Cloudkeel-DD 0.3.5
Cloudkeel-DD 0.3.5
Security-hardening release (Epic E14), plus a frontend framework upgrade.
helm install dd oci://registry-1.docker.io/driftdetective/d-detective --version 0.3.5 \
--namespace ddetective --create-namespace \
--set secrets.fernetKey="$FERNET" \
--set secrets.dataKeyWrapped="$DATAKEY" \
--set secrets.jwtSecret="$JWT" \
--set postgresql.auth.password="$(openssl rand -hex 16)"What changed since 0.3.4
- A batch of backend security hardening fixes.
- A narrower guardrail for the cross-tenant remediation-token issue later
fully fixed in 0.3.6. - Frontend upgraded from Next.js 14 to 16.3.3.
- Five security response headers on by default (
X-Frame-Options, CSP, HSTS,
X-Content-Type-Options,Referrer-Policy).
No licensing or pricing behavior changed in this release — the 0.3.4
degrade-to-Free timer is untouched.
Verification
- Confirmed on the registry by digest, not tag name:
driftdetective/ddetective-backend:0.3.5→sha256:3ec89723b917b064da10e165ee03e8d5ce6efe51e701015449af8d27f7d585d7driftdetective/ddetective-frontend:0.3.5→sha256:737a5cb855b25123eaf3ca2010a6028a3af407d6dcf46a2b50e4008810def316