Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

Releases: google/exposure-notifications-server

v0.36.0

30 Aug 18:20
a6ef63f
Compare
Choose a tag to compare

Changes since v0.35.0

Infrastructure

  • Upgrade notice!- This release introduces a new service which must be tagged and applied. You can run terraform taint null_resource.build before running Terraform to build this service. This service is responsible for metric registration and does not receive user traffic. (#1549, @sethvargo)

Fixes and Improvements

  • TEKs can now include a variant of concern field, which can be used score variants differently.
    This is download format change isn't yet supported in the reference server. (#1545, @flagxor)
  • Upgrade language to Go 1.17 which includes performance enhancements. (#1555, @sethvargo)

Dependencies

Added

  • 4d63.com/gochecknoglobals: acfc0b2
  • bitbucket.org/creachadair/shell: v0.0.6
  • cloud.google.com/go/firestore: v1.1.0
  • cloud.google.com/go/kms: v0.1.0
  • cloud.google.com/go/monitoring: v0.1.0
  • cloud.google.com/go/secretmanager: v0.1.0
  • cloud.google.com/go/trace: v0.1.0
  • github.com/Antonboom/errname: v0.1.3
  • github.com/Djarvur/go-err113: aea10b5
  • github.com/Masterminds/goutils: v1.1.0
  • github.com/Masterminds/semver: v1.5.0
  • github.com/Masterminds/sprig: v2.22.0+incompatible
  • github.com/OpenPeeDeeP/depguard: v1.0.1
  • github.com/StackExchange/wmi: v1.2.1
  • github.com/alexkohler/prealloc: v1.0.0
  • github.com/andybalholm/brotli: v1.0.0
  • github.com/aokoli/goutils: v1.0.1
  • github.com/ashanbrown/forbidigo: v1.2.0
  • github.com/ashanbrown/makezero: b626158
  • github.com/bketelsen/crypt: v0.0.4
  • github.com/bkielbasa/cyclop: v1.2.0
  • github.com/bombsimon/wsl/v3: v3.3.0
  • github.com/charithe/durationcheck: v0.0.8
  • github.com/chavacava/garif: e8a0a40
  • github.com/coreos/go-etcd: v2.0.0+incompatible
  • github.com/cpuguy83/go-md2man: v1.0.10
  • github.com/daixiang0/gci: v0.2.9
  • github.com/denis-tingajkin/go-header: v0.4.2
  • github.com/esimonov/ifshort: v1.0.2
  • github.com/ettle/strcase: v0.1.1
  • github.com/fatih/structtag: v1.2.0
  • github.com/fullstorydev/grpcurl: v1.6.0
  • github.com/fzipp/gocyclo: v0.3.1
  • github.com/go-critic/go-critic: v0.5.6
  • github.com/go-ole/go-ole: v1.2.5
  • github.com/go-redis/redis: v6.15.8+incompatible
  • github.com/go-task/slim-sprig: 348f09d
  • github.com/go-toolsmith/astcast: v1.0.0
  • github.com/go-toolsmith/astcopy: v1.0.0
  • github.com/go-toolsmith/astequal: v1.0.0
