Pre release (#645)

* update changelog * update version * Update CHANGELOG.md --------- Co-authored-by: vixentael <vixentael@users.noreply.github.com>
cossacklabs · Mar 3, 2023 · 56d9b1c · 56d9b1c
1 parent d297594
commit 56d9b1c
Show file tree

Hide file tree

Showing 12 changed files with 57 additions and 12 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,50 @@
 # Acra ChangeLog
 
+## [0.95.0](https://github.com/cossacklabs/acra/releases/tag/0.95.0), March 3rd 2023
+
+_Core_:
+
+- **AcraServer**:
+  - Changed default tokenization settings: `consistent_tokenization` is now used by default for tokenization [#614](https://github.com/cossacklabs/acra/pull/614)
+  - Improved processing of packets related to transparent encryption/tokenization [#628](https://github.com/cossacklabs/acra/pull/628), [#630](https://github.com/cossacklabs/acra/pull/630), [#637](https://github.com/cossacklabs/acra/pull/637)
+  - Improved searchable encryption:
+    - Added support of NotEqual/Like/ILike operators [#605](https://github.com/cossacklabs/acra/pull/605) , [#606](https://github.com/cossacklabs/acra/pull/606), [#607](https://github.com/cossacklabs/acra/pull/607), [#609](https://github.com/cossacklabs/acra/pull/609)
+    - Improved handling of the `response_on_fail` option for error cases [#612](https://github.com/cossacklabs/acra/pull/612)
+    - Added the `response_on_fail` option in encryptor config [#618](https://github.com/cossacklabs/acra/pull/618)
+  - Improved SQL parser:
+    - Added support of non-aliased columns with aliased queries [#602](https://github.com/cossacklabs/acra/pull/602)
+    - Improved support of limit/offset for PostgreSQL [#603](https://github.com/cossacklabs/acra/pull/603)
+    - Added support of `RETURNING` statement for INSERT/UPDATE/DELETE [#610](https://github.com/cossacklabs/acra/pull/610)
+    - Added support of `RESET` packets for MySQL binary protocol [#611](https://github.com/cossacklabs/acra/pull/611)
+    - Added support of `schema()` functions, thanks to the new contributor @jercheng [#634](https://github.com/cossacklabs/acra/pull/634)
+  - Added new and deprecated some of existing prometheus metrics [#632](https://github.com/cossacklabs/acra/pull/632)
+    - Added the `acra_decryptions_total` with labels: `{"status": [ "success", "fail"], "type": [ "acrastruct", "acrablock", "acrablock_searchable", "acrastruct_searchable"]}`
+    - Added the `acra_encryptions_total` with labels: `{"status": [ "success", "fail"], "type": [ "acrastruct", "acrablock", "acrablock_searchable", "acrastruct_searchable"]]}`
+    - Added the `acra_tokenizations_total` with labels: `{"status": [ "success", "fail"], "token_type": "{token_type}"}`
+    - Added the `acra_detokenizations_total` with labels: `{"status": [ "success", "fail"], "token_type": "{token_type}"}`
+    - Deprecated the `acra_acrastruct_decryptions_total`
+    - Deprecated the `acra_api_encryptions_total`
+  - Removed building and testing Acra binaries for old golang versions: now Acra supports only the latest version of golang [#624](https://github.com/cossacklabs/acra/pull/624)
+
+- **AcraTranslator**:
+  - Changed default HTTP API settings: `--http_api_enable` is now `true` by default **starting from 0.96.0** [#627](https://github.com/cossacklabs/acra/pull/627)
+
+- **AcraServer, AcraTranslator, AcraKeys**:
+  - Improved support of `tls_ocsp_*`/`tls_crl_*` options if the options `tls_ocsp_[client|database]_*`/`tls_crl_[client|database]_*` were not specified [#617](https://github.com/cossacklabs/acra/pull/617)
+
+- **AcraRollback, AcraRotate**:
+  - Added support of TLS configuration options for connections to the database [#623](https://github.com/cossacklabs/acra/pull/623)
+  - Improved parsing of connection strings with complicated usernames [#642](https://github.com/cossacklabs/acra/pull/642), [#643](https://github.com/cossacklabs/acra/pull/643)
+
+- **AcraTokens**:
+  - Added support of TLS configuration options for Redis storage [#619](https://github.com/cossacklabs/acra/pull/619)
+
+- **AcraKeys**:
+  - `acra-keys destroy` command supports destroying poison record symmetric keys and keypairs, searchable and storage keypairs and symmetric keys [#625](https://github.com/cossacklabs/acra/pull/625)
+  - `acra-keys destroy` command supports destroying rotated key with the **new flag** `--index=<index:int>` [#641](https://github.com/cossacklabs/acra/pull/641). You can find examples on the [documentation page](https://docs.cossacklabs.com/acra/configuring-maintaining/general-configuration/acra-keys/destroy/)
+  - `acra-keys import`/`acra-keys export` supports keystore v1 [#629](https://github.com/cossacklabs/acra/pull/629)
+  - `acra-keys list` lists the rotated keys for keystore v1 & v2 with the **new flag** `--rotated-keys` [#636](https://github.com/cossacklabs/acra/pull/636). The formats of listed keys are updated. You can find examples on the [documentation page](https://docs.cossacklabs.com/acra/configuring-maintaining/general-configuration/acra-keys/list/)/
+
 ## [0.94.0](https://github.com/cossacklabs/acra/releases/tag/0.94.0), November 16th 2022
 
 _Core_:
@@ -231,7 +276,7 @@ _New_:
   Read more details in the [Acra documentation](https://docs.cossacklabs.com/acra/acra-in-depth/data-structures/acrablock/)
   section dedicated to AcraBlock.
 
-- ** KeyStore v2**
+- **KeyStore v2**
   Added new storage format for keys in KeyStore that cryptographically strong key integrity checks,
   additional tracking metadata simplifying key management, KMS integrations.
   Read more details in the [Acra documentation](https://docs.cossacklabs.com/acra/security-controls/key-management/versions/)

diff --git a/benchmarks/config/acra-server.yaml b/benchmarks/config/acra-server.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 encryptor_config_file: /config/encryptor_config.yaml
 tls_ca: /ssl.ca/example.cossacklabs.com.crt
 tls_cert: /ssl.server/acra-server.crt

diff --git a/configs/acra-backup.yaml b/configs/acra-backup.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # import|export values are accepted
 action: 
 

diff --git a/configs/acra-keymaker.yaml b/configs/acra-keymaker.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # Client ID
 client_id: client
 

diff --git a/configs/acra-keys.yaml b/configs/acra-keys.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # path to config
 config_file: 
 

diff --git a/configs/acra-poisonrecordmaker.yaml b/configs/acra-poisonrecordmaker.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # path to config
 config_file: 
 

diff --git a/configs/acra-rollback.yaml b/configs/acra-rollback.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # Client ID should be name of file with private key
 client_id: 
 

diff --git a/configs/acra-rotate.yaml b/configs/acra-rotate.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # path to config
 config_file: 
 

diff --git a/configs/acra-server.yaml b/configs/acra-server.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # Path to AcraCensor configuration file
 acracensor_config_file: 
 

diff --git a/configs/acra-tokens.yaml b/configs/acra-tokens.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # path to config
 config_file: 
 

diff --git a/configs/acra-translator.yaml b/configs/acra-translator.yaml
@@ -1,4 +1,4 @@
-version: 0.94.0
+version: 0.95.0
 # Use clientID from TLS certificates or secure session handshake instead directly passed values in gRPC methods
 acratranslator_client_id_from_connection_enable: false
 

diff --git a/utils/version.go b/utils/version.go
@@ -26,7 +26,7 @@ import (
 // VERSION is current Acra suite version
 // store it as string instead initialized struct value to easy change/grep/sed/replace value via scripts or with
 // -ldflags "-X github.com/cossacklabs/acra/utils.VERSION=X.X.X"
-var VERSION = "0.94.0"
+var VERSION = "0.95.0"
 
 // Version store version info
 type Version struct {