Skip to content

Releases: OWASP/wrongsecrets

V1.9.2: AllDayDevOps release!

10 Oct 12:53
03da8cd
Compare
Choose a tag to compare

What's Changed

This is a release full of new content! We actually have 2 new challenges & fix all the CTFD related issues. And all of this to celebrate our talk on ADDO again! After all: this is where we got started!

New content

Bugfixes

  • disable vault challenges in ctf mode for now, and add missing spoiler… by @commjoen in #1656
  • fix for disabled challenges for ctfd data generation by @commjoen in #1662
  • fix difficulty in mapping for api/challenges for juiceshopcli by @commjoen in #1663
  • Fix readme for ctfd by @commjoen in #1664

LCM

  • build(deps): bump org.linguafranca.pwdb:KeePassJava2 from 2.2.1 to 2.2.2 by @dependabot in
  • build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.0 to 2.8.1 by @dependabot in #1608
  • build(deps): bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.4.0 to 3.5.0 by @dependabot in #1607
  • build(deps): bump com.google.cloud:spring-cloud-gcp-dependencies from 5.5.0 to 5.6.0 by @dependabot in #1605
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 in /src/test/e2e by @dependabot in #1604
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 in /src/test/K8s-tests by @dependabot in #1602
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 in /src/test/e2e by @dependabot in #1601
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 by @dependabot in #1600
  • build(deps): bump com.azure.spring:spring-cloud-azure-dependencies from 5.14.0 to 5.15.0 by @dependabot in #1599
  • build(deps-dev): bump mocha from 10.7.0 to 10.7.3 in /src/test/K8s-tests by @dependabot in #1598
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 in /src/test/e2e by @dependabot in #1597
  • build(deps-dev): bump @commitlint/config-conventional from 19.2.2 to 19.4.1 by @dependabot in #1595
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /azure by @dependabot in #1594
  • build(deps-dev): bump cypress from 13.13.2 to 13.14.1 in /src/test/K8s-tests by @dependabot in #1593
  • build(deps-dev): bump mocha from 10.7.0 to 10.7.3 in /src/test/e2e by @dependabot in #1592
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /aws by @dependabot in #1591
  • build(deps-dev): bump @babel/preset-env from 7.25.3 to 7.25.4 by @dependabot in #1590
  • build(deps): bump github.com/gruntwork-io/terratest from 0.47.0 to 0.47.1 in /gcp by @dependabot in #1589
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 in /src/test/K8s-tests by @dependabot in #1588
  • build(deps-dev): bump cypress from 13.13.2 to 13.14.1 in /src/test/e2e by @dependabot in #1586
  • build(deps): bump org.springframework.vault:spring-vault-core from 3.1.1 to 3.1.2 by @dependabot in #1584
  • build(deps): bump aws.sdk.version from 2.26.28 to 2.27.20 by @dependabot in #1609
  • build(deps-dev): bump eslint from 9.8.0 to 9.9.1 by @dependabot in #1585
  • build(deps-dev): bump eslint-plugin-cypress from 3.4.0 to 3.5.0 in /src/test/K8s-tests by @dependabot in #1583
  • build(deps): bump org.cyclonedx:cyclonedx-core-java from 9.0.4 to 9.0.5 by @dependabot in #1581
  • build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1 by @dependabot in #1580
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.2 to 3.3.3 by @dependabot in #1579
  • build(deps): bump com.puppycrawl.tools:checkstyle from 10.17.0 to 10.18.1 by @dependabot in #1578
  • build(deps): bump asciidoctorj.version from 2.5.13 to 3.0.0 by @dependabot in #1576
  • build(deps): bump pre-commit-ci/lite-action from 1.0.2 to 1.0.3 by @dependabot in #1610
  • build(deps): bump terraform-aws-modules/eks/aws from 20.20.0 to 20.24.0 in /aws by @dependabot in #1606
  • build(deps): bump hashicorp/google-beta from 5.39.1 to 6.0.1 in /gcp by @dependabot in #1596
  • build(deps): bump hashicorp/azurerm from 3.113.0 to 4.0.1 in /azure by @dependabot in #1587
  • build(deps): bump hashicorp/google from 5.39.1 to 6.0.1 in /gcp by @dependabot in #1582
  • build(deps): update terraform-aws-modules/vpc/aws requirement from ~> 5.9.0 to ~> 5.13.0 in /aws by @dependabot in #1577
  • build(deps): bump hashicorp/aws from 5.60.0 to 5.65.0 in /aws by @dependabot in #1603
  • build(deps): bump zaproxy/action-baseline from 0.12.0 to 0.13.0 by @dependabot in #1612
  • build(deps-dev): bump eslint from 9.9.1 to 9.11.1 in /src/test/K8s-tests by @dependabot in #1641
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 in /src/test/K8s-tests by @dependabot in #1640
  • build(deps): bump org.cyclonedx:cyclonedx-maven-plugin from 2.8.1 to 2.8.2 by @dependabot in #1633
  • build(deps-dev): bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.5 to 3.12.0 by @dependabot in #1635
  • build(deps-dev): bump io.github.wimdeblauwe:testcontainers-cypress from 1.9.0 to 1.9.1 by @dependabot in #1637
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.3.1 to 3.5.0 by @dependabot in #1575
  • build(deps): bump aws.sdk.version from 2.27.20 to 2.28.13 by @dependabot in #1650
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /aws by @dependabot in #1648
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /aws by @dependabot in #1646
  • build(deps): bump hashicorp/aws from 5.65.0 to 5.69.0 in /aws by @dependabot in #1645
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /azure by @dependabot in #1644
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /azure by @dependabot in #1643
  • build(deps): bump hashicorp/azurerm from 4.0.1 to 4.3.0 in /azure by @dependabot in #1642
  • build(deps): bump hashicorp/random from 3.6.2 to 3.6.3 in /gcp by @dependabot in #1618
  • build(deps): bump hashicorp/google-beta from 6.0.1 to 6.5.0 in /gcp by @dependabot in #1617
  • build(deps): bump hashicorp/google from 6.0.1 to 6.5.0 in /gcp by @dependabot in #1616
  • build(deps): bump hashicorp/http from 3.4.4 to 3.4.5 in /gcp by @dependabot in #1615
  • build(deps): bump terraform-aws-modules/eks/aws from 20.24.0 to 20.24.2 in /aws by @dependabot in #1647
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 in /src/test/e2e by @dependabot in #1620
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.3 to 3.3.4 by @dependabot in #1624
  • build(deps-dev): bump @commitlint/config-conventional from 19.4.1 to 19.5.0 by @dependabot in #1622
  • build(deps-dev): bump cypress from 13.14.1 to 13.15.0 in /src/test/K8s-tests by @dependabot in #1639
  • b...
Read more