  • github.com/go-toolsmith/astfmt: v1.0.0
  • github.com/go-toolsmith/astinfo: 9809ff7
  • github.com/go-toolsmith/astp: v1.0.0
  • github.com/go-toolsmith/pkgload: v1.0.0
  • github.com/go-toolsmith/strparse: v1.0.0
  • github.com/go-toolsmith/typep: v1.0.2
  • github.com/go-xmlfmt/xmlfmt: d5b6f63
  • github.com/gobwas/glob: v0.2.3
  • github.com/gofrs/flock: v0.8.1
  • github.com/golang-jwt/jwt/v4: v4.0.0
  • github.com/golangci/check: cfe4005
  • github.com/golangci/dupl: 3e9179a
  • github.com/golangci/go-misc: 927a3d8
  • github.com/golangci/gofmt: 244bba7
  • github.com/golangci/golangci-lint: v1.42.0
  • github.com/golangci/lint-1: 297bf36
  • github.com/golangci/maligned: b1d8939
  • github.com/golangci/misspell: v0.3.5
  • github.com/golangci/revgrep: cd28932
  • github.com/golangci/unconvert: 28b1c44
  • github.com/google/certificate-transparency-go: v1.1.1
  • github.com/google/trillian: v1.3.11
  • github.com/gookit/color: v1.4.2
  • github.com/gordonklaus/ineffassign: 2e10b26
  • github.com/gorhill/cronexpr: 88b0669
  • github.com/gostaticanalysis/comment: v1.4.1
  • github.com/gostaticanalysis/forcetypeassert: 01d4955
  • github.com/gostaticanalysis/nilerr: v0.1.1
  • github.com/gregjones/httpcache: 901d907
  • github.com/huandu/xstrings: v1.2.0
  • github.com/imdario/mergo: v0.3.8
  • github.com/jgautheron/goconst: v1.5.1
  • github.com/jhump/protoreflect: v1.6.1
  • github.com/jingyugao/rowserrcheck: v1.1.0
  • github.com/jirfag/go-printf-func-name: 7558a9e
  • github.com/juju/ratelimit: v1.0.1
  • github.com/julz/importas: 841f0c0
  • github.com/klauspost/compress: v1.11.0
  • github.com/kr/fs: v0.1.0
  • github.com/kulti/thelper: v0.4.0
  • github.com/kunwardeep/paralleltest: v1.0.2
  • github.com/kylelemons/godebug: v1.1.0
  • github.com/kyoh86/exportloopref: v0.1.8
  • github.com/ldez/gomoddirectives: v0.2.2
  • github.com/ldez/tagliatelle: v0.2.0
  • github.com/letsencrypt/pkcs11key/v4: v4.0.0
  • github.com/logrusorgru/aurora: a7b3b31
  • github.com/maratori/testpackage: v1.0.1
  • github.com/matoous/godox: 6504466
  • github.com/mattn/goveralls: v0.0.2
  • github.com/mbilski/exhaustivestruct: v1.2.0
  • github.com/mgechev/dots: c36f7dc
  • github.com/mgechev/revive: v1.1.0
  • github.com/miekg/pkcs11: v1.0.3
  • github.com/mitchellh/go-ps: v1.0.0
  • github.com/mohae/deepcopy: c48cc78
  • github.com/moricho/tparallel: v0.2.1
  • github.com/mozilla/scribe: fb71baf
  • github.com/mozilla/tls-observatory: 7bc4285
  • github.com/mwitkow/go-proto-validators: [v0.2.0](https://gi...
Read more

