Skip to content

v1.4.1

Choose a tag to compare

View all tags
@coopernetes coopernetes released this 14 Sep 21:10
· 113 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.4.1
This tag was signed with the committer’s verified signature.
coopernetes Thomas Cooper
GPG key ID: 3757EA38880277E7
Verified
Learn about vigilant mode.
776a27d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

fogwall 1.4.1

A maintenance and hardening release. The default developer push workflow is unchanged. One behaviour change matters if you drive configuration through hot-reload — see below.

Breaking changes & upgrade notes

  • Config hot-reload applies only the sections a reload file declares — a partial reload file (file watch, git source, or POST /api/config/reload) now patches the sections it names and leaves every other section at its current live value. Previously an omitted section reverted to base defaults, so a file setting only secret-scan: could reset rules: to the default deny. An explicit reload is also no longer silently dropped while a background reload is in flight. No action is needed unless you rely on partial reload files — review them against the patch semantics documented at https://rbc.github.io/fogwall/configuration/hot-reload.html. (#663)
  • origin is recorded on every action (migration V18) — records now carry an origin of DASHBOARD or SCM_API, set at the entry point the request arrived at. Migration V18 adds and backfills the column and indexes (origin, resolved_user); it applies automatically on startup for JDBC, and the MongoDB store does the equivalent backfill on startup. No manual step. (#655)

New features

  • Every action records which fogwall surface it came from — the entry-point origin (DASHBOARD or SCM_API) is set by fogwall rather than inferred from the forgeable User-Agent. The Activity page (formerly Contributions) gains an All / Dashboard / SCM API filter and a per-row label, and issue filing moves under Contributions as "Report an issue" (/issues redirects). (#655)

Bug fixes

  • Mirror cache eviction tolerates concurrent git maintenance — deleting a cached mirror no longer fails when JGit background gc is creating and removing transient lock files under the directory. (#665)

Maintenance

  • Test harness reworked around config-booted fixtures with a compose smoke suite, and the bundled gitleaks binary is now cached at build time so a GitHub outage can't fail the build. (#661, #662)

Dependencies

  • Java dependencies — 14 updates across the group. (#660)
  • Frontend npm dependencies — 8 updates across the group. (#657)
  • GitHub Actions — CodeQL actions group, and actions/setup-java 6.0.0 → 6.0.1. (#658, #659)
  • Base image — eclipse-temurin digest refresh. (#656)

Upgrade

  1. Pull the new images (:v1.4.1, :latest).
  2. Migration V18 applies automatically on startup (JDBC); the MongoDB store backfills origin on startup. No manual step.
  3. If you drive configuration through partial reload files, review them — omitted sections are now preserved rather than reset to defaults (#663).
  4. No config key renames, and REST changes are additive only (the new origin field).

Full Changelog: v1.4.0...v1.4.1

Assets 3
Loading