Skip to content

Latest commit

 

History

History
55 lines (38 loc) · 1.38 KB

File metadata and controls

55 lines (38 loc) · 1.38 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.5.0] - 2026-07-03

Changed

  • Uncouple db migration from app deployment (#61)

[0.4.0] - 2026-07-01

Fixed

  • Validate issuer/URL by scheme and host instead of string prefix (#62)

[0.3.0] - 2026-06-29

Added

  • Database CLI (#45)

Changed

  • Re-design model and replace projects.yaml with postgres database (#40, #58)
  • Add verbose logging (#32)
  • Separate authentication and API endpoint logic (#41)
  • Strengthen GitHub authentication (#51)
  • Change /upload/sbom response (#47)
  • Misc CI improvements (#48, #50)

Fixed

  • Use correct DependendencyTrack HTTP request method (#30)
  • Escape unverified JWT iss claim in log output (#60)

[0.2.1] - 2026-03-10

  • Include /livez endpoint

[0.2.0] - 2026-03-05

Added

  • Support isLatest DependencyTrack post parameter

Fixed

  • Changed application port in Dockerfile

[0.1.0] - 2026-01-21

Added

  • Initial release of PIA (Project Identity Authority)
  • OIDC-based authentication broker for SBOM uploads to DependencyTrack
  • FastAPI-based REST API
  • Support for GitHub Actions OIDC tokens
  • Support for Jenkins OIDC tokens
  • Project configuration via projects.yaml