v2.0.0-rc.1

This is a release candidate for GitProxy v2. Breaking changes are included in #973 (associate commits by email).

If you encounter any problems, feel free to open an issue!

What's Changed

• fix(deps): update npm - - package.json by @renovate[bot] in #883
• fix: restore user configs being merged with defaults by @coopernetes in #1129
• chore(deps): update github-actions - workflows - .github/workflows/ci.yml by @renovate[bot] in #1127
• chore(deps): update dependency @finos/git-proxy to ^1.19.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate[bot] in #1128
• fix(deps): update dependency axios to ^1.11.0 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1130
• chore: prepare for 2.x release with rc version by @coopernetes in #1137
• refactor: replace getMissingData action with checkEmptyBranch by @jescalada in #1134
• fix: 946 associate commits by email by @kriswest in #973

Full Changelog: v1.19.2...v2.0.0-rc.1

v1.19.2

❗️ Important security updates ❗️

This release contains security fixes for newly discovered high severity issues. These issues were privately reported to the GitProxy & FINOS teams. Special thanks to the following individuals for their contributions:

• @dgl for the initial report, analysis and reproductions
• @jescalada @fabiovincenzi @06kellyjac for implementing & reviewing the various fixes

The following advisories are resolved in this release:

• GHSA-qr93-8wwf-22g4
• GHSA-xxmh-rf63-qwjv
• GHSA-39p2-8hq9-fwj6
• GHSA-v98g-8rqx-g93g

All GitProxy users & implementations are strongly advised to upgrade to this latest version to receive these critical fixes. Additional bug fixes and enhancements are included below.

What's Changed

• fix: additional user api leaks by @andypols in #1098
• fix(deps): update dependency body-parser to v2 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1087
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1112
• fix: updated URL for FINOS community slack channel by @sam-holmes2 in #1011
• docs: update SECURITY.md with reporting guidance by @tabathad in #1117
• fix: dependency vulnerability fixes by @jescalada in #1103
• fix: default config validation error and extras by @jescalada in #1124
• fix: parsePush regression on tmp directory by @jescalada in #1118

New Contributors

• @tabathad made their first contribution in #1117

Full Changelog: v1.19.1...v1.19.2

Version 1.19.1

What's Changed

• fix: prevent non-admin users changing another user's gitAccount by @andypols in #1093
• refactor(tsx): Migrate React components to TSX by @fabiovincenzi in #984
• fix: only trim trailing .git not any match by @06kellyjac in #1094
• chore: bump by patch to v1.19.1 by @jescalada in #1102

Full Changelog: v1.19.0...v1.19.1

Version 1.19.0

What's Changed

• chore(deps): update dependency @types/node to ^22.15.34 - li-cli - experimental/li-cli/package.json by @renovate in #1067
• chore(deps): update dependency @finos/git-proxy to ^1.18.0 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate in #1073
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @renovate in #1072
• chore(deps): update dependency @finos/git-proxy to ^1.18.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate in #1074
• fix(deps): update dependency eslint to ^9.30.0 - website - website/package.json by @renovate in #1075
• chore(deps): update dependency lint-staged to v16 - license-inventory - experimental/license-inventory/package.json by @renovate in #1076
• chore(deps): update dependency node to v22 - workflows - .github/workflows/unused-dependencies.yml by @renovate in #1077
• chore(deps): update dependency sinon to v20 - - package.json by @renovate in #1078
• fix(deps): update dependency eslint to ^9.30.1 - website - website/package.json by @renovate in #1079
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate in #1080
• chore(deps): update dependency sinon to v21 - - package.json by @renovate in #1081
• chore(deps): update grafana/grafana docker tag to v12 - license-inventory - experimental/license-inventory/docker-compose.yaml by @renovate in #1082
• fix(deps): update dependency body-parser to v2 - - package.json by @renovate in #1084
• fix(proxy): preserve original Git pack POST streams before validation by @fabiovincenzi in #1060
• feat: mongo connection string & cookie secret from env vars by @coopernetes in #1086
• fix(deps): update dependency zod to ^3.25.73 - li-cli - experimental/li-cli/package.json by @renovate in #1085
• fix: updated README and documentation site with info on community meeting by @sam-holmes2 in #1026
• chore: add @jescalada as a featured maintainer on docs site and remov… by @JamieSlome in #1097
• fix: use a public user object to prevent passwords and other secrets … by @andypols in #1090
• chore: bump by minor to v1.19.0 by @JamieSlome in #1099

New Contributors

• @sam-holmes2 made their first contribution in #1026
• @andypols made their first contribution in #1090

Full Changelog: v1.18.2...v1.19.0

Version 1.18.2

What's Changed

• fix: correct typing for ConfigLoader env by @06kellyjac in #1070
• chore: bump by patch to v1.18.2 by @JamieSlome in #1071

Full Changelog: v1.18.1...v1.18.2

Version 1.18.1

What's Changed

• test: improve auth test coverage by @jescalada in #1024
• chore(deps): update dependency @jest/globals to v30 - license-inventory - experimental/license-inventory/package.json by @renovate in #1058
• test: improve proxy route test coverage by @jescalada in #1025
• chore: upgrade node in CI to 20.19 by @jescalada in #1059
• fix: allow for auth with activedirectory again by @06kellyjac in #1061
• chore: bump by patch to v1.18.1 by @JamieSlome in #1069

Full Changelog: v1.18.0...v1.18.1

Version 1.18.0

What's Changed

• test: stop the config loader and restore defaults after tests have run by @kriswest in #1050
• chore: apply finos active badge by @TheJuanAndOnly99 in #1052
• feat: support direct querying of AD group membership via LDAP by @kriswest in #972
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate in #1016
• chore(deps): update dependency @finos/git-proxy to ^1.17.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate in #1054
• chore(deps): update github-actions - workflows - .github/workflows/ci.yml by @renovate in #1055
• fix(deps): update dependency axios to ^1.10.0 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate in #1056
• feat(experimental): fall back to local spdx data and filter deprecated by @06kellyjac in #1048
• fix(deps): update npm - website - website/package.json by @renovate in #1057
• feat(auth): add role mapping for JWT auth claims by @jescalada in #977
• chore: bump by minor to v1.18.0 by @JamieSlome in #1066

Full Changelog: v1.17.2...v1.18.0

Version 1.17.2

What's Changed

• fix: neDB implementation issues by @kriswest in #979
• test: improve config test coverage by @jescalada in #1032
• test: increase action test coverage by @jescalada in #1038
• fix: correct method for finding ad configuration by @06kellyjac in #1046
• chore: bump by patch to v1.17.2 by @JamieSlome in #1047

Full Changelog: v1.17.1...v1.17.2

Version 1.17.1

What's Changed

• fix: push parsing drops commit messages unless they end in a newline by @kriswest in #976
• chore: bump by patch to v1.17.1 by @JamieSlome in #1044

Full Changelog: v1.17.0...v1.17.1

Version 1.17.0

What's Changed

• feat(auth): Add JWT auth for API routes by @jescalada in #967
• chore: bump by minor to v1.17.0 by @JamieSlome in #1036

Full Changelog: v1.16.0...v1.17.0