v1.8.0

Release v1.8.0

This release includes the following changes:

Changelog

• 99c3946 fix(release): give the archive mtime an RFC3339 date, not a Unix epoch (#909)
• 93823c9 fix(lint): follow the golangci-lint 2.15.0 schema and exhaustive changes (#908)
• 438a53b chore(ci): bump github action versions
• 920796e chore: prep release
• 3c5cfcc chore(deps): bump jdx/mise-action from 5.1.1 to 5.1.2 (#904)
• 80973b0 chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#903)
• e72bc4e chore(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#902)
• c8541dd docs(release): prepare v1.8.0 (#901)
• 9aea4f9 fix(diff): compare rule endpoints by value (#880)
• fc64a25 fix(parser): stop reading enabled IPv6 and offload settings as off (#874)
• 0d93ad4 fix(parser): stop reading OPNsense value fields as BoolFlag (#867)
• e5333f4 fix(parser): read the interface DHCPv6 checkboxes as the vendors write them (#866)
• 52de47e fix(ci): run the deadcode guard's own logic tests (#863)
• 183f74b fix(parser): close the port forward gaps left after #881 (#900)
• 53231a4 fix(parser): read OPNsense port forwards (#881)
• a3c845b build(deps): bump Go toolchain to 1.26.9 (#889)
• 7dee638 chore(deps): bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3 (#896)
• 517a33f chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 (#893)
• 5215252 chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 (#892)
• 36ed936 chore(deps): bump jdx/mise-action from 5.0.1 to 5.1.1 (#890)
• 23441b5 chore(deps): bump jdx/mise-action from 5.0.0 to 5.0.1 (#887)
• 6502217 chore(deps): bump github.com/nao1215/markdown from 1.1.0 to 1.1.1 (#883)
• 33e6bcf chore(deps): bump jdx/mise-action from 4.3.0 to 5.0.0 (#884)
• d3e8e75 chore(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 (#875)
• 4fd59c5 chore(deps): bump github.com/go-playground/validator/v10 from 10.30.4 to 10.30.5 (#870)
• 0e419e1 chore(deps): bump alpine from 28bd5fe to 294b683 (#868)
• e394020 chore(deps): bump github.com/nao1215/markdown from 1.0.0 to 1.1.0 (#869)
• 1e448af chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 (#864)
• 019ba5a chore(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 (#861)
• b43b974 chore(deps): bump github.com/k3a/html2text from 1.4.0 to 1.5.0 (#857)
• 66f8055 chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.0 (#858)
• 96ed756 chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 (#855)
• 310ce19 docs(cli): regenerate the CLI reference and close the cached deadcode-guard hole (#854)
• 10f1980 chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 (#848)
• 083e6f9 chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 (#849)
• cd6e9e3 chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 (#850)
• 064ea37 test(parser): return the NAT endpoints directly (#847)
• 93d2119 fix(sanitizer): redact PEM-armored secrets in fields with no name match (#842)
• 5705a35 refactor: remove unreachable Go surface and guard against its return (#841)
• f99889a fix(ci): make the lint gate fail on formatter drift (#838)
• 1afbd0f chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#839)
• e6adf6f chore(deps): bump golang.org/x/crypto to 0.56.0 and refresh Go module and mise pins (#836)
• d20d853 test(parser): snapshot the public API of pkg/schema (#827)
• 66100be feat(parser): convert the advanced DHCP client settings on interfaces (#829)
• fb7d320 ci: run modernize and the completeness suite (#828)
• a8ad778 chore(readme): remove outdated Go Report Card and Mergify badges

Full Changelog: v1.7.3...v1.8.0

Security Information

This release includes:

• SBOM (Software Bill of Materials) generated with CycloneDX-gomod
• SLSA Level 3 provenance attestation
• Cosign keyless signatures (Sigstore)

Verify Signatures

# Download the checksum file and its signature
wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opnDossier_checksums.txt
wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opnDossier_checksums.txt.sigstore.json

# Verify with cosign v3
cosign verify-blob \
  --certificate-identity "https://github.com/EvilBit-Labs/opnDossier/.github/workflows/release.yml@refs/tags/v1.8.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --bundle opnDossier_checksums.txt.sigstore.json \
  opnDossier_checksums.txt

Installation

Package Managers

Debian/Ubuntu (.deb):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opndossier_1.8.0_amd64.deb
sudo dpkg -i opndossier_1.8.0_amd64.deb

Red Hat/CentOS/Fedora (.rpm):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opndossier-1.8.0-1.x86_64.rpm
sudo rpm -i opndossier-1.8.0-1.x86_64.rpm

Alpine (.apk):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opndossier_1.8.0_x86_64.apk
sudo apk add --allow-untrusted opndossier_1.8.0_x86_64.apk

Arch Linux:

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.8.0/opndossier-1.8.0-1-x86_64.pkg.tar.zst
sudo pacman -U opndossier-1.8.0-1-x86_64.pkg.tar.zst

Note: For pre-release versions (e.g., 1.4.0-rc.1), package filenames
use format-specific version transforms (~ for deb/rpm, _ for apk,
concatenated for archlinux). Check the release assets list for exact filenames.

Download Binary

Download the appropriate binary for your platform from the assets below.

Verify Checksums

sha256sum -c opnDossier_checksums.txt