Richmond 0.4.0

Changelog

Bug Fixes

• 41d90dd: Fix grimes review findings: dry-run drift, pagination, observability (@tdewitt)

Other

• 5b83cbd: Auto-detect SCIM provider capabilities via /Schemas discovery (@tdewitt)
• d826158: Detect and repair drift from out-of-band SCIM deletions (@tdewitt)
• ce83809: Document schema discovery and drift detection in README (@tdewitt)
• ce853f5: Persist failed operations in state for automatic retry (@tdewitt)

Richmond 0.3.1

Changelog

Bug Fixes

• a3c5030: Fix admin_email validation, TOCTOU race, and dry-run error suppression (@tdewitt)

Richmond 0.3.0

Changelog

Bug Fixes

• 59e6f1b: Fix gofmt formatting in root.go (@tdewitt)

Other

• 9b30040: Adopt pre-existing SCIM accounts instead of failing on 409 (@tdewitt)
• 99a3c2c: Log version and commit hash at startup (@tdewitt)

Richmond 0.2.0

Changelog

Other

• f355954: Support admin email impersonation via domain-wide delegation (@tdewitt)

Richmond 0.1.1

Changelog

Features

• 656d1ff: Add OCI labels for container description and metadata (@tdewitt)

Other

• 74d164d: Silence usage output on runtime errors (@tdewitt)

Richmond 0.1.0

Changelog

Features

• 4f9078a: Add --log-level flag (debug, info, warn, error) (Tucker tdewitt@users.noreply.github.com)
• 2f75a20: Add CI, release pipeline, and goreleaser config (Tucker tdewitt@users.noreply.github.com)
• a4eca23: Add Go source and fix critical defects found in Grimes review (Tucker tdewitt@users.noreply.github.com)
• 70b0d1c: Add README with setup guide, config reference, and deployment examples (Tucker tdewitt@users.noreply.github.com)
• c0a52b6: Add SLSA L2 badge (Tucker tdewitt@users.noreply.github.com)
• a34eb53: Add setup-buildx-action for multi-platform container builds (Tucker tdewitt@users.noreply.github.com)
• 5f7d66a: Add sync_groups config and SCIM group support auto-detection (Tucker tdewitt@users.noreply.github.com)
• 40355c5: Add user OU exclusion and group include/exclude filtering (Tucker tdewitt@users.noreply.github.com)
• f068648: Bump Go to 1.26.3 to fix stdlib vulns, add vulncheck to lefthook (Tucker tdewitt@users.noreply.github.com)
• 2d61134: Force Node 24 for all actions, add local Dependabot config (Tucker tdewitt@users.noreply.github.com)
• 69f70c1: Switch to org reusable workflows for CI and add security/SBOM (Tucker tdewitt@users.noreply.github.com)
• fe6500a: Update deps, fix CI, add attestation and lefthook (Tucker tdewitt@users.noreply.github.com)

Bug Fixes

• 2c71423: Disable buildx SBOM attestation (handled separately in release workflow) (Tucker tdewitt@users.noreply.github.com)
• f2e62ad: Fix goreleaser sbom field (flat bool, not nested object) (Tucker tdewitt@users.noreply.github.com)
• 401444f: Fix goreleaser: migrate to dockers_v2, fix Dockerfile path, use mise exec (Tucker tdewitt@users.noreply.github.com)
• 1904fe2: Fix gotestfmt module path in mise.toml (Tucker tdewitt@users.noreply.github.com)
• 7eef50d: Fix silent failure modes in OU/group filtering and env var parsing (Tucker tdewitt@users.noreply.github.com)
• b5529b6: Handle archived users, 404 on deactivation, and fix Active derivation (Tucker tdewitt@users.noreply.github.com)

Other

• f7218f3: Grant contents:write to SBOM job so it can attach to the release (Tucker tdewitt@users.noreply.github.com)
• 7829d12: Ignore dist/ (Tucker tdewitt@users.noreply.github.com)
• acbdb75: Initial commit (Tucker tdewitt@users.noreply.github.com)
• 67bb34c: Inline SBOM generation in release job (org workflow lacks write permissions) (Tucker tdewitt@users.noreply.github.com)
• ead6aae: Merge pull request #1 from misfitdev/dependabot/github_actions/goreleaser/goreleaser-action-7 (Tucker tdewitt@users.noreply.github.com)
• 4ab552c: Merge pull request #2 from misfitdev/dependabot/github_actions/actions/setup-go-6 (Tucker tdewitt@users.noreply.github.com)
• b14c0cb: Merge pull request #3 from misfitdev/dependabot/github_actions/docker/login-action-4 (Tucker tdewitt@users.noreply.github.com)
• fa3c3c2: Merge pull request #4 from misfitdev/dependabot/github_actions/actions/attest-build-provenance-4 (Tucker tdewitt@users.noreply.github.com)
• f05c08a: Merge pull request #5 from misfitdev/dependabot/github_actions/actions/checkout-6 (Tucker tdewitt@users.noreply.github.com)
• f1266a6: Redesign README with badges, flat TOC, and section dividers (Tucker tdewitt@users.noreply.github.com)
• 1fe45b6: Remove SLSA 3 badge (we're SLSA 2, not 3) (Tucker tdewitt@users.noreply.github.com)
• d5d2555: Switch SBOM back to org workflow now that it supports attach-to-release (Tucker tdewitt@users.noreply.github.com)
• 4894555: Update README.md (Tucker tdewitt@users.noreply.github.com)
• 245cfb8: Update README.md (Tucker tdewitt@users.noreply.github.com)