Skip to content

v1.7.3

Choose a tag to compare

View all tags
@jessedye jessedye released this 14 Mar 03:03
· 37 commits to main since this release
v1.7.3
e2b55e7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Bug Fixes

  • Fix groups query null crash — ListAllGroups SQL query crashed when SSO users had null JSONB groups column (#77)
  • Resolve user IDs on assignment — Typing a username/email in mesh hub, spoke, access rule, or proxy app assignment now resolves to the correct UUID instead of storing raw strings (#77)
  • Fix offline IdP resilience — Added 10s timeouts to OIDC/SAML provider initialization to prevent hanging when Keycloak is offline (#76)
  • CSRF exemption for local login — Mobile/API clients can now authenticate via POST /api/v1/auth/local/login without CSRF tokens (#76)
  • Frontend resilience — Converted Promise.all to Promise.allSettled across admin pages so partial data loads instead of cascading failures (#76)
  • Login page error display — IdP error codes now show user-friendly messages and auto-show local login form as fallback (#76)
  • CI lint fixes — Fixed all golangci-lint (QF1012) and gosec (G117, G705, G703, G602) errors (#77)

Dependencies

  • OpenTelemetry: v1.40.0 → v1.42.0 (#78)
  • golang.org/x/crypto: v0.48.0 → v0.49.0 (#78)
  • golang.org/x/oauth2: v0.35.0 → v0.36.0 (#78)
  • Kubernetes client-go: v0.35.1 → v0.35.2 (#78)
  • gRPC: v1.78.0 → v1.79.2 (#78)
  • tailwindcss: 4.1.18 → 4.2.1 (#78)
  • react/react-dom: 19.2.3 → 19.2.4 (#78)
  • react-router-dom: 7.12.0 → 7.13.1 (#78)
  • golang Docker image: 1.25-alpine → 1.26-alpine (#63)
  • Various CI action bumps (#67, #71-74)

Full Changelog: v1.7.0...v1.7.3

What's Changed

  • deps(web): bump the npm-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #75
  • ci: bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #74
  • ci: bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #73
  • ci: bump docker/login-action from 3 to 4 by @dependabot[bot] in #71
  • ci: bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #72
  • deps: bump the go-dependencies group across 1 directory with 8 updates by @dependabot[bot] in #68
  • deps: bump the kubernetes group with 3 updates by @dependabot[bot] in #62
  • deps(docker): bump golang from 1.25-alpine to 1.26-alpine by @dependabot[bot] in #63
  • ci: bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #67
  • deps: update Go and npm dependencies by @jessedye in #78

Full Changelog: v1.7.2...v1.7.3

Contributors

jessedye and dependabot
Assets 39
Loading