From ab990d75ff7147d8f52657ba0163ef124422fa31 Mon Sep 17 00:00:00 2001 From: Max Lambrecht Date: Sat, 18 Apr 2026 14:48:58 -0500 Subject: [PATCH] chore(release): prepare release 0.8.17 Signed-off-by: Max Lambrecht --- CHANGELOG.md | 16 ++++++++++++++++ README.md | 20 ++++++++++---------- gradle.properties | 2 +- java-spiffe-helper/README.md | 4 ++-- 4 files changed, 29 insertions(+), 13 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e4056585..95be1b1a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,21 @@ # Changelog +## [0.8.17] - 2026-04-20 + +### Fixed + +* Enforce SPIFFE-spec-compliant URI SAN validation for X.509-SVID leaf certificates (#421) +* Require a non-root SPIFFE ID path for X.509-SVID leaf certificates, per the SPIFFE spec (#417) +* Tighten SPIFFE ID path validation and segment construction to match the SPIFFE spec (#420) +* Parse SPIFFE IDs case-insensitively and normalize trust domains to lowercase in accordance with the SPIFFE spec (#416) + +### Dependency updates + +* Bump grpcVersion from 1.79.0 to 1.80.0 (#414) +* Bump com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9 (#423) +* Bump gradle-wrapper from 9.3.1 to 9.4.1 (#412, #419) + + ## [0.8.16] - 2026-02-25 ### Fixed diff --git a/README.md b/README.md index b2466927..75d0d9c5 100644 --- a/README.md +++ b/README.md @@ -26,7 +26,7 @@ X.509 and JWT SVIDs and bundles. Download -------- -The JARs can be downloaded from [Maven Central](https://search.maven.org/search?q=g:io.spiffe%20AND%20v:0.8.16). +The JARs can be downloaded from [Maven Central](https://search.maven.org/search?q=g:io.spiffe%20AND%20v:0.8.17). The dependencies can be added to `pom.xml` @@ -35,7 +35,7 @@ To import the `java-spiffe-provider` component: io.spiffe java-spiffe-provider - 0.8.16 + 0.8.17 ``` The `java-spiffe-provider` component imports the `java-spiffe-core` component. @@ -45,7 +45,7 @@ To just import the `java-spiffe-core` component: io.spiffe java-spiffe-core - 0.8.16 + 0.8.17 ``` @@ -53,12 +53,12 @@ Using Gradle: Import `java-spiffe-provider`: ```gradle -implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.16' +implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.17' ``` Import `java-spiffe-core`: ```gradle -implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.16' +implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.17' ``` ### MacOS Support @@ -72,14 +72,14 @@ In case run on a osx-x86 architecture, add to your `pom.xml`: io.spiffe grpc-netty-macos - 0.8.16 + 0.8.17 runtime ``` Using Gradle: ```gradle -runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.16' +runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.17' ``` #### Aarch64 (M1) Architecture @@ -91,7 +91,7 @@ If you are running the aarch64 architecture (M1 CPUs), add to your `pom.xml`: io.spiffe grpc-netty-macos-aarch64 - 0.8.16 + 0.8.17 runtime ``` @@ -99,7 +99,7 @@ If you are running the aarch64 architecture (M1 CPUs), add to your `pom.xml`: Using Gradle: ```gradle -runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos-aarch64', version: '0.8.16' +runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos-aarch64', version: '0.8.17' ``` *Caveat: not all OpenJDK distributions are aarch64 native, make sure your JDK is also running @@ -112,7 +112,7 @@ The `java-spiffe-helper` module manages X.509 SVIDs and Bundles in Java Keystore ### Docker Image -Pull the `java-spiffe-helper` image from `ghcr.io/spiffe/java-spiffe-helper:0.8.16`. +Pull the `java-spiffe-helper` image from `ghcr.io/spiffe/java-spiffe-helper:0.8.17`. For more details, see [java-spiffe-helper/README.md](java-spiffe-helper/README.md). diff --git a/gradle.properties b/gradle.properties index ec643c0b..c5ea6457 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1 +1 @@ -version=0.8.16 +version=0.8.17 diff --git a/java-spiffe-helper/README.md b/java-spiffe-helper/README.md index 3aae96f9..3ed13e88 100644 --- a/java-spiffe-helper/README.md +++ b/java-spiffe-helper/README.md @@ -10,11 +10,11 @@ The Helper automatically gets the SVID updates and stores them in the KeyStore a On Linux: -`java -jar java-spiffe-helper-0.8.16-linux-x86_64.jar` +`java -jar java-spiffe-helper-0.8.17-linux-x86_64.jar` On Mac OS: -`java -jar java-spiffe-helper-0.8.16-osx-x86_64.jar` +`java -jar java-spiffe-helper-0.8.17-osx-x86_64.jar` You can run the utility with the `-c` or `--config` option to specify the path to the configuration file. By default, it will look for a configuration file named `conf/java-spiffe-helper.properties` in the current working directory.