v2.8.0

Notable changes

• OPSEXP-2676 Bump components for Gemini release by @gionn in #871
• OPSEXP-2676 Support latest os minor releases by @gionn in #872
• OPSEXP-2554 Enable using activemq password with $ for transformers role by @pmacius in #862
• OPSEXP-2554 Enable using activemq password with $ for trouter role by @pmacius in #867
• OPSEXP-2669 Use rebuilt imagemagick packages to fix Rocky Linux 9.4 deployments by @gionn in #864

Other changes

• OPSEXP-2627 Update release section with ecosystem updates by @gionn in #843
• Update dependency middleware_automation.keycloak to v2.1.2 by @alfresco-build in #845
• Update dependency ansible.utils to v4.1.0 by @alfresco-build in #846
• Bump ansible-core from 2.15.10 to 2.15.11 by @dependabot in #844
• Update dependency community.general to v8.6.0 by @alfresco-build in #849
• Update dependency community.crypto to v2.19.0 by @alfresco-build in #848
• Bump jinja2 from 3.1.3 to 3.1.4 by @dependabot in #854
• OPSEXP-2622 Move dev docs to repo readme by @gionn in #855
• OPSEXP-2662 do not trigger molecule workflows when changing docs workflow by @gionn in #857
• OPSEXP-2662 add test for broken links in the docs by @gionn in #856
• OPSEXP-2608 Migrate diagrams to mermaid by @gionn in #858
• Bump rexml from 3.2.6 to 3.2.8 in /docs by @dependabot in #863
• Bump nokogiri from 1.16.4 to 1.16.5 in /docs by @dependabot in #859
• Bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1 by @dependabot in #853
• Bump Alfresco/alfresco-build-tools from 5.22.3 to 5.25.0 in /.github/actions/molecule_integration_ec2 by @dependabot in #850
• Update dependency community.postgresql to v3.4.1 by @alfresco-build in #870
• Update dependency community.general to v8.6.1 by @alfresco-build in #869
• Update dependency amazon.aws to v7.6.0 by @alfresco-build in #861
• Update dependency community.crypto to v2.20.0 by @alfresco-build in #860
• Bump pytest from 7.1.3 to 8.2.1 by @dependabot in #865
• Bump Alfresco/alfresco-build-tools from 5.22.3 to 5.25.0 by @dependabot in #851
• OPSEXP-2676 Bump docs for Gemini release by @gionn in #875

Full Changelog: v2.7.1...v2.8.0

v2.7.1

What's Changed

• Bump ansible-core from 2.15.9 to 2.15.10 by @dependabot in #840
• Update dependency community.aws to v7.2.0 by @alfresco-build in #839
• Update dependency amazon.aws to v7.5.0 by @alfresco-build in #838
• OPSEXP-2627: ATS 4.1.1 is now supported with ACS 7.4 by @alxgomz in #842

Full Changelog: v2.7.0...v2.7.1

v2.7.0

What's Changed

• OPSEXP-2553 Do not enforce mtls check for SE when not capable of by @gionn in #809
• OPSEXP-2573: bump components with latest security fixes by @alxgomz in #813
• Move all the docs under docs folder by @gionn in #814
• Bump black from 23.12.1 to 24.3.0 by @dependabot in #812
• Update dependency amazon.aws to v7.4.0 by @alfresco-build in #811
• Fixed wrong URL in README.md by @MattioliLeo in #815
• OPSEXP-2464 Remove support for 7.0 version by @pmacius in #822
• Skip enterprise workflow when nexus secrets are not available by @gionn in #823
• OPSEXP-2603 Adopt jekyll for docs website by @gionn in #821
• Update dependency ansible.utils to v4 by @alfresco-build in #817
• Update dependency community.general to v8.5.0 by @alfresco-build in #816
• Bump updatecli/updatecli-action from 2.55.0 to 2.56.0 by @dependabot in #819
• Bump actions/configure-pages from 3.0.7 to 5.0.0 by @dependabot in #826
• Bump actions/upload-pages-artifact from 1.0.10 to 3.0.1 by @dependabot in #828
• Bump Alfresco/alfresco-build-tools from 5.17.0 to 5.22.3 by @dependabot in #827
• OPSEXP-2603 Reintroduce README to be shown on the github repository page by @gionn in #829
• OPSEXP-2603 Fixup deployment to GitHub Pages by @gionn in #830
• OPSEXP-2466 Remove CI for 7.1 and 7.2 by @pmacius in #824
• OPSEXP-2603 Fix theme javascript inclusion by @gionn in #832
• OPSEXP-2549 Set reposearch_shared_secret when search is defined by @pmacius in #833
• OPSEXP-2610 Move tests for version 7.1 and 7.2 to manually triggered workflow by @pmacius in #831
• Bump idna from 3.6 to 3.7 by @dependabot in #836
• OPSEXP-2603 Fixup url in jekyll config by @gionn in #835
• OPSEXP-2639 Switch to upstream jekyll workflow by @gionn in #837
• OPSEXP-2627: bump components for Fornax release by @alxgomz in #841