v1.9.1: LCM release

09 Aug 09:19
Compare
Choose a tag to compare

What's Changed

This is an LCM update, where we mostly update dependencies in order to keep the code base fresh.

Small Changes and fixes

LCM

  • update node version by @commjoen in #1522
  • update version of dependency check by @commjoen in #1523
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /azure by @dependabot in #1563
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /aws by @dependabot in #1562
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 in /src/test/K8s-tests by @dependabot in #1561
  • build(deps-dev): bump cypress from 13.13.0 to 13.13.2 in /src/test/K8s-tests by @dependabot in #1560
  • build(deps): bump com.google.cloud:spring-cloud-gcp-dependencies from 5.4.3 to 5.5.0 by @dependabot in #1556
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 in /src/test/K8s-tests by @dependabot in #1558
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 in /src/test/K8s-tests by @dependabot in #1557
  • build(deps): bump eclipse-temurin from 22.0.1_8-jre-alpine to 22.0.2_9-jre-alpine by @dependabot in #1555
  • build(deps-dev): bump mocha from 10.6.0 to 10.7.0 in /src/test/K8s-tests by @dependabot in #1559
  • build(deps): bump com.azure.spring:spring-cloud-azure-dependencies from 5.13.0 to 5.14.0 by @dependabot in #1554
  • build(deps): bump github.com/gruntwork-io/terratest from 0.46.16 to 0.47.0 in /gcp by @dependabot in #1547
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 by @dependabot in #1546
  • build(deps-dev): bump org.testcontainers:testcontainers from 1.19.8 to 1.20.1 by @dependabot in #1553
  • build(deps): bump org.springframework.boot:spring-boot-starter-parent from 3.3.1 to 3.3.2 by @dependabot in #1550
  • build(deps): bump org.springframework.cloud:spring-cloud-dependencies from 2023.0.2 to 2023.0.3 by @dependabot in #1549
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 in /src/test/K8s-tests by @dependabot in #1567
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 in /src/test/K8s-tests by @dependabot in #1566
  • build(deps-dev): bump @babel/preset-env from 7.24.7 to 7.25.3 by @dependabot in #1565
  • build(deps): bump aws.sdk.version from 2.26.16 to 2.26.28 by @dependabot in #1564
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.3.0 to 3.3.1 by @dependabot in #1548
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 by @dependabot in #1544
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 by @dependabot in #1543
  • build(deps-dev): bump @babel/eslint-parser from 7.24.7 to 7.25.1 by @dependabot in #1545
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 by @dependabot in #1542
  • build(deps): bump minimatch from 9.0.5 to 10.0.1 in /js by @dependabot in #1539
  • build(deps-dev): bump eslint-plugin-cypress from 3.3.0 to 3.4.0 in /src/test/e2e by @dependabot in #1532
  • build(deps-dev): bump mocha from 10.6.0 to 10.7.0 in /src/test/e2e by @dependabot in #1528
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 by @dependabot in #1568
  • build(deps-dev): bump eslint from 9.6.0 to 9.8.0 in /src/test/e2e by @dependabot in #1530
  • build(deps): bump hashicorp/google-beta from 5.36.0 to 5.39.1 in /gcp by @dependabot in #1533
  • build(deps): bump hashicorp/aws from 5.57.0 to 5.60.0 in /aws by @dependabot in #1534
  • build(deps): bump hashicorp/google from 5.36.0 to 5.39.1 in /gcp by @dependabot in #1536
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /aws by @dependabot in #1537
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /gcp by @dependabot in #1538
  • build(deps): bump hashicorp/azurerm from 3.111.0 to 3.113.0 in /azure by @dependabot in #1540
  • build(deps): bump hashicorp/http from 3.4.3 to 3.4.4 in /azure by @dependabot in #1541
  • build(deps-dev): bump globals from 15.8.0 to 15.9.0 in /src/test/e2e by @dependabot in #1569
  • build(deps): bump terraform-aws-modules/eks/aws from 20.17.2 to 20.20.0 in /aws by @dependabot in #1535
  • build(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 in /src/test/e2e by @dependabot in #1531
  • build(deps-dev): bump eslint-plugin-chai-friendly from 1.0.0 to 1.0.1 in /src/test/e2e by @dependabot in #1529
  • build(deps-dev): bump cypress from 13.13.0 to 13.13.2 in /src/test/e2e by @dependabot in #1570
  • build(deps): bump org.webjars:datatables from 2.0.7 to 2.1.0 by @dependabot in #1552
  • updated node and removed line of todo we will no longer do by @commjoen in #1571

