Releases: arcus-azure/arcus.security
v2.1.0
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.1.0For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
Changes:
- 5484d64 docs(v3): add v2.x-v3 migration guide (#501)
- 70e8f04 chore(deps): upgrade active dependencies throughout solution for .NET 10 release (#498) [ #446 ]
- 8331bc4 fix(hashicorp): use secret mapping in hashicorp vault tests (#500) [ #499 ]
- 8068ebb test(hashicorp.vault): add test-context integration tests for the new HashiCorp Vault interface (#497) [ #478 ]
- a44c1f2 test(cli): add test-contexts tests for cli secret providers (#495) [ #475 ]
- eb85008 test(core): add test-contexts tests for core secret providers (#494) [ #454 ]
- 6ceffb5 test(az.kv): add test-context tests for the az key-vault secret provider (#493) [ #466 ]
- bd25470 test(docker.secrets): add test context test for docker secrets secret provider (#496) [ #462 ]
- ecac0a5 chore: Bump js-yaml from 3.14.1 to 3.14.2 in /docs (#492) [ #470, #557, #332, #571, #576, #258, #290, #529, #570, #731 ]
- bc78118 test(user.secrets): add test context- tests for user secret provider (#491) [ #479 ]
See More
- 80e51d2 docs(v3): rework feature docs for v3 (#485)
- 05face4 fix(az.kv): invalidate secret after az kv secret provider sets new secret (version) (#487) [ #486 ]
- cc9dd38 fix(core): correct secret result string representation (#490)
- 5453855 chore(core): make new interfaces public (#483) [ #448, #438 ]
- 15d69f5 chore(core): make secret result name always available (#484) [ #460 ]
- 7811101 chore(hashicorp): implement new hashicorp registration overloads (#478) [ #477 ]
- 687f012 chore(core): deprecate remaining core functionality (#481) [ #438 ]
- 619d7b3 chore(az.kv): add necessary overloads with secret provider options (#482) [ #466 ]
- 31bfb7a chore(deprecate): unlinked/unnecessary core components (#472) [ #438 ]
- 8eb6623 chore(cmd.line): implement new command line registration overloads (#476) [ #475 ]
- 33b4dc3 chore(docker.secrets): implement new docker secrets registration overloads (#474) [ #473 ]
- 2e824de chore(core): internally implement core providers w/ new interface (#467) [ #448, #454 ]
- 149fd3b chore(user.secrets): implement new user secrets registration overloads (#480) [ #479 ]
- 687d358 chore(az.kv): internally implement az key vault secret provider (#466) [ #448 ]
- 6bfcf92 chore(core): remove guard.net usage in secret result model (#470) [ #434 ]
- 51e4c5e chore(hashicorp.vault): deprecate diff auth mechainsm in favor of future considelation (#459) [ #438 ]
- c684f5d feat(core): internally re-implement secret store (#465) [ #438, #452 ]
- 56d97a0 chore(deps): use package ranges for user secrets provider (#471)
- 948bdd7 chore(test): Migrate xUnit to v3 (#469) [ #447 ]
- 922d44f chore(user.secrets): internally implement new secret provider in user secrets (#464) [ #463 ]
- f52fdd9 chore(docker.secrets): internally implement new secret provider in docker secrets (#462) [ #461 ]
- 2bfeeff chore(cmd.line): internally implement new secret provider for cmd line (#457)
- 1ac5908 chore(core): add internal isecretstore proposal (#458)
- 396bf14 chore(core): add new isecretprovider interface (#455)
- c7ca113 chore(net10.0): add support for .net 10.0 throughout (#446)
- 2a38025 refactor: Removing all dependency to Guard.NET. (#437)
- de852f5 chore(core): deprecate 'get raw secret' exposure in core (#445)
- 427b212 chore(style): add .editorconfig file (#444)
- ad423c8 chore(deps): upgrade docusaurus doc dependency (#440)
- 1a9c866 chore(az-func): remove built-in az func support (#441)
- 3e0c76c chore(deps): use package wildcards in core (#439)
- 952c1a0 chore(core): deprecate secret auditing (#442)
- d3b98d0 chore: All package upgrades FE docs (#431)
- e90aeb0 chore: remove guard.net from other secret providers (#436)
- 3b7e738 chore: remove guard.net from core and keyvault secret provider (#435)
- e0b4f97 chore: deploy test resources w/ new test packages (#433)
- f5e02f2 docs: publish v2.0.0 feature docs (#429)
- 143aaa8 chore: revert secret store xml docs for 'add provider' (#430)
This list of changes was auto generated.
v2.0.0
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.0.0For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
- Provide .NET 8 support (arcus-azure/arcus#311)
Breaking Changes
- Replace deprecated
AddProviderwith specific secret mutation to secret provider options overload (#305)
Removal
- Remove empty
CacheConfigurationconstructor (#306) - Remove deprecated
Microsoft.Azure.KeyVault.*packages (#311) - Remove regular expression patterns for secret and vault names in Azure Key vault secret provider (#325)
- Remove deprecated Azure Key vault authentication (#202)
- Remove deprecated Azure Key vault secret store extensions (#329)
Changes:
- cf0fc8d chore: upgrade to observability v3.0 (#427)
- d40678b chore: remove deprecated secret store functionality (#426)
- de11c91 chore: remove deprecated key vault functionality (#424)
- c28b7f7 chore: support preview net8.0 (#421)
- d16484a chore: Update LICENSE (#409)
- 94b89ef chore: Bump http-cache-semantics from 4.1.0 to 4.1.1 in /docs (#402)
- 2570e23 chore: Bump @sideway/formula from 3.0.0 to 3.0.1 in /docs (#403)
- 3aebf4e chore: Bump webpack from 5.48.0 to 5.76.1 in /docs (#405)
- 81f75d0 chore: Bump ua-parser-js from 0.7.28 to 0.7.33 in /docs (#401)
- f47e9e2 chore: use
mainbranch in az devops status badge (#399)
See More
- 805aa43 chore: remove installation section (#400)
- 0b1043d chore: use codecov reporting (#398)
- 733e0e9 chore: fully use arcus.testing for logging & in-memory secrets (#397)
- 8c0ccaa chore: use coverlet code coverage (#396)
- 12befc2 chore: use main branch in codeql (#395)
- 28bf111 chore: Bump json5 from 1.0.1 to 1.0.2 in /docs (#393)
- 4702fcb chore: fix nuget warnings (#392)
- 5cf1a5c Update ci-build.yml (#391)
- c490d70 chore: sharper secret store diagram (#388)
- d31db29 chore: remove certificate warnings in unit tests (#385)
- aecfec1 docs: publish v1.9 feature docs (❗) (#386)
This list of changes was auto generated.
v2.0.0-preview-1-net8.0
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 2.0.0-preview-1-net8.0For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
- Provide the capability to do something (#123)
Fixes / Changes
None.
Breaking Changes
None.
Removal
None.
Changes:
- c28b7f7 chore: support preview net8.0 (#421)
- d16484a chore: Update LICENSE (#409)
- 94b89ef chore: Bump http-cache-semantics from 4.1.0 to 4.1.1 in /docs (#402)
- 2570e23 chore: Bump @sideway/formula from 3.0.0 to 3.0.1 in /docs (#403)
- 3aebf4e chore: Bump webpack from 5.48.0 to 5.76.1 in /docs (#405)
- 81f75d0 chore: Bump ua-parser-js from 0.7.28 to 0.7.33 in /docs (#401)
- f47e9e2 chore: use
mainbranch in az devops status badge (#399) - 805aa43 chore: remove installation section (#400)
- 0b1043d chore: use codecov reporting (#398)
- 733e0e9 chore: fully use arcus.testing for logging & in-memory secrets (#397)
See More
- 8c0ccaa chore: use coverlet code coverage (#396)
- 12befc2 chore: use main branch in codeql (#395)
- 28bf111 chore: Bump json5 from 1.0.1 to 1.0.2 in /docs (#393)
- 4702fcb chore: fix nuget warnings (#392)
- 5cf1a5c Update ci-build.yml (#391)
- c490d70 chore: sharper secret store diagram (#388)
- d31db29 chore: remove certificate warnings in unit tests (#385)
- aecfec1 docs: publish v1.9 feature docs (❗) (#386)
This list of changes was auto generated.
v1.9.0
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.9.0For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
- Provide the capability to synchronously retrieve secrets (#257)
Fixes / Changes
- Use non-versioned secret providers when looking up versioned secret (#380)
Changes:
- 38caa36 chore: update security diagram w/ new logo (#375)
- 61fb72b chore: Bump decode-uri-component from 0.2.0 to 0.2.2 in /docs (#377)
- 7eeae75 chore: Bump qs and express in /docs (#379)
- 78c0364 chore: Bump express from 4.17.1 to 4.18.2 in /docs (#381)
- 3dd8cfe docs: feature/brand updates (#374)
- ad6670a fix: get versioned secrets should run though all non-versioned secret providers (#382)
- dabc353 feat: sync secret retrieval via secret store (#373)
- 1194fcb Update docusaurus.build.config.js (#376)
- 4d24c1e chore: update codeql to v2 (#372)
- d63c40a chore: Bump loader-utils from 1.4.1 to 1.4.2 in /docs (#371)
See More
- 7e2df58 chore: remove deprecated pr validation config (#370)
- 5fbc9f4 chore: Bump ansi-html and webpack-dev-server in /docs (#367)
- d88380e chore: Bump ansi-regex in /docs (#368)
- 5da4661 chore: Bump loader-utils from 1.4.0 to 1.4.1 in /docs (#366)
This list of changes was auto generated.
