Skip to content

v0.20.0

Latest

Choose a tag to compare

@fitzthum fitzthum released this 19 May 15:52
· 88 commits to main since this release

This is the version of Trustee used with CoCo v0.21.0.

What's Changed

  • build(deps): bump actix-web from 4.12.1 to 4.13.0 by @dependabot[bot] in #1258
  • Add delete option to kbs API by @iroykaufman in #1261
  • build(deps): bump the github-actions group with 9 updates by @dependabot[bot] in #1262
  • Enable TLS 1.3 and add PQC TLS support by @yafu-1 in #1259
  • build(deps): bump toml from 1.0.6+spec-1.1.0 to 1.1.2+spec-1.1.0 by @dependabot[bot] in #1265
  • docker-compose: remove keyprovider container by @Xynnn007 in #1256
  • Trustee Stateless work 3: Change Attestation Session to storage backend. by @Xynnn007 in #1251
  • chore(deps): update sm3 and sha2 by @Xynnn007 in #1268
  • build(deps): bump vaultrs from 0.7.4 to 0.8.0 by @dependabot[bot] in #1237
  • build(deps): bump clap from 4.5.59 to 4.6.0 by @dependabot[bot] in #1267
  • build(deps): bump semver from 1.0.27 to 1.0.28 by @dependabot[bot] in #1270
  • verifier: align DCAP error description helper for DCAP 1.25 by @pawelpros in #1266
  • build(deps): bump tracing-subscriber from 0.3.22 to 0.3.23 by @dependabot[bot] in #1276
  • build(deps): bump tokio from 1.50.0 to 1.51.1 by @dependabot[bot] in #1274
  • build(deps): bump openssl from 0.10.75 to 0.10.77 by @dependabot[bot] in #1275
  • build(deps): bump tokio from 1.51.1 to 1.52.0 by @dependabot[bot] in #1278
  • build(deps): bump regorus from 0.5.0 to 0.9.1 by @dependabot[bot] in #1279
  • External plugin support for KBS by @bpradipt in #1188
  • kbs: pass VAULT and EXTERNAL_PLUGIN build args to Dockerfiles by @bpradipt in #1286
  • build(deps): bump uuid from 1.23.0 to 1.23.1 by @dependabot[bot] in #1285
  • kbs: enable vault backend by default by @bpradipt in #1288
  • se-verifier: Handle report data properly for IBM SEL by @BbolroC in #1284
  • build(deps): bump aes-kw from 0.2.1 to 0.3.0 by @dependabot[bot] in #1287
  • Code fixes for helm deployments by @Xynnn007 in #1291
  • build(deps): bump rustls-webpki from 0.103.10 to 0.103.12 in the cargo group across 1 directory by @dependabot[bot] in #1282
  • build(deps): bump http-cache-reqwest from 1.0.0-alpha.5 to 1.0.0-alpha.6 by @dependabot[bot] in #1290
  • chore(deps): update openssl to 0.10.78 to fix vulnerabilities by @Xynnn007 in #1293
  • verifier: tdx/az_tdx_vtpm: add platform_instance_id claim by @mythi in #1289
  • Verifier: add PCCS to DCAP configuration and tidy the codes by @Xynnn007 in #1292
  • build(deps): bump shadow-rs from 1.7.1 to 2.0.0 by @dependabot[bot] in #1296
  • build(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in #1295
  • kbs: get tid of rand dependency by @Xynnn007 in #1299
  • build(deps): bump rustls from 0.23.35 to 0.23.39 by @dependabot[bot] in #1297
  • ci: add white list to link check by @Xynnn007 in #1302
  • rvps: add corim extractor by @fitzthum in #1280
  • Release: Update KBS for v0.19.0 by @lmilleri in #1311
  • build(deps): bump openssl from 0.10.78 to 0.10.79 by @dependabot[bot] in #1314
  • build(deps): bump serde_with from 3.18.0 to 3.19.0 by @dependabot[bot] in #1313
  • build(deps): bump the github-actions group with 8 updates by @dependabot[bot] in #1309
  • build(deps): bump ghcr.io/devcontainers/features/go from 1.3.2 to 1.3.3 by @dependabot[bot] in #1210
  • kbs: fix boolean feature flags being ignored when FEATURES is passed on command line by @bpradipt in #1307
  • kbs: drop orphan policy.rego and InitContainer from kubernetes deployment by @Copilot in #1301
  • build(deps): bump tokio from 1.52.1 to 1.52.2 by @dependabot[bot] in #1316
  • build(deps): bump regorus from 0.9.1 to 0.10.0 by @dependabot[bot] in #1321
  • build(deps): bump tonic from 0.14.5 to 0.14.6 by @dependabot[bot] in #1320
  • policy: fix hyphenisation in default policy for az_*_vtpm TEEs by @mkulke in #1324
  • AS: update the policy document by @Xynnn007 in #1326
  • Add RVPS storage override support by @lmilleri in #1312
  • kbs: clean up intel_trust_authority attestation code by @Copilot in #1331
  • KBS: rename repository config from 'type' to 'storage_backend_type' by @Xynnn007 in #1322
  • verifier: restrict intel_dcap module items to crate visibility by @mythi in #1333
  • build(deps): bump tonic-prost from 0.14.5 to 0.14.6 by @dependabot[bot] in #1329
  • build(deps): bump tonic-prost-build from 0.14.5 to 0.14.6 by @dependabot[bot] in #1325
  • KBS/AS: add unified storage overwriting logic by @Xynnn007 in #1327
  • TPM: Update attestation policy to check trusted AK against reference values by @iroykaufman in #1328
  • build(deps): bump tokio from 1.52.2 to 1.52.3 by @dependabot[bot] in #1337
  • kbs: ita: multi GPU support by @mythi in #1317
  • verifier: declare az-snp-vtpm-verifier dependency for az-tdx-vtpm-verifier by @Copilot in #1340
  • build(deps): bump serde_with from 3.19.0 to 3.20.0 by @dependabot[bot] in #1342

Full Changelog: v0.19.0...v0.20.0