Skip to content

Releases: OWASP/wrongsecrets

1.10.2: Docker CDS & LCM updates

30 Jan 15:20
Compare
Choose a tag to compare

What's Changed

Version 1.10.2 is a first CDS based release of our container! This makes the container smaller, faster and use less memory.

New Content

  • updated contributor list and copyrights by @commjoen in #1815
  • feat: use CDS, move to builder and runner image by @bendehaan in #1829
  • Replace tfsec with trivy on github workflows and renovate.json by @za in #1801

LCM

  • chore(deps): update module golang.org/x/crypto to v0.31.0 [security] by @renovate in #1787
  • Update README.md with new challenge links by @commjoen in #1788
  • chore(deps): update dependency go to v1.23.4 by @renovate in #1791
  • chore(deps): update dependency globals to v15.13.0 by @renovate in #1800
  • chore(deps): update dependency eslint to v9.17.0 by @renovate in #1799
  • fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2023.0.4 by @renovate in #1794
  • chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.21.0 by @renovate in #1798
  • fix(deps): update dependency org.thymeleaf.extras:thymeleaf-extras-springsecurity6 to v3.1.3.release by @renovate in #1795
  • chore(deps): update dependency @commitlint/config-conventional to v19.6.0 by @renovate in #1797
  • chore(deps): update module golang.org/x/net to v0.33.0 [security] by @renovate in #1802
  • Update README.md to have collapsible link sections by @commjoen in #1789
  • fix(deps): update dependency org.owasp:dependency-check-maven to v11.1.1 by @renovate in #1793
  • fix(deps): update aws-java-sdk-v2 monorepo to v2.29.39 by @renovate in #1792
  • fix(deps): update dependency org.webjars:datatables to v2.1.8 by @renovate in #1796
  • chore(deps): update docker/dockerfile docker tag to v1.12 by @renovate in #1808
  • chore(deps): update terraform-gcp to ~> 6.14.0 by @renovate in #1813
  • chore(deps): update zaproxy/action-baseline action to v0.14.0 by @renovate in #1814
  • chore(deps): update terraform-aws by @renovate in #1812
  • chore(deps): update terraform azurerm to v4.14.0 by @renovate in #1811
  • chore(deps): update pre-commit by @renovate in #1810
  • chore(deps): update lycheeverse/lychee-action action to v2.2.0 by @renovate in #1809
  • chore(deps): update dependency kubernetes-sigs/aws-alb-ingress-controller to v2.11.0 by @renovate in #1807
  • chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.12.2 by @renovate in #1806
  • chore(deps): update dependency globals to v15.14.0 by @renovate in #1805
  • fix(deps): update aws-java-sdk-v2 monorepo by @renovate in #1804
  • chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.21.1 by @renovate in #1803
  • chore(deps): update dependency @babel/eslint-parser to v7.26.5 by @renovate in #1819
  • Update rule-config.tsv to suppress 90004 by @commjoen in #1827
  • fix(deps): update dependency com.azure.spring:spring-cloud-azure-dependencies to v5.19.0 by @renovate in #1826
  • fix(deps): update aws-java-sdk-v2 monorepo to v2.30.4 by @renovate in #1816
  • fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2023.0.5 by @renovate in #1818
  • chore(deps): update pre-commit by @renovate in #1822
  • chore(deps): update terraform-gcp to ~> 6.17.0 by @renovate in #1825
  • chore(deps): update terraform azurerm to v4.16.0 by @renovate in #1824
  • chore(deps): update terraform-aws by @renovate in #1823
  • fix(deps): update dependency org.linguafranca.pwdb:keepassjava2 to v2.2.3 by @renovate in #1817
  • chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.2 by @renovate in #1820
  • chore(deps): update dependency eslint to v9.18.0 by @renovate in #1821

Full Changelog: 1.10.0...1.10.2

Special Thanks

We would like to thank @commjoen , @bendehaan, @za for their work on this release.

v1.10.0 - Java 23, new challenge, and Renovate

11 Dec 12:25
62026b4
Compare
Choose a tag to compare

What's Changed

Version 1.10.0 introduces a move to Java 23, a new challenge, and Renovate for dependency management. Thanks to all involved for making it happen, notably @Shubham-Patel07 and @commjoen!

