Skip to content

Release history

Cardea releases

SSH bastion server with access control, session recording, and optional TPM-backed key protection. `EUPL-1.2` `Go/Docker`

All releases

20 shown

Review required
v1.9.1 Maintenance
Dependencies

Routine maintenance and dependency updates.

Review required
v1.9.0 New feature
Auth RBAC

Limits, validation flags, macros, IPv6, SSH hardening

Review required
v1.8.0 New feature
Auth RBAC

Key deauthorization revalidation

v1.7.0 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump golang from 1.26.2-trixie to 1.26.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/62
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/63
  • Bump grafana/grafana from 13.1.0-25196703233 to 13.1.0-25530058790 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/64
  • Bump github/codeql-action from 4.35.3 to 4.35.4 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/65

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.2...v1.7.0

v1.6.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.1.0-24866141508 to 13.1.0-25196703233 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/59
  • Bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/61
  • Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/60

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.1...v1.6.2

v1.6.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump golang from da39430 to c0074c7 in the docker-all group across 1 directory by @dependabot[bot] in https://github.com/hectorm/cardea/pull/52
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/53
  • Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/54
  • Bump grafana/grafana from 13.1.0-24485707904 to 13.1.0-24866141508 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/55
  • Bump golang from c0074c7 to 982ae92 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/56
  • Bump prom/prometheus from v3.11.2 to v3.11.3 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/58
  • Bump golang from 982ae92 to 4a7137e in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/57

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.0...v1.6.1

v1.6.0 New feature
Notable features
  • Reject unknown options in authorized_keys entries.
  • Preserve key comments for piped authorized_keys entries.
  • Extract authorized_keys parser into public package pkg/authkeys.
Full changelog

What's Changed

  • Reject unknown options in authorized_keys entries.
  • Preserve key comments for piped authorized_keys entries.
  • Pause session recording for non-PTY sessions (e.g. rsync, git), which can generate unprintable data.
  • Extract authorized_keys parser into public package pkg/authkeys.
  • Extract timewindow parser into public package pkg/timewindow.

Dependencies

  • Bump the docker-compose-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/46
  • Bump the github-actions-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/47
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/49
  • Bump golang from ce3f1c8 to e3474b9 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/48
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/50
  • Bump golang from 1.26.1-trixie to 1.26.2-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/51

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.2...v1.6.0

v1.5.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.0.0-23466975118 to 13.0.0-23649747481 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/42
  • Bump github/codeql-action from 4.34.1 to 4.35.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/43

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.1...v1.5.2

v1.5.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.0.0-23336907879 to 13.0.0-23466975118 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/41

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.0...v1.5.1

v1.5.0 New feature
Notable features
  • Recordings stored in date-based subdirectories (YYYY/MM/DD/)
  • Structured recording metadata field added to asciicast files
Full changelog

What's Changed

Features

  • Store recordings in date-based subdirectories (YYYY/MM/DD/)
  • Add structured recording metadata field to asciicast files

Dependencies

  • Bump golang.org/x/sys from 0.41.0 to 0.42.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/35
  • Bump golang from ab8c494 to 96b2878 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/36
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/37
  • Bump grafana/grafana from 13.0.0-22696220628 to 13.0.0-23336907879 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/38
  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/39
  • Bump golang from 96b2878 to ce3f1c8 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/40

Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.1...v1.5.0

v1.4.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump docker/login-action from 3.7.0 to 4.0.0 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/30
  • Bump grafana/grafana from 13.0.0-22288738230 to 13.0.0-22649226721 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/31
  • Bump golang from 1.26.0-trixie to 1.26.1-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/32
  • Bump grafana/grafana from 13.0.0-22649226721 to 13.0.0-22696220628 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/33
  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/34

Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.0...v1.4.1

v1.4.0 New feature
Notable features
  • Added `permitsocketopen` and `permitsocketlisten` options
  • Added `from`, `start-time`, `expiry-time`, and `time-window` options
  • Added `environment` option
Full changelog

What's Changed

Features

  • Add permitsocketopen and permitsocketlisten options
  • Add from option
  • Add start-time, expiry-time, and time-window options
  • Add environment option
  • Add restrict, pty, port-forwarding, no-socket-forwarding, and socket-forwarding options
  • Add per-key no-recording / recording options
  • Add SK key support

Dependencies

  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/23
  • Bump golang from fb4b74a to ff83f37 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/22
  • Bump grafana/grafana from 12.4.0-21230963995 to 12.4.0-21419697389 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/21
  • Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/20
  • Bump github/codeql-action from 4.32.0 to 4.32.2 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/25
  • Bump grafana/grafana from 12.4.0-21419697389 to 12.4.0-21887950227 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/26
  • Bump the github-actions-all group with 5 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/27
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/28
  • Bump github/codeql-action from 4.32.4 to 4.32.5 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/29

Full Changelog: https://github.com/hectorm/cardea/compare/v1.3.0...v1.4.0

v1.3.0 New feature
Notable features
  • Add banner file support
Full changelog

What's Changed

Features

  • Add banner file support

Dependencies

  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/19
  • Bump grafana/grafana from 12.4.0-20977568970 to 12.4.0-21230963995 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/18

Full Changelog: https://github.com/hectorm/cardea/compare/v1.2.0...v1.3.0

v1.2.0 New feature
Notable features
  • Add health and metrics endpoint
Full changelog

What's Changed

Features

  • Add health and metrics endpoint

Dependencies

  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/14
  • Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/12

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.2...v1.2.0

v1.1.2 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.1...v1.1.2

v1.1.1 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.0...v1.1.1

v1.1.0 New feature
Notable features
  • Implement remote port forwarding (`permitlisten` option)
  • Add pipe syntax for sharing options across multiple keys (e.g., `KEY1 | KEY2 | KEY3`)
  • Add line continuation support in authorized_keys files (`\` at end of line)
Full changelog

What's Changed

Features

  • Add TPM 2.0 support for hardware-backed private key protection
  • Implement remote port forwarding (permitlisten option)
  • Add pipe syntax for sharing options across multiple keys (e.g., KEY1 | KEY2 | KEY3)
  • Add line continuation support in authorized_keys files (\ at end of line)

Improvements

  • Make host pattern matching case-insensitive

Dependencies

  • Bump github/codeql-action from 4.30.7 to 4.30.8 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/3
  • Bump golang from 1.25.2-trixie to 1.25.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/4
  • Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in https://github.com/hectorm/cardea/pull/6
  • Bump golang.org/x/crypto from 0.43.0 to 0.46.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/7
  • Bump the github-actions-all group across 1 directory with 9 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/8
  • Bump golang from 1.25.3-trixie to 1.25.5-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/9
  • Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/10

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.3...v1.1.0

v1.0.3 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.2...v1.0.3

v1.0.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump hectorm/ghaction-release from 1.0.0 to 1.0.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/2
  • Bump golang.org/x/crypto from 0.42.0 to 0.43.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/1

New Contributors

  • @dependabot[bot] made their first contribution in https://github.com/hectorm/cardea/pull/2

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.1...v1.0.2

v1.0.1 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/commits/v1.0.1

Beta — feedback welcome: [email protected]