Skip to content

CHANGELOG.md

Latest commit

 

History

History
264 lines (148 loc) · 21.5 KB

CHANGELOG.md

File metadata and controls

264 lines (148 loc) · 21.5 KB
Raw

Changelog

0.2.8 (2026-09-02)

Dependency Updates

  • bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#131) (2ed9682)

0.2.7 (2026-08-24)

Dependency Updates

  • bump golang in the base-images group (#126) (2fbc071)
  • bump the kubernetes group with 4 updates (#127) (480020c)

0.2.6 (2026-08-15)

Bug Fixes

  • bump golang.org/x/mod to v0.40.0 for sumdb verification vulnerabilities (#121) (a3709e5)

0.2.5 (2026-08-14)

Bug Fixes

  • update Go to 1.26.6 for six standard library vulnerabilities (#118) (0a9711d)

0.2.4 (2026-08-03)

Dependency Updates

  • bump github.com/cert-manager/cert-manager from 1.21.0 to 1.21.1 (#110) (4d7b8d7)
  • bump k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3 (#106) (bdf726e)

0.2.3 (2026-07-25)

Dependency Updates

  • bump actions/checkout from 7.0.0 to 7.0.1 (#102) (3d9e607)
  • bump actions/setup-go from 6.5.0 to 7.0.0 (#103) (9fb68af)
  • bump docker/login-action from 4.2.0 to 4.4.0 (#93) (eb5a08a)
  • bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#87) (025fbcd)
  • bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#85) (ebd12c2)
  • bump github.com/cert-manager/cert-manager from 1.20.3 to 1.21.0 (#91) (b981460)
  • bump github.com/google/cel-go from 0.28.1 to 0.29.2 (25a926c)
  • bump github/codeql-action init/autobuild/analyze to v4.36.3 (#89) (4511f11)
  • bump github/codeql-action to v4.37.0 (#97) (93103a0)
  • bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (#86) (ce8b371)
  • bump golang from 1.26.4-alpine to 1.26.5-alpine (#90) (477bb28)
  • bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#99) (7e227c0)
  • bump the codeql-action group with 4 updates (#101) (eca7d06)

Documentation

  • extend compatibility table to Poweradmin 4.4.x (a9da5b8)

0.2.2 (2026-07-10)

Documentation

  • add 0.2.0 compatibility row with PowerDNS API backend support (fa74d58)

0.2.1 (2026-07-10)

Bug Fixes

  • bump Go to 1.26.5 and x/crypto to v0.54.0 for GO-2026-5856 and GO-2026-5932 (87b65b3)
  • client: cap API response reads at 1MiB and truncate bodies embedded in errors (78516f0)
  • client: reject v2 create responses that lack a record object (cea7aab)
  • client: stop following HTTP redirects that rewrite create/delete into no-op GETs (8cf0335)
  • helm: set APIService port to the configured service port (8e3ff4f)

0.2.0 (2026-07-07)

⚠ BREAKING CHANGES

  • helm: scope secret-reading RBAC to cert-manager namespace by default

Bug Fixes

  • client: preserve default transport settings in insecure mode (4af6882)
  • client: support string record IDs from PowerDNS API backend (a22b045)
  • client: trim only one surrounding quote pair from TXT content (5c7d08e)
  • helm: default image tag to release tag instead of latest (5394360)
  • helm: scope secret-reading RBAC to cert-manager namespace by default (bad2919)
  • scripts: handle wrapped v2 records response in integration test (d949476)
  • solver: ignore disabled records in Present idempotency check (7bc0590)
  • solver: match zone and record names case-insensitively (8e31f50)
  • solver: require exact ResolvedZone match, include full FQDN in fallback walk (5f0681f)
  • solver: treat missing zone as success in CleanUp (13c592c)

Refactoring

  • solver: inject API client factory and test Present/CleanUp end-to-end (e0cae04)

0.1.12 (2026-06-04)

Bug Fixes

  • bump go directive to 1.26.4 to resolve stdlib vulnerabilities (#58) (413bf29)
  • pin alpine base image by digest to satisfy Scorecard pinned-dependencies (#60) (af626c2)

0.1.11 (2026-05-30)

Bug Fixes

  • idempotent record delete on 404 and surface API error messages (#52) (077bd09)

0.1.10 (2026-05-20)

Bug Fixes

  • helm: scope domain-solver ClusterRole to poweradmin resource (0264d32)

