v2.4.0

What's Changed

• test(agama): add transpiler template-override codegen conformance tests by @imran-ishaq in #14497
• test(agama): add transpiler finish and log codegen conformance tests by @imran-ishaq in #14488
• feat(jans-cedarling): implement auto clean up via Drop by @dagregi in #14658
• fix(ci): upload SLSA provenance to releases via PAT by @mo-auto in #14671
• feat(jans-fido2): retry MDS TOC download at startup when the blob is … by @imran-ishaq in #14483
• docs: add GDPR cookie consent banner for Scarf and Reo.dev analytics by @mo-auto in #14682
• fix(deps): remediate OpenSSF-reported vulnerable dependencies by @mo-auto in #14685
• fix(jans-fido2): widen metrics columns and restore missing config keys by @imran-ishaq in #14688
• docs: add client schema doc by @ossdhaval in #14672
• fix(docs): update API Reference by removing KC SAML link and fixing Lock Server link by @ossdhaval in #14681
• refactor(docs): remove Link and KC Link sections from customize web pages documentation by @ossdhaval in #14684
• fix: allow compose override by @iromli in #14691
• fix(docs): repair autogenerated property/feature-flag docs publishing by @mo-auto in #14697
• fix(config-api): add jans-doc to annotation processor path by @mo-auto in #14703
• fix(jans-auth-server): KeyGenerator - exit with code "1" if there was error with jwks generation by @yuriyz in #14705
• fix(docs): authenticate doc-generation Maven to GitHub Packages by @mo-auto in #14709
• feat(jans-core): allow extend types and move metric to separate module by @yurem in #14700
• fix: handle unexpected output of KeyGenerator by @iromli in #14692
• feat(jans-fido2): expose effective attestation-mode status endpoint by @imran-ishaq in #14643
• fix(docs): build only annotated module for doc generation by @mo-auto in #14717
• fix(cloud-native): replace assertion error with other exceptions by @iromli in #14721
• fix(docs): skip server-fips when generating swagger specs by @mo-auto in #14726
• fix(docs): force-push regenerated auto-gen branch by @mo-auto in #14719
• feat(jans-fido2): expose FIDO Metadata Service (MDS) health endpoint by @imran-ishaq in #14724
• feat(jans-fido2): Jans fido2 attestation rejection diagnostics by @imran-ishaq in #14725
• feat(jans-auth): refactor authentication metric and record acr by @yurem in #14713
• fix(docs): correct autodoc source metadata and heading level by @mo-auto in #14731
• fix(docs): autogenerate docs by @mo-auto in #14729
• docs: add UMA RPT endpoint documentation by @ossdhaval in #14716
• docs(casa): fix the image under the consent management plugin doc by @ossdhaval in #14723
• feat(jans-cedarling): add policy testing framework with validation by @haileyesus2433 in #14673
• setup(jans-shibboleth-idp): persistence layer data model and mapping by @uprightech in #14689
• fix(jans-fido2): record failed and abandoned assertion ceremonies by @imran-ishaq in #14738
• fix(ci): shorten tf-provider test client secret to fit jansClntSecret column by @mo-auto in #14733
• feat: add agama-pw project code to admin-ui plugin for Admin UI authe… by @duttarnab in #14743
• ci: richer integration-test reporting + AIO sector_identifier whitelist by @mo-auto in #14679
• fix(docs): autogenerate docs by @mo-auto in #14750
• fix(jans-core): fix silent failure when renameDocument() fails #14746 by @uprightech in #14753
• feat: release agama-pw.gama for use in Flex setup for Admin UI authentication by @duttarnab in #14749
• ci: expand integration-test coverage (jans-lock, cedarling-java, agama) by @mo-auto in #14318
• feat(jans-orm): add group by and distinct support by @yurem in #14757
