Skip to content

v3.15.0

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 24 Oct 03:54
v3.15.0
717969b

silo-pkg v3.15.0 updates the shared Go dependency stack and requires Go 1.27.3. It preserves public package APIs, policy formats, authorization semantics, and the policy fast paths delivered in v3.14.3.

This is a source-only release of github.com/pgsty/silo-pkg/v3, delivered as the first component of the coordinated 20261024 maintenance work. Applications must update their dependency and rebuild to adopt it; the SILO, mcli, Console, and KES releases remain separate.

Dependencies and security

Compared with v3.14.3, this release updates 13 module versions:

Dependency Previous v3.15.0
JWX v3 3.3.0 3.4.0
etcd API, client/pkg, client (three modules) 3.7.2 3.7.3
gRPC 1.83.2 1.84.0
grpc-gateway v2 2.30.0 2.32.0
goccy/go-json 0.10.6 0.11.2
go-openapi/swag/conv 0.29.1 0.29.2
go-colorable 0.1.15 0.1.16
klauspost/cpuid v2 2.4.0 2.4.1
philhofer/fwd 1.2.0 1.2.1
Google API/RPC generated modules (two modules) 18b4a7587f8a ce908d29299b
  • Go 1.27.3 includes the certificate-trust fix for CVE-2026-111943 / GO-2026-6809. The library does not ship a Go runtime; consumers receive the runtime fix by rebuilding with the updated compiler.
  • GO-2026-5932 remains an upstream advisory without a fixed version in deprecated OpenPGP code. This module does not import the affected packages. Vulnerability checks report no affected imported packages or reachable symbols; this is not a claim that every module in the graph is free of advisories.
  • Keep the previously selected minio-go v7.4.1 and current x/crypto, x/net and x/text versions; their earlier fixes are retained.

Compatibility

The minimum Go version rises from 1.26 to 1.27.3. CI and development use Go 1.27.3 and golangci-lint v2.15.0.

Keep go-humanize v1.0.1 and go-runewidth v0.0.29 to preserve CLI formatting, and the go-systemd/v22 v22.6.0 replacement for NetBSD. Go does not inherit replacements from dependencies, so consuming applications must retain the replacements they need. Existing TLS configuration and platform-trust considerations remain documented in the README.

require github.com/pgsty/silo-pkg/v3 v3.15.0

Validation

  • Final merged source: full race tests, lint, module verification, go mod tidy -diff, and symbol-level Go vulnerability analysis.
  • Final-commit CI: Go, LDAP, VulnCheck.
  • Dependency regression work includes JWT signature and time-claim boundaries, local etcd mTLS/authentication/watch/lease persistence checks, and 68 old/new CLI output comparisons. External cloud tenants were not used.

Retains the v3.14.3 policy optimizations by Denis Babchuk (@botdeniska), adapted from work by Klaus Post (@klauspost).

Changes since v3.14.3

Released commit: 717969b63fa7.

Assets 2
Loading