Bugfixes

Send CLI headers on default HTTP handler (#554)

Binaries

I've attached binaries that I've managed to cross-compile without problems.

MD5 checksums

9eeb4e698b7a7e142e3cd63371fd59e2  webhook-darwin-amd64.tar.gz
24984c7bda05c31c4a72d5503e6af0a4  webhook-darwin-arm64.tar.gz
10ed4807876c66bbd39e080158baef8a  webhook-freebsd-386.tar.gz
5dce952364f379a4fe153a26b045d94a  webhook-freebsd-amd64.tar.gz
75f14e4337b6dfcb1841de05abebaa79  webhook-freebsd-arm64.tar.gz
1fbb879c8d5967e27b65d49131c2590b  webhook-freebsd-arm.tar.gz
e5e526d6b393e3101db76c655f537883  webhook-linux-386.tar.gz
861381a4c3b8b485b56665d9196978d8  webhook-linux-amd64.tar.gz
f08523e12dcb5189306badf224003a79  webhook-linux-arm64.tar.gz
eaad58b6b1fddc3c412161074da9a3d6  webhook-linux-arm.tar.gz
af63d022efce78685118c9100d6dde29  webhook-openbsd-386.tar.gz
50d7f02869421c1e039c65a64e8de3ee  webhook-openbsd-amd64.tar.gz
c388aefac25caa754c8c82eec4595876  webhook-openbsd-arm64.tar.gz
71e25f1df260f91d79b296e8a027c467  webhook-openbsd-arm.tar.gz
0e32a28857e7c4bde1d286ebea14585a  webhook-windows-386.tar.gz
0abac709bf6addf2c0b80bb7c979d092  webhook-windows-amd64.tar.gz
8cb5996e47eeb5ddbd38dbe2f604f6ec  webhook-windows-arm.tar.gz

Enhancements

• Add option to send raw request body to command (#486)
• Add soft signature failure support (#485)
• Add support for slashes in hook IDs (#484)
• Add request source (#479)
• Transition payload hash option names to hmac (#461)
• Return JSON format when referenced value is not a simple type enhancement (#448)
• Update ExtractParameterAsString to return JSON on complex types (#449)
• Add support for top-level JSON array in payload (#446)

Bugfixes

• Fix OrRule logic on parameter lookup failures (#472)
• Log stdlib error on failed exec.LookPath (#460)
• Bugfix/require go14 (#445)
• Tighten file permissions on pidfile creation (#431)
• Fix request dumper (#426)

Internal & Documentation updates

• Add string parameter example to docs (#489)
• Move some request parsing into hook package (#477)
• Document YAML support (#463)
• Add Request object to hook package to simplify API proposal (#462)
• Add a table of contents to some of the docs (#447)

Binaries

I've attached binaries that I've managed to cross-compile without problems.

MD5 checksums

d034baac6741fe0b0914cc933231475f  webhook-windows-386.tar.gz
0b5895ce6b721c151e5a7ba499c3092a  webhook-windows-amd64.tar.gz
128e9d0ae6b6859bd5fc78b4cdfa6870  webhook-windows-arm.tar.gz
7eb1170ace3d022fcde0afc6ede4293a  webhook-darwin-386.tar.gz
cb663f8737f6d37f0cfc8c807a82c461  webhook-darwin-amd64.tar.gz
7c6ced117b7fd8b3796f36e18375f8f3  webhook-freebsd-386.tar.gz
85bdebd6e3ff2c4ce887e80d93e14980  webhook-freebsd-amd64.tar.gz
2702575c0a6b0850ce58feb1df1d9c4c  webhook-freebsd-arm64.tar.gz
27088b17d4492bf66c76f0841fb9b7bf  webhook-freebsd-arm.tar.gz
31d002e9fdd2e01c87c58cc7f11e4ebf  webhook-linux-386.tar.gz
62ab801c7337a8b83de8d6ae8d7ace81  webhook-linux-amd64.tar.gz
2fa7f6327e83448f253dc1508aa51d72  webhook-linux-arm64.tar.gz
aa87709d247c812806bdf9bbaa8ea024  webhook-linux-arm.tar.gz
7667d92e321f09348884c4202d858ac5  webhook-openbsd-386.tar.gz
1c5724643f8243c510abfa273ee29b9b  webhook-openbsd-amd64.tar.gz
aff01500e6404d1834d6f6cca26d9de4  webhook-openbsd-arm64.tar.gz
5ad72a10457a76ea05f0f613a34cb86f  webhook-openbsd-arm.tar.gz

Notice

Switched to Go modules.

Enhancements

• Added support for multipart/form content encoding #373
• Added XML payload support #376
• Added SIGHUP support #378
• Added setuid and setgid options for dropping privileges for platforms that are supported by Go #379
• Added HTTP method verb whitelist filter #380
• Added logfile support #381
• Added pidfile support #383
• Added debug info to show failed parameter lookup nodes in logs #384
• Added support for comma-separated signatures to support secret rolling #388

Bugfixes

• Add request ID logging on missing command #415

Binaries

I've attached binaries that I've managed to cross-compile without problems.

MD5 checksums

931f46e10d34dc11bcd41290ce961a1c  webhook-darwin-386.tar.gz
ffef29ad1f57d0246a760b55681c4d34  webhook-darwin-amd64.tar.gz
ce08cade66a86fd156da349ae08c308e  webhook-freebsd-386.tar.gz
aab2892803731e5fd57d873f207a5fee  webhook-freebsd-amd64.tar.gz
85c47614dd0c33786ac02a9a959cb4d2  webhook-freebsd-arm64.tar.gz
ee097256fa43dfbb779b9097233a0d69  webhook-freebsd-arm.tar.gz
ac8642513a099837c38a35756b1c00a0  webhook-linux-386.tar.gz
8bb63914f4ead672ff43191e91b0249f  webhook-linux-amd64.tar.gz
7fa3fe7e130886af764d17a96e80f65b  webhook-linux-arm64.tar.gz
8a7c241b34988ea80d1760c5724a3f5f  webhook-linux-arm.tar.gz
ce25f0cde91e0707a94c7df1f3efb725  webhook-openbsd-386.tar.gz
0312b8c65f3a7698bc1492bd4122ec52  webhook-openbsd-amd64.tar.gz
991a8bef00c8eee345ec34fbd5d74557  webhook-openbsd-arm64.tar.gz
703efef8523804523abbe0bea8012ce5  webhook-openbsd-arm.tar.gz
5264c9da2abf7fbf6bc29505ebfc06af  webhook-windows-386.tar.gz
67c7237613e7e0d414c29f621b1c8cef  webhook-windows-amd64.tar.gz
7e3f0a81870bdf5dc9280a438c0271a0  webhook-windows-arm.tar.gz

Notice

• ⚠️ From this version on, Go 1.12 is the minimum supported version.

Enhancements

• Added SHA512 payload check rule #361
• Use constant time string compare for match value to prevent timing attacks #365
• Default to TLS 1.2 and secure cipher suites #362

Bugfixes

• Webhook will no longer attempt to parse multipart forms, proper parsing will come in future releases. #360

Binaries

I've attached binaries that I've managed to cross-compile without problems.

MD5 checksums

64d1a2096a599d59c743e5b7465f84fd  webhook-darwin-386.tar.gz
a0c2e1c84b88a3d7dbc6275bb490a441  webhook-darwin-amd64.tar.gz
50929a7b4562f60aecf49a4402f75dfc  webhook-freebsd-386.tar.gz
c84a10f8bfac42c56abc36b3f1de6587  webhook-freebsd-amd64.tar.gz
e4e742c2fe1bd6a46cf8db6019620ce1  webhook-freebsd-arm.tar.gz
34dcfd3983eea4190cca96f47dc11eef  webhook-linux-386.tar.gz
65740c6fb9c38b72b3efb285d2bd485d  webhook-linux-amd64.tar.gz
ae28230c9d99b63141692a107f492166  webhook-linux-arm64.tar.gz
38bd3a0e8b97568699b9597dc2701995  webhook-linux-arm.tar.gz
f258d370302fd5151a4a18c27b2cedf8  webhook-openbsd-386.tar.gz
d434ed8ca699d3d2000d182144c2bd0d  webhook-openbsd-amd64.tar.gz
2910907987a5f8a2f8922766d86cf307  webhook-openbsd-arm.tar.gz
3ae829d343884fd645057b4eb209b03f  webhook-windows-386.tar.gz
0f6e0b8ab6f6ec90f4edfa7484a4633d  webhook-windows-amd64.tar.gz
bd815ef29df12b8554aa74dee845f3a2  webhook-windows-arm.tar.gz

Enhancements

• Added / route which will return 200 OK so it can be used for healthcheck #283
• Added success-http-response-code flag to the hook definition, which allows users to specify the HTTP status code to be returned upon successful hook execution #266
• Check if the command is available relative to the work directory if it's not an absolute path #327
• ip-whitelist rule now allows multiple values to be specified #298

Bugfixes

• Fixed % being replaced with %!(MISSING) when using include-command-output-in-response #313
• Fixed issue with accessing JSON keys which included . in their name #337

Binaries

I've attached binaries that I've managed to cross-compile without problems.

MD5 checksums

cae608eba33384c5f9566a201b6c7ae5  webhook-darwin-386.tar.gz
ad285b94782febf6aeb7cb2cdb7b25b2  webhook-darwin-amd64.tar.gz
309c93fba4bd9781ebb0ad4f94262189  webhook-freebsd-386.tar.gz
ca88c82c9187cd09fa71792144b3cf1f  webhook-freebsd-amd64.tar.gz
3852292bb6a58cb1a107725107f2e433  webhook-freebsd-arm.tar.gz
e9d89c78f31d1a35e87b3b7af9f3d028  webhook-linux-386.tar.gz
22c242e8f53f4315089470982420d2b0  webhook-linux-amd64.tar.gz
d793163476ea60c82baab3e8f4c49ee5  webhook-linux-arm64.tar.gz
d1883896de38ebc1e3107c555714023c  webhook-linux-arm.tar.gz
0b5d10e01401f8ed1455b2f5add7be15  webhook-openbsd-386.tar.gz
8382cf4e75a6ee7e6175224b9b53ec02  webhook-openbsd-amd64.tar.gz
811da0b26362fa1e3406f10ed9ef188e  webhook-openbsd-arm.tar.gz
fcabee9a8d249f0b18951546017e74e0  webhook-windows-386.tar.gz
28beebce11c8acde50f6e0d39bbc6f9b  webhook-windows-amd64.tar.gz
8541c9c053185896c59a13ff027d6b03  webhook-windows-arm.tar.gz

Enhancements

• Added ability to override the incoming payload Content-Type header using the incoming-payload-type property in the hook definition #206

Bugfixes

• Fixed some broken links in the documentation #256 , #277
• Fixed Makefile to add .exe extension to the windows build #278

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

Bugfixes

• Fix panic issue when file cannot be created #212

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Allow hooks file to be parsed as a template using the -template flag when starting webhook #161
• Allow storing specified request values into temp files and pass the filename to the executing commands #174

Bugfixes

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Vendor dependencies using godep #180
• Added delay to the rename event to check if the file was modified by an editor that does (rename, copy) instead of overwriting the file #172
• Added request-id to verbose log messages #173
• Added warning when attempting to use static parameters in command to be executed #164

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Added support for hooks YAML format #143
• Added stderr to command output log #144

Bugfixes

• Make Negroni respect silent mode #141

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Added IP Logging for incoming requests #139

Bugfixes

• Fixed invalid test payloads due to introduction of IP Whitelist rules in #116

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Added IP Whitelist match rule #116
• Added SHA256 Payload Signature check rule #124

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Added support for loading hooks from multiple files. When starting webhook use the -hooks flag multiple times to specify multiple files to load. If the hot reload is enabled, when the file is removed, hooks from that file will be removed as well and the file will no longer be watched for changes.

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Enhancements

• Added trigger-rule-mismatch-http-response-code to the hook definition so you can control the HTTP response status code returned when the trigger rule is not satisfied for the given hook.

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Breaking changes

• Parse parameters as JSON will no longer stop hook execution if it encounters errors while parsing the arguments (i.e. argument does not exist, or does not contain valid JSON string).
• Argument extraction will no longer stop after the first error is encountered, but instead will continue to try to extract other arguments. (partially related to #106)

Enhancements

• Added -version flag so you can view the current webhook version without starting it
• Added source: 'query' as an alias to source: 'url'

Bugfixes

• Arguments which have header as the source will now properly be matched regardless of the argument name case (it will be canonicalized) (#106)

Binaries

I've attached binaries that I've managed to cross-compile without problems.

Breaking changes

• When using envname in pass-environment-to-command flag, it will no longer be prefixed with HOOK_, so "envname": "SOMETHING" will result in SOMETHING environment variable to be passed to command, instead of old HOOK_SOMETHING behavior. (#98)
• when using include-command-output-in-response flag, webhook will no longer return wrapped output in the JSON form, but instead will return raw stdout output, stderr will be logged (#87)
• when using include-command-output-in-response flag, webhook will no longer return 200 OK header if the command failed to execute or encountered errors while executing (#88)

Binaries

I've attached binaries that I've managed to cross-compile without problems.

• removed support for multiple hooks with the same id (#76, #78, #82)
• fixed the leak of the expected calculated SHA1 payload signature (#83)
• fixed upstream issue with negroni logger (#91)

• added support for naming environment variables (#75) (thanks @faide)

• added response headers to hook definition that will be returned when the hook is requested
• added -header name=value flag for specifying headers returned with each response

• added "omitempty" to json fields