Skip to content

Releases: spiffe/go-spiffe

v2.4.0

05 Oct 17:08
84d40aa
Compare
Choose a tag to compare

Added

  • Support for using a custom backoff strategy in the Workload API client (#302)
  • Support for a default JWT-SVID picker (#301)

v2.3.0

17 Jun 15:42
94335b2
Compare
Choose a tag to compare

Changed

  • Empty bundles are now supported, in alignment with the SPIFFE specification (#288)

v2.2.0

01 Apr 22:56
Compare
Choose a tag to compare

Changed

  • Upgraded to go-jose v4 which has a stronger security posture than v3. Go-spiffe was not impacted by the security weaknesses of v3 due to stringing algorithm checking that is now handled by go-jose v4 (#276)

Fixed

  • Makefile invocation for Apple Silicon-based Macs (#275)

Added

  • Support Ed25519 keys for Workload SVIDs (#248)

v2.1.7

17 Jan 20:09
16eb51c
Compare
Choose a tag to compare

Fixed

  • Panic if the Workload API returned a malformed JWT-SVID (#233)
  • Race that causes WaitForUpdate to return immediately after watcher is initialized even if there is no update (#260)

v2.1.6

06 Jun 17:03
da08c0d
Compare
Choose a tag to compare

Added

  • Name convenience method to the spiffeid.TrustDomain type (#228)

v2.1.5

26 May 21:20
f6a3281
Compare
Choose a tag to compare

Added

  • PeerIDFromConnectionState method for extracting the peer ID from TLS connection state (#225)

Changed

  • The tlsconfig to enforce a minimum TLS version of TLS1.2 (#226)

Fixed

  • Panic when failing to parse raw SVID response returned from the Workload API (#223)

v2.1.4

31 Mar 11:05
f5ed4dd
Compare
Choose a tag to compare

Added

  • Support for the SVID hints obtained from the Workload API (#220)

v2.1.3

31 Mar 11:01
acf23ce
Compare
Choose a tag to compare

Changed

  • JoinPathSegments properly disallows dot segments (#221)

Added

  • ValidatePathSegment function for validating an individual path segment (#221)

v2.1.2

09 Jan 19:34
8d5b208
Compare
Choose a tag to compare

Changed

  • Minimum supported go version to 1.17 (#209)

v2.1.1

29 Jun 15:57
1e584b8
Compare
Choose a tag to compare

Added

  • Support for dialing named pipes using an npipe URL scheme (#198)