v0.9.1

Container image: docker pull mar0ls/bladedr:v0.9.1

Pin the version. latest moves on the next stable release, and this is the
component holding SSH access to your fleet.

What's Changed

• ci: gate releases on the attack-emulation range by @mar0ls in #9
• risk: report the spread across resamplings, not one order-dependent number by @mar0ls in #10
• ci: require that no rule fires on a stock image by @mar0ls in #11
• security: document the one open gap in the release chain by @mar0ls in #12
• security: correct the cicd-sensor boundary, and keep the agent out of publishing jobs by @mar0ls in #13
• scan: fix two faults that made response actions unusable on real hosts by @mar0ls in #14
• scan, risk: trim three overlong comments by @mar0ls in #15
• changelog: cut 0.9.1 by @mar0ls in #16

Full Changelog: v0.9.0...v0.9.1

v0.9.0

Container image: docker pull mar0ls/bladedr:v0.9.0

Pin the version. latest moves on the next stable release, and this is the
component holding SSH access to your fleet.

v0.9.0-rc2

What's Changed

• docker: stamp the image with the version it was tagged from by @mar0ls in #7

Full Changelog: v0.9.0-rc1...v0.9.0-rc2

v0.9.0-rc1

What's Changed

• response actions, durable queues, per-host sensor tokens by @mar0ls in #3
• v1 prep: forced password change, upgrade proofs, image publishing by @mar0ls in #4
• ci: fix the Docker Hub login secret name by @mar0ls in #5
• sensor: operator-supplied policies; Docker Hub docs and compose example by @mar0ls in #6

Full Changelog: v0.8.0...v0.9.0-rc1

v0.8.0

First hardening release on the way to 1.0. Still 0.x, so the API isn't frozen yet.

What's in it

• TLS (BLADEDR_TLS_CERT/BLADEDR_TLS_KEY) with auto Secure cookies, per-IP login throttle, ingest-token rotation
• versioned DB migrations that run once, inside a transaction
• sensor event buffer so a control-plane blip no longer drops events
• /readyz + /metrics (Prometheus) + structured JSON logs
• finished the eBPF policy page; binaries report a real --version now
• SECURITY / CONTRIBUTING / CHANGELOG + a deployment guide, plus a CI smoke test
• a lot more test coverage (store 60%, api 57%, scan 45%)

Binaries below are static Linux builds — server, probe and sensor for amd64 and arm64. Check them against SHA256SUMS.

Full list in CHANGELOG.md.

v0.1.0

Full Changelog: https://github.com/mar0ls/bladedr/commits/v0.1.0