Skip to content

Cloudkeel-DD 0.3.5

Choose a tag to compare

@cloudkeel cloudkeel released this 29 Aug 10:49
· 12 commits to main since this release

Cloudkeel-DD 0.3.5

Security-hardening release (Epic E14), plus a frontend framework upgrade.

helm install dd oci://registry-1.docker.io/driftdetective/d-detective --version 0.3.5 \
  --namespace ddetective --create-namespace \
  --set secrets.fernetKey="$FERNET" \
  --set secrets.dataKeyWrapped="$DATAKEY" \
  --set secrets.jwtSecret="$JWT" \
  --set postgresql.auth.password="$(openssl rand -hex 16)"

What changed since 0.3.4

  • A batch of backend security hardening fixes.
  • A narrower guardrail for the cross-tenant remediation-token issue later
    fully fixed in 0.3.6.
  • Frontend upgraded from Next.js 14 to 16.3.3.
  • Five security response headers on by default (X-Frame-Options, CSP, HSTS,
    X-Content-Type-Options, Referrer-Policy).

No licensing or pricing behavior changed in this release — the 0.3.4
degrade-to-Free timer is untouched.

Verification

  • Confirmed on the registry by digest, not tag name:
    • driftdetective/ddetective-backend:0.3.5 → sha256:3ec89723b917b064da10e165ee03e8d5ce6efe51e701015449af8d27f7d585d7
    • driftdetective/ddetective-frontend:0.3.5 → sha256:737a5cb855b25123eaf3ca2010a6028a3af407d6dcf46a2b50e4008810def316