• ci: developer sandbox — build a branch + install on an ephemeral TTL VM by @mo-auto in #14758
• ci(sandbox): wait out the apt lock on the fresh VM by @mo-auto in #14761
• fix(jans-fido2): stop counting usernameless ceremonies as abandonment by @imran-ishaq in #14755
• feat(jans-config-api): add metric plugin by @yurem in #14760
• ci(sandbox): send the VM key to Zulip by @mo-auto in #14765
• docs: update cedarling status to Graduated by @ossdhaval in #14752
• docs: add UMA claims gathering endpoint documentation by @ossdhaval in #14722
• docs: correct invalid commands in initial configuration by @ossdhaval in #14735
• fix(deps): bump GitPython and cryptography for OpenSSF advisories by @mo-auto in #14768
• refactor: remove Fortinet Radius support by @ossdhaval in #14771
• docs(jans-cedarling): update README to use correct binary name by @dagregi in #14767
• refactor(ci): standardize workflows, add DAST pen-test, CI/CD docs by @mo-auto in #14777
• fix(docs): fix broken link by @ossdhaval in #14770
• fix(docs): autogenerate docs by @mo-auto in #14782
• fix(ci): bound pentest DAST scan runtime so it cannot hang by @mo-auto in #14779
• feat(jans-cedarling): add minimal JavaScript SDK by @Dahkenangnon in #14793
• fix(jans-config-api): add the missing lib folder in agama-pw by @duttarnab in #14788
• fix(docker-jans-loadtesting-jmeter): force-reinstall pip/wheel so uninstall succeeds by @mo-auto in #14799
• feat(jans-cedarling): implement Sigstore/Cosign verification library by @olehbozhok in #14636
• fix(docs): autogenerate docs by @mo-auto in #14790
• docs(cedarling): auto-updated benchmark summary page by @mo-auto in #14806
• ci(cedarling): manual benchmark docs publish via workflow_dispatch by @mo-auto in #14809
• docs(cedarling): benchmark page fixes + Rust column + relative bars by @mo-auto in #14811
• chore(jans-cedarling): update dependencies by @olehbozhok in #14815
• ci(cedarling): sign auto-generated benchmark commits + provenance/units by @mo-auto in #14818
• docs(cedarling): update benchmark summary by @mo-auto in #14820
• feat(jans-cedarling): add JavaScript SDK services by @Dahkenangnon in #14794
• fix(docs): autogenerate docs by @mo-auto in #14823
• fix(docs): fix broken links and anchor by @ossdhaval in #14786
• fix(docs): update broken passkey telemetry link by @ossdhaval in #14784
• fix(jans-fido2): aggregate analytics over the correct row set by @imran-ishaq in #14834
• docs(cedarling): update benchmark summary by @mo-auto in #14825
• docs(cedarling): note relative ratios use full-precision mean_ns by @mo-auto in #14839
• feat(jans-auth-server): added OAuth SPIFFE Client Authentication support by @yuriyz in #14505
• fix(docs): autogenerate docs by @mo-auto in #14843
• feat(cloud-native): allow loadtesting-jmeter to add users to custom table by @iromli in #14836
• fix(jans-config-api): error in agama flow of admin-ui by @duttarnab in #14846
• fix(jans-cedarling): fix cargo lint check by @olehbozhok in #14850
• docs(cedarling): update benchmark summary by @mo-auto in #14855
• chore(deps): bump blazemeter/taurus from 1.16.50 to 1.17.0 in /demos/benchmarking/docker-jans-loadtesting-jmeter by @dependabot[bot] in #14826
• feat(jans-auth-server): pass amr from agama to id_token #14781 by @yuriyz in #14847
• feat(jans-cedarling): add custom token processor for Cedarling by @dagregi in #14708
• fix(cloud-native): replace hardcoded CN release download URL by @iromli in #14867
• docs(jans-fido2): surface passkey interception script in FIDO2/Passke… by @imran-ishaq in #14852
• fix(jans-fido2): measure user-adoption metrics against the right population by @imran-ishaq in #14860