New content

Fixes and refactors

LCM

  • build(deps): bump lycheeverse/lychee-action from 2.0.0 to 2.0.1 by @dependabot in #1670
  • build(deps): bump pre-commit-ci/lite-action from 1.0.3 to 1.1.0 by @dependabot in #1669
  • build(deps): bump lycheeverse/lychee-action from 2.0.1 to 2.0.2 by @dependabot in #1671
  • Update to node v22 by @commjoen in #1672
  • build(deps): bump eclipse-temurin from 22.0.2_9-jre-alpine to 23_37-jre-alpine by @dependabot in #1638
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.4 to 3.3.5 by @dependabot in #1683
  • build(deps): bump com.google.cloud:spring-cloud-gcp-dependencies from 5.7.0 to 5.8.0 by @dependabot in #1681
  • build(deps-dev): bump @babel/preset-env from 7.25.8 to 7.26.0 by @dependabot in #1706
  • build(deps-dev): bump @babel/eslint-parser from 7.25.8 to 7.25.9 by @dependabot in #1705
  • build(deps-dev): bump eslint-plugin-cypress from 3.6.0 to 4.1.0 by @dependabot in #1704
  • build(deps-dev): bump globals from 15.9.0 to 15.11.0 in /src/test/K8s-tests by @dependabot in #1703
  • build(deps-dev): bump eslint from 9.11.1 to 9.14.0 in /src/test/K8s-tests by @dependabot in #1709
  • build(deps-dev): bump cypress from 13.15.0 to 13.15.1 in /src/test/K8s-tests by @dependabot in #1702
  • build(deps-dev): bump mocha from 10.7.3 to 10.8.2 in /src/test/K8s-tests by @dependabot in #1701
  • build(deps-dev): bump eslint-plugin-cypress from 3.5.0 to 4.1.0 in /src/test/K8s-tests by @dependabot in #1700
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.1 to 0.47.2 in /gcp by @dependabot in #1698
  • build(deps): bump lycheeverse/lychee-action from 2.0.2 to 2.1.0 by @dependabot in #1711
  • chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.2 by @renovate in #1718
  • chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.10.2 by @renovate in #1714
  • chore(config): migrate renovate config by @renovate in #1724
  • chore(deps): update dependency maven to v3.9.9 by @renovate in #1717
  • chore(deps): update pre-commit hook pre-commit/pre-commit-hooks to v5 by @renovate in #1748
  • chore(deps): update dependency org.asciidoctor:asciidoctor-maven-plugin to v3.1.0 by @renovate in #1733
  • chore(deps): update dependency org.owasp:dependency-check-maven to v11 by @renovate in #1746
  • fix(deps): update dependency org.cyclonedx:cyclonedx-core-java to v9.1.0 by @renovate in #1744
  • chore(deps): update go (major) by @renovate in #1747
  • chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.5.0 by @renovate in #1734
  • chore(deps): update docker/dockerfile docker tag to v1.11 by @renovate in #1736
  • build(deps): bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.5.0 to 3.6.0 by @dependabot in #1676
  • build(deps): bump org.cyclonedx:cyclonedx-core-java from 9.0.5 to 9.1.0 by @dependabot in #1674
  • build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0 by @dependabot in #1685
  • build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.2 to 2.9.0 by @dependabot in #1679
  • build(deps-dev): bump org.testcontainers:testcontainers from 1.20.2 to 1.20.3 by @dependabot in #1688
  • build(deps): bump org.asciidoctor:asciidoctor-maven-plugin from 3.0.0 to 3.1.0 by @dependabot in #1684
  • build(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.4 to 4.8.6.5 by @dependabot in #1689
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.1 to 0.47.2 in /aws by @dependabot in #1697
  • build(deps): bump aws.sdk.version from 2.28.13 to 2.29.8 by @dependabot in #1720
  • build(deps-dev): bump cypress from 13.15.0 to 13.15.1 in /src/test/e2e by @dependabot in #1694
  • build(deps-dev): bump eslint-plugin-cypress from 3.6.0 to 4.1.0 in /src/test/e2e by @dependabot in #1691
  • build(deps-dev): bump mocha from 10.7.3 to 10.8.2 in /src/test/e2e by @dependabot in #1692
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.1 to 0.47.2 in /azure by @dependabot in #1690
  • build(deps): bump com.azure.spring:spring-cloud-azure-dependencies from 5.16.0 to 5.18.0 by @dependabot in #1721
  • build(deps): bump eclipse-temurin from 23_37-jre-alpine to 23.0.1_11-jre-alpine by @dependabot in #1695
  • chore(deps): update pre-commit by @renovate in #1738
  • chore(deps): update go by @renovate in #1737
  • chore(deps): update terraform-aws by @renovate in #1740
  • chore(deps): update terraform aws to v5 by @renovate in #1749
  • chore(deps): update go by @renovate in #1751
  • chore(deps): update go (major) by @renovate in #1752
  • chore(deps): update go (major) by @renovate in #1753
  • chore(deps): update terraform-gcp to ~> 6.10.0 by @renovate in #1741
  • fix(deps): update aws-java-sdk-v2 monorepo to v2.29.9 by @renovate in #1742
  • chore(deps): update dependency eslint to v9.14.0 by @renovate in #1730
  • chore(deps): update terraform azurerm to v4.9.0 by @renovate in #1739
  • chore(deps): update dependency globals to v15.12.0 by @renovate in #1731
  • fix(deps): update dependency org.jruby:jruby-complete to v9.4.9.0 by @renovate in #1728
  • chore(deps): update dependency kubernetes-sigs/aws-alb-ingress-controller to v2.10.0 by @renovate in #1755
  • chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.20.1 by @renovate in #1729
  • chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39.9.2 by @renovate in #1756
  • chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39.9.3 by @renovate in #1757
  • chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39.10.0 by @renovate in #1758
  • chore(deps): update terraform aws to v5.75.1 by @renovate in #1759
  • fix(deps): update dependency software.amazon.awssdk:ssm to v2.29.10 by @renovate in #1761
  • chore(deps): update module cloud.google.com/go/auth to v0.10.2 by @renovate in #1765
  • chore(deps): update terraform-gcp to ~> 6.11.0 by @renovate in #1760
  • chore(deps): update pre-commit hook renovatebot/pre-commit-hooks to v39.11.6 b...
Read more

V1.9.2: AllDayDevOps release!

10 Oct 12:53
03da8cd
Compare
Choose a tag to compare

What's Changed

This is a release full of new content! We actually have 2 new challenges & fix all the CTFD related issues. And all of this to celebrate our talk on ADDO again! After all: this is where we got started!

New content

Bugfixes

  • disable vault challenges in ctf mode for now, and add missing spoiler… by @commjoen in #1656
  • fix for disabled challenges for ctfd data generation by @commjoen in #1662
  • fix difficulty in mapping for api/challenges for juiceshopcli by @commjoen in #1663
  • Fix readme for ctfd by @commjoen in #1664

LCM

  • build(deps): bump org.linguafranca.pwdb:KeePassJava2 from 2.2.1 to 2.2.2 by @dependabot in
  • build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.0 to 2.8.1 by @dependabot in #1608
  • build(deps): bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.4.0 to 3.5.0 by @dependabot in #1607
  • build(deps): bump com.google.cloud:spring-cloud-gcp-dependencies from 5.5.0 to 5.6.0 by @dependabot in #1605
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 in /src/test/e2e by @dependabot in #1604
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 in /src/test/K8s-tests by @dependabot in #1602
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 in /src/test/e2e by @dependabot in #1601
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 by @dependabot in #1600
  • build(deps): bump com.azure.spring:spring-cloud-azure-dependencies from 5.14.0 to 5.15.0 by @dependabot in #1599
  • build(deps-dev): bump mocha from 10.7.0 to 10.7.3 in /src/test/K8s-tests by @dependabot in #1598
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 in /src/test/e2e by @dependabot in #1597
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 by @dependabot in #1595
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /azure by @dependabot in #1594
  • build(deps-dev): bump cypress from 13.13.2 to 13.14.1 in /src/test/K8s-tests by @dependabot in #1593
  • build(deps-dev): bump mocha from 10.7.0 to 10.7.3 in /src/test/e2e by @dependabot in #1592
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /aws by @dependabot in #1591
  • build(deps-dev): bump @babel/preset-env from 7.25.3 to 7.25.4 by @dependabot in #1590
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /gcp by @dependabot in #1589
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 in /src/test/K8s-tests by @dependabot in #1588
  • build(deps-dev): bump cypress from 13.13.2 to 13.14.1 in /src/test/e2e by @dependabot in #1586
  • build(deps): bump org.springframework.vault:spring-vault-core from 3.1.1 to 3.1.2 by @dependabot in #1584
  • build(deps): bump aws.sdk.version from 2.26.28 to 2.27.20 by @dependabot in #1609
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 by @dependabot in #1585
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 in /src/test/K8s-tests by @dependabot in #1583
  • build(deps): bump org.cyclonedx:cyclonedx-core-java from 9.0.4 to 9.0.5 by @dependabot in #1581
  • build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1 by @dependabot in #1580
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.2 to 3.3.3 by @dependabot in #1579
  • build(deps): bump com.puppycrawl.tools:checkstyle from 10.17.0 to 10.18.1 by @dependabot in #1578
  • build(deps): bump asciidoctorj.version from 2.5.13 to 3.0.0 by @dependabot in #1576
  • build(deps): bump pre-commit-ci/lite-action from 1.0.2 to 1.0.3 by @dependabot in #1610
  • build(deps): bump terraform-aws-modules/eks/aws from 20.20.0 to 20.24.0 in /aws by @dependabot in #1606
  • build(deps): bump hashicorp/google-beta from 5.39.1 to 6.0.1 in /gcp by @dependabot in #1596
  • build(deps): bump hashicorp/azurerm from 3.113.0 to 4.0.1 in /azure by @dependabot in #1587
  • build(deps): bump hashicorp/google from 5.39.1 to 6.0.1 in /gcp by @dependabot in #1582
  • build(deps): update terraform-aws-modules/vpc/aws requirement from ~> 5.9.0 to ~> 5.13.0 in /aws by @dependabot in #1577
  • build(deps): bump hashicorp/aws from 5.60.0 to 5.65.0 in /aws by @dependabot in #1603
  • build(deps): bump zaproxy/action-baseline from 0.12.0 to 0.13.0 by @dependabot in #1612
  • build(deps-dev): bump eslint from 9.9.1 to 9.11.1 in /src/test/K8s-tests by @dependabot in #1641
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 in /src/test/K8s-tests by @dependabot in #1640
  • build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.8.2 by @dependabot in #1633
  • build(deps-dev): bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.5 to 3.12.0 by @dependabot in #1635
  • build(deps-dev): bump io.github.wimdeblauwe:testcontainers-cypress from 1.9.0 to 1.9.1 by @dependabot in #1637
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.3.1 to 3.5.0 by @dependabot in #1575
  • build(deps): bump aws.sdk.version from 2.27.20 to 2.28.13 by @dependabot in #1650
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /aws by @dependabot in #1648
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /aws by @dependabot in #1646
  • build(deps): bump hashicorp/aws from 5.65.0 to 5.69.0 in /aws by @dependabot in #1645
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /azure by @dependabot in #1644
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /azure by @dependabot in #1643
  • build(deps): bump hashicorp/azurerm from 4.0.1 to 4.3.0 in /azure by @dependabot in #1642
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /gcp by @dependabot in #1618
  • build(deps): bump hashicorp/google-beta from 6.0.1 to 6.5.0 in /gcp by @dependabot in #1617
  • build(deps): bump hashicorp/google from 6.0.1 to 6.5.0 in /gcp by @dependabot in #1616
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /gcp by @dependabot in #1615
  • build(deps): bump terraform-aws-modules/eks/aws from 20.24.0 to 20.24.2 in /aws by @dependabot in #1647
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 in /src/test/e2e by @dependabot in #1620
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.3 to 3.3.4 by @dependabot in #1624
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 by @dependabot in #1622
  • build(deps-dev): bump cypress from 13.14.1 to 13.15.0 in /src/test/K8s-tests by @dependabot in #1639
  • b...
Read more

v1.9.1: LCM release

09 Aug 09:19
Compare
Choose a tag to compare

What's Changed

This is an LCM update, where we mostly update dependencies in order to keep the code base fresh.

Small Changes and fixes

LCM

  • update node version by @commjoen in #1522
  • update version of dependency check by @commjoen in #1523
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /azure by @dependabot in #1563
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /aws by @dependabot in #1562
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 in /src/test/K8s-tests by @dependabot in #1561
  • build(deps-dev): bump cypress from 13.13.0 to 13.13.2 in /src/test/K8s-tests by @dependabot in #1560
  • build(deps): bump com.google.cloud:spring-cloud-gcp-dependencies from 5.4.3 to 5.5.0 by @dependabot in #1556
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 in /src/test/K8s-tests by @dependabot in #1558
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 in /src/test/K8s-tests by @dependabot in #1557
  • build(deps): bump eclipse-temurin from 22.0.1_8-jre-alpine to 22.0.2_9-jre-alpine by @dependabot in #1555
  • build(deps-dev): bump mocha from 10.6.0 to 10.7.0 in /src/test/K8s-tests by @dependabot in #1559
  • build(deps): bump com.azure.spring:spring-cloud-azure-dependencies from 5.13.0 to 5.14.0 by @dependabot in #1554
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /gcp by @dependabot in #1547
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 by @dependabot in #1546
  • build(deps-dev): bump org.testcontainers:testcontainers from 1.19.8 to 1.20.1 by @dependabot in #1553
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.1 to 3.3.2 by @dependabot in #1550
  • build(deps): bump org.springframework.cloud:spring-cloud-dependencies from 2023.0.2 to 2023.0.3 by @dependabot in #1549
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 in /src/test/K8s-tests by @dependabot in #1567
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 in /src/test/K8s-tests by @dependabot in #1566
  • build(deps-dev): bump @babel/preset-env from 7.24.7 to 7.25.3 by @dependabot in #1565
  • build(deps): bump aws.sdk.version from 2.26.16 to 2.26.28 by @dependabot in #1564
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.3.0 to 3.3.1 by @dependabot in #1548
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 by @dependabot in #1544
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 by @dependabot in #1543
  • build(deps-dev): bump @babel/eslint-parser from 7.24.7 to 7.25.1 by @dependabot in #1545
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 by @dependabot in #1542
  • build(deps): bump minimatch from 9.0.5 to 10.0.1 in /js by @dependabot in #1539
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 in /src/test/e2e by @dependabot in #1532
  • build(deps-dev): bump mocha from 10.6.0 to 10.7.0 in /src/test/e2e by @dependabot in #1528
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 by @dependabot in #1568
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 in /src/test/e2e by @dependabot in #1530
  • build(deps): bump hashicorp/google-beta from 5.36.0 to 5.39.1 in /gcp by @dependabot in #1533
  • build(deps): bump hashicorp/aws from 5.57.0 to 5.60.0 in /aws by @dependabot in #1534
  • build(deps): bump hashicorp/google from 5.36.0 to 5.39.1 in /gcp by @dependabot in #1536
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /aws by @dependabot in #1537
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /gcp by @dependabot in #1538
  • build(deps): bump hashicorp/azurerm from 3.111.0 to 3.113.0 in /azure by @dependabot in #1540
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /azure by @dependabot in #1541
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 in /src/test/e2e by @dependabot in #1569
  • build(deps): bump terraform-aws-modules/eks/aws from 20.17.2 to 20.20.0 in /aws by @dependabot in #1535
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 in /src/test/e2e by @dependabot in #1531
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 in /src/test/e2e by @dependabot in #1529
  • build(deps-dev): bump cypress from 13.13.0 to 13.13.2 in /src/test/e2e by @dependabot in #1570
  • build(deps): bump org.webjars:datatables from 2.0.7 to 2.1.0 by @dependabot in #1552
  • updated node and removed line of todo we will no longer do by @commjoen in #1571

Full Changelog: 1.9.0...1.9.1

1.9.0: K8s 1.30, no Consul, Java 22, new challenges and automation leaps

08 Jul 18:10
Compare
Choose a tag to compare

What's Changed

This version is another new content & LCM release: we've added a cool and exciting challenge about Kubernetes Sealed Secrets! We upgraded to K8s 1.30, removed our dependency on Consul (less resources required to play!), and added a lot of automation to see if everything works the way it should. Next, we started compiling everything for Java 22. In other words: time for a big version bump!

New Challenges

Fixes

LCM

  • Bump org.webjars:datatables from 1.13.5 to 2.0.3 by @dependabot in #1350
  • Bump hashicorp/google-beta from 5.25.0 to 5.27.0 in /gcp by @dependabot in #1371
  • Bump hashicorp/google from 5.25.0 to 5.27.0 in /gcp by @dependabot in #1372
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.7.0 to ~> 5.8.1 in /aws by @dependabot in #1376
  • Bump hashicorp/aws from 5.45.0 to 5.47.0 in /aws by @dependabot in #1375
  • Bump hashicorp/aws from 5.45.0 to 5.47.0 in /aws by @dependabot in #1379
  • Bump eclipse-temurin from 22_36-jre-alpine to 22.0.1_8-jre-alpine by @dependabot in #1374
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.7.0 to ~> 5.8.1 in /aws by @dependabot in #1381
  • Bump hashicorp/azurerm from 3.99.0 to 3.101.0 in /azure by @dependabot in #1373
  • Bump aws.sdk.version from 2.25.40 to 2.25.42 by @dependabot in #1377
  • Bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 by @dependabot in #1378
  • Bump org.jruby:jruby-complete from 9.4.6.0 to 9.4.7.0 by @dependabot in #1382
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.1 to 3.11.2 by @dependabot in #1380
  • Bump globals from 15.0.0 to 15.1.0 by @dependabot in #1383
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 by @dependabot in #1385
  • Bump eslint-plugin-cypress from 2.15.2 to 3.0.2 in /src/test/e2e by @dependabot in #1388
  • Bump cypress from 13.7.3 to 13.8.1 in /src/test/e2e by @dependabot in #1391
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 in /src/test/e2e by @dependabot in #1390
  • Bump cypress from 13.7.3 to 13.8.1 in /src/test/K8s-tests by @dependabot in #1395
  • Bump eslint-plugin-jest from 28.2.0 to 28.5.0 in /src/test/e2e by @dependabot in #1401
  • Bump eslint-plugin-jest from 28.2.0 to 28.3.0 in /src/test/K8s-tests by @dependabot in #1393
  • Bump eslint-plugin-jest from 28.2.0 to 28.5.0 by @dependabot in #1400
  • Bump @eslint/js from 9.0.0 to 9.2.0 by @dependabot in #1399
  • Bump eslint-plugin-jest from 28.3.0 to 28.5.0 in /src/test/K8s-tests by @dependabot in #1402
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 in /src/test/K8s-tests by @dependabot in #1396
  • Bump eslint-plugin-cypress from 2.15.2 to 3.1.1 in /src/test/K8s-tests by @dependabot in #1404
  • Bump requests from 2.31.0 to 2.32.0 in /scripts/sort_contibutors by @dependabot in #1406
  • Bump eslint from 8.57.0 to 9.3.0 by @dependabot in #1398
  • Bump cypress from 13.8.1 to 13.10.0 in /src/test/K8s-tests by @dependabot in #1413
  • Bump eslint from 9.3.0 to 9.4.0 in /src/test/K8s-tests by @dependabot in #1415
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 in /src/test/K8s-tests by @dependabot in #1414
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 by @dependabot in #1424
  • Bump cypress from 13.8.1 to 13.10.0 in /src/test/e2e by @dependabot in #1443
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 in /src/test/e2e by @dependabot in #1440
  • Bump org.codehaus.mojo:tidy-maven-plugin from 1.2.0 to 1.3.0 by @dependabot in #1436
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 in /src/test/e2e by @dependabot in #1438
  • Bump eslint from 9.3.0 to 9.4.0 by @dependabot in #1426
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 in /src/test/K8s-tests by @dependabot in #1416
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 by @dependabot in #1420
  • Bump eslint from 9.3.0 to 9.4.0 in /src/test/e2e by @dependabot in #1432
  • Bump @babel/preset-env from 7.24.5 to 7.24.6 by @dependabot in #1422
  • Bump @babel/eslint-parser from 7.24.5 to 7.24.6 by @dependabot in #1421
  • Bump org.cyclonedx:cyclonedx-core-java from 8.0.3 to 9.0.2 by @dependabot in #1434
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.2 to 3.11.3 by @dependabot in #1447
  • Bump io.gatling:gatling-maven-plugin from 4.9.0 to 4.9.1 by @dependabot in #1444
  • Bump hashicorp/google from 5.27.0 to 5.31.1 in /gcp by @dependabot in #1417
  • Bump hashicorp/google-beta from 5.27.0 to 5.31.1 in /gcp by @dependabot in #1418
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /gcp by @dependabot in #1419
  • Bump hashicorp/azurerm from 3.101.0 to 3.106.1 in /azure by @dependabot in #1429
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /azure by @dependabot in #1433
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /aws by @dependabot in #1435
  • Bump hashicorp/aws from 5.47.0 to 5.52.0 in /aws by @dependabot in #1448
  • Bump terraform-aws-modules/eks/aws from 20.8.5 to 20.13.0 in /aws by @dependabot in #1437
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.4.0 to 4.8.5.0 by @dependabot in #1423
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in #1442
  • Bump aws.sdk.version from 2.25.42 to 2.25.64 by @dependabot in #1439
  • Bump com.github.spotbugs:spotbugs-annotations from 4.8.4 to 4.8.5 by @dependabot in #1431
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.11.0 to 5.12.0 by @dependabot in #1445
  • Bump org.springframework.cloud:spring-cloud-dependencies from 2023.0.1 to 2023.0.2 by @dependabot in #1430
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.1.2 to 5.4.1 by @dependabot in #1425
  • Bump com.puppycrawl.tools:checkstyle from 10.16.0 to 10.17.0 by @dependabot in #1427
  • Bump asciidoctorj.version from 2.5.12 to 2.5.13 by @dependabot in #1428
  • Bump urllib3 from 2.2.1 to 2.2.2 in /scripts/sort_contibutors by @dependabot in #1451
  • Bump org.cyclonedx:cyclonedx-core-java from 9.0.2 to 9.0.4 by @dependabot in #1453
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.5 to 3.3.0 by @dependabot in #1446
  • Bump github.com/hashicorp/go-get...
Read more

1.8.5: Java 22, challenge fixes, automation, and textual updates

29 Apr 23:38
Compare
Choose a tag to compare

What's Changed

This version is a big LCM release, where we upgraded to Java22, and made a lot of the challenges easier to read. On top of that we extended the end2end tests a lot and made them part of our automations, in order to catch bugs faster.

Fixes

Java 22

  • First version of java 22 moving back to temurin alpine by @commjoen in #1281

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /gcp by @dependabot in #1278

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /azure by @dependabot in #1277

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /aws by @dependabot in #1276

  • Bump hashicorp/google from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1296

  • Bump hashicorp/azurerm from 3.94.0 to 3.97.1 in /azure by @dependabot in #1292

  • Bump terraform-aws-modules/eks/aws from 20.5.0 to 20.8.4 in /aws by @dependabot in #1295

  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.5.1 to ~> 5.7.0 in /aws by @dependabot in #1294

  • Bump hashicorp/google-beta from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1289

  • Bump aws.sdk.version from 2.25.20 to 2.25.21 by @dependabot in #1283

  • Bump @commitlint/config-conventional from 19.0.3 to 19.1.0 by @dependabot in #1287

  • Bump com.puppycrawl.tools:checkstyle from 10.14.0 to 10.15.0 by @dependabot in #1298

  • Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.11 to 2.8.0 by @dependabot in #1288

  • Bump terraform-aws-modules/eks/aws from 20.5.0 to 20.8.4 in /aws by @dependabot in #1304

  • Bump hashicorp/azurerm from 3.94.0 to 3.97.1 in /azure by @dependabot in #1301

  • Bump hashicorp/google-beta from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1300

  • Bump hashicorp/google from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1299

  • Bump hashicorp/aws from 5.39.1 to 5.43.0 in /aws by @dependabot in #1293

  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.5.1 to ~> 5.7.0 in /aws by @dependabot in #1303

  • Bump asciidoctorj.version from 2.5.11 to 2.5.12 by @dependabot in #1284

  • Bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.3.0 to 2.5.0 by @dependabot in #1305

  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.4 to 5.1.2 by @dependabot in #1290

  • Bump zaproxy/action-baseline from 0.11.0 to 0.12.0 by @dependabot in #1311

  • Bump minimatch from 9.0.3 to 9.0.4 in /js by @dependabot in #1285

  • Bump idna from 3.4 to 3.7 in /scripts/sort_contibutors by @dependabot in #1312

  • Bump azure/setup-helm from 3.5 to 4 by @dependabot in #1313

  • Bump colima plugin by @commjoen in #1317

  • Bump eslint-plugin-cypress from 2.15.1 to 2.15.2 in /src/test/e2e by @dependabot in #1342

  • Bump @commitlint/config-conventional from 18.6.3 to 19.2.2 in /src/test/K8s-tests by @dependabot in #1341

  • Bump eslint-plugin-cypress from 2.15.1 to 2.15.2 by @dependabot in #1340

  • Bump @commitlint/config-conventional from 18.6.0 to 19.2.2 in /src/test/e2e by @dependabot in #1338

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /aws by @dependabot in #1351

  • Bump terraform-aws-modules/eks/aws from 20.8.4 to 20.8.5 in /aws by @dependabot in #1349

  • Bump hashicorp/aws from 5.43.0 to 5.45.0 in /aws by @dependabot in #1348

  • Bump hashicorp/azurerm from 3.97.1 to 3.99.0 in /azure by @dependabot in #1347

  • Bump hashicorp/google-beta from 5.22.0 to 5.25.0 in /gcp by @dependabot in #1346

  • Bump hashicorp/google from 5.22.0 to 5.25.0 in /gcp by @dependabot in #1339

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /gcp by @dependabot in #1328

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /azure by @dependabot in #1327

  • Bump eslint-plugin-jest from 27.6.3 to 28.2.0 in /src/test/e2e by @dependabot in #1330

  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.8.4.0 by @dependabot in #1344

  • Bump eslint-plugin-jest from 27.9.0 to 28.2.0 in /src/test/K8s-tests by @dependabot in #1336

  • Bump aws.sdk.version from 2.25.21 to 2.25.31 by @dependabot in #1329

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/e2e by @dependabot in #1345

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 by @dependabot in #1343

  • Bump mocha from 10.3.0 to 10.4.0 in /src/test/e2e by @dependabot in #1333

  • Bump eslint-plugin-jest from 27.9.0 to 28.2.0 by @dependabot in #1331

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/K8s-tests by @dependabot in #1326

  • Bump com.github.spotbugs:spotbugs-annotations from 4.8.3 to 4.8.4 by @dependabot in #1337

  • Bump com.github.spotbugs:spotbugs from 4.8.3 to 4.8.4 by @dependabot in #1334

  • Bump eslint from 8.56.0 to 8.57.0 in /src/test/e2e by @dependabot in #1355

  • Bump cypress from 13.6.4 to 13.7.3 in /src/test/e2e by @dependabot in #1354

  • Bump mocha from 10.3.0 to 10.4.0 in /src/test/e2e by @dependabot in #1353

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/e2e by @dependabot in #1352

  • Bump com.tngtech.archunit:archunit-junit5 from 1.2.1 to 1.3.0 by @dependabot in #1332

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /gcp by @dependabot in #1356

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /azure by @dependabot in #1357

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /aws by @dependabot in #1358

  • Bump @commitlint/config-conventional from 19.1.0 to 19.2.2 by @dependabot in #1335

  • Bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 by @dependabot in #1363

  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.4 to 3.2.5 by @dependabot in #1367

  • Bump aws.sdk.version fro...

Read more

1.8.4: LCM and bugfixes

05 Mar 21:41
257bb05
Compare
Choose a tag to compare

What's Changed

Bugfixes and Improvements

LCM

  • Bump hashicorp/google from 5.13.0 to 5.14.0 in /gcp by @dependabot in #1234
  • Bump hashicorp/google-beta from 5.13.0 to 5.14.0 in /gcp by @dependabot in #1233
  • Bump pre-commit-ci/lite-action from 1.0.1 to 1.0.2 by @dependabot in #1237
  • Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in #1238
  • Bump flat and mocha in /src/test/e2e by @dependabot in #1241
  • Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0 by @dependabot in #1246
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.10.3 to 3.10.4 by @dependabot in #1247
  • Bump com.puppycrawl.tools:checkstyle from 10.13.0 to 10.14.0 by @dependabot in #1250
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.0 to 4.8.3.1 by @dependabot in #1255
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.2 to 3.2.3 by @dependabot in #1248
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0 by @dependabot in #1269
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.8.0 to 5.9.1 by @dependabot in #1249
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /azure by @dependabot in #1268
  • Bump hashicorp/azurerm from 3.89.0 to 3.94.0 in /azure by @dependabot in #1267
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /aws by @dependabot in #1266
  • Bump hashicorp/google from 5.14.0 to 5.18.0 in /gcp by @dependabot in #1264
  • Bump hashicorp/google-beta from 5.14.0 to 5.18.0 in /gcp by @dependabot in #1263
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /gcp by @dependabot in #1259
  • Bump terraform-aws-modules/eks/aws from 19.21.0 to 20.5.0 in /aws by @dependabot in #1258
  • Bump hashicorp/aws from 5.34.0 to 5.39.0 in /aws by @dependabot in #1265
  • Bump @commitlint/config-conventional from 18.6.0 to 19.0.3 by @dependabot in #1262
  • Bump org.jruby:jruby-complete from 9.4.5.0 to 9.4.6.0 by @dependabot in #1251
  • Bump aws.sdk.version from 2.23.15 to 2.25.0 by @dependabot in #1252
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.1 to 5.0.4 by @dependabot in #1256
  • Bump eslint-plugin-jest from 27.6.3 to 27.9.0 by @dependabot in #1261
  • Bump eslint from 8.56.0 to 8.57.0 by @dependabot in #1260
  • Bump io.gatling:gatling-maven-plugin from 4.7.0 to 4.8.2 by @dependabot in #1257
  • Bump org.webjars:bootstrap from 5.3.2 to 5.3.3 by @dependabot in #1254
  • Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.5 to 3.0.0 by @dependabot in #1253

New Contributors

Full Changelog: 1.8.3...1.8.4

Special Thanks

Special thanks to @Shubham-Patel07 , @bendehaan , @za , @nbaars , @commjoen for their hard work on this release!

1.8.3: last vault challenge and LCM

04 Feb 09:02
eb9d9c3
Compare
Choose a tag to compare

What's Changed

Bugfixes, improvements, and docs:

  • Fix typo on Vaultpassword.java by @za in #1190
  • attempt to fix surefire perm issue for non fork by @commjoen in #1197
  • Update readme with contributors and more by @commjoen in #1194
  • Issue 1193: update trufflehog command on the challenge 1 hint doc by @za in #1195
  • Sort alphabetically while importing Python modules by @za in #1199
  • Format Python script using Black formatter by @za in #1202
  • Update main.yml to no longer contain test uploads to the PR by @commjoen in #1226

New challenges:

LCM:

  • Bump actions/cache from 3 to 4 by @dependabot in #1192
  • Bump zaproxy/action-baseline from 0.10.0 to 0.11.0 by @dependabot in #1203
  • Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.10 to 2.7.11 by @dependabot in #1204
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.1 to 3.2.2 by @dependabot in #1205
  • Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.4 to 2.2.5 by @dependabot in #1207
  • Bump org.springframework.vault:spring-vault-core from 3.1.0 to 3.1.1 by @dependabot in #1212
  • Update main.yml to fix #1198 by @commjoen in #1223
  • Bump eslint-plugin-jest from 27.6.0 to 27.6.3 by @dependabot in #1209
  • Bump uk.org.webcompere:system-stubs-jupiter from 2.1.5 to 2.1.6 by @dependabot in #1206
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.0 to 5.0.1 by @dependabot in #1208
  • Bump @commitlint/config-conventional from 18.4.3 to 18.6.0 by @dependabot in #1211
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.2.0 to 4.8.3.0 by @dependabot in #1215
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.3 to 3.2.5 by @dependabot in #1216
  • Bump com.diffplug.spotless:spotless-maven-plugin from 2.41.1 to 2.43.0 by @dependabot in #1217
  • Bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 by @dependabot in #1227
  • Bump eLco/setup-vault from 1.0.2 to 1.0.3 by @dependabot in #1225
  • Bump amazoncorretto from 21.0.1-alpine to 21.0.2-alpine by @dependabot in #1222
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.4.0 to ~> 5.5.1 in /aws by @dependabot in #1221
  • Bump hashicorp/aws from 5.31.0 to 5.34.0 in /aws by @dependabot in #1220
  • Bump hashicorp/google-beta from 5.10.0 to 5.13.0 in /gcp by @dependabot in #1218
  • Bump hashicorp/google from 5.10.0 to 5.13.0 in /gcp by @dependabot in #1213
  • Bump hashicorp/azurerm from 3.85.0 to 3.89.0 in /azure by @dependabot in #1219
  • Bump com.puppycrawl.tools:checkstyle from 10.12.7 to 10.13.0 by @dependabot in #1231
  • Bump eslint-plugin-n from 16.6.0 to 16.6.2 by @dependabot in #1214
  • Bump aws.sdk.version from 2.22.9 to 2.23.15 by @dependabot in #1232

Full Changelog: 1.8.2...1.8.3

Special thanks

Special thanks to @za , @commjoen , @bendehaan and @nwolniak for their hard work on this release!

1.8.2: 2 new challenges! Open Security Summit Release

16 Jan 11:35
2dbf619
Compare
Choose a tag to compare

What's Changed

Full Changelog: 1.8.1...1.8.2

Special Thanks

Thanks to @nbaars , @commjoen , and @bendehaan for their hard work on this release

1.8.1: Challenge 43 and other updates

13 Jan 19:47
7a31ff5
Compare
Choose a tag to compare

What's Changed

Improvements and bug fixes

New challenges

  • Challenge 43: new challenge for secret shared on social media. by @djvinnie in #1144

Documentation

  • Update main.py: give Nanne a special recognition for his work on the … by @commjoen in #1148

Goodbye Okteto

LCM

Special Thanks

Special thanks to @nbaars , @djvinnie , @bendehaan , and @commjoen for their hard work on this release!

Full Changelog: 1.8.0...1.8.1