Skip to content

9.5.1
Compare
Choose a tag to compare
@rra rra released this 30 Oct 23:07
· 271 commits to main since this release
9.5.1
This tag was signed with the committer’s verified signature. The key has expired.
rra Russ Allbery
GPG key ID: 7D80315C5736DE75
Expired
Learn about vigilant mode.
fc4817f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Bug fixes

  • Add a socket timeout, enable keepalive, and fix the retry specification for the Redis connection pool to help Gafaelfawr recover from Redis outages.
  • Always mask all headers to which Gafaelfawr gives special meaning when passing requests to a service downstream of a GafaelfawrIngress, instead of only masking the ones Gafaelfawr might set in that configuration. This ensures that no service behind a GafaelfawrIngress sees, e.g., X-Auth-Request-User unless it truly is authenticated by Gafaelfawr.

What's Changed

  • DM-41424: Improve Redis pool configuration by @rra in #887
  • DM-41424: Always mask all Gafaelfawr response headers by @rra in #888
  • DM-41424: Refactor to reduce complexity by @rra in #889
  • [neophile] Update dependencies by @neophile-square in #892
  • Bump actions/setup-node from 3 to 4 by @dependabot in #893
  • Bump gatsby from 5.12.8 to 5.12.9 in /ui by @dependabot in #891
  • Bump react-aria-modal from 5.0.0 to 5.0.2 in /ui by @dependabot in #894
  • DM-41424: Prepare Gafaelfawr 9.5.1 by @rra in #895
  • DM-41424: Remove blank line in changelog by @rra in #896

Full Changelog: 9.5.0...9.5.1

Contributors

rra and dependabot
Assets 2