Skip to content

Release history

Cardea releases

SSH bastion server with access control, session recording, and optional TPM-backed key protection. `EUPL-1.2` `Go/Docker`

All releases

18 shown

Review required
v1.8.0 New feature
Auth RBAC

Key deauthorization revalidation

v1.7.0 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump golang from 1.26.2-trixie to 1.26.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/62
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/63
  • Bump grafana/grafana from 13.1.0-25196703233 to 13.1.0-25530058790 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/64
  • Bump github/codeql-action from 4.35.3 to 4.35.4 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/65

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.2...v1.7.0

v1.6.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.1.0-24866141508 to 13.1.0-25196703233 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/59
  • Bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/61
  • Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/60

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.1...v1.6.2

v1.6.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump golang from da39430 to c0074c7 in the docker-all group across 1 directory by @dependabot[bot] in https://github.com/hectorm/cardea/pull/52
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/53
  • Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/54
  • Bump grafana/grafana from 13.1.0-24485707904 to 13.1.0-24866141508 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/55
  • Bump golang from c0074c7 to 982ae92 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/56
  • Bump prom/prometheus from v3.11.2 to v3.11.3 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/58
  • Bump golang from 982ae92 to 4a7137e in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/57

Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.0...v1.6.1

v1.6.0 New feature
Notable features
  • Reject unknown options in authorized_keys entries.
  • Preserve key comments for piped authorized_keys entries.
  • Extract authorized_keys parser into public package pkg/authkeys.
Full changelog

What's Changed

  • Reject unknown options in authorized_keys entries.
  • Preserve key comments for piped authorized_keys entries.
  • Pause session recording for non-PTY sessions (e.g. rsync, git), which can generate unprintable data.
  • Extract authorized_keys parser into public package pkg/authkeys.
  • Extract timewindow parser into public package pkg/timewindow.

Dependencies

  • Bump the docker-compose-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/46
  • Bump the github-actions-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/47
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/49
  • Bump golang from ce3f1c8 to e3474b9 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/48
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/50
  • Bump golang from 1.26.1-trixie to 1.26.2-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/51

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.2...v1.6.0

v1.5.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.0.0-23466975118 to 13.0.0-23649747481 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/42
  • Bump github/codeql-action from 4.34.1 to 4.35.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/43

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.1...v1.5.2

v1.5.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump grafana/grafana from 13.0.0-23336907879 to 13.0.0-23466975118 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/41

Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.0...v1.5.1

v1.5.0 New feature
Notable features
  • Recordings stored in date-based subdirectories (YYYY/MM/DD/)
  • Structured recording metadata field added to asciicast files
Full changelog

What's Changed

Features

  • Store recordings in date-based subdirectories (YYYY/MM/DD/)
  • Add structured recording metadata field to asciicast files

Dependencies

  • Bump golang.org/x/sys from 0.41.0 to 0.42.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/35
  • Bump golang from ab8c494 to 96b2878 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/36
  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/37
  • Bump grafana/grafana from 13.0.0-22696220628 to 13.0.0-23336907879 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/38
  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/39
  • Bump golang from 96b2878 to ce3f1c8 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/40

Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.1...v1.5.0

v1.4.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump docker/login-action from 3.7.0 to 4.0.0 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/30
  • Bump grafana/grafana from 13.0.0-22288738230 to 13.0.0-22649226721 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/31
  • Bump golang from 1.26.0-trixie to 1.26.1-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/32
  • Bump grafana/grafana from 13.0.0-22649226721 to 13.0.0-22696220628 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/33
  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/34

Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.0...v1.4.1

v1.4.0 New feature
Notable features
  • Added `permitsocketopen` and `permitsocketlisten` options
  • Added `from`, `start-time`, `expiry-time`, and `time-window` options
  • Added `environment` option
Full changelog

What's Changed

Features

  • Add permitsocketopen and permitsocketlisten options
  • Add from option
  • Add start-time, expiry-time, and time-window options
  • Add environment option
  • Add restrict, pty, port-forwarding, no-socket-forwarding, and socket-forwarding options
  • Add per-key no-recording / recording options
  • Add SK key support

Dependencies

  • Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/23
  • Bump golang from fb4b74a to ff83f37 in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/22
  • Bump grafana/grafana from 12.4.0-21230963995 to 12.4.0-21419697389 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/21
  • Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/20
  • Bump github/codeql-action from 4.32.0 to 4.32.2 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/25
  • Bump grafana/grafana from 12.4.0-21419697389 to 12.4.0-21887950227 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/26
  • Bump the github-actions-all group with 5 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/27
  • Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/28
  • Bump github/codeql-action from 4.32.4 to 4.32.5 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/29

Full Changelog: https://github.com/hectorm/cardea/compare/v1.3.0...v1.4.0

v1.3.0 New feature
Notable features
  • Add banner file support
Full changelog

What's Changed

Features

  • Add banner file support

Dependencies

  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/19
  • Bump grafana/grafana from 12.4.0-20977568970 to 12.4.0-21230963995 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/18

Full Changelog: https://github.com/hectorm/cardea/compare/v1.2.0...v1.3.0

v1.2.0 New feature
Notable features
  • Add health and metrics endpoint
Full changelog

What's Changed

Features

  • Add health and metrics endpoint

Dependencies

  • Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/14
  • Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/12

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.2...v1.2.0

v1.1.2 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.1...v1.1.2

v1.1.1 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.0...v1.1.1

v1.1.0 New feature
Notable features
  • Implement remote port forwarding (`permitlisten` option)
  • Add pipe syntax for sharing options across multiple keys (e.g., `KEY1 | KEY2 | KEY3`)
  • Add line continuation support in authorized_keys files (`\` at end of line)
Full changelog

What's Changed

Features

  • Add TPM 2.0 support for hardware-backed private key protection
  • Implement remote port forwarding (permitlisten option)
  • Add pipe syntax for sharing options across multiple keys (e.g., KEY1 | KEY2 | KEY3)
  • Add line continuation support in authorized_keys files (\ at end of line)

Improvements

  • Make host pattern matching case-insensitive

Dependencies

  • Bump github/codeql-action from 4.30.7 to 4.30.8 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/3
  • Bump golang from 1.25.2-trixie to 1.25.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/4
  • Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in https://github.com/hectorm/cardea/pull/6
  • Bump golang.org/x/crypto from 0.43.0 to 0.46.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/7
  • Bump the github-actions-all group across 1 directory with 9 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/8
  • Bump golang from 1.25.3-trixie to 1.25.5-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/9
  • Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/10

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.3...v1.1.0

v1.0.3 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.2...v1.0.3

v1.0.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Bump hectorm/ghaction-release from 1.0.0 to 1.0.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/2
  • Bump golang.org/x/crypto from 0.42.0 to 0.43.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/1

New Contributors

  • @dependabot[bot] made their first contribution in https://github.com/hectorm/cardea/pull/2

Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.1...v1.0.2

v1.0.1 Maintenance

Routine maintenance release for Cardea.

Changelog

Full Changelog: https://github.com/hectorm/cardea/commits/v1.0.1

Beta — feedback welcome: [email protected]