v2.6.0

TODO

v2.6.0-rc.2

upgrade sdk-for-js to address CVE-2022-1650 (#1973)

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>

v2.6.0-rc.1

make word "bearer" in http auth header case insensitive (#1963)

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>

v2.5.0

• Improved git repository integration:
  • Relax regex for validating git URLs
  • Support authenticating to private repos with basic auth (using a personal access token, for instance)
  • Re-implement git-initializer component for Azure DevOps compatibility
• Bug fix: Do not mount shared workspaces to workers as read-only
• Extensive documentation updates
• Minor dependency updates

v2.5.0-rc.2

• Re-implement git-initializer component (again) to work with Azure DevOps
• Bug fix: Do not mount shared workspaces to workers as read-only

v2.5.0-rc.1

• Minor dependency updates
• Relax regex for validating git URLs
• Support authenticating to private repos with basic auth (using a personal access token, for instance)
• Re-implement git-initializer component using git2go
• Extensive documentation updates

v2.4.0

• Features:
  • Support for externally hosted MongoDB
  • Source and type filter flags added to brig event list command
  • Information about job fallibility now shared from worker to API server (gateways can utilize this information in determining how to report job failures "upstream")
• Numerous bug fixes:
  • Builds failing on M1 Macs
  • Deleting a non-existing project tells you you're unauthorized
  • Setting secrets on a non-existing project tells you you're unauthorized
• Security:
  • Updated dependencies
  • All images audited to reduce attackable surface; all components run as non-root
  • All images scanned for vulnerabilities during CI
  • SBOMs generated and published for each image during release process
  • All images signed during release process
• Project maintenance:
  • Upgraded to Go 1.18
  • Improved test coverage
  • Drastically improved devx
  • Extensive documentation improvements

Special thanks to first time contributors:

• @sourikghosh
• @Sync271
• @hamees-sayed
• @AnuragThePathak
• @dtaskai
• @mariuskimmina

v2.4.0-rc.3

remove hacky make targets in favor of tilt (#1923)

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>

v2.4.0-rc.2

upgrade go-tools to v0.9.0 (#1897)

* upgrade go-tools to v0.9.0

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>

* release: do not do just-in-time ghr install for publishing brig binaries

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>

v2.4.0-rc.1

run first stage of worker build only on native architecture (#1896)

Signed-off-by: Kent Rancourt <kent.rancourt@microsoft.com>