Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(release): prep work for 1.1.5-SNAPSHOT and dev #9218

Merged
merged 1 commit into from
Aug 20, 2024

Conversation

moabu
Copy link
Member

@moabu moabu commented Aug 19, 2024

Prepare

This PR is to prepare for the release of 1.1.5

  • I confirm that there is no impact on the docs due to the code changes in this PR.

Signed-off-by: moabu <47318409+moabu@users.noreply.github.com>
Copy link

dryrunsecurity bot commented Aug 19, 2024

DryRun Security Summary

The provided code changes appear to be a series of routine updates and version bumps across various components of the Janssen project, primarily focusing on updating the versions of Helm charts, Docker image tags, and other metadata to align with a new release, version 1.1.5-dev, without introducing any obvious security vulnerabilities.

Expand for full summary

Summary:

The provided code changes appear to be a series of routine updates and version bumps across various components of the Janssen project. The changes primarily focus on updating the versions of Helm charts, Docker image tags, and other metadata to align with a new release, version 1.1.5-dev. While these changes do not introduce any obvious security vulnerabilities, it is important to review the specific details of the updates to ensure that there are no unintended security implications.

Key areas to focus on from a security perspective include:

  1. Dependency and Version Updates: Ensure that all updated dependencies and components are thoroughly tested and validated for security vulnerabilities before deployment.
  2. Sensitive Data Handling: Review the changes to configuration files and environment variables to verify that sensitive information, such as credentials and API keys, are properly secured and not exposed.
  3. Security-related Configurations: Examine any changes to security-related configurations, such as authentication, authorization, and network policies, to ensure they align with the application's security requirements.
  4. Secure Development Practices: Verify that the development and release processes for the Janssen project follow secure coding guidelines and include appropriate security testing and validation steps.

Overall, the changes in this pull request appear to be routine maintenance and version updates, but it is crucial to maintain a vigilant approach to reviewing all changes, even minor ones, to uphold the security and integrity of the Janssen application.

Files Changed:

  1. agama/pom.xml: Updates the project version and the minimum required Maven version.
  2. agama/transpiler/pom.xml: Updates the parent project version.
  3. charts/janssen-all-in-one/Chart.yaml: Updates the Docker image tag and version information for the Janssen All-in-One deployment.
  4. .github/workflows/build-docs.yml: Updates the default version for the documentation build workflow.
  5. charts/janssen-all-in-one/values.yaml: Updates the image tags for various Janssen services.
  6. charts/janssen-all-in-one/README.md: Updates the version information for the Janssen All-in-One deployment.
  7. charts/janssen/Chart.yaml: Updates the versions and image tags for various Janssen components.
  8. charts/janssen/charts/auth-server-key-rotation/Chart.yaml: Updates the version information for the auth-server-key-rotation chart.
  9. charts/janssen/charts/auth-server-key-rotation/README.md: Updates the version information for the auth-server-key-rotation chart.
  10. charts/janssen/charts/auth-server-key-rotation/values.yaml: Updates the image tag for the auth-server-key-rotation component.
  11. charts/janssen/charts/auth-server/Chart.yaml: Updates the version information for the auth-server chart.
  12. charts/janssen/charts/auth-server/README.md: Updates the version information for the auth-server chart.
  13. charts/janssen/charts/auth-server/values.yaml: Updates the image tag for the auth-server component.
  14. charts/janssen/charts/casa/Chart.yaml: Updates the version information for the casa chart.
  15. charts/janssen/charts/casa/README.md: Updates the version information for the casa chart.
  16. charts/janssen/charts/casa/values.yaml: Updates the image tag for the casa component.
  17. charts/janssen/charts/cn-istio-ingress/Chart.yaml: Updates the version information for the cn-istio-ingress chart.
  18. charts/janssen/charts/cn-istio-ingress/README.md: Updates the version information for the cn-istio-ingress chart.
  19. charts/janssen/charts/config-api/Chart.yaml: Updates the version information for the config-api chart.
  20. charts/janssen/charts/config-api/README.md: Updates the version information for the config-api chart.
  21. charts/janssen/charts/config-api/values.yaml: Updates the image tag for the config-api component.
  22. charts/janssen/charts/config/Chart.yaml: Updates the version information for the config chart.
  23. charts/janssen/charts/config/README.md: Updates the version information for the config chart.
  24. `charts/janssen/

Code Analysis

We ran 9 analyzers against 30 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@moabu moabu merged commit 8d4762c into main Aug 20, 2024
11 checks passed
@moabu moabu deleted the release-1.1.5-snapshot branch August 20, 2024 09:41
moabu added a commit to GluuFederation/flex that referenced this pull request Aug 23, 2024
…enProject/jans#9218

Signed-off-by: moabu <47318409+moabu@users.noreply.github.com>
moabu added a commit to GluuFederation/flex that referenced this pull request Aug 26, 2024
…enProject/jans#9218 (#1799)

Signed-off-by: moabu <47318409+moabu@users.noreply.github.com>
yuriyz pushed a commit that referenced this pull request Nov 7, 2024
chore: release 1.1.5 SNAPSHOT

Signed-off-by: moabu <47318409+moabu@users.noreply.github.com>
Former-commit-id: 8d4762c
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants