Skip to content

Releases: arcus-azure/arcus.security

v2.1.0

27 Jan 09:16
5484d64

Choose a tag to compare

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.1.0

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

  • Provide .NET 10 support throughout (#446)
  • Provide new secret store alternative (#455)

Changes:

  • 5484d64 docs(v3): add v2.x-v3 migration guide (#501)
  • 70e8f04 chore(deps): upgrade active dependencies throughout solution for .NET 10 release (#498) [ #446 ]
  • 8331bc4 fix(hashicorp): use secret mapping in hashicorp vault tests (#500) [ #499 ]
  • 8068ebb test(hashicorp.vault): add test-context integration tests for the new HashiCorp Vault interface (#497) [ #478 ]
  • a44c1f2 test(cli): add test-contexts tests for cli secret providers (#495) [ #475 ]
  • eb85008 test(core): add test-contexts tests for core secret providers (#494) [ #454 ]
  • 6ceffb5 test(az.kv): add test-context tests for the az key-vault secret provider (#493) [ #466 ]
  • bd25470 test(docker.secrets): add test context test for docker secrets secret provider (#496) [ #462 ]
  • ecac0a5 chore: Bump js-yaml from 3.14.1 to 3.14.2 in /docs (#492) [ #470, #557, #332, #571, #576, #258, #290, #529, #570, #731 ]
  • bc78118 test(user.secrets): add test context- tests for user secret provider (#491) [ #479 ]
See More
  • 80e51d2 docs(v3): rework feature docs for v3 (#485)
  • 05face4 fix(az.kv): invalidate secret after az kv secret provider sets new secret (version) (#487) [ #486 ]
  • cc9dd38 fix(core): correct secret result string representation (#490)
  • 5453855 chore(core): make new interfaces public (#483) [ #448, #438 ]
  • 15d69f5 chore(core): make secret result name always available (#484) [ #460 ]
  • 7811101 chore(hashicorp): implement new hashicorp registration overloads (#478) [ #477 ]
  • 687f012 chore(core): deprecate remaining core functionality (#481) [ #438 ]
  • 619d7b3 chore(az.kv): add necessary overloads with secret provider options (#482) [ #466 ]
  • 31bfb7a chore(deprecate): unlinked/unnecessary core components (#472) [ #438 ]
  • 8eb6623 chore(cmd.line): implement new command line registration overloads (#476) [ #475 ]
  • 33b4dc3 chore(docker.secrets): implement new docker secrets registration overloads (#474) [ #473 ]
  • 2e824de chore(core): internally implement core providers w/ new interface (#467) [ #448, #454 ]
  • 149fd3b chore(user.secrets): implement new user secrets registration overloads (#480) [ #479 ]
  • 687d358 chore(az.kv): internally implement az key vault secret provider (#466) [ #448 ]
  • 6bfcf92 chore(core): remove guard.net usage in secret result model (#470) [ #434 ]
  • 51e4c5e chore(hashicorp.vault): deprecate diff auth mechainsm in favor of future considelation (#459) [ #438 ]
  • c684f5d feat(core): internally re-implement secret store (#465) [ #438, #452 ]
  • 56d97a0 chore(deps): use package ranges for user secrets provider (#471)
  • 948bdd7 chore(test): Migrate xUnit to v3 (#469) [ #447 ]
  • 922d44f chore(user.secrets): internally implement new secret provider in user secrets (#464) [ #463 ]
  • f52fdd9 chore(docker.secrets): internally implement new secret provider in docker secrets (#462) [ #461 ]
  • 2bfeeff chore(cmd.line): internally implement new secret provider for cmd line (#457)
  • 1ac5908 chore(core): add internal isecretstore proposal (#458)
  • 396bf14 chore(core): add new isecretprovider interface (#455)
  • c7ca113 chore(net10.0): add support for .net 10.0 throughout (#446)
  • 2a38025 refactor: Removing all dependency to Guard.NET. (#437)
  • de852f5 chore(core): deprecate 'get raw secret' exposure in core (#445)
  • 427b212 chore(style): add .editorconfig file (#444)
  • ad423c8 chore(deps): upgrade docusaurus doc dependency (#440)
  • 1a9c866 chore(az-func): remove built-in az func support (#441)
  • 3e0c76c chore(deps): use package wildcards in core (#439)
  • 952c1a0 chore(core): deprecate secret auditing (#442)
  • d3b98d0 chore: All package upgrades FE docs (#431)
  • e90aeb0 chore: remove guard.net from other secret providers (#436)
  • 3b7e738 chore: remove guard.net from core and keyvault secret provider (#435)
  • e0b4f97 chore: deploy test resources w/ new test packages (#433)
  • f5e02f2 docs: publish v2.0.0 feature docs (#429)
  • 143aaa8 chore: revert secret store xml docs for 'add provider' (#430)