New Contributors
Full Changelog: v1.8.1...v1.9.0
v1.8.1
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.8.1For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
None.
Fixes / Changes
- Use the correct namespace for versioned secret store extensions (#364)
Breaking Changes
None.
Removal
None.
Changes:
- b5d9476 docs: publish v1.8 feature docs (#363)
- c701464 fix: use correct namespace for versioned secret extensions (#365)
This list of changes was auto generated.
v1.8.0
Install the Arcus.Security packages that you need via NuGet, for instance Arcus.Security.Providers.AzureKeyVault:
PM > Install-Package Arcus.Security.Providers.AzureKeyVault --Version 1.8.0For a complete list of all Arcus.Security packages see the documentation.
What's new?
Features
- Provide support for versioned secrets in the secret store (#354)
Fixes / Changes
None.
Breaking Changes
None.
Removal
None.
Changes:
- 09b3943 docs: upgrade secret store diagram (#359)
- 29775bf docs: correct az func secret store docs (#362)
- f3b42d2 feat: add secret version support (#358)
- edf5ef5 test: remove temporary tested stored az keyvault secret (#356)
- 93e3ec1 fix: update w/ correct pointers in user guide (#355)
- 4eddb8e chore: Bump terser from 4.8.0 to 4.8.1 in /docs (#353)
- 107bb04 docs: add az keyvault user guide (#352)
- 641a6f7 chore: use new az keyvault dependency tracking (#351)
- 5796263 docs: improve welcome page and sidebar (#350)
- f5ca394 chore: Bump eventsource from 1.1.0 to 1.1.1 in /docs (#349)
See More
- baa7e4f chore: add package readme project tag (#347)
- c7974c7 chore: Bump async from 2.6.3 to 2.6.4 in /docs (#346)
- b8d319a chore: update release notes w example (#344)
- 7cabd59 chore: add readme and project url to nuget pkg (#343)
- c5699a4 chore: Bump cross-fetch from 3.1.4 to 3.1.5 in /docs (#345)
- 7fe1403 docs: small secret store improvs (follow-up) (#342)
- 8e78631 chore: Bump minimist from 1.2.5 to 1.2.6 in /docs (#341)
- 376f1cc docs: publish v1.7 feature docs (#338)
- 79ac80c chore: update with az keyvault as default package (#339)
- aba283e chore: add CodeQL code scanning (#337)
This list of changes was auto generated.
v1.7.0
Install new version via NuGet
What's new?
Features
- Provide the capability to register the secret store in Azure Functions with access to environment and configuration (#334)
- Provide the capability to extend the HashiCorp Vault secret provider (#282)
- Provide .NET 6 support (arcus-azure/arcus#106)
Removal
- Remove Azure Key Vault secret and vault name validation from Azure Key Vault secret provider (#317)
- Remove unnecessary
Arcus.Security.Allproject (#330)
Changes:
- 0e1b9e9 feat: add config az func secret store extension (#333)
- b56570c chore: treat warnings as errors (#336)
- e7e134c chore: remove all project (#335)
- 30112c2 docs: replace outdated az keyvault consume secrets w/ store secrets (#316)
- ab41ed8 docs: use file paths io url routes (#327)
- 0f2eb04 chore: correct marking az keyvault secret name obsolete (#328)
- c03f43f docs: update readme with available secret providers (#326)
- 42df2ea chore: Bump prismjs from 1.25.0 to 1.27.0 in /docs (#331)
- 1c54380 docs: add dedicate page for using secret store within Azure Functions (#321)
- b7da2d2 chore: Bump url-parse from 1.5.7 to 1.5.10 in /docs (#332)
See More
- bf0ced3 chore: correct net6.0 nuget packages dependencies (#318)
- 14bd833 chore: inform testers about hashicorp vault installation (#320)
- e8ecbf7 fix: remove az keyvault regex validation on secret & vault names (#324)
- 46cf7a9 chore: Bump url-parse from 1.5.3 to 1.5.7 in /docs (#322)
- 23852b6 chore: Bump follow-redirects from 1.14.7 to 1.14.8 in /docs (#315)
- 0c45ee2 fix: Improve the obsolete-warning regarding default caching (#310)
- 3292c4e chore: Bump nanoid from 3.1.23 to 3.2.0 in /docs (#309)
- fd27303 chore: Bump algoliasearch-helper from 3.5.5 to 3.7.0 in /docs (#302)
- 8246537 chore: Bump shelljs from 0.8.4 to 0.8.5 in /docs (#308)
- 855bdeb chore: Bump follow-redirects from 1.14.1 to 1.14.7 in /docs (#307)
- b957366 chore: Bump axios from 0.21.1 to 0.21.4 in /docs (#303)
- 0f0c9c4 chore: upgrade to net6.0 (#300)
- 92656f7 docs: typo 'syntax highlighting' (#299)
- 24076f3 chore: add fgheysels to code-owners (#298)
- 446f466 chore: remove tomkerkhove as code owner (#297)
- 7209960 docs: Separate build script (#296)
- 9d7420c docs: Add search (#295)
- 2f4bde7 fix: preview docs with wrong critical exception code sample (#293) [ #290 ]
- 44db8fe fix: add version prefix to README (#292)
- 57c1079 fix: wrong toc and critical exceptions code sample (#291)
- 0b9ae2d fix: deprecate the configuration extension to add secrets (#288)
- cbb1bbe docs: redirect from v1.5.0 old auth az key vault (#289)
- 4ae054a docs: Provide new website template (#287)
- 8cb6fad feat: open HashiCorp Vault secret provider for extension (#282)
- 2d851a4 feat: improve xml code docs + light code cleaning (#286)
- 955b9bb chore: Security upgrade github-pages from 214 to 215 (#284)
- 5fd396d fix: use
ubuntu-latestfor build vm image (#281) - a8beda4 docs: publish v1.6 feature docs (#280)
This list of changes was auto generated.
