v0.27.1

[v0lkan]

This is a security and stability release. We have fixed several vulnerabilities
and made the components more robust.

Added

• Increased test coverage.
• Minor bug fixes and performance improvements.
• Documentation updates.

Changed

• Updated Go to version 1.23.1 on major components. vSecM SDK remains at Go
  version 1.21.0 to offer compatibility with older systems. This is the smallest
  version that we can support with the SDK without exposing vulnerabilities.

Fixed

• Fixed a bug where SPIRE Server was crashing when using Helm charts and not
  enabling persistent volumes.

Security

• Fixed GHSA-xr7q-jx4m-x55m Private tokens could appear in logs if context containing gRPC metadata is logged in

---

Below are the generated release notes of every commit since the last release cut:

What's Changed

• minor typo by @v0lkan in minor typo #1082
• Introducing initial helm-chart for version 0.27.1 by @v0lkan in Introducing initial helm-chart for version 0.27.1 #1084
• doc changes by @v0lkan in doc changes #1085
• 🧹 chore(vsecm): Release next version's manifests by @v0lkan in 🧹 chore(vsecm): Release next version's manifests #1087
• 📚 docs(vsecm): add version snapshot by @v0lkan in 📚 docs(vsecm): add version snapshot #1088
• 🐛 fix(VSecM Keygen): regression: keygen was not decrypting secrets by @v0lkan in 🐛 fix(VSecM Keygen): regression: keygen was not decrypting secrets #1092
• 🌟 enhancement(VSecM): pointed example images to upstream by @v0lkan in 🌟 enhancement(VSecM): pointed example images to upstream #1093
• Added a new use case by @v0lkan in Added a new use case #1094
• Use case: Using Init container with k8s secrets by @v0lkan in Use case: Using Init container with k8s secrets #1095
• 🐛 fix(VSecM): fix logic error in example workload by @v0lkan in 🐛 fix(VSecM): fix logic error in example workload #1096
• Create scorecard.yml by @v0lkan in Create scorecard.yml #1098
• 🌟 enhancement(VSecM Web): Add a new landing page by @v0lkan in 🌟 enhancement(VSecM Web): Add a new landing page #1112
• 📚 docs(VSecM Web): add screen recordings to some use cases by @v0lkan in 📚 docs(VSecM Web): add screen recordings to some use cases #1114
• Test/app sentinel coverage by @gurkanguray in Test/app sentinel coverage #1117
• 💄 cosmetic(VSecM Web): landing page mobile fixes by @v0lkan in 💄 cosmetic(VSecM Web): landing page mobile fixes #1118
• 🌟 enhancement(VSecM): Isolate VSecM SDK by @v0lkan in 🌟 enhancement(VSecM): Isolate VSecM SDK #1120
• (chore) Version Update for the New SDK Approach to work by @v0lkan in (chore) Version Update for the New SDK Approach to work #1121
• 🐛 fix(VSecM Helm Charts): SPIRE Server was crashing if not persistent by @v0lkan in 🐛 fix(VSecM Helm Charts): SPIRE Server was crashing if not persistent #1122
• Refactor: fix potential panic & refactor some code by @canack in Refactor: fix potential panic & refactor some code #1123
• 🚨 test(VSecM): unit tests added for core/audit and core/constants by @gurkanguray in 🚨 test(VSecM): unit tests added for core/audit and core/constants #1099
• 📚 docs(VSecM Web): added new contributor hours video recording by @v0lkan in 📚 docs(VSecM Web): added new contributor hours video recording #1125
• update roadmap by @v0lkan in update roadmap #1126
• Finalized pending ADRs + security enhancements by @v0lkan in Finalized pending ADRs + security enhancements #1127
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /sdk by @dependabot in Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /sdk #1128
• 🚨 test(VSecM Sentinel): 1100 add unit test and refactor app/sentinel by @gurkanguray in 🚨 test(VSecM Sentinel): 1100 add unit test and refactor app/sentinel #1129
• Release v0.27.1 by @v0lkan in Release v0.27.1 #1130

New Contributors

• @canack made their first contribution in Refactor: fix potential panic & refactor some code #1123

Full Changelog: v0.27.0...v0.27.1