Changelog¶

All notable changes to this project are documented below. This project uses Semantic Versioning and Conventional Commits. This page is generated from the repository CHANGELOG.md.

0.1.5 (2026-10-30)¶

deps: update module github.com/prometheus/common to v0.73.0 (#87) (3b6721e)
token: forward token minting from standbys to the active node (#84) (711c62f)

author is Rob Knight, not Rob Knighton (fc667a4)
deps: Go 1.27.2 and golang.org/x/net v0.60.0 for the stdlib and HTTP/2 fixes (0f93946)
deps: update Go to 1.27.3 for certificate distrust (164a822)
deps: update module github.com/openbao/openbao/api/v2 to v2.7.0 (#44) (9ccb1e6)
deps: update module github.com/openbao/openbao/api/v2 to v2.7.1 (#59) (f5b9078)
deps: update module github.com/openbao/openbao/sdk/v2 to v2.7.0 (#46) (94e2c48)
deps: update module github.com/openbao/openbao/sdk/v2 to v2.7.1 (#53) (d156744)
deps: update module github.com/prometheus/client_golang to v1.25.0 (#62) (458eb33)
deps: update module github.com/prometheus/common to v0.71.0 (#39) (0588008)
deps: update module github.com/prometheus/common to v0.72.0 (#58) (38dc1a9)
deps: update module github.com/prometheus/common to v0.72.1 (#63) (50c6d48)

bump Go to 1.26.5, gate CI on govulncheck, drop the PAT from publish (8f3ab17), closes #25
deps: update module github.com/bradleyfalzon/ghinstallation/v2 to v2.19.0 (#18) (20f0e40)
deps: update module github.com/prometheus/client_golang to v1.24.1 (#19) (4b46c0e)
harden publish.yml and correct the reproducibility claim (77a2801)

attach release assets via gh release upload, not action-gh-release (d51b756), closes #1
restore linker-injected build metadata dropped with .goreleaser.yml (515a239), closes #1
split publish out of release.yml, gated on the release event not action outputs (48f9f1e), closes #1
use the release-please PAT to update an existing release's assets (4751660), closes #1

add hashed token to responses for correlation with GitHub audit logs (#163) (0ee76ab)
added a configuration key [hide_repository_metadata] that, if set to true, will minimize the [token.data.repositories] to [token.data.repositories.names] to avoid high memory consumption (#114) (9bfbd38)
initializes proxy for Transport if needed (#146) (6ddeeb4)
port to the OpenBao SDK (8f44f3f), closes #1

client timeouts with >250 repositories (#161) (5ce15ec)
drop stale upstream config and restart module versioning at v0.1.0 (d850cef), closes #1
keep release-please in 0.x territory for breaking-change commits (c798aac), closes #1
pin the first release-please release to 0.1.0 (5c02fbc), closes #1
Use a case-insensitive organization name lookup (#156) (109f340)