Skip to content

silo-pkg v3.12.0

Choose a tag to compare

View all tags
@Vonng Vonng released this 24 Aug 10:02
· 5 commits to main since this release
v3.12.0
2b087a1

Policy-write hardening

  • Adds strict validation for bare S3, S3 Tables, and KMS ARN namespace prefixes in both Resource and NotResource.
  • Detects the historical star-prefixed serialization as well as the exact ARN prefix.
  • Keeps ParseConfig, Validate, resource matching, and stored-policy serialization permissive for compatibility. Existing policies continue to load and evaluate unchanged.
  • Consumers must use ParseConfigStrict or ValidateStrict on create and update paths to enforce the new guard.

SILO enables the strict path for named-policy and service-account policy writes in eee05a17c. Operator impact and compatibility boundaries are recorded as SN-2026-005 in the SILO security ledger.

Maintenance baseline

  • Raises the supported consumer floor to Go 1.26 and builds with the Go 1.27 toolchain.
  • Aligns maintained SILO dependencies and keeps the NetBSD go-systemd portability pin.
  • Moves CI actions to the Node 24 runtime.

Validation: full lint and race/kqueue test suite, plus govulncheck with no reachable vulnerabilities.

Assets 2
Loading