Full Changelog: 1.9.0...1.9.1

1.9.0: K8s 1.30, no Consul, Java 22, new challenges and automation leaps

08 Jul 18:10
Compare
Choose a tag to compare

What's Changed

This version is another new content & LCM release: we've added a cool and exciting challenge about Kubernetes Sealed Secrets! We upgraded to K8s 1.30, removed our dependency on Consul (less resources required to play!), and added a lot of automation to see if everything works the way it should. Next, we started compiling everything for Java 22. In other words: time for a big version bump!

New Challenges

Fixes

LCM

  • Bump org.webjars:datatables from 1.13.5 to 2.0.3 by @dependabot in #1350
  • Bump hashicorp/google-beta from 5.25.0 to 5.27.0 in /gcp by @dependabot in #1371
  • Bump hashicorp/google from 5.25.0 to 5.27.0 in /gcp by @dependabot in #1372
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.7.0 to ~> 5.8.1 in /aws by @dependabot in #1376
  • Bump hashicorp/aws from 5.45.0 to 5.47.0 in /aws by @dependabot in #1375
  • Bump hashicorp/aws from 5.45.0 to 5.47.0 in /aws by @dependabot in #1379
  • Bump eclipse-temurin from 22_36-jre-alpine to 22.0.1_8-jre-alpine by @dependabot in #1374
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.7.0 to ~> 5.8.1 in /aws by @dependabot in #1381
  • Bump hashicorp/azurerm from 3.99.0 to 3.101.0 in /azure by @dependabot in #1373
  • Bump aws.sdk.version from 2.25.40 to 2.25.42 by @dependabot in #1377
  • Bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 by @dependabot in #1378
  • Bump org.jruby:jruby-complete from 9.4.6.0 to 9.4.7.0 by @dependabot in #1382
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.1 to 3.11.2 by @dependabot in #1380
  • Bump globals from 15.0.0 to 15.1.0 by @dependabot in #1383
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 by @dependabot in #1385
  • Bump eslint-plugin-cypress from 2.15.2 to 3.0.2 in /src/test/e2e by @dependabot in #1388
  • Bump cypress from 13.7.3 to 13.8.1 in /src/test/e2e by @dependabot in #1391
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 in /src/test/e2e by @dependabot in #1390
  • Bump cypress from 13.7.3 to 13.8.1 in /src/test/K8s-tests by @dependabot in #1395
  • Bump eslint-plugin-jest from 28.2.0 to 28.5.0 in /src/test/e2e by @dependabot in #1401
  • Bump eslint-plugin-jest from 28.2.0 to 28.3.0 in /src/test/K8s-tests by @dependabot in #1393
  • Bump eslint-plugin-jest from 28.2.0 to 28.5.0 by @dependabot in #1400
  • Bump @eslint/js from 9.0.0 to 9.2.0 by @dependabot in #1399
  • Bump eslint-plugin-jest from 28.3.0 to 28.5.0 in /src/test/K8s-tests by @dependabot in #1402
  • Bump eslint-plugin-n from 17.2.1 to 17.4.0 in /src/test/K8s-tests by @dependabot in #1396
  • Bump eslint-plugin-cypress from 2.15.2 to 3.1.1 in /src/test/K8s-tests by @dependabot in #1404
  • Bump requests from 2.31.0 to 2.32.0 in /scripts/sort_contibutors by @dependabot in #1406
  • Bump eslint from 8.57.0 to 9.3.0 by @dependabot in #1398
  • Bump cypress from 13.8.1 to 13.10.0 in /src/test/K8s-tests by @dependabot in #1413
  • Bump eslint from 9.3.0 to 9.4.0 in /src/test/K8s-tests by @dependabot in #1415
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 in /src/test/K8s-tests by @dependabot in #1414
