secure your backend services. What is authzjwtbearerinjector? authzjwtbearerinjector is a gRPC-based External Authorization (ExtAuthz) service designed to run as a sidecar to Envoy Proxy. It implements the JWT-bearer flow, allowing it to act as a secure intermediary that handles...
Read article -
firestoreproto2map v0.0.4: Strengthening Build Security and Transparency
Released on September 29, 2024, firestoreproto2map v0.0.4 is a maintenance release focused on improving the project’s infrastructure. This update enhances the reliability and security of our build pipeline, ensuring that users can trust the artifacts they integrate into their Java applications. What’s new This release focuses on the “under-the-hood” machinery of the project: Build Provenance: We have integrated build provenance into our release workflow. This provides a verifiable record of how the library was built, adding a critical layer of...
Read article -
consistgen v0.0.7: Maintenance and Infrastructure Update
On September 29, 2024, we released consistgen v0.0.7. This is a maintenance release focused on improving our internal release infrastructure and ensuring the project’s continued stability. What’s new This release is primarily a maintenance update. The main changes include: Version Bump: The library has been officially updated to version 0.0.7. CI/CD Enhancements: We’ve improved our GitHub Actions workflows to streamline the publishing of Java artifacts, making our release process more robust and automated. Why it matters While there are no...
Read article -
clip4llm v0.0.2: Easier Installation and Clearer Guidance
Released on September 29, 2024, clip4llm v0.0.2 is a maintenance and accessibility update designed to lower the barrier to entry for new users and provide better clarity on how the tool handles your files. What’s new The headline feature of this release is the addition of pre-compiled binaries. You no longer need to have the Go programming language installed on your system to use clip4llm. Official binaries for Windows, macOS, and Linux are now available directly via the GitHub Releases...
Read article -
jsonschema4springboot v0.0.4: Refining Validation and Reducing Noise
Released on September 28, 2024, jsonschema4springboot v0.0.4 is a maintenance release focused on enhancing the stability and precision of JSON Schema validation in Spring Boot applications. This update ensures that your API-first validation is more reliable and your development logs are cleaner. What’s new This release primarily upgrades the core validation engine to com.networknt:json-schema-validator v1.5.2. Key improvements include: Enhanced OpenAPI 3.0 Support: Fixed validation issues with exclusiveMinimum and exclusiveMaximum keywords, ensuring better compatibility with OpenAPI 3.0 schemas. Cleaner Logging: The...
Read article
subscribe via RSS