This list of changes was auto generated.

v2.0.0

15 Feb 08:28
cf0fc8d

Choose a tag to compare

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.0.0

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

Breaking Changes

  • Replace deprecated AddProvider with specific secret mutation to secret provider options overload (#305)

Removal

  • Remove empty CacheConfiguration constructor (#306)
  • Remove deprecated Microsoft.Azure.KeyVault.* packages (#311)
  • Remove regular expression patterns for secret and vault names in Azure Key vault secret provider (#325)
  • Remove deprecated Azure Key vault authentication (#202)
  • Remove deprecated Azure Key vault secret store extensions (#329)

Changes:

  • cf0fc8d chore: upgrade to observability v3.0 (#427)
  • d40678b chore: remove deprecated secret store functionality (#426)
  • de11c91 chore: remove deprecated key vault functionality (#424)
  • c28b7f7 chore: support preview net8.0 (#421)
  • d16484a chore: Update LICENSE (#409)
  • 94b89ef chore: Bump http-cache-semantics from 4.1.0 to 4.1.1 in /docs (#402)
  • 2570e23 chore: Bump @sideway/formula from 3.0.0 to 3.0.1 in /docs (#403)
  • 3aebf4e chore: Bump webpack from 5.48.0 to 5.76.1 in /docs (#405)
  • 81f75d0 chore: Bump ua-parser-js from 0.7.28 to 0.7.33 in /docs (#401)
  • f47e9e2 chore: use main branch in az devops status badge (#399)
See More

This list of changes was auto generated.

v2.0.0-preview-1-net8.0

02 Oct 07:00
c28b7f7

Choose a tag to compare

Pre-release

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.0.0-preview-1-net8.0

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

  • Provide the capability to do something (#123)

Fixes / Changes

None.

Breaking Changes

None.

Removal

None.

Changes:

  • c28b7f7 chore: support preview net8.0 (#421)
  • d16484a chore: Update LICENSE (#409)
  • 94b89ef chore: Bump http-cache-semantics from 4.1.0 to 4.1.1 in /docs (#402)
  • 2570e23 chore: Bump @sideway/formula from 3.0.0 to 3.0.1 in /docs (#403)
  • 3aebf4e chore: Bump webpack from 5.48.0 to 5.76.1 in /docs (#405)
  • 81f75d0 chore: Bump ua-parser-js from 0.7.28 to 0.7.33 in /docs (#401)
  • f47e9e2 chore: use main branch in az devops status badge (#399)
  • 805aa43 chore: remove installation section (#400)
  • 0b1043d chore: use codecov reporting (#398)
  • 733e0e9 chore: fully use arcus.testing for logging & in-memory secrets (#397)
See More

This list of changes was auto generated.

v1.9.0

16 Dec 05:39
38caa36

Choose a tag to compare

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.9.0

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

  • Provide the capability to synchronously retrieve secrets (#257)

Fixes / Changes

  • Use non-versioned secret providers when looking up versioned secret (#380)

Changes:

  • 38caa36 chore: update security diagram w/ new logo (#375)
  • 61fb72b chore: Bump decode-uri-component from 0.2.0 to 0.2.2 in /docs (#377)
  • 7eeae75 chore: Bump qs and express in /docs (#379)
  • 78c0364 chore: Bump express from 4.17.1 to 4.18.2 in /docs (#381)
  • 3dd8cfe docs: feature/brand updates (#374)
  • ad6670a fix: get versioned secrets should run though all non-versioned secret providers (#382)
  • dabc353 feat: sync secret retrieval via secret store (#373)
  • 1194fcb Update docusaurus.build.config.js (#376)
  • 4d24c1e chore: update codeql to v2 (#372)
  • d63c40a chore: Bump loader-utils from 1.4.1 to 1.4.2 in /docs (#371)
See More
  • 7e2df58 chore: remove deprecated pr validation config (#370)
  • 5fbc9f4 chore: Bump ansi-html and webpack-dev-server in /docs (#367)
  • d88380e chore: Bump ansi-regex in /docs (#368)
  • 5da4661 chore: Bump loader-utils from 1.4.0 to 1.4.1 in /docs (#366)

This list of changes was auto generated.

New Contributors

Full Changelog: v1.8.1...v1.9.0

v1.8.1

09 Sep 09:34
b5d9476

Choose a tag to compare

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.8.1

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

None.

Fixes / Changes

  • Use the correct namespace for versioned secret store extensions (#364)

Breaking Changes

None.

Removal

None.

