v7.0.0

Release run: #20

What's Changed

• Support accepting multiple public keys by @rtyley in #150 (re-merged as #156)

Updating to Panda v7

See #160, tracking the upgrade of Guardian services to Panda v7.

Updated requirements

• Java 11 (see also guardian/maintaining-scala-projects#3)

Full Changelog: v6.0.0...v7.0.0

v6.0.0

Release run: #19

What's Changed

• Refactor Settings loading-&-parsing by @rtyley in #151
• Refactor Cookie generation-&-parsing by @rtyley in #152
• Fix creation of superfluous PanDomainAuthSettingsRefresher instances, make panDomainSettings a val by @rtyley in #155

Full Changelog: v5.0.0...v6.0.0

v5.0.0

Release run: #6

Although this release is a major-version-bump (from 4.0.0 to 5.0.0) this new version has no new functionality, just a few refactors and some dependency changes. The gha-scala-library-release-workflow detected potential binary-incompatible changes, and so allocated a major-version-bump.

A project upgrading to Panda v5 from v4 will need to make at most minimal changes due to #147, eg:

• guardian/atom-workshop#360 - no code changes
• guardian/s3-upload#59 - changes to imports for PublicKey
• guardian/login.gutools#82 - settings.privateKey becomes settings.signingKeyPair.getPrivate

What's Changed

• Update docs to link to Emergency Panda key-rotation Guide by @rtyley in #146
• Remove manual override for google-oauth-client by @bryophyta in #148
• Use java.security classes in preference to string-wrappers by @rtyley in #147

New Contributors

• @bryophyta made their first contribution in #148

Full Changelog: v4.0.0...v5.0.0

v4.0.0

Release run: #5

What's Changed

• Avoid recommending preview releases in README.md by @rtyley in #138
• Add Java version - see guardian/gha-scala-library-release-workflow#36 by @rtyley in #139
• Remove unused com.gu.pandomainauth.Secret class by @rtyley in #144
• Use token auth for Sonatype by @rtyley in #145

New Contributors

• @rtyley made their first contribution in #138

Full Changelog: v3.1.0...v4.0.0

v3.1.0

Release run: #4

What's Changed

• expose an authenticateRequest function by @twrichards in #137

New Contributors

• @twrichards made their first contribution in #137

Full Changelog: v3.0.3...v3.1.0

v3.0.3

Release run: #3

What's Changed

• Automated releases using gha-scala-library-release-workflow by @andrew-nowak in #135
• update to latest scalas (2.12 and 2.13) to avoid binary incompatibility on 2.13.9 by @andrew-nowak in #136

Full Changelog: v3.0.2...v3.0.3

v3.0.2

What's Changed

• Release v3.0.1 by @andrew-nowak in #131
• Retry when discovery document fetcher fails by @andrew-nowak in #133
• CVE-2024-30172: upgrade bouncycastle to 1.78 by @andrew-nowak in #134

Full Changelog: v3.0.1...v3.0.2

v3.0.1

What's Changed

• exclude hmac-examples from snyk monitoring by @andrew-nowak in #127
• Fix links in readme by @davidfurey in #128
• CVE-2023-33202: replace jdk1.5 bouncycastle with 1.8, then upgrade to receive CVE fix by @andrew-nowak in #130

Full Changelog: v3.0.0...v3.0.1

v3.0.0

"Major" release to realign version numbers across this and newly imported panda-hmac modules from https://github.com/guardian/panda-hmac

What's Changed

• Pull panda-hmac into repo by @andrew-nowak in #124

Full Changelog: v1.4.0...v3.0.0

v1.4.0

What's Changed

• Migrate CI from Teamcity to Github Actions by @rebecca-thompson in #119
• Build for play 2.9 and 3.0; drop play 2.7 by @andrew-nowak in #121

Full Changelog: v1.3.0...v1.4.0