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 by @dependabot in #1424
  • Bump cypress from 13.8.1 to 13.10.0 in /src/test/e2e by @dependabot in #1443
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 in /src/test/e2e by @dependabot in #1440
  • Bump org.codehaus.mojo:tidy-maven-plugin from 1.2.0 to 1.3.0 by @dependabot in #1436
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 in /src/test/e2e by @dependabot in #1438
  • Bump eslint from 9.3.0 to 9.4.0 by @dependabot in #1426
  • Bump eslint-plugin-cypress from 3.2.0 to 3.3.0 in /src/test/K8s-tests by @dependabot in #1416
  • Bump eslint-plugin-chai-friendly from 0.7.4 to 0.8.0 by @dependabot in #1420
  • Bump eslint from 9.3.0 to 9.4.0 in /src/test/e2e by @dependabot in #1432
  • Bump @babel/preset-env from 7.24.5 to 7.24.6 by @dependabot in #1422
  • Bump @babel/eslint-parser from 7.24.5 to 7.24.6 by @dependabot in #1421
  • Bump org.cyclonedx:cyclonedx-core-java from 8.0.3 to 9.0.2 by @dependabot in #1434
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.11.2 to 3.11.3 by @dependabot in #1447
  • Bump io.gatling:gatling-maven-plugin from 4.9.0 to 4.9.1 by @dependabot in #1444
  • Bump hashicorp/google from 5.27.0 to 5.31.1 in /gcp by @dependabot in #1417
  • Bump hashicorp/google-beta from 5.27.0 to 5.31.1 in /gcp by @dependabot in #1418
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /gcp by @dependabot in #1419
  • Bump hashicorp/azurerm from 3.101.0 to 3.106.1 in /azure by @dependabot in #1429
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /azure by @dependabot in #1433
  • Bump hashicorp/random from 3.6.1 to 3.6.2 in /aws by @dependabot in #1435
  • Bump hashicorp/aws from 5.47.0 to 5.52.0 in /aws by @dependabot in #1448
  • Bump terraform-aws-modules/eks/aws from 20.8.5 to 20.13.0 in /aws by @dependabot in #1437
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.4.0 to 4.8.5.0 by @dependabot in #1423
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in #1442
  • Bump aws.sdk.version from 2.25.42 to 2.25.64 by @dependabot in #1439
  • Bump com.github.spotbugs:spotbugs-annotations from 4.8.4 to 4.8.5 by @dependabot in #1431
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.11.0 to 5.12.0 by @dependabot in #1445
  • Bump org.springframework.cloud:spring-cloud-dependencies from 2023.0.1 to 2023.0.2 by @dependabot in #1430
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.1.2 to 5.4.1 by @dependabot in #1425
  • Bump com.puppycrawl.tools:checkstyle from 10.16.0 to 10.17.0 by @dependabot in #1427
  • Bump asciidoctorj.version from 2.5.12 to 2.5.13 by @dependabot in #1428
  • Bump urllib3 from 2.2.1 to 2.2.2 in /scripts/sort_contibutors by @dependabot in #1451
  • Bump org.cyclonedx:cyclonedx-core-java from 9.0.2 to 9.0.4 by @dependabot in #1453
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.5 to 3.3.0 by @dependabot in #1446
  • Bump github.com/hashicorp/go-get...
Read more

1.8.5: Java 22, challenge fixes, automation, and textual updates

29 Apr 23:38
Compare
Choose a tag to compare

What's Changed

This version is a big LCM release, where we upgraded to Java22, and made a lot of the challenges easier to read. On top of that we extended the end2end tests a lot and made them part of our automations, in order to catch bugs faster.

