v0.4.18

Changelog

Other Work

• 01698f8: request but do not verify client certs (@johnabass)

v0.4.17

Changelog

Other Work

• 01698f8: request but do not verify client certs (@johnabass)

v0.4.14 2023-02-06

• Update configs and documentation for the introduction of OTLP in Candlelight #137
• Correct Bad Usage of LoggerIn that broke Themis #136

v0.4.13 2022-12-01

• Disable TLS 1.0 and 1.1 by default. Configuration can reenable.
• Disable ciphers vulnerable to SWEET32.

v0.4.12 2022-11-30

• Fix Deprecated FX Logger, Add Zap Logging #107
• Replace package xlog with sallust #123
• Replace go-kit/log with uber zap #121
• CVE-2022-32149 (High) detected in golang.org/x/text-v0.3.7 #117

v0.4.11 2022-10-31

• Remove several unused build files and update the docker images to work. #122

v0.4.10 2022-10-28

• Update dependencies.
• Fix the docker container so it has configuration in the right place.

v0.4.9 2022-10-07

• Patch failing docker image, fix linter issues, fix breaking unit tests & changes #104

v0.4.8 2022-06-29

• Migrated to github.com/golang-jwt/jwt to address a security vulnerability. #78
• Updated spec file and rpkg version macro to be able to choose when the 'v' is included in the version. #80
• Updated transport.go to send a 400 error if there is an issue parsing the URL. #47
• Allow any peer certificate to pass validation, instead of requiring all of them to pass. #91

v0.4.7 05/04/2021

- Migrate to github actions, normalize analysis tools, Dockerfiles and Makefiles. [#67](https://github.com/xmidt-org/themis/pull/67)
- Add optional OpenTelemetry tracing feature. [#75](https://github.com/xmidt-org/themis/pull/75)