0.1.9 (2026-04-28)

Bug Fixes

  • drop deprecated cosign --output-certificate from signs config (#33) (b450367)

0.1.8 (2026-04-16)

Bug Fixes

  • bump Go to 1.26.2 to resolve stdlib CVEs (0a67306)
  • bump Go to 1.26.2 to resolve stdlib CVEs (b7de191)

0.1.7 (2026-03-25)

Bug Fixes

  • extract TXT string constant to satisfy goconst linter (4c8caf2)

Documentation

  • fix version numbers in compatibility table (32b0147)

0.1.6 (2026-03-25)

Bug Fixes

  • handle wrapped v2 records response for PowerAdmin 4.3.0+ compatibility (87f8d34)
  • upgrade grpc-go to v1.79.3 (CVE-2026-33186 authorization bypass) (abe2fbe)

Documentation

  • add PowerAdmin version compatibility table (3645c84)

0.1.5 (2026-03-13)

Bug Fixes

  • revert cosign-installer to v3 (no v4 major tag exists) (99f180e)
  • specify dockerfile in goreleaser dockers_v2 config (c2969cc)

Documentation

  • add helm chart README for Artifact Hub (6d032af)

0.1.4 (2026-03-13)

Bug Fixes

  • correct Artifact Hub badge link (c9b32d7)
  • correct Go Report Card badge URL (f88103a)

Refactoring

  • rename helm chart from poweradmin-webhook to cert-manager-webhook-poweradmin (6ea2cb9)

Documentation

  • add links to container registry pages (7329901)
  • add OCI helm install, uninstall section, license and Artifact Hub badges (4c52987)

0.1.3 (2026-03-12)

Bug Fixes

  • ci: skip cosign signing during goreleaser snapshot in security workflow (32943bd)

0.1.2 (2026-03-11)

Bug Fixes

  • ci: install cosign before goreleaser snapshot in security workflow (c2cb54a)
  • ci: install syft before goreleaser snapshot in security workflow (560ce0e)

0.1.1 (2026-03-11)

Features

  • add build-local target and include webhook binary in clean (b37b478)
  • add GoReleaser config for multi-platform Docker image publishing (3dbd23d)
  • add integration test script for local PowerAdmin testing (8a67520)
  • add security context and configurable health probes to Helm chart (f170321)
  • implement cert-manager DNS01 webhook for PowerAdmin (0f10cc9)

Bug Fixes

  • add --secure-port=443 to match exposed container port (e908c5f)
  • add FlexBool for disabled field and normalize TXT content for quoting compatibility (5e45e4f)
  • ci: add Docker login for cosign chart signing (936ee14)
  • ci: skip SARIF uploads on forked pull requests (ad613b9)
  • ci: use correct trivy-action tag 0.35.0 without v prefix (c7590ed)
  • correct typo in pki.yaml comment (f647888)
  • guard conformance tests with integration build tag (cf0749b)
  • handle wrapped API response format for PowerAdmin v1 and v2 (6b9117f)
  • merge golangci-lint config into existing .golangci.yaml and remove duplicate (a230eb6)
  • normalize TXT content in integration test lookups for quote-insensitive matching (86c2a1d)
  • preserve record_id when decoding v1 create responses (0102afc)
  • remove hard-coded UID/GID from pod security context for OpenShift compatibility (2fefa75)
  • remove undefined main.Version linker flag from GoReleaser config (c5bec3f)
  • resolve errcheck lint violations and normalize serverURL trailing slashes (30a455f)
  • resolve golangci-lint issues in test files (66ac39f)
  • surface API errors during zone discovery instead of swallowing them (d8b3266)
  • update Dockerfile Go version to 1.26 to match go.mod (aa31e36)
  • update integration test for wrapped API responses and v1 TXT quoting (0485827)
  • upgrade golangci-lint to v2.11.3 for Go 1.26 compatibility (c575b81)
  • use Helm 3 syntax for template command (8884855)
  • use non-privileged port 10250 for non-root container compatibility (dfedd5c)

Refactoring

  • extract shared challenge setup into resolveChallenge helper (2800a50)
  • replace python3 with jq in integration test script (d0dceed)
  • unify v1/v2 API clients into single path-prefix-based implementation (cb1fa97)

Documentation

  • add CI, Go Report Card, and release badges to README (2570960)
  • add container image registry info to README (227aa0d)
  • add Menzel IT GmbH as sponsor (b7c1959)