Changes:

  • b5d9476 docs: publish v1.8 feature docs (#363)
  • c701464 fix: use correct namespace for versioned secret extensions (#365)

This list of changes was auto generated.

v1.8.0

06 Sep 08:40
09b3943

Choose a tag to compare

Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:

PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.8.0

For a complete list of all Arcus.Security packages see the documentation.

What's new?

Features

  • Provide support for versioned secrets in the secret store (#354)

Fixes / Changes

None.

Breaking Changes

None.

Removal

None.

Changes:

  • 09b3943 docs: upgrade secret store diagram (#359)
  • 29775bf docs: correct az func secret store docs (#362)
  • f3b42d2 feat: add secret version support (#358)
  • edf5ef5 test: remove temporary tested stored az keyvault secret (#356)
  • 93e3ec1 fix: update w/ correct pointers in user guide (#355)
  • 4eddb8e chore: Bump terser from 4.8.0 to 4.8.1 in /docs (#353)
  • 107bb04 docs: add az keyvault user guide (#352)
  • 641a6f7 chore: use new az keyvault dependency tracking (#351)
  • 5796263 docs: improve welcome page and sidebar (#350)
  • f5ca394 chore: Bump eventsource from 1.1.0 to 1.1.1 in /docs (#349)
See More
  • baa7e4f chore: add package readme project tag (#347)
  • c7974c7 chore: Bump async from 2.6.3 to 2.6.4 in /docs (#346)
  • b8d319a chore: update release notes w example (#344)
  • 7cabd59 chore: add readme and project url to nuget pkg (#343)
  • c5699a4 chore: Bump cross-fetch from 3.1.4 to 3.1.5 in /docs (#345)
  • 7fe1403 docs: small secret store improvs (follow-up) (#342)
  • 8e78631 chore: Bump minimist from 1.2.5 to 1.2.6 in /docs (#341)
  • 376f1cc docs: publish v1.7 feature docs (#338)
  • 79ac80c chore: update with az keyvault as default package (#339)
  • aba283e chore: add CodeQL code scanning (#337)

This list of changes was auto generated.

v1.7.0

18 Mar 11:26
0e1b9e9

Choose a tag to compare

Install new version via NuGet

What's new?

Features

  • Provide the capability to register the secret store in Azure Functions with access to environment and configuration (#334)
  • Provide the capability to extend the HashiCorp Vault secret provider (#282)
  • Provide .NET 6 support (arcus-azure/arcus#106)

Removal

  • Remove Azure Key Vault secret and vault name validation from Azure Key Vault secret provider (#317)
  • Remove unnecessary Arcus.Security.All project (#330)

Changes:

  • 0e1b9e9 feat: add config az func secret store extension (#333)
  • b56570c chore: treat warnings as errors (#336)
  • e7e134c chore: remove all project (#335)
  • 30112c2 docs: replace outdated az keyvault consume secrets w/ store secrets (#316)
  • ab41ed8 docs: use file paths io url routes (#327)
  • 0f2eb04 chore: correct marking az keyvault secret name obsolete (#328)
  • c03f43f docs: update readme with available secret providers (#326)
  • 42df2ea chore: Bump prismjs from 1.25.0 to 1.27.0 in /docs (#331)
  • 1c54380 docs: add dedicate page for using secret store within Azure Functions (#321)
  • b7da2d2 chore: Bump url-parse from 1.5.7 to 1.5.10 in /docs (#332)
See More
  • bf0ced3 chore: correct net6.0 nuget packages dependencies (#318)
  • 14bd833 chore: inform testers about hashicorp vault installation (#320)
  • e8ecbf7 fix: remove az keyvault regex validation on secret & vault names (#324)
  • 46cf7a9 chore: Bump url-parse from 1.5.3 to 1.5.7 in /docs (#322)
  • 23852b6 chore: Bump follow-redirects from 1.14.7 to 1.14.8 in /docs (#315)
  • 0c45ee2 fix: Improve the obsolete-warning regarding default caching (#310)
  • 3292c4e chore: Bump nanoid from 3.1.23 to 3.2.0 in /docs (#309)
  • fd27303 chore: Bump algoliasearch-helper from 3.5.5 to 3.7.0 in /docs (#302)
  • 8246537 chore: Bump shelljs from 0.8.4 to 0.8.5 in /docs (#308)
  • 855bdeb chore: Bump follow-redirects from 1.14.1 to 1.14.7 in /docs (#307)
  • b957366 chore: Bump axios from 0.21.1 to 0.21.4 in /docs (#303)
  • 0f0c9c4 chore: upgrade to net6.0 (#300)
  • 92656f7 docs: typo 'syntax highlighting' (#299)
  • 24076f3 chore: add fgheysels to code-owners (#298)
  • 446f466 chore: remove tomkerkhove as code owner (#297)
  • 7209960 docs: Separate build script (#296)
  • 9d7420c docs: Add search (#295)
  • 2f4bde7 fix: preview docs with wrong critical exception code sample (#293) [ #290 ]
  • 44db8fe fix: add version prefix to README (#292)
  • 57c1079 fix: wrong toc and critical exceptions code sample (#291)
  • 0b9ae2d fix: deprecate the configuration extension to add secrets (#288)
  • cbb1bbe docs: redirect from v1.5.0 old auth az key vault (#289)
  • 4ae054a docs: Provide new website template (#287)
  • 8cb6fad feat: open HashiCorp Vault secret provider for extension (#282)
  • 2d851a4 feat: improve xml code docs + light code cleaning (#286)
  • 955b9bb chore: Security upgrade github-pages from 214 to 215 (#284)
  • 5fd396d fix: use ubuntu-latest for build vm image (#281)
  • a8beda4 docs: publish v1.6 feature docs (#280)

