v0.7.2

[0.7.2] - 2026-09-07

CI

• Bump github.com/prometheus/exporter-toolkit
• Bump actions/setup-go from 6 to 7
• Bump minimum Go version to 1.26 and test against 1.27
• Bump golang.org/x/crypto from 0.54.0 to 0.56.0
• Bump github.com/prometheus/common from 0.70.1 to 0.71.0
• Bump github.com/prometheus/client_golang

v0.7.1

[0.7.1] - 2026-07-14

CI

• Disable cosign signing config for legacy-format signing
• Tag docker images with plain version only
• Update github actions to latest major versions
• Bump minimum Go version to 1.25 and test against 1.26
• Update branch references from master to main

v0.7.0

[0.7.0] - 2026-07-13

CI

• Lint with golangci-lint
• Attest and sign release artifacts
• Install the chart on a kind cluster
• Scheduled Trivy scan of the published image
• Read the probe result from pod logs instead of attach
• Fix trivy-action tag pin
• Fix cosign-installer tag pin
• Fix cosign signing of ghcr artifacts

Documentation

• Add Helm chart README for Artifact Hub

Features

• Scrape the exporter's own /metrics via the ServiceMonitor
• Dedicated ServiceAccount without API token automount
• Expose spki_fingerprint_exporter_build_info metric
• Optional PrometheusRule with default alerts
• Configurable log level and format via LOG_LEVEL and LOG_FORMAT
• TLS and basic auth on the listener via WEB_CONFIG_FILE
• Expose standard pod and service customization values
• Optional PodDisruptionBudget and NetworkPolicy

Refactoring

• Shared label helpers with app.kubernetes.io/version

v0.6.0

[0.6.0] - 2026-07-13

Bug Fixes

• Validate and normalize probe targets
• Reject invalid probe timeouts

CI

• Improve container build caching
• Expand project validation
• Bump docker/setup-qemu-action from 3 to 4
• Bump actions/upload-artifact from 4 to 7
• Bump docker/setup-buildx-action from 3 to 4
• Bump actions/checkout from 4 to 7
• Bump actions/download-artifact from 4 to 8
• Drop CHANGELOG.md in favor of GitHub release notes
• Publish Docker image to ghcr.io, drop ssl-pubkey alias
• Publish Helm chart to ghcr.io as OCI artifact

Documentation

• Add contributing guide
• Rewrite README for conciseness

Features

• Bound concurrent probes
• Validate and package chart
• Rename project to spki-fingerprint-exporter

Refactoring

• Harden HTTP server lifecycle

v0.5.0

[0.5.0] - 2026-07-13

Bug Fixes

• Honor DEFAULT_TIMEOUT environment variable
• Use static scheme-to-port map instead of net.LookupPort
• Publish a proper multi-arch Docker manifest
• Migrate ingress to networking.k8s.io/v1
• Only tag stable releases as latest
• Default image to the upcoming v0.5.0 exporter
• Make ingress pathType configurable
• Always reserve headroom on short scrape timeouts
• Use configured containerPort in post-install notes

CI

• Check formatting, vet and race-test; widen dependabot coverage

Documentation

• Document probe metrics, supported schemes and exposure caveats
• Gate the fingerprint-change alert on probe_success

Features

• Bump container tag; default tag from Chart appVersion
• Emit probe_success and probe_duration_seconds metrics
• Honor request context and Prometheus scrape timeout headroom
• Use http.Server with timeouts and graceful shutdown
• Modernize chart
• Support legacy ingress APIs on old clusters
• Fully automated release pipeline

Other

• Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
• Bump github.com/prometheus/client_golang from 1.14.0 to 1.23.2

Refactoring

• Replace logrus with stdlib log/slog

Testing

• Cover getFingerprint, getScrapeTimeout and probeHandler

v0.4.0

What's Changed

• Improved logging and error handling
• Port and connection timeouts are configurable
• Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 by @dependabot in #4
• Automate build and releasing new version with GitHub Actions

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Extend README with info about how to get fingerprints by @samuelb in #2
• Replace prometheus log by @samuelb in #3

Full Changelog: v0.2.0...v0.3.0