v2.1 🌈

🤯 Security

• SECURITY-2110 Credentials enumeration vulnerability - Advisory pending @timja

👻 Maintenance

• replaced deprecated Jenkins.getInstance with Jenkins.get() and replaced raw use of class (#64) @StefanSpieker
• useAci instead of forceAci (#62) @slide

v2.0 🌈

💥 Breaking changes

We've migrated from the deprecated azure-keyvault library to the azure-security-keyvault-secrets library, there was a resource leak in the old one which could cause Jenkins to crash under certain circumstances.

This includes two breaking changes due to the new SDK not supporting tenant less authentication:

1. if you're using override application ID or override application secret you now also need to supply an override tenant ID (tenantIdOverride: )

2. username / password credential is no longer supported (as tenant ID is manadatory and its not possible to get a tenant ID from a username password

• Upgrade to azure-sdk-for-java (#56) @timja

🐛 Bug Fixes

• Upgrade to azure-sdk-for-java (#56) @timja

Documentation

• 📝Fix declarative example on the README (#57) @timja

📦 Dependency updates

• Upgrade to azure-sdk-for-java (#56) @timja
• Update azure SDK / azure credentials (#53) @timja

v1.9 🌈

🐛 Bug Fixes

• More resiliency on failure in the credential provider (#52) @timja

v1.8 🌈

🚀 New features and improvements

• Implement JCasc SecretSource extension point (#45) @timja
• Add system property / env var configuration resolution (#46) @timja

🐛 Bug Fixes

• Allow fixing global configuration if it's invalid (#48) @timja

📝 Documentation updates

• Update plugin description + README improvements (#51) @timja

👻 Maintenance

• Run on ACI by default (#50) @timja
• Bump minimum core version to 2.176.3 (#49) @timja

v1.7 🌈

🚀 New features and improvements

• Add Key Vault Provider (#33) @gavinfish

📦 Dependency updates

• Bump checkstyle from 8.23 to 8.29 (#36) @dependabot

v1.6 🌈

🐛 Bug Fixes

• Fix NotSerializableException issue for AzureKeyVaultImdsCredential (#32) @gavinfish

v1.5 🌈

📦 Dependency updates

• fix jcasc test harness (#30) @Casz
• bump parent pom (#29) @Casz

v1.4 🌈

🚀 New features and improvements

• Add Managed Identity / IMDS support (#27) @timja

📝 Documentation updates

• Add badges (#26) @timja

v1.3 🌈

Changes

• Ensure workspace has been created before writing pfx (#25) @timja
• Add certificate support to declarative pipeline (#24) @timja
• Add declarative pipeline support (#23) @timja

👻 Maintenance

• Add checkstyle (#22) @timja

v1.2 🌈

Changes

• incrementals (#19) @Casz
• Log vault name and secret on error (#20) @timja