v0.35.0

16 Aug 16:27
4eb1c67
Compare
Choose a tag to compare

Changes since v0.34.0

Operations

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.34.0

02 Aug 15:56
v0.34.0
c1fe3de
Compare
Choose a tag to compare

Changes by Kind

Uncategorized

  • Replace deprecated upstream logging package in azure blobstore implementation. Previously this used prometheus/log which was removed in the recent release. We've replaced this with uber/zap, but there may be differences in how the log output appears! To reduce the dependency on log output, we've also added two new metrics: azure/refresh_failed and azure/refresh_expired to track when the Azure credential expires in a log-agnostic way. (#1539, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.33.0

19 Jul 17:12
7841200
Compare
Choose a tag to compare

Changes since v0.32.0

Operations

  • Adds validation for minimum value of STATS_EMBARGO_PERIOD env var. (#1536, @mikehelmick)

  • Replace deprecated upstream logging package in azure blobstore implementation. Previously this used prometheus/log which was removed in the recent release. We've replaced this with uber/zap, but there may be differences in how the log output appears! To reduce the dependency on log output, we've also added two new metrics: azure/refresh_failed and azure/refresh_expired to track when the Azure credential expires in a log-agnostic way. (#1539, @sethvargo)

Dependencies

Added

  • github.com/Microsoft/hcsshim: v0.8.9
  • github.com/benbjohnson/clock: v1.1.0
  • github.com/bits-and-blooms/bitset: v1.2.0
  • github.com/cenkalti/backoff/v3: v3.2.2
  • github.com/checkpoint-restore/go-criu/v5: v5.0.0
  • github.com/cilium/ebpf: v0.6.2
  • github.com/cncf/xds/go: fbca930
  • github.com/containerd/cgroups: bf292b2
  • github.com/containerd/console: v1.0.2
  • github.com/containerd/fifo: a9fb20d
  • github.com/containerd/go-runc: 5a6d9f3
  • github.com/containerd/ttrpc: 0e0f228
  • github.com/containerd/typeurl: a93fcdb
  • github.com/coreos/go-systemd/v22: v22.3.2
  • github.com/cyphar/filepath-securejoin: v0.2.2
  • github.com/frankban/quicktest: v1.11.3
  • github.com/go-kit/log: v0.1.0
  • github.com/godbus/dbus/v5: v5.0.4
  • github.com/godbus/dbus: ade71ed
  • github.com/moby/sys/mountinfo: v0.4.1
  • github.com/mrunalp/fileutils: v0.5.0
  • github.com/opencontainers/runtime-spec: 1c3f411
  • github.com/opencontainers/selinux: v1.8.2
  • github.com/seccomp/libseccomp-golang: v0.9.1
  • github.com/syndtr/gocapability: 42c35b4
  • github.com/vishvananda/netlink: v1.1.0
  • github.com/vishvananda/netns: 0a2b9b5
  • go.opentelemetry.io/proto/otlp: v0.7.0
  • go.uber.org/goleak: v1.1.10
  • gopkg.in/airbrake/gobrake.v2: v2.0.9
  • gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
  • gotest.tools/v3: v3.0.2

Changed

Read more

v0.32.0

07 Jul 15:54
0879ee8
Compare
Choose a tag to compare

Release notes for v0.32.0

Changelog since v0.31.0

Changes by Kind

Fixes and Improvements

  • Adds validation for minimum value of STATS_EMBARGO_PERIOD env var. (#1536, @mikehelmick)

Infrastructure

  • Add alerts for when a Cloud Run service is deployed using breakglass (without Binary Authorization). Like the HumanAccessedSecret alert, there may be legitimate reasons for a human to perform this operation, but it should be carefully checked and audited. Due to eventual consistency, the initial Terraform apply may fail due to missing metric. After 5 minutes, you can run the Terraform apply again to converge. (#1533, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.31.0

21 Jun 16:04
6eb6516
Compare
Choose a tag to compare

Changes since v0.30.0

Security

  • Add alerts for when a Cloud Run service is deployed using breakglass (without Binary Authorization). Like the HumanAccessedSecret alert, there may be legitimate reasons for a human to perform this operation, but it should be carefully checked and audited. Due to eventual consistency, the initial Terraform apply may fail due to missing metric. After 5 minutes, you can run the Terraform apply again to converge. (#1533, @sethvargo)
  • Upgrade JWT library to long term supported version (#1527, @mikehelmick)

Operations

Dependencies

Added

  • github.com/golang-jwt/jwt: v3.2.1+incompatible
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.1.0

