Releases: wollomatic/socket-proxy
1.12.1
Update to Go 1.26.3
What's Changed
- Bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #134
- Bump golang from 1.26.2-alpine3.23 to 1.26.3-alpine3.23 by @dependabot[bot] in #135
- Bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #136
- Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #137
- Go 1.26.3 by @wollomatic in #138
Full Changelog: 1.12.0...1.12.1
1.12.0
This release allows multiple regular expressions for each request type.
What's Changed
- Bump golang from 1.25.7-alpine3.23 to 1.26.0-alpine3.23 by @dependabot[bot] in #88
- add #nosec information because the gosec findings are false positives (closes #89) by @wollomatic in #90
- Update examples by @wollomatic in #91
- [StepSecurity] Apply security best practices by @step-security-bot in #92
- Update Go Tooling by @wollomatic in #93
- pin gosec to v2.23.0 by @wollomatic in #94
- pin gosec to v2.23.0 version - try to fix weird behaviour by @wollomatic in #95
- run gosec with Go 1.26 by @wollomatic in #96
- Bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #98
- feat: support use allow* multiple times in env, flag and docker labels by @qianlongzt in #86
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #100
- Bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #101
- Update Go to 1.26.1, also update email address and PGP key in SECURITY.md by @wollomatic in #102
- [Bug] isAllowedClient() only checks the first valid CIDR (fixes #105) by @wollomatic in #106
- Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #107
- Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #108
- Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #109
- Bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in #110
- Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #111
- Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in #113
- Bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] in #116
- Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #117
- Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #118
- Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #120
- Bump golang from 1.26.1-alpine3.23 to 1.26.2-alpine3.23 by @dependabot[bot] in #122
- Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #123
- Bump step-security/harden-runner from 2.16.0 to 2.17.0 by @dependabot[bot] in #124
- Bump golang from
c2a1f7btof853308by @dependabot[bot] in #127 - Bump step-security/harden-runner from 2.17.0 to 2.19.0 by @dependabot[bot] in #129
- Feature/99 use allow multiple times by @wollomatic in #126
- Minor fixes 1 12 0 by @wollomatic in #131
- 1.12.0 preparation by @wollomatic in #130
New Contributors
- @step-security-bot made their first contribution in #92
- @qianlongzt made their first contribution in #86
Full Changelog: 1.11.2...1.12.0
1.11.4
This release updates to Go 1.26.1. Also, some actions and the email address in the SECURITY.md were updated.
What's Changed
- Bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #98
- Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #100
- Bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #101
- Update Go to 1.26.1, also update email address and PGP key in SECURITY.md by @wollomatic in #102
- prepare 1.11.4 by @wollomatic in #103
Full Changelog: 1.11.3...1.11.4
1.11.3
This release updates to Go 1.26, also the GitHub actions were hardend and the example Compose files were updated.
What's Changed
- Bump golang from 1.25.7-alpine3.23 to 1.26.0-alpine3.23 by @dependabot[bot] in #88
- add #nosec information because the gosec findings are false positives (closes #89) by @wollomatic in #90
- Update examples by @wollomatic in #91
- [StepSecurity] Apply security best practices by @step-security-bot in #92
- Update Go Tooling by @wollomatic in #93
- run gosec with Go 1.26 by @wollomatic in #96
- prepare v1.10.3 by @wollomatic in #97
New Contributors
- @step-security-bot made their first contribution in #92
Full Changelog: 1.11.2...1.11.3
1.11.2
This is technically identical to 1.11.1 (https://github.com/wollomatic/socket-proxy/releases/tag/1.11.1).
It's released to re-trigger the Github Action to build the container images.
Full Changelog: 1.11.0...1.11.2
1.11.1
(Edit: Due to a technical problem with the Github action, no Image was built. Use 1.11.2 instead)
What's Changed
- Bump golang from 1.25.6-alpine3.23 to 1.25.7-alpine3.23 by @dependabot[bot] in #84
Full Changelog: 1.11.0...1.11.1
1.11.0
What's Changed
Per-container allowlists (based on Docker labels) are now possible.
Thank You @amanda-wee for your awesome work and patience!
Also, the build system was updated to Go 1.25.6.
- implement per-container allowlists specified by Docker container labels by @amanda-wee in #69
- Bump actions/checkout from 5 to 6 by @dependabot[bot] in #74
- 28 fr support granular api permissions on a per host basis via allowfrom by @wollomatic in #75
- 1.11.0 - add per container allowlists by @wollomatic in #80
Full Changelog: 1.10.1...1.11.0
1.10.1
What's Changed
- Update Go to 1.25.4
- Update CoSign to 2.6.1
- Update CoSign-Installer in GH action to 4.0.0
Full Changelog: 1.10.0...1.10.1
1.10.0
Note
Versions prior to 1.10.0 of socket-proxy set the default file permissions of the Unix socket to 0400, instead of 0600 as stated in the documentation. This is relevant for socket to socket forwarding.
What's Changed
- use 0600 as default proxy socket endpoint file mode by @amanda-wee in #62
- chore: update dependencies by @reneleonhardt in #61
New Contributors
- @reneleonhardt made their first contribution in #61
- @amanda-wee made their first contribution in #62
Full Changelog: 1.9.0...1.10.0