• fix(jans-fido2): use the fixed adoption rate in the executive summary by @imran-ishaq in #14861
• fix(config-api): fix to return appropriate error if external authorization script validation fails by @pujavs in #14873
• fix(jans-linux-setup): correct passkey interception script key in scr… by @imran-ishaq in #14880
• fix(jans-auth): fix random issues in client tests by @yurem in #14876
• docs: fix agama logging example by @jgomer2001 in #14878
• fix(jans-fido2): fix multiple issues in FIDO2 script by @imran-ishaq in #14858
• fix(jans-auth): fix post_logout_redirect_uri asserts on by @yurem in #14884
• feat(jans-config-api): add endpoints to supports Admin UI policy-store management by @duttarnab in #14550
• fix(jans-fido2): report uncomputable metrics rates as null instead of 0.0 by @imran-ishaq in #14893
• test(jans-auth-server): use dynamic keystore in TokenRestWebServiceHttpTest #14897 by @yuriyz in #14898
• chore(deps): bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.1 to 3.1.4 in /jans-core by @dependabot[bot] in #13709
• feat(jans-linux-setup): gluu flex admin-ui policy-store set-up changes by @devrimyatar in #14853
• chore(jans-cedarling): Upgrade UniFFI from 0.29.0 to 0.32.0 by @haileyesus2433 in #14804
• docs(jans-cedarling): fix broken link by @SafinWasi in #14883
• feat(cloud-native): add support for multiple gateways in jans by @misba7 in #14895
• feat(jans-auth-server): github action migration -> migrate tests to dynamic keystore by @yuriyz in #14911
• fix(jans-fido2): remove unused metrics aggregation interval property by @imran-ishaq in #14912
• feat(cloud-native): deploy agama-pw if admin-ui plugin is enabled by @iromli in #14865
• feat(cloud-native): admin-ui policy-store set-up changes by @iromli in #14917
• feat(jans-auth-server): enabled CIMD by default #14780 by @yuriyz in #14942
• fix(ci): serve admin-ui agama-pw.gama to AIO integration image builds by @mo-auto in #14943
• fix(jans-cedarling): Recursive directory traversal and add size to StatusList Zlib decompression to prevent zip bombs by @haileyesus2433 in #14856
• feat(cloud-native): enable CIMD by default by @iromli in #14948
• chore: tasks related to policy-store management changes in Admin UI by @duttarnab in #14945
• fix(jans-linux-setup): PostgreSQL schema by @devrimyatar in #14913
• fix(jans-cli-tui): check if server responded json for searching script by @devrimyatar in #14949
• chore(jans-cedarling): remove cedarling_pg by @haileyesus2433 in #14918
• docs: add more details to feature flag descriptions by @ossdhaval in #14808
• feat(jans-auth-server): github action migration -> migrate tests to dynamic keystore by @yuriyz in #14920
• fix(jans-fido2): decode OKP public keys so advertised EdDSA credentials can register by @imran-ishaq in #14950
• fix(jans-config-api): errror due to removal on unused policy-store config from Admin U… by @duttarnab in #14954
• fix(cloud-native): unable to render log4j2-adminui.xml by @iromli in #14960
• feat(jans-auth): add secret base32 encode by @yurem in #14965
• fix(jans-fido2): support P-384 and P-521 curves in COSE key decoding by @imran-ishaq in #14958
• fix(jans-fido2): correct COSE algorithm code points and guard unknown-algorithm lookups by @imran-ishaq in #14970
• perf(ci): cut AIO integration build time by @mo-auto in #14972
• fix(jans-config-api): agama-pw authentication in Admin UI shows error if username is correct and password is incorrect by @duttarnab in #14967
• fix(jans-auth-server): stop CIBA client sending Authorization twice by @mo-auto in #14978
• fix: correct condition by @misba7 in #14982
• docs(cedarling): update benchmark summary by @mo-auto in #14870

Full Changelog: v2.3.0...v2.4.0