Skip to content

v3.0.0 - Beta 1
Compare
Choose a tag to compare
@s-l-teichmann s-l-teichmann released this 27 Sep 15:32
· 155 commits to main since this release
v3.0.0-beta1
7a8cdb6
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Highlights

  • All tools are now able to store their configurations in .toml files.
  • Breaking change: Support for .ini files in the uploader is dropped.
  • The checker, downloader and aggreator are now able to filter down the fetched advisories by time ranges and regular expressions of their URLs.
  • Breaking change: The legacy -years flag is removed from the checker.
  • The downloader now uses structured logging to make it easier to process the resulting logs.
  • The downloader is now able to use a configurable folder to download into.
  • Breaking change: The -verbose flag was removed. The level of detail is now handled by the configurable log level.
  • The downloader is now able to forward the downloaded advisories to a configurable endpoint.
  • Breaking change: To compile the tools at least Go 1.21 is needed.

To reflect the breaking changes we bumped the major version from v2 to v3.

PRs

  • #467: Lift distribution from v2 to v3
  • #466: Integration Tests: Remove verbose flag from downloader
  • #465: Downloader: Document the implementes forward API
  • #464: Downloader: Remove verbose flag
  • #463: Downloader: unit tests for stats
  • #461: Change release action to use elder Ubuntu runner
  • #460: Unit tests of internal packages
  • #458: feat: log redirects
  • #450: downloader: Drop time precision below seconds in log output.
  • #447: downloader: Fix logging docs and some comments
  • #445: Improve code comment
  • #444: downloader: improve code comments
  • #443: Downloader: Add structured logging, fails storing and statistics
  • #442: Downloader: Add forwarding to HTTP endpoint
  • #441: Checker: Fix checking of missing files
  • #440: aggregator: Look for config files in similiar places like the other tools
  • #439: uploader: use the TOML config file infrastructure, too.
  • #436: Update dependencies
  • #435: Document potential security issue with plain PEM passwords.
  • #443: Document regular expression syntax used for filtering URLs.
  • #442: Aggregator: Add time range filtering
  • #431: No longer set timestamp of version as part of go version in prepareUbuntuInstanceForITests
  • #430: Checker: remove years flag
  • #429: Error to explaining warning when loading lpmd messages in checker
  • #424: Aggregator: Add support for client certificates and extra header
  • #423: Downloader: Add support for client certificates
  • #422: Checker: Add time range to report
  • #421: Aggregator: ignore advisories by given patterns
  • #420: Checker: ignore advisories by given patterns
  • #419: Downloader: ignore advisories by given patterns
  • #418: Add option to specify download folder
  • #416: Fix version config and make aggreator use new command line parser.
  • #414: Checker: Make time range configurable to check advisories from
  • #413: Downloader: Make time range configurable to download advisories from
  • #412: Add TOML config to checker
  • #409: Make rolie or directory listing mandatory
  • #406: Track whether files could not be accessed and report it when reporting about accessibility of TLP:WHITE advisories
  • #405: Use TOML as config file format in downloader
  • #404: Add support for config files in downloader.
Assets 4
Loading