Fixes

Java 22

  • First version of java 22 moving back to temurin alpine by @commjoen in #1281

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /gcp by @dependabot in #1278

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /azure by @dependabot in #1277

  • Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /aws by @dependabot in #1276

  • Bump hashicorp/google from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1296

  • Bump hashicorp/azurerm from 3.94.0 to 3.97.1 in /azure by @dependabot in #1292

  • Bump terraform-aws-modules/eks/aws from 20.5.0 to 20.8.4 in /aws by @dependabot in #1295

  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.5.1 to ~> 5.7.0 in /aws by @dependabot in #1294

  • Bump hashicorp/google-beta from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1289

  • Bump aws.sdk.version from 2.25.20 to 2.25.21 by @dependabot in #1283

  • Bump @commitlint/config-conventional from 19.0.3 to 19.1.0 by @dependabot in #1287

  • Bump com.puppycrawl.tools:checkstyle from 10.14.0 to 10.15.0 by @dependabot in #1298

  • Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.11 to 2.8.0 by @dependabot in #1288

  • Bump terraform-aws-modules/eks/aws from 20.5.0 to 20.8.4 in /aws by @dependabot in #1304

  • Bump hashicorp/azurerm from 3.94.0 to 3.97.1 in /azure by @dependabot in #1301

  • Bump hashicorp/google-beta from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1300

  • Bump hashicorp/google from 5.18.0 to 5.22.0 in /gcp by @dependabot in #1299

  • Bump hashicorp/aws from 5.39.1 to 5.43.0 in /aws by @dependabot in #1293

  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.5.1 to ~> 5.7.0 in /aws by @dependabot in #1303

  • Bump asciidoctorj.version from 2.5.11 to 2.5.12 by @dependabot in #1284

  • Bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.3.0 to 2.5.0 by @dependabot in #1305

  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.4 to 5.1.2 by @dependabot in #1290

  • Bump zaproxy/action-baseline from 0.11.0 to 0.12.0 by @dependabot in #1311

  • Bump minimatch from 9.0.3 to 9.0.4 in /js by @dependabot in #1285

  • Bump idna from 3.4 to 3.7 in /scripts/sort_contibutors by @dependabot in #1312

  • Bump azure/setup-helm from 3.5 to 4 by @dependabot in #1313

  • Bump colima plugin by @commjoen in #1317

  • Bump eslint-plugin-cypress from 2.15.1 to 2.15.2 in /src/test/e2e by @dependabot in #1342

  • Bump @commitlint/config-conventional from 18.6.3 to 19.2.2 in /src/test/K8s-tests by @dependabot in #1341

  • Bump eslint-plugin-cypress from 2.15.1 to 2.15.2 by @dependabot in #1340

  • Bump @commitlint/config-conventional from 18.6.0 to 19.2.2 in /src/test/e2e by @dependabot in #1338

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /aws by @dependabot in #1351

  • Bump terraform-aws-modules/eks/aws from 20.8.4 to 20.8.5 in /aws by @dependabot in #1349

  • Bump hashicorp/aws from 5.43.0 to 5.45.0 in /aws by @dependabot in #1348

  • Bump hashicorp/azurerm from 3.97.1 to 3.99.0 in /azure by @dependabot in #1347

  • Bump hashicorp/google-beta from 5.22.0 to 5.25.0 in /gcp by @dependabot in #1346

  • Bump hashicorp/google from 5.22.0 to 5.25.0 in /gcp by @dependabot in #1339

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /gcp by @dependabot in #1328

  • Bump hashicorp/random from 3.6.0 to 3.6.1 in /azure by @dependabot in #1327

  • Bump eslint-plugin-jest from 27.6.3 to 28.2.0 in /src/test/e2e by @dependabot in #1330

  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.8.4.0 by @dependabot in #1344

  • Bump eslint-plugin-jest from 27.9.0 to 28.2.0 in /src/test/K8s-tests by @dependabot in #1336

  • Bump aws.sdk.version from 2.25.21 to 2.25.31 by @dependabot in #1329

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/e2e by @dependabot in #1345

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 by @dependabot in #1343

  • Bump mocha from 10.3.0 to 10.4.0 in /src/test/e2e by @dependabot in #1333

  • Bump eslint-plugin-jest from 27.9.0 to 28.2.0 by @dependabot in #1331

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/K8s-tests by @dependabot in #1326

  • Bump com.github.spotbugs:spotbugs-annotations from 4.8.3 to 4.8.4 by @dependabot in #1337

  • Bump com.github.spotbugs:spotbugs from 4.8.3 to 4.8.4 by @dependabot in #1334

  • Bump eslint from 8.56.0 to 8.57.0 in /src/test/e2e by @dependabot in #1355

  • Bump cypress from 13.6.4 to 13.7.3 in /src/test/e2e by @dependabot in #1354

  • Bump mocha from 10.3.0 to 10.4.0 in /src/test/e2e by @dependabot in #1353

  • Bump eslint-plugin-n from 16.6.2 to 17.2.1 in /src/test/e2e by @dependabot in #1352

  • Bump com.tngtech.archunit:archunit-junit5 from 1.2.1 to 1.3.0 by @dependabot in #1332

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /gcp by @dependabot in #1356

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /azure by @dependabot in #1357

  • Bump golang.org/x/net from 0.17.0 to 0.23.0 in /aws by @dependabot in #1358

  • Bump @commitlint/config-conventional from 19.1.0 to 19.2.2 by @dependabot in #1335

  • Bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 by @dependabot in #1363

  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.4 to 3.2.5 by @dependabot in #1367

  • Bump aws.sdk.version fro...

