v1.2.0

1.2.0 (2026-10-10)

Features

• let the Helm chart configure a Dagster workspace and instance (9952bf0)
• let the Helm chart configure a Dagster workspace and instance (d92f8e1), closes #21
• publish a container image to GHCR on release (2f5a71d)
• publish a container image to GHCR on release (2817179), closes #20
• publish the Helm chart to GHCR and prepare it for Artifact Hub (ed29546)
• publish the Helm chart to GHCR and prepare it for Artifact Hub (780e53b), closes #22

Bug Fixes

• correct Helm chart template defects (dd4c69c)
• correct Helm chart template defects (2121824), closes #19
• make the Helm chart start with default values (06a1eb3)
• make the Helm chart start with default values (fdb800c), closes #18

v1.1.0

v1.1.0 (2026-10-10)

This release is published under the Apache-2.0 License.

Bug Fixes

• Harden service token header handling (82bc1ed)

Chores

• Readme badges (4a61eb4)

Features

• Add service token for non-interactive API clients (f80fffb)

---

Detailed Changes: v1.0.1...v1.1.0

v1.0.1

v1.0.1 (2026-08-23)

This release is published under the Apache-2.0 License.

Bug Fixes

• Update PyPI badges in README (be48181)

• Update upload-artifact to v5 to resolve Node 20 deprecation (9134fe4)

Chores

• Update tooling config for Ruff and Black (0e370c1)

Continuous Integration

• Gate releases and consolidate publish workflow (513d7d4)

Documentation

• Enable automated CHANGELOG and backfill v1.0.0 release notes (317a10f)

Refactoring

• Apply linting fixes across codebase (4c26242)

• Clean up unused imports in tests (b299639)

• Remove unused imports and fix import ordering (23a5d8e)

---

Detailed Changes: v1.0.0...v1.0.1

v1.0.0

v1.0.0 (2026-08-05)

This release is published under the Apache-2.0 License.

Bug Fixes

• Add default_role param to can_execute; add B-11/B-12 tests (a06158a)

• Add double-checked locking to get_rate_limiter singleton (ddd2a56)

• Add dummy bcrypt timing in authenticate, use Database.bind instead of class-level mutation (1512094)

• Add exc_info=True to logger.error/critical calls across codebase (4d16f24)

• Add hard cap to revoked-token store to prevent OOM (d69a3b2)

• Add optional token-based protection for /auth/metrics (3a8e171)

• Bind CSRF token to client via double-submit cookie (4b7f009)

• Check Starlette Middleware.cls attribute for compatibility (919946e)

• Correct release-prod dependency from nonexistent release-build to test job (c94120b)

• Enable ruff rules TRY400 and LOG007 for exc_info enforcement (b0f9d50)

• Escape HTML-special chars in user data before JSON injection (f124de3)

• Fail closed on malformed GraphQL batch payloads (4bce5ef)

• Handle scalar LDAP attribute values in _first_value (7d0e537)

• Implement change-role CLI command and remove dead 'user' entry (8fbd125)

• Inject security headers on all response paths (8053442)

• Log warning with exc_info when session validate fails (b50c4c8)

• Make can_execute deny-by-default with ADMIN default_role (f664658)

• Make check_and_record atomic via backend method (ff797be)

• Make rate limiter EXPIRE compatible with Redis 6 (52b84a3)

• N-10 add cycle guard in fragment traversal, N-11 replace dead test_middleware var with assertion (9367a3b)

• Pass operator identity to change_role audit (f65544d)

• Remove action label from RBAC metric to prevent unbounded cardinality (303d317)

• Remove trusted IP list from proxy auth log (e69cf5c)

• Replace print with logging for auto-generated SECRET_KEY warning (aa7892b)

• Require explicit image.tag in Helm chart (db0107b)

• Safely extract LDAP attribute first values in list_users (3d2ba20)

• Sync Helm chart with app config and wire into semantic-release (6b92d84)

• Unbind LDAP connection in _get_user_attributes finally block (12e2a71)

• Use Role[role_name] instead of nonexistent Role.from_string (e358a1e)

• Validate PBKDF2 split parts, sanitize client_ip in log, strengthen verify_patches (5ecd8fe)

• Wire up track_login_attempt, track_session_created, track_request_duration in production (0ae212b)

Build System

• Add Python upper bound <3.15 and tool-specific extras (ruff, mypy, pyright, test) (1267df8)

Chores

• Translate test comments and docstrings to English (a1802b5)

Continuous Integration

• Grant actions:write in publish workflow for reusable CI (a28cfa1)

• Restore contents:write for release-prod semantic-release push (7193c35)

• Restrict GITHUB_TOKEN permissions in CI workflow (af32ab5)

Documentation

• Add website visitor counter widget via CI, keep README clean (4fba683)

• Update Python version badge and fix CLI example flag (ba7affb)

Testing

• Add CLI test suite with 24 tests covering all management commands (c255c2b)

• Add comprehensive middleware test covering WebSocket, proxy mode, RBAC, and helpers (9875eb8)

• Add CookieBackend _MAX_REVOKED cap tests (fd5d938)

• Add detection layer test suite with 13 tests (a4e3c9e)

• Add LDAP backend test suite with 64 tests covering init, auth, user search, role mapping (3b53693)

• Add metrics token gate tests covering all auth scenarios (22b493f)

• Add RedisRateLimiter.check_and_record Lua script tests (a59f31a)

• Expand TestMain with 10 additional CLI flow tests (64d2c1a)

---

Detailed Changes: v0.4.2...v1.0.0

v0.4.2

What's Changed

• fix: resolve three UI injection bugs for Dagster 1.13.8 by @MCBoarder289 in #7

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• hotfix: add DAGSTER_AUTH_ADMIN_USER support (v0.4.1) by @maltzsama in #5

New Contributors

• @maltzsama made their first contribution in #5

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• Fix 1 DAGSTER_AUTH_ADMIN_PASSWORD bootstrap bug and 1 logging bug for DAGSTER_AUTH_SECRET_KEY by @hongha912 in #2
• fix: updated CSP headers for dagster ui updates by @MCBoarder289 in #3

New Contributors

• @hongha912 made their first contribution in #2

Full Changelog: v0.3.0...v0.4.0

v0.3.0

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Full Changelog: https://github.com/maltzsama/dagster-authkit/commits/v0.2.0