Releases: opensearch-project/security
Releases · opensearch-project/security
2.0.0.0-rc1
Compatible with OpenSearch 2.0.0-rc1
Enhancements
- Remove checked-in zip files (#1774)
- Introduce dfm_empty_overrides_all setting to enable role without dls/fls to override roles with dls/fls (#1735)
- Add depreciation notice to security tools (#1756)
- [Practice] Reverting changes (#1754)
- Renames securityconfig folder to config in bundle step and makes relevant changes (#1749)
- Updated issue templates from .github. (#1740)
- Updates Dev guide (#1590)
- List out test failures in CI log (#1737)
- Make Git ignore out/ directory (#1734)
- Fix data-stream name resolution for wild-cards (#1723)
- Remove support for JDK14 (#1720)
- Speeding up tests (#1715)
- Fix min_doc_count handling when using Document Level Security (#1714)
- Set the mapped security roles of the user so these can be used by the DLS privileges evaluator. Allow security roles to be used for DLS parameter substitution. Fixes opensearch-project/security/#1568 (#1588)
- Convert Plugin install to only build once (#1708)
- Upgrade to Gradle 7 (#1710)
- Move CodeQL into parallel workfow (#1705)
- Seperate BWC tests into parallel workflow (#1706)
- Fixes broken test due to unsupported EC using JDK-17 (#1711)
- Centralize version settings (#1702)
- Remove TransportClient auth/auth (#1701)
- Add new code hygiene workflow (#1699)
- Remove JDK8 from CI (#1703)
- Add CI check for demo script (#1690)
- Introduce BWC tests in security plugin (#1685)
- Correct the step name in CI (#1683)
- Add support for DLS Term Lookup Queries (#1541)
Bug fixes
- Add signal/wait model for TestAuditlogImpl (#1758)
- Switch to log4j logger (#1751)
- Remove sleep when waiting for node closure (#1722)
- Remove explictt dependency on jackson-databind (#1709)
- Fix break thaat was missed during a merge (#1707)
- Revert "Replace opensearch class names with opendistro class names during serialization and restore them back during deserialization (#1278)" (#1691)
- Update to most recent verson of jackson-databind (#1679)
- Fixed rest status for the replication action failure with DLS/FLS and (#1677)
- Downgrade Gradle version (#1661)
Maintenance
1.3.1.0
1.3.0.0
Compatible with OpenSearch 1.3.0
Enhancements
- Adds CI support for Java 8, 11 and 14 (#1580)
- Updates the test retry-count to give flaky tests more chances to pass (#1601)
- Adds support for OPENSEARCH_JAVA_HOME (#1603)
- Adds auto delete workflow for backport branches (#1604)
- Create the plugin-