This list of changes was auto generated.

Full Changelog: v1.6.0...v1.7.0

v1.6.0

23 Jun 05:55
0e55ccb

Choose a tag to compare

Install new version via NuGet

What's new?

Features

  • Provide new secret provider for command line arguments (#240)

Fixes / Changes

  • Reduce standard telemetry for secret store & secret providers (#269)

Breaking Changes

None.

Removal

None.

Changes:

  • 0e55ccb docs: secret store advantages (#279)
  • 04008d9 chore: [Snyk] Security upgrade github-pages from 207 to 214 (#267)
  • b79d1b1 docs: add manual redirection page for az key vault auth (#266)
  • 0198725 chore: ignore packaging warnings (#277)
  • abcd415 fix: docs/Gemfile & docs/Gemfile.lock to reduce vulnerabilities (#276)
  • ec7a081 feat: add command line secret provider (#275)
  • ff878eb fix: use Arcus NuGet version ranges (#274)
  • 981f70f chore: [Snyk] Security upgrade jekyll-redirect-from from 0.15.0 to 0.15.0 (#273)
  • 817c79a chore: Bump rexml from 3.2.4 to 3.2.5 in /docs (#272)
  • 71d5924 fix: use verbose logging in secret store (#270)
See More
  • 9829611 fix: add Semantic config file (#265)
  • d6b31c2 Fix - broken link to managed identity auth in Azure Key Vault (#264)
  • 4dac42b Docs - update managed identity authentication in Azure Key Vault (#263)
  • d2aa4e4 Docs - fix correct secrert store variable (#261)
  • 2ef0d90 Docs: Fix code examples (#260)
  • cc21f53 Docs - publish v1.5 feature docs (#258)

This list of changes was auto generated.

v1.5.0

23 Feb 08:42
e1fa74e

Choose a tag to compare

Install new version via NuGet

What's new?

Features

  • Provide the capability to retrieve grouped secret providers with a single registered name (#237)
  • Provide the capability to register the HashiCorp secret provider with a secret name mutation (#179)
  • Provide the capability to use a singleton default caching (#239)
  • Track the invalidate caching with a dedicated event name (#250)

Fixes / Changes

  • Use the dedicated Microsoft.Extensions.* v3.1.8 packages for the UserSecrets secret provider (#249)

Breaking Changes

None.

Removal

None.

Changes:

  • e1fa74e Feature - use default CacheConfiguration instead of allowCaching (#255)
  • f2eca30 Fix - check raw secret result before passing allong in environment variable secret provider (#252)
  • fa26413 Feature - add additional exception XML docs for caching (#253)
  • f2c4bfa Feature - use dedicated 'Invalidate Secret' as event name for security event tracking (#250)
  • fb1a377 Feature - support subset of secret providers in secret store (#245)
  • ca156c9 Fix - use Microsoft.Extensions.* 3.1.8 packages for UserSecrets (#249)
  • 6d1114f Docs - publish v1.4.1 feature docs (#246)

This list of changes was auto generated.

v1.4.1

22 Jan 07:04
a0e0acd

Choose a tag to compare

Install new version via NuGet

What's new?

Features

  • Provide the capability to add the Azure Key Vault to the secret store with authenticating via Managed Identity without a client ID (#231)

Fixes / Changes

  • Update the Microsoft.Azure.Functions.Extensions package in the Azure Functions project to v1.1 (#229)

Breaking Changes

None.

Removal

None.

Changes:

  • a0e0acd Feature - add Azure Key Vault secret store overloads w/o Managed Identity clientId (#236)
  • cf0101d Provide issue template configuration (#235)
  • 898d14e chore: Update Microsoft.Azure.Functions.Extensions to v1.1 (#233)
  • d9ef0c8 [Snyk] Fix for 1 vulnerabilities (#223)
  • f20eea0 Docs - publish v1.4 feature docs (#228)

This list of changes was auto generated.