Orionis v0.1.3

Highlights

• Add provider-agnostic private_key_pem_env signing-key mode for orionis-auth, so production keys can be injected from Secrets Manager, Vault, Kubernetes secrets, or another runtime without provider SDKs in Orionis.
• Keep the existing file-backed private_key_path mode for local Docker/demo deployments.
• Update AWS ECS/Fargate templates to inject ORIONIS_CONFIG_JSON and ORIONIS_SIGNING_KEY_PEM as task secrets, removing the EFS volume/access-point requirement from the default template.
• Update pinned Docker/ECS documentation and templates from 0.1.2 to 0.1.3.

Included since v0.1.2

• docs: remove wiki publish helper
• docs: add AWS ECS Fargate deployment assets
• feat: load signing key from secret environment

Validation

• go mod tidy -diff
• git diff --check
• go test ./...
• go test -race ./...
• go vet ./...
• staticcheck ./...
• govulncheck ./...
• jq empty deploy/aws/ecs/task-definition.template.json deploy/aws/ecs/orionis-config.example.json
• docker build --build-arg TARGET=./cmd/orionis-auth -t orionis-auth:local .
• docker compose build