v4.7.0

Changes

• Add user profile schema (#580) @olevitt

📦 Dependencies

• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.5 (#591) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.0 (#590) @renovate[bot]

v4.6.0

🚀 Features

• Add basic authentication support for Helm repositories (#548) @olevitt
• Add ingress port variable (#589) @olevitt
• Support multiple S3 configuration (#579) @fcomte

📦 Dependencies

• fix(deps): update dependency com.github.erosb:everit-json-schema to v1.14.6 (#587) @renovate[bot]
• fix(deps): update fabric8-kubernetes-client monorepo to v7.3.1 (#588) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.5 (#583) @renovate[bot]
• fix(deps): update fabric8-kubernetes-client monorepo to v7.2.0 (#584) @renovate[bot]
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.8 (#585) @renovate[bot]
• chore(deps): update eclipse-temurin docker tag to v21.0.7_6-jre (#582) @renovate[bot]

v4.5.0

Changes

• Add path style access and working directory path in s3 schema (#572) @ihiverlet

🚀 Features

• Support packages with no schemas (#577) @olevitt

📦 Dependencies

• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.4 (#578) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.4 (#574) @renovate[bot]
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.6 (#576) @renovate[bot]

v4.4.0

Changes

• OIDC : cleanup & add idleSessionLifetimeInSeconds (#570) @olevitt
• Add audience to OIDC configuration (#568) @olevitt

📦 Dependencies

• chore(deps): update crazy-max/ghaction-docker-meta action to v5.7.0 (#567) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.3 (#564) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.3 (#564) @renovate[bot]
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.3 (#565) @renovate[bot]
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.0 (#566) @renovate[bot]

v4.3.0

Upgrade note

While adding new configuration options for OIDC we took the opportunity to remove oidc.jwk-uri that was added back then as a workaround for Google OAuth. If you are using oidc.jwk-uri you should migrate to oidc.issuer-uri.

Changes

• Additional OIDC config (#562) @olevitt
• extraenv.json : remove items title (#563) @olevitt

v4.2.1

Changes

🪲 Fixes

• Add title to ide/extraenv.json (#556) @ddecrulle
• Fixed customImage.json name (#558) @Gaspi

📦 Dependencies

• Bump helm to 3.17.1 (#560) @olevitt
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.5 (#559) @renovate[bot]
• fix(deps): update dependency com.github.erosb:everit-json-schema to v1.14.5 (#557) @renovate[bot]
• Bump helm to v3.17.0 (#555) @olevitt
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.2 (#552) @renovate[bot]
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.2 (#550) @renovate[bot]
• chore(deps): update eclipse-temurin docker tag to v21.0.6_7-jre (#554) @renovate[bot]
• fix(deps): update fabric8-kubernetes-client monorepo to v7.1.0 (#553) @renovate[bot]
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.4 (#549) @renovate[bot]
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.1 (#543) @renovate[bot]
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.1 (#545) @renovate[bot]
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.1 (#546) @renovate[bot]

v4.2.0

This release contains multiple fixes for security issues related to helm command injection.
Those fixes have been backported to previous Onyxia-API major versions
Read more here : https://docs.onyxia.sh/vulnerability-disclosure

Security ⚠️

• Sanitize helm names and namespace (#542) @olevitt
• Fix arbitrary Helm list parameter injection in GET /my-lab/app (#540) @nicolst
• Fix command injection vulnerability in HelmInstallService (#539) @nicolst

Changes

• Allow JMX debug (#536) @olevitt
• Further options for filtering catalog services (#532) @mmwinther
• Add username to logs (#526) @olevitt

🐎 Performance

• Performance : mutualize kubernetes client (#537) @olevitt

📦 Dependencies

• Fabric8 k8s client : revert to OkHTTPClient (#535) @olevitt
• fix(deps): update fabric8-kubernetes-client monorepo to v7.0.1 (#538) @renovate
• chore(deps): update fabric8-kubernetes-client monorepo to v7 (major) (#531) @renovate

v3.1.1

This release contains multiple fixes for security issues related to helm command injection.
This is a backport of those fixes.
Read more here : https://docs.onyxia.sh/vulnerability-disclosure

Users are strongly encouraged to use this version instead of v3.1.0 (this can be done by overriding api.image.tag in your helm values) or upgrade to more recent Onyxia releases.

v2.8.2

This release contains multiple fixes for security issues related to helm command injection.
This is a backport of those fixes.
Read more here : https://docs.onyxia.sh/vulnerability-disclosure

Users are strongly encouraged to use this version instead of v2.8.1 (this can be done by overriding api.image.tag in your helm values) or upgrade to more recent Onyxia releases.

v4.1.0

Changes

• Filter catalog services based on keywords (#520) @mmwinther
• Implement refresh endpoint (as an admin endpoint) (#522) @skykanin
• Add script to install helm for dynamic OS and ARCH (#521) @ZettWire
• Add support for structured (json) logging (#523) @olevitt

🪲 Fixes

• Refactor catalog refresh to make it more resilient (#516) @olevitt

📚 Documentation

• Cleanup : remove unused region geo location (#524) @olevitt
• Add roles claim documentation (#515) @olevitt

📦 Dependencies

• Upgrade spring-boot to 3.4 (#523) @olevitt
• Bump helm version to v3.16.3 (#530) @olevitt
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.7.0 (#529) @renovate
• chore(deps): update crazy-max/ghaction-docker-meta action to v5.6.1 (#528) @renovate
• chore(deps): update eclipse-temurin docker tag to v21.0.5_11-jre (#527) @renovate