Full Changelog: v1.6.0...v1.7.0
v1.6.0
Install new version via NuGet
What's new?
Features
- Provide new secret provider for command line arguments (#240)
Fixes / Changes
- Reduce standard telemetry for secret store & secret providers (#269)
Breaking Changes
None.
Removal
None.
Changes:
- 0e55ccb docs: secret store advantages (#279)
- 04008d9 chore: [Snyk] Security upgrade github-pages from 207 to 214 (#267)
- b79d1b1 docs: add manual redirection page for az key vault auth (#266)
- 0198725 chore: ignore packaging warnings (#277)
- abcd415 fix: docs/Gemfile & docs/Gemfile.lock to reduce vulnerabilities (#276)
- ec7a081 feat: add command line secret provider (#275)
- ff878eb fix: use Arcus NuGet version ranges (#274)
- 981f70f chore: [Snyk] Security upgrade jekyll-redirect-from from 0.15.0 to 0.15.0 (#273)
- 817c79a chore: Bump rexml from 3.2.4 to 3.2.5 in /docs (#272)
- 71d5924 fix: use verbose logging in secret store (#270)
See More
- 9829611 fix: add Semantic config file (#265)
- d6b31c2 Fix - broken link to managed identity auth in Azure Key Vault (#264)
- 4dac42b Docs - update managed identity authentication in Azure Key Vault (#263)
- d2aa4e4 Docs - fix correct secrert store variable (#261)
- 2ef0d90 Docs: Fix code examples (#260)
- cc21f53 Docs - publish v1.5 feature docs (#258)
This list of changes was auto generated.
v1.5.0
Install new version via NuGet
What's new?
Features
- Provide the capability to retrieve grouped secret providers with a single registered name (#237)
- Provide the capability to register the HashiCorp secret provider with a secret name mutation (#179)
- Provide the capability to use a singleton default caching (#239)
- Track the invalidate caching with a dedicated event name (#250)
Fixes / Changes
- Use the dedicated
Microsoft.Extensions.*v3.1.8 packages for the UserSecrets secret provider (#249)
Breaking Changes
None.
Removal
None.
Changes:
- e1fa74e Feature - use default
CacheConfigurationinstead ofallowCaching(#255) - f2eca30 Fix - check raw secret result before passing allong in environment variable secret provider (#252)
- fa26413 Feature - add additional exception XML docs for caching (#253)
- f2c4bfa Feature - use dedicated 'Invalidate Secret' as event name for security event tracking (#250)
- fb1a377 Feature - support subset of secret providers in secret store (#245)
- ca156c9 Fix - use Microsoft.Extensions.* 3.1.8 packages for UserSecrets (#249)
- 6d1114f Docs - publish v1.4.1 feature docs (#246)
This list of changes was auto generated.
v1.4.1
Install new version via NuGet
What's new?
Features
- Provide the capability to add the Azure Key Vault to the secret store with authenticating via Managed Identity without a client ID (#231)
Fixes / Changes
- Update the
Microsoft.Azure.Functions.Extensionspackage in the Azure Functions project to v1.1 (#229)
Breaking Changes
None.
Removal
None.
Changes:
- a0e0acd Feature - add Azure Key Vault secret store overloads w/o Managed Identity clientId (#236)
- cf0101d Provide issue template configuration (#235)
- 898d14e chore: Update Microsoft.Azure.Functions.Extensions to v1.1 (#233)
- d9ef0c8 [Snyk] Fix for 1 vulnerabilities (#223)
- f20eea0 Docs - publish v1.4 feature docs (#228)
This list of changes was auto generated.