krakend-ce

What's Changed

• bump version 2.6.2 by @kpacha in https://github.com/krakend/krakend-ce/pull/874

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.6.1...v2.6.2

What's Changed

• Fixed typo in makefile target. by @arambau-wgfs in https://github.com/krakend/krakend-ce/pull/863
• Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in https://github.com/krakend/krakend-ce/pull/860
• deps: update go to 1.22.2 by @ALX99 in https://github.com/krakend/krakend-ce/pull/870
• Bump v2.6.1 by @kpacha in https://github.com/krakend/krakend-ce/pull/866

New Contributors

• @arambau-wgfs made their first contribution in https://github.com/krakend/krakend-ce/pull/863
• @ALX99 made their first contribution in https://github.com/krakend/krakend-ce/pull/870

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.6.0...v2.6.1

What's Changed

• GH-Actions: save the generated artifacts in the cache by @taik0 in https://github.com/krakend/krakend-ce/pull/841
• Pass the application context and the execution context to the modifie… by @taik0 in https://github.com/krakend/krakend-ce/pull/848
• Update deps by @kpacha in https://github.com/krakend/krakend-ce/pull/849
• Update Dockerfile by @kpacha in https://github.com/krakend/krakend-ce/pull/845
• Add a command to test plugin compatibility with the krakend binary by @kpacha in https://github.com/krakend/krakend-ce/pull/851
• Fix move otel to metrics and traces register by @dhontecillas in https://github.com/krakend/krakend-ce/pull/854
• Krakend OTEL by @dhontecillas in https://github.com/krakend/krakend-ce/pull/839

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.5.1...v2.6.0

What's Changed

• Update go version to 1.20.13 and lura to 2.5.0. by @taik0 in https://github.com/krakend/krakend-ce/pull/840

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.5.0...v2.5.1

What's Changed

• Bump github.com/nats-io/nats-server/v2 from 2.7.4 to 2.9.23 by @dependabot in https://github.com/krakend/krakend-ce/pull/802
• Bump google.golang.org/grpc from 1.53.0 to 1.56.3 by @dependabot in https://github.com/krakend/krakend-ce/pull/806
• Bump github.com/nats-io/nkeys from 0.4.4 to 0.4.6 by @dependabot in https://github.com/krakend/krakend-ce/pull/810
• do not overwrite schema url that is built inside cobra library by @dhontecillas in https://github.com/krakend/krakend-ce/pull/815
• Bump version 2.5.0 by @kpacha in https://github.com/krakend/krakend-ce/pull/814
• Updated packages: lura, krakend-cobra, krakend-flexibleconfig, krakend-ratelimit, krakend-jose, krakend-amqp.

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.4.6...v2.5.0

What's Changed

• fix reported version by @kpacha in https://github.com/krakend/krakend-ce/pull/797

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.4.5...v2.4.6

What's Changed

• Bump golang.org/x/net from 0.10.0 to 0.17.0 by @dependabot in https://github.com/krakend/krakend-ce/pull/795

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.4.4...v2.4.5

What's Changed

• improve error message when received body is empty by @dhontecillas in https://github.com/krakend/krakend-ce/pull/775
• add next extra tests for test case by @dhontecillas in https://github.com/krakend/krakend-ce/pull/777
• CVE-2023-39325 by @kpacha in https://github.com/krakend/krakend-ce/pull/794

Full Changelog: https://github.com/krakend/krakend-ce/compare/v2.4.3...v2.4.4

What's Changed

• Dev 2.4.3 by @taik0 in https://github.com/krakendio/krakend-ce/pull/764

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.4.2...v2.4.3

What's Changed

• Bump google.golang.org/grpc from 1.51.0 to 1.53.0 by @dependabot in https://github.com/krakendio/krakend-ce/pull/754
• v2.4.2 bumped by @kpacha in https://github.com/krakendio/krakend-ce/pull/758

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.4.1...v2.4.2

What's Changed

• Remove old ratelimit alias so the middleware can be activated with t… by @taik0 in https://github.com/krakendio/krakend-ce/pull/750

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.4.0...v2.4.1

What's Changed

• Update to krakend-lua v2.1.1 by @dhontecillas in https://github.com/krakendio/krakend-ce/pull/745
• Update the krakend-ratelimit package from juju to our own implementation.
• Bump github.com/gin-gonic/gin from 1.9.0 to 1.9.1 by @dependabot in https://github.com/krakendio/krakend-ce/pull/741
• Add license scan report and status by @fossabot in https://github.com/krakendio/krakend-ce/pull/661

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.3.3...v2.4.0

What's Changed

• Make default backend builder public so it can be reused by @dhontecillas in https://github.com/krakendio/krakend-ce/pull/726
• XML: escape special chars by @kpacha in https://github.com/krakendio/krakend-ce/pull/728
• Add integration tests composable backend builder by @dhontecillas in https://github.com/krakendio/krakend-ce/pull/730
• Fixing glibc detection on macOS by @dschanoeh in https://github.com/krakendio/krakend-ce/pull/732
• Update to apline-3.18 based image to mitigate SSL3 CVE-2023-1255 by @ksylvan in https://github.com/krakendio/krakend-ce/pull/735
• upgrade to krakend-lua v2.1.0 by @kpacha in https://github.com/krakendio/krakend-ce/pull/736
• upgrade to krakend-cobra v2.2.0 by @kpacha in https://github.com/krakendio/krakend-ce/pull/737

New Contributors

• @dschanoeh made their first contribution in https://github.com/krakendio/krakend-ce/pull/732
• @ksylvan made their first contribution in https://github.com/krakendio/krakend-ce/pull/735

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.3.2...v2.3.3

What's Changed

• Fix build flags by @taik0 in https://github.com/krakendio/krakend-ce/pull/723
• JOSE: upgrade to v2.2.2
• Use go1.20.4

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.3.1...v2.3.2

What's Changed

• [bugfix] The deny attribute did not work on the third nesting level and above.
• [bugfix] The new tls_client attribute was not yet used in the connections

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.3.0...v2.3.1

What's Changed

New features:

• [feature] AMQP consumers and producers offer now retries with several backoff strategies.
• [feature] Downloading of JWK URLs uses now global caching (reused between endpoints)
• [feature] KrakenD Designer can now apply changes on a local KrakenD directly from the web. Say whaaaat?
• [feature] New /__echo/ endpoint, to dump requests from users and test functionality.
• [feature] Added h2c protocol (clear text HTTP/2), in addition to the already supported HTTP/2 over TLS
• [feature] Add new TLS settings for the internal HTTP client (tls_client)
• [security] The underlying Go version has been upgraded to 1.20.3 which includes security fixes to crypto packages.
• [security] The audit rules add more security recommendations.

Relevant fixes:

• [bugfix] (Lura Project) Default router behavior changing when the router configuration is present
• [bugfix] The prefetch_size on AMQP flag was never implemented, and it has been removed from the configuration
• [bugfix] The prefetch_count has been removed from AMQP producers as it only makes sense in a consumer scenarioq

New Contributors

• @dhontecillas made their first contribution in https://github.com/krakendio/krakend-ce/pull/712

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.2.1...v2.3.0

What's Changed

• [bugfix] Fixed memory leak on Shadow Proxies when the response wasn't a 200
• [bugfix] Fixed audit command that would still warn on some fixed issues

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.2.0...v2.2.1

New features:

• [feature] The krakend audit command.
• [feature] The Flexible Configuration component upgrades Sprig from v2 to v3. This has changes in the way ^ is handled. Some of the new functions available are fromJson, addf, maxf, mulf, osBase, osDir, osExt, osClean, or osIsAbs. It also documents how to use yaml or toml to write configurations using FC.
• [feature] The Jaeger exporter now supports the UDP protocol to post traces to a Jaeger-agent.
• [feature] The Bot Detector adds the flag empty_user_agent_is_bot to define empty user agent treatment.
• [feature] The OpenCensus exporters add new logging capabilities and more debugging information.
• [feature] Improvements on the JWT validator:
  • Extraction of JSON from paths in JWT claims has been improved
  • JWT is now more restrictive, and fallbacks to returning 401 error codes with incorrect configurations.
  • The JWK URL downloads from your identity server include now a KrakenD-specific user agent.

Relevant fixes:

• [bugfix] When you were loading multiple plugins, and one of them failed, the gateway did not load the rest. Now the sequence will continue excluding the failing one.
• [bugfix] Older Docker images raised false positives when performing security scans due to an unused but included library (Thrift server). This library is no longer in the code.

New Contributors

• @JAORMX made their first contribution in https://github.com/krakendio/krakend-ce/pull/650

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.1.4...v2.2.0

What's Changed

The new KrakenD version 2.1.4 is now available. This patch version does not bring significant new functionality but updates dependencies that have security vulnerabilities and adds a few fixes:

• [security]: Upgrade from Go 1.19.3 to Go 1.19.5, which includes security fixes to the net/http, crypto/x509, and os packages amongst others.
• [fix]: Caching backends with gzipped content wasn't working properly
• [fix]: Upgraded the gin router to avoid panics on certain 404 paths.
• [fix]: Improve render selection when negotiating XML content
• [feature]: Add the content-type header when returning errors
• [update]: lura upgraded to v2.2.3

Upgrade to the latest version is always advised.

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.1.3...v2.1.4

What's Changed

• Architectures: Now officially supporting ARM64 architectures, releasing new Docker containers and packages.
• A new flag, hide_version_header, placed in the router settings, allows obfuscating the X-Krakend-Version header.
• Performance improvement on Lambda usage
• Bugfix: Return a 400 status code when the body is empty or a malformed JSON (thanks to @efcasado)
• Bugfix: Reject requests with special chars in the params (@Lura)

Full Changelog: https://github.com/krakendio/krakend-ce/compare/v2.1.2...v2.1.3