Skip to content

v4.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Oct 10:23
· 3 commits to main since this release
v4.0.0
30c9d17

Nauthilus 4.0.0 is the first stable release of the v4 configuration and Go module line.

Upgrade notes

  • The Go module is github.com/croessner/nauthilus/v4. Operators upgrading from v3 must migrate to the top-level Policy configuration model. See the v4 migration guide.
  • Native Go plugins must be rebuilt with the release sources, Go 1.27.2, GOEXPERIMENT=runtimesecret, and matching build tags and dependency sources. Deploy host and plugin artifacts together; earlier prerelease binaries are incompatible.
  • Trusted passwordless LDAP identity lookups can use the opt-in encrypted Redis identity cache. Plugin password caching requires explicit host and plugin opt-in and remains bound to the identity scope.

Security baseline

Go 1.27.2 and golang.org/x/net v0.60.0 fix the reachable standard-library and HTTP/2 findings reported by the release vulnerability gate. The vendored dependency set and build/CI contracts are aligned with those versions. No application workaround or vulnerability-gate exception is used.

Validation

The release is gated by repository guardrails, vulnerability analysis, reputation-worker and Kafka journal integration tests, and the Compose/Playwright identity-proxy end-to-end suite.

Assets 12
Loading