Read more

1.8.4: LCM and bugfixes

05 Mar 21:41
257bb05
Compare
Choose a tag to compare

What's Changed

Bugfixes and Improvements

LCM

  • Bump hashicorp/google from 5.13.0 to 5.14.0 in /gcp by @dependabot in #1234
  • Bump hashicorp/google-beta from 5.13.0 to 5.14.0 in /gcp by @dependabot in #1233
  • Bump pre-commit-ci/lite-action from 1.0.1 to 1.0.2 by @dependabot in #1237
  • Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in #1238
  • Bump flat and mocha in /src/test/e2e by @dependabot in #1241
  • Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0 by @dependabot in #1246
  • Bump io.gatling.highcharts:gatling-charts-highcharts from 3.10.3 to 3.10.4 by @dependabot in #1247
  • Bump com.puppycrawl.tools:checkstyle from 10.13.0 to 10.14.0 by @dependabot in #1250
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.0 to 4.8.3.1 by @dependabot in #1255
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.2 to 3.2.3 by @dependabot in #1248
  • Bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0 by @dependabot in #1269
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.8.0 to 5.9.1 by @dependabot in #1249
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /azure by @dependabot in #1268
  • Bump hashicorp/azurerm from 3.89.0 to 3.94.0 in /azure by @dependabot in #1267
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /aws by @dependabot in #1266
  • Bump hashicorp/google from 5.14.0 to 5.18.0 in /gcp by @dependabot in #1264
  • Bump hashicorp/google-beta from 5.14.0 to 5.18.0 in /gcp by @dependabot in #1263
  • Bump hashicorp/http from 3.4.1 to 3.4.2 in /gcp by @dependabot in #1259
  • Bump terraform-aws-modules/eks/aws from 19.21.0 to 20.5.0 in /aws by @dependabot in #1258
  • Bump hashicorp/aws from 5.34.0 to 5.39.0 in /aws by @dependabot in #1265
  • Bump @commitlint/config-conventional from 18.6.0 to 19.0.3 by @dependabot in #1262
  • Bump org.jruby:jruby-complete from 9.4.5.0 to 9.4.6.0 by @dependabot in #1251
  • Bump aws.sdk.version from 2.23.15 to 2.25.0 by @dependabot in #1252
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.1 to 5.0.4 by @dependabot in #1256
  • Bump eslint-plugin-jest from 27.6.3 to 27.9.0 by @dependabot in #1261
  • Bump eslint from 8.56.0 to 8.57.0 by @dependabot in #1260
  • Bump io.gatling:gatling-maven-plugin from 4.7.0 to 4.8.2 by @dependabot in #1257
  • Bump org.webjars:bootstrap from 5.3.2 to 5.3.3 by @dependabot in #1254
  • Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.5 to 3.0.0 by @dependabot in #1253

New Contributors

Full Changelog: 1.8.3...1.8.4

Special Thanks

Special thanks to @Shubham-Patel07 , @bendehaan , @za , @nbaars , @commjoen for their hard work on this release!

1.8.3: last vault challenge and LCM

04 Feb 09:02
eb9d9c3
Compare
Choose a tag to compare

What's Changed

Bugfixes, improvements, and docs:

  • Fix typo on Vaultpassword.java by @za in #1190
  • attempt to fix surefire perm issue for non fork by @commjoen in #1197
  • Update readme with contributors and more by @commjoen in #1194
  • Issue 1193: update trufflehog command on the challenge 1 hint doc by @za in #1195
  • Sort alphabetically while importing Python modules by @za in #1199
  • Format Python script using Black formatter by @za in #1202
  • Update main.yml to no longer contain test uploads to the PR by @commjoen in #1226

New challenges:

LCM:

  • Bump actions/cache from 3 to 4 by @dependabot in #1192
  • Bump zaproxy/action-baseline from 0.10.0 to 0.11.0 by @dependabot in #1203
  • Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.10 to 2.7.11 by @dependabot in #1204
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.2.1 to 3.2.2 by @dependabot in #1205
  • Bump org.asciidoctor:asciidoctor-maven-plugin from 2.2.4 to 2.2.5 by @dependabot in #1207
  • Bump org.springframework.vault:spring-vault-core from 3.1.0 to 3.1.1 by @dependabot in #1212
  • Update main.yml to fix #1198 by @commjoen in #1223
  • Bump eslint-plugin-jest from 27.6.0 to 27.6.3 by @dependabot in #1209
  • Bump uk.org.webcompere:system-stubs-jupiter from 2.1.5 to 2.1.6 by @dependabot in #1206
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 5.0.0 to 5.0.1 by @dependabot in #1208
  • Bump @commitlint/config-conventional from 18.4.3 to 18.6.0 by @dependabot in #1211
  • Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.2.0 to 4.8.3.0 by @dependabot in #1215
  • Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.3 to 3.2.5 by @dependabot in #1216
  • Bump com.diffplug.spotless:spotless-maven-plugin from 2.41.1 to 2.43.0 by @dependabot in #1217
  • Bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 by @dependabot in #1227
  • Bump eLco/setup-vault from 1.0.2 to 1.0.3 by @dependabot in #1225
  • Bump amazoncorretto from 21.0.1-alpine to 21.0.2-alpine by @dependabot in #1222
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.4.0 to ~> 5.5.1 in /aws by @dependabot in #1221
  • Bump hashicorp/aws from 5.31.0 to 5.34.0 in /aws by @dependabot in #1220
  • Bump hashicorp/google-beta from 5.10.0 to 5.13.0 in /gcp by @dependabot in #1218
  • Bump hashicorp/google from 5.10.0 to 5.13.0 in /gcp by @dependabot in #1213
  • Bump hashicorp/azurerm from 3.85.0 to 3.89.0 in /azure by @dependabot in #1219
  • Bump com.puppycrawl.tools:checkstyle from 10.12.7 to 10.13.0 by @dependabot in #1231
  • Bump eslint-plugin-n from 16.6.0 to 16.6.2 by @dependabot in #1214
  • Bump aws.sdk.version from 2.22.9 to 2.23.15 by @dependabot in #1232

Full Changelog: 1.8.2...1.8.3

Special thanks

Special thanks to @za , @commjoen , @bendehaan and @nwolniak for their hard work on this release!

1.8.2: 2 new challenges! Open Security Summit Release

16 Jan 11:35
2dbf619
Compare
Choose a tag to compare

What's Changed

Full Changelog: 1.8.1...1.8.2

Special Thanks

Thanks to @nbaars , @commjoen , and @bendehaan for their hard work on this release

1.8.1: Challenge 43 and other updates

13 Jan 19:47
7a31ff5
Compare
Choose a tag to compare

What's Changed

Improvements and bug fixes

New challenges

  • Challenge 43: new challenge for secret shared on social media. by @djvinnie in #1144

Documentation

  • Update main.py: give Nanne a special recognition for his work on the … by @commjoen in #1148

Goodbye Okteto

LCM

Special Thanks

Special thanks to @nbaars , @djvinnie , @bendehaan , and @commjoen for their hard work on this release!

Full Changelog: 1.8.0...1.8.1

1.8.0: Challenge 42, a refactor and many fixes

13 Dec 15:14
e0632f3
Compare
Choose a tag to compare

What's Changed

This is a new major release, as we have done a very big refactor! Thank you, @nbaars, for enabling parallel challenge development!
We also migrated to Spring Boot 3.2.
Just so you know, from here on, you can remove challenges from the app relatively easily by updating the config.

Let's group the changes below:

Documentation:

  • Doc fix: explain and correct the local container creation by @commjoen in #1082
  • Adding alternative text in the pictures to the contribution file by @CaduRoriz in #1066

Refactor:

  • Introduce separate configuration for challenges by @nbaars in #1083

New challenge:

  • [Challenge 42] Spring boot actuator hiding api key by @nwolniak in #1107

Fixes:

LCM:

  • Bump org.webjars:bootstrap from 5.3.1 to 5.3.2 by @dependabot in #1011
  • Bump amazoncorretto from 21.0.0-alpine to 21.0.1-alpine by @dependabot in #1065
  • Bump com.github.eirslett:frontend-maven-plugin from 1.14.0 to 1.14.2 by @dependabot in #1064
  • Bump org.springframework.boot:spring-boot-starter-parent from 3.1.4 to 3.1.5 by @dependabot in #1059
  • Bump org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.0 to 3.3.1 by @dependabot in #1061
  • Bump org.cyclonedx:cyclonedx-core-java from 8.0.1 to 8.0.3 by @dependabot in #1060
  • Bump hashicorp/setup-terraform from 2 to 3 by @dependabot in #1067
  • Bump org.jruby:jruby-complete from 9.4.3.0 to 9.4.4.0 by @dependabot in #1058
  • Bump hashicorp/google from 4.84.0 to 5.4.0 in /gcp by @dependabot in #1077
  • Bump hashicorp/google-beta from 4.84.0 to 5.4.0 in /gcp by @dependabot in #1076
  • Bump terraform-aws-modules/eks/aws from 19.16.0 to 19.17.4 in /aws by @dependabot in #1069
  • Bump hashicorp/azurerm from 3.75.0 to 3.78.0 in /azure by @dependabot in #1068
  • Bump eslint-plugin-import from 2.28.1 to 2.29.0 by @dependabot in #1071
  • Bump eslint from 8.50.0 to 8.52.0 by @dependabot in #1073
  • Bump org.cyclonedx:cyclonedx-maven-plugin from 2.7.9 to 2.7.10 by @dependabot in #1080
  • Bump hashicorp/aws from 5.19.0 to 5.23.1 in /aws by @dependabot in #1070
  • Bump eslint-plugin-jest from 27.4.2 to 27.6.0 by @dependabot in #1074
  • Bump zaproxy/action-baseline from 0.9.0 to 0.10.0 by @dependabot in #1078
  • Bump eslint-plugin-n from 16.1.0 to 16.2.0 by @dependabot in #1075
  • Bump @commitlint/config-conventional from 17.7.0 to 18.1.0 by @dependabot in #1072
  • Bump aws.sdk.version from 2.21.2 to 2.21.13 by @dependabot in #1081
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.5.0 to 5.6.0 by @dependabot in #1063
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 4.8.2 to 4.8.3 by @dependabot in #1062
  • Update terraform-aws-modules/vpc/aws requirement from ~> 5.1.1 to ~> 5.2.0 in /aws by @dependabot in #1099
  • Bump terraform-aws-modules/eks/aws from 19.17.4 to 19.20.0 in /aws by @dependabot in #1098
  • Bump hashicorp/google-beta from 5.4.0 to 5.7.0 in /gcp by @dependabot in #1096
  • Bump hashicorp/google from 5.4.0 to 5.7.0 in /gcp by @dependabot in #1095
  • Bump hashicorp/azurerm from 3.78.0 to 3.83.0 in /azure by @dependabot in #1085
  • Bump @commitlint/config-conventional from 18.1.0 to 18.4.3 by @dependabot in #1100
  • Bump hashicorp/aws from 5.23.1 to 5.29.0 in /aws by @dependabot in #1097
  • Bump actions/setup-java from 3 to 4 by @dependabot in #1084
  • chore(deps): bump actions/setup-python from 4 to 5 by @dependabot in #1110
  • Bump com.github.spotbugs:spotbugs from 4.8.0 to 4.8.2 by @dependabot in #1086
  • chore(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.6 to 4.8.2.0 by @dependabot in #1108
  • chore(deps): bump com.puppycrawl.tools:checkstyle from 10.12.4 to 10.12.6 by @dependabot in #1111
  • Bump eslint from 8.52.0 to 8.55.0 by @dependabot in #1104
  • Bump com.github.spotbugs:spotbugs-annotations from 4.8.0 to 4.8.2 by @dependabot in #1089
  • Bump com.azure.spring:spring-cloud-azure-dependencies from 5.6.0 to 5.7.0 by @dependabot in #1093
  • chore(deps): bump org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.2.0 to 2.3.0 by @dependabot in #1117
  • chore(deps-dev): bump com.tngtech.archunit:archunit-junit5 from 1.1.0 to 1.2.1 by @dependabot in #1118
  • Bump com.github.eirslett:frontend-maven-plugin from 1.14.2 to 1.15.0 by @dependabot in #1090
  • Bump com.google.cloud:spring-cloud-gcp-dependencies from 4.8.3 to 4.8.4 by @dependabot in #1092
  • Bump uk.org.webcompere:system-stubs-jupiter from 2.1.3 to 2.1.5 by @dependabot in #1091
  • chore(deps): bump aws.sdk.version from 2.21.13 to 2.21.42 by @dependabot in #1119
  • chore(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.1.1 by @dependabot in #1120
  • chore(deps): bump com.diffplug.spotless:spotless-maven-plugin from 2.40.0 to 2.41.1 by @dependabot in #1122
  • chore(deps): bump org.jruby:jruby-complete from 9.4.4.0 to 9.4.5.0 by @dependabot in #1121
  • chore(deps): bump org.springframework.cloud:spring-cloud-dependencies from 2022.0.4 to 2023.0.0 by @dependabot in #1116

New Contributors

Special Thanks

Special thanks to @CaduRoriz, @nwolniak , @nbaars , @bendehaan , and @djvinnie for their hard work on this release!

Full Changelog: 1.7.2...1.8.0

1.7.2 quickfix for ui

26 Oct 20:24
0333283
Compare
Choose a tag to compare

What's Changed

Process

  • Added github actions to un-assigned issues after 90 days of inactivity by @za in #1050

Required UI Fixes

###LCM

  • Bump google.golang.org/grpc from 1.51.0 to 1.56.3 in /gcp by @dependabot in #1053
  • Bump google.golang.org/grpc from 1.51.0 to 1.56.3 in /azure by @dependabot in #1051
  • Bump google.golang.org/grpc from 1.51.0 to 1.56.3 in /aws by @dependabot in #1052

New Contributors

  • @za made their first contribution in #1050

Full Changelog: 1.7.1...1.7.2