Changed

Removed

  • github.com/Microsoft/hcsshim: v0.8.9
  • github.com/checkpoint-restore/go-criu/v5: v5.0.0
  • github.com/cilium/ebpf: v0.5.0
  • github.com/containerd/cgroups: bf292b2
  • github.com/containerd/console: v1.0.2
  • github.com/containerd/fifo: a9fb20d
  • github.com/containerd/go-runc: 5a6d9f3
  • github.com/containerd/ttrpc: 0e0f228
  • github.com/containerd/typeurl: a93fcdb
  • github.com/coreos/go-systemd/v22: v22.3.1
  • github.com/cyphar/filepath-securejoin: v0.2.2
  • github.com/frankban/quicktest: v1.11.3
  • github.com/godbus/dbus/v5: v5.0.4
  • github.com/godbus/dbus: ade71ed
  • github.com/gostaticanalysis/comment: v1.4.2
  • github.com/gostaticanalysis/testutil: bfb5c8e
  • github.com/moby/sys/mountinfo: v0.4.1
  • github.com/mrunalp/fileutils: v0.5.0
  • github.com/opencontainers/runtime-spec: 1c3f411
  • github.com/opencontainers/selinux: v1.8.0
  • github.com/otiai10/copy: v1.2.0
  • github.com/otiai10/curr: v1.0.0
  • github.com/otiai10/mint: v1.3.1
  • github.com/seccomp/libseccomp-golang: v0.9.1
  • github.com/syndtr/gocapability: 42c35b4
  • github.com/tenntenn/modver: v1.0.1
  • github.com/tenntenn/text/transform: 7eef512
  • github.com/vishvananda/netlink: v1.1.0
  • github.com/vishvananda/netns: 0a2b9b5
  • github.com/willf/bitset: v1.1.11
  • gopkg.in/airbrake/gobrake.v2: v2.0.9
  • gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
  • gotest.tools/v3: v3.0.2

v0.30.0

07 Jun 18:18
ab2ec26
Compare
Choose a tag to compare

Release notes for v0.30.0

Changelog since v0.29.0

Changes by Kind

Uncategorized

Dependencies

Added

  • github.com/checkpoint-restore/go-criu/v5: v5.0.0
  • github.com/gostaticanalysis/comment: v1.4.2
  • github.com/gostaticanalysis/testutil: bfb5c8e
  • github.com/otiai10/copy: v1.2.0
  • github.com/otiai10/curr: v1.0.0
  • github.com/otiai10/mint: v1.3.1
  • github.com/tenntenn/modver: v1.0.1
  • github.com/tenntenn/text/transform: 7eef512

Changed

Removed

  • github.com/checkpoint-restore/go-criu/v4: v4.1.0

v0.29.0

24 May 21:09
5126f87
Compare
Choose a tag to compare

Release notes for v0.29.0

Changelog since v0.28.0

Changes by Kind

Enhancements

  • NOTICE: This changes the behavior of the stats API. Introduces an embargo period for publish stats. If a health authority has low publish request, below the STATS_UPLOAD_MINIMUM, this allows you to release their stats after a certain embargo period has been met. (#1523, @mikehelmick)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.28.0

10 May 16:27
4ac6ea9
Compare
Choose a tag to compare

Release notes for main

Changelog since v0.27.0

Changes by Kind

Infrastructure

  • Add config for and optional logging for JSON parse failures. (#1515, @mikehelmick)
  • Adds logs based metric for zip file downloads (Google Cloud only) (#1514, @mikehelmick)
  • Adds a new metric 'en-server/jwt_not_yet_valid' that will be incremented when the server processes a JWT that is future dated according to either the IAT or NBF field of a properly signed verification certificate JWT. (#1519, @mikehelmick)
  • Change STACKDRIVER_REPORTING_INTERVAL to 60s by default. (#1522, @mikehelmick)

Enhancements and bug fixes

  • Return a 500 response instead of a 404 when an error occurs while trying to find the health authority. (#1518, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.27.0

26 Apr 14:29
218845e
Compare
Choose a tag to compare

Changes since v0.26.0

Operations

  • Adds logs based metric for zip file downloads (Google Cloud only) (#1514, @mikehelmick)
  • Fix an issue where database checks may not run during health checks. (#1509, @sethvargo)
  • Fix an issue with the path matcher for the export_file_downloaded logs-based metric. (#1510, @sethvargo)
  • Increase Stackdriver metric export frequency to every 15s, timeout after 10s. (#1505, @sethvargo)
  • Increase statistics export timeout to 15s and set minimum number of workers. (#1513, @sethvargo)

Misc

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.