This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 1mo
Relational Databases
✓ No known CVEs patched
This release patches 2 known CVEs
Affected surfaces
deps
Summary
AI summaryUpdated Helm chart version, Go runtime, dependencies, added IAM OIDC support, workflow validation and schema changes, and observability metrics.
Full changelog
What's Changed
- chore(helm): bump chart appVersion to v0.7.1 by @github-actions[bot] in https://github.com/Cyoda/cyoda-go/pull/239
- chore(deps): go 1.26.3 + golang.org/x/net v0.53.0 (CVE bumps) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/241
- docs: correct stale isolation-level references to SI+FCW by @pschleger in https://github.com/Cyoda/cyoda-go/pull/240
- docs: README + OVERVIEW→FEATURES + new help topics (admin, cluster) — evaluator-first refactor by @pschleger in https://github.com/Cyoda/cyoda-go/pull/242
- feat(helm): optional separate migration DSN (migrate.postgres) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/268
- chore(deps): bump the minor-and-patch group across 1 directory with 8 updates by @dependabot[bot] in https://github.com/Cyoda/cyoda-go/pull/267
- chore(deps): bump distroless/static from
47b2d72to3592aa8in /deploy/docker by @dependabot[bot] in https://github.com/Cyoda/cyoda-go/pull/248 - chore(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in https://github.com/Cyoda/cyoda-go/pull/245
- chore(deps): bump busybox from 1.37 to 1.38 in /deploy/docker in the minor-and-patch group by @dependabot[bot] in https://github.com/Cyoda/cyoda-go/pull/266
- ci: run full CI battery on release/** branches by @pschleger in https://github.com/Cyoda/cyoda-go/pull/269
- refactor(workflow): #250 split processor execution-location from scheduled-transition timing by @pschleger in https://github.com/Cyoda/cyoda-go/pull/265
- chore(deps): target Dependabot PRs at release/v0.8.0 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/275
- chore(deps): bump go directive to 1.26.4 — stdlib CVE fixes by @pschleger in https://github.com/Cyoda/cyoda-go/pull/279
- feat(iam): OpenAPI conformance for /oauth/keys/* (keypair + trusted) — closes #281 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/289
- feat(spi): tx-state sentinel errors — closes #200 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/294
- feat(grpc): wire ProcessorConfig.Context pass-through for Cloud parity (closes #253) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/297
- feat(workflow): tighten import-time validation (state graph, names, ExecutionMode enum) — closes #255 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/298
- feat(entity): grouped statistics query endpoint (closes #299) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/300
- feat(workflow): silent-default semantics — closes #256 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/302
- chore(workflow): import/export boundary hygiene sweep — closes #257 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/306
- test(workflow): import/export coverage sweep — closes #258 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/307
- feat(workflow): scheduled-transition configuration shape + SPI by @pschleger in https://github.com/Cyoda/cyoda-go/pull/308
- feat(workflow): asyncResult + crossoverToAsyncMs SPI shape with import rejection — closes #261 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/309
- feat(workflow): RetryPolicy import-time validation + surface inbound retryable flag — closes #262 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/310
- feat(workflow): strict-decoder on import handler — closes #264 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/311
- feat(iam): OpenAPI conformance for /clients (technical users) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/312
- feat(iam): OIDC providers subsystem (#284) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/314
- auth help topic + v0.8.0 OIDC polish by @pschleger in https://github.com/Cyoda/cyoda-go/pull/316
- feat(auth/oidc): #317 support object-shaped rolesClaim (Zitadel) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/318
- chore(help): use sort.Strings, drop hand-rolled insertion sort by @pschleger in https://github.com/Cyoda/cyoda-go/pull/320
- chore(release): forward-port cyoda-platform → cyoda org-rename fix by @pschleger in https://github.com/Cyoda/cyoda-go/pull/324
- feat(workflow): forward-port schema-version contract (#319) + bump 1.0 → 1.1 for v0.8.0 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/327
- chore(deps): bump mikefarah/yq from 4.53.2 to 4.53.3 in the minor-and-patch group across 1 directory by @dependabot[bot] in https://github.com/Cyoda/cyoda-go/pull/325
- feat(workflow): client-owned annotations on workflows, states, and transitions by @pschleger in https://github.com/Cyoda/cyoda-go/pull/329
- feat(observability): wire OIDC subsystem metrics (D22 follow-up to #284) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/331
- fix(test): unbuffered FaultInjectingKV pause channel (fix intermittent race deadlock) by @pschleger in https://github.com/Cyoda/cyoda-go/pull/332
- release-prep v0.8.0: deps sweep, SPI v0.8.0 pin, GOPRIVATE fix, doc finalize by @pschleger in https://github.com/Cyoda/cyoda-go/pull/333
- Release v0.8.0 by @pschleger in https://github.com/Cyoda/cyoda-go/pull/334
Full Changelog: https://github.com/Cyoda/cyoda-go/compare/v0.7.1...v0.8.1
Security Fixes
- Bumped Go to 1.26.4 — includes stdlib CVE fixes
- Dependency updates with CVE bumps (golang.org/x/net v0.53.0, mikefarah/yq 4.53.3)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Cyoda-go
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]