2.10.0

Security

• Dependency & Infrastructure Security:
  • Upgraded Docker base images.
  • Updated critical security libraries:
    • Upgraded github/coreos/go-oidc/v3 and golang.org/x/oauth2 to patch known vulnerabilities.
    • Bumped golang.org/x/crypto to version 0.31.0.
  • Increased session management security by enforcing the HttpOnly flag on session cookies.
• CI/CD Pipeline Enhancements:
  • Updated GitHub Actions, Docker build tools, and various npm packages to incorporate the latest security patches.
• Vulnerability Mitigations:
  • Patched dependencies to mitigate potential vulnerabilities.

Added

• Documentation & Process:
  • Updated the Helm chart defaults to support new container image branding

Changed

• Backend Improvements:
  • Upgraded core Go dependencies:
    • Bumped Go to version 1.23.
    • Updated authentication libraries (github/coreos/go-oidc/v3 to v3.14.1 and golang.org/x/oauth2 to v0.29.0).
    • Enhanced concurrency support with golang.org/x/sync updated to v0.13.0.
  • Adjusted default OIDC scopes so that refresh tokens are requested only if the access token has expired.
• Frontend Enhancements:
  • UI/UX Updates:
    • Upgraded from React 16 to 18.
    • Upgraded from MUI4 to MUI5:
      • Updated input field variants, component APIs.
  • Dependency Updates & Refactoring:
    • Upgraded multiple npm dependencies (e.g., @typescript-eslint/eslint-plugin from 8.18.1 to 8.25.0 and @types/node from 14.18.63 to 22.13.1).
    • Updated the API query construction in api.ts to use native URLSearchParams, replacing deprecated packages.
    • Extracted UI labels and text into separate language resources to simplify translation.
• CI/CD & DevOps:
  • Modernized workflows:
    • Bumped GitHub Actions (e.g., actions/setup-python, actions/setup-go, actions/setup-node, actions/checkout) and Docker actions (docker/setup-buildx-action, docker/setup-qemu-action) to their latest versions.
• General Dependency Updates:
  • Updated various backend and frontend dependencies:
    • For example, github/labstack/echo/v4 was updated from v4.12.0 to v4.13.3.
    • Updated other dependencies such as github.com/stretchr/testify, github.com/golangci/golangci-lint, github.com/jmoiron/sqlx, and several indirect dependencies (e.g., path-to-regexp, express, tough-cookie, browserify-sign, async, url-parse).

Deprecated

• Deprecated the legacy golint linter in favor of the actively maintained revive.
• Phasing out the old querystring package in favor of native URLSearchParams in frontend code.
• Gradually deprecating outdated Formik properties in favor of newer component APIs.

Removed

• Removed deprecated Formik render props and unused translation keys to simplify the codebase.
• Cleaned up legacy Docker Compose configurations, replacing them with the standard docker compose command in CI workflows.

Fixed

• Tooling & Integration:
  • Fixed issues with the server API code generation tool by updating oapi-codegen and related dependencies.
  • Adjusted CI workflows to prevent version conflicts (e.g., with github/codeql-action and actions/checkout).

New Contributors

• @justdan96 made their first contribution in #801
• @sanjaykkr made their first contribution in #983

Full Changelog: 2.9.0...2.10.0

nebraska-helm-1.3.0

Nebraska is an update manager for Flatcar Container Linux.

nebraska-helm-1.2.0

Nebraska is an update manager for Flatcar Container Linux.

2.9.0

🌞 Improvements:

• Update dependencies

⚠️ CHANGES:

• The container image is now published under ghcr.io/flatcar/nebraska and does not contain the branding logo anymore that was used by the Helm chart default value.

Container image: 🐳 ghcr.io/flatcar/nebraska:2.9.0

nebraska-helm-1.1.0

Nebraska is an update manager for Flatcar Container Linux.

2.8.6

🌞 Improvements:

• Update dependencies

Container image: 🐳 ghcr.io/kinvolk/nebraska:2.8.6

2.8.5

🌞 Improvements:

• Update dependencies

🐞 Bug fixes:

• Fix a bug that was crashing the frontend when creating a new application without cloning groups.

Container image: 🐳 ghcr.io/kinvolk/nebraska:2.8.5

nebraska-helm-1.0.0

Nebraska is an update manager for Flatcar Container Linux.

2.8.4

🐞 Bug fixes:

• Fix a bug that was not allowing the user to update group.

Container image: 🐳 ghcr.io/kinvolk/nebraska:2.8.4

2.8.3

🌞 Improvements:

• Show an account management link when using Github auth (so users can quickly go there and disconnect the app if needed)

Container image: 🐳 ghcr.io/kinvolk/nebraska:2.8.3