Full Changelog: v2.6.0...v2.7.0

v2.6.1

What's Changed

• OPSEXP-2553 Do not enforce mtls check for SE when not capable of by @gionn in #809
• OPSEXP-2573: bump components with latest security fixes by @alxgomz in #813

Full Changelog: v2.6.0...v2.6.1

v2.6.0 (ACS 23.2.1)

What's Changed

• OPSEXP-2417 Disable APS integration in the ADW by @slohe1 in #757
• Bump ansible-core from 2.15.8 to 2.15.9 by @dependabot in #773
• Add dependabot config for galaxy action by @gionn in #777
• OPSEXP-2450 Add docker integration test for solr community by @gionn in #784
• Update .gitignore for db_connector_sync config files by @morgan-patou in #789
• OPSEXP-2505 Bump postgresql jdbc connector to fix CVE-2024-1597 by @gionn in #790
• OPSEXP-2450 Search Enterprise as default search engine by @gionn in #783
• OPSEXP-2536: remove old fashioned java ipv4 preference by @alxgomz in #796
• OPSEXP-2538: Fix & update the TCP ports table by @alxgomz in #802
• OPSEXP-2510 Bump versions for Eridanus release by @gionn in #793
• OPSEXP-2537 Set credentials only if needed for current inventory by @pmacius in #803
• OPSEXP-2551 Fixup redirect url configuration for adw/acc by @gionn in #807
• OPSEXP-2510 Update release docs by @gionn in #808

New Contributors

• @pmacius made their first contribution in #803

Full Changelog: v2.5.0...v2.6.0

v2.5.0

Important changes

We are now on ansible-core v2.15, which requires a control node with python 3.9 - 3.11.

If you are upgrading from a previous playbook version, ensure to update pipenv and ansible-galaxy dependencies with:

pipenv install --deploy
pipenv run ansible-galaxy install -r requirements.yml --force

What's Changed

• Fix jdbc driver download for sync service by @alxgomz in #739
• OPSEXP-2442 Add Red Hat & Rocky version 9.3 to supported OS by @MattioliLeo in #740
• OPSEXP-2156 Bump molecule to v6.0.3 by @gionn in #703
• Update dependency middleware_automation.keycloak to v2.0.1 by @alfresco-build in #745
• Update dependency amazon.aws to v6.5.1 by @alfresco-build in #746
• OPSEXP-2446 Bump ansible-core to 2.15.8 by @gionn in #744
• Update dependency ansible.utils to v2.12.0 by @alfresco-build in #748
• Update dependency buluma.elastic_repo to v0.3.0 by @alfresco-build in #749
• OPSEXP-2446 Drop docker collection and bump aws collection by @gionn in #751
• OPSEXP-2446 Bump all remaining galaxy dependencies by @gionn in #755
• OPSEXP-2446 Bump components for draco release by @gionn in #750

New Contributors

• @MattioliLeo made their first contribution in #740

Full Changelog: v2.4.2...v2.5.0

v2.4.2

What's Changed

• Fix installing custom JDBC driver by @morgan-patou in #730
• OPSEXP-2424: update OS matrix by @alxgomz in #732

Full Changelog: v2.4.1...v2.4.2

v2.4.1

Important changes

Resolve ActiveMQ CVE-2023-46604 and JSON CVE-2023-5072 vulnerabilities for ACS 23.1/7.4/7.3/7.2/7.1 as per https://community.hyland.com/en/bulletins/items/92262-action-required-for-alfresco-content-services-activemq-and-json-v

What's Changed

• Update deployment guide for 23.1 by @nbarithel in #708
• Allow access to Control Center for Community by @morgan-patou in #710
• OPSEXP-2399: move pki molecule scenario to comunity workflow by @alxgomz in #713
• OPSEXP-2406: remove broken defaults in local inventory and update doc by @alxgomz in #718
• OPSEXP-2404 Bump versions to address CVE-2023-46604 by @gionn in #717
• OPSEXP-2409: add when condition in post_tasks for consistency by @alxgomz in #721
• Create pki subfolders for inventory hosts with slash by @morgan-patou in #711
• OPSEXP-2329 Fix keycloak endpoint and console access behind proxy by @gionn in #696
• Bump cryptography from 41.0.4 to 41.0.6 by @dependabot in #722
• OPSEXP-2404 Ensure we are really testing acs 7.4.0 on ec2 by @gionn in #725
• OPSEXP-2404 Bump ATS and Sync tags in 7.4/7.3/7.2/7.1 to fix activemq CVE-2023-46604 by @gionn in #724

New Contributors

• @nbarithel made their first contribution in #708

Full Changelog: v2.4.0...v2.4.1

v2.4.0 (ACS 23.1.0)

What's Changed

• OPSEXP-2110 Bump AMI images used in integration testing by @gionn in #596
• Add latest release badge in README by @gionn in #601
• OPSEXP-2122 Honor configured python version when creating pipenv venv by @gionn in #602
• Make opensearch suite create shorter resource name by @gionn in #594
• OPSEXP-2135 Add plantuml regeneration workflow by @gionn in #611
• OPSEXP-2155 Make plantuml workflow autocommit configured as per docs by @gionn in #614
• Update deployment guide components and network checks by @morgan-patou in #607
• OPSEXP-2055: address most ansible-lint issues by @alxgomz in #616
• OPSEXP-2055: migrate to fully qualified actions core names by @alxgomz in #619
• OPSEXP-2161: Pin Rocky Linux version to minor by @alxgomz in #618
• OPSEXP-2108 Avoid failure in copying from local folder to tomcat lib dir when repo_db_url is set by @gionn in #624
• OPSEXP-2106 Update pipenv action in ansible repo by @slohe1 in #630
• OPSEXP-1280: refactor acs repo properties file generation by @alxgomz in #625
• DOCS-7261: Update deployment-guide.md by @alxgomz in #632
• Fix export certificate chain task stuck waiting for input by @morgan-patou in #633
• OPSEXP-2166 Test playbook on RHEL 8.7 by @slohe1 in #636
• OPSEXP-2203 Restart affected services by certificate refresh for mtls by @gionn in #642
• OPSEXP-2119 Activemq 5.17 support on playbook by @slohe1 in #644
• Fixup apply SELinux contexts before nginx service start by @morgan-patou in #634
• Wait for mounts before starting components + add auto-restart on failure by @morgan-patou in #638
• OPSEXP-2176 Allow repo_db_url to override search enterprise reindex configuration by @gionn in #663
• OPSEXP-2303 Add identity role for SSO by @gionn in #669
• OPSEXP-2304 Fixup community workflow by @gionn in #674
• OPSEXP-2305 Refactor frontend apps in a new webapp role by @gionn in #675
• OPSEXP-2304 Configure SSO in repository by @gionn in #673
• OPSEXP-2304 Fixup secret presence for activemq, elasticsearch and identity by @gionn in #676
• OPSEXP-2305 Enable SSO for adf apps by @gionn in #677
• OPSEXP-2314 Enable SSO for Share by @gionn in #680
• OPSEXP-2332 optionally disable nginx forwarded for headers by @gionn in #686
• OPSEXP-2335 Fixup app.config.json dynamic configuration for adf apps by @gionn in #689
• OPSEXP-2314 Make sure that share SSO config is properly setup by @gionn in #688
• OPSEXP-2283: allow speficying the separator when using xorigins macro by @alxgomz in #691
• OPSEXP-2331 Fix flaky failure in search role by @gionn in #693
• OPSEXP-2335 Fixup sso across adf apps by @gionn in #694
• OPSEXP-2354 Fix nginx redirect when behind ELB via argument by @gionn in #698
• OPSEXP-2328 Document initial SSO support by @gionn in #699

Full Changelog: v2.3.0...v2.4.0

v2.3.0 (ACS 7.4.0)

What's Changed

• OPSEXP-1889 Drop support for ACS 6.2 by @gionn in #519
• Search replication by @alxgomz in #464
• OPSEXP-1832 update imagemagick package by @slohe1 in #530
• OPSEXP-1936 Move quickstart at the start of deployment guide by @gionn in #531
• Fix missing pipenv run in ansible-vault docs by @gionn in #535
• Add Search enterprise component to the table by @alxgomz in #538
• OPSEXP-1741 Enable idempotence checks on EC2 integration tests by @upandey123 in #541
• OPSEXP-1980: Add support for importing certificates in the JRE by @alxgomz in #545
• OPSEXP-1982: implement hosts' certificate generation by @alxgomz in #548
• OPSEXP-2036: fix CORS & CSRF config by @alxgomz in #558
• Fix OS test check and update supported OSes configuration by @morgan-patou in #559
• OPSEXP-1846 Upgrade ansible-core to 2.14.3 by @gionn in #560
• OPSEXP-1846 Add link to ansible version in docs by @gionn in #562
• Bump ansible-core from 2.14.3 to 2.14.4 by @dependabot in #563
• OPSEXP-1990: refactor zip builder script by @alxgomz in #565
• Allow nginx to write logs with SELinux by @morgan-patou in #567
• OPSEXP-1779 Add EC2 OpenSearch integration test by @alxgomz in #568
• Fixup selinux idempotency by @gionn in #573
• OPSEXP-1645 Improve enterprise workflow stability by @gionn in #572
• OPSEXP-2066 Ensure password are strong enough and aws opensearch tests complain less by @gionn in #578
• OPSEXP-2066 Get rid of outdated AGS amps in tests by @gionn in #576
• OPSEXP-2066 refactor amps updates in updatecli by @gionn in #571
• OPSEXP-2065 Prepare for ACS 7.4 release by @gionn in #570
• OPSEXP-2110 Bump 7.2.N-extra-vars with updatecli by @gionn in #593
• OPSEXP-2110 Add 7.3.N-extra-vars.yml by @gionn in #592
• OPSEXP-2110 Document current release process steps by @gionn in #598
• OPSEXP-2110 Refresh docs for ACS 7.4.0 by @gionn in #595
• OPSEXP-2110 Bump community extra-vars for ACS 7.4.0 by @gionn in #597

New Contributors

• @morgan-patou made their first contribution in #559

Full Changelog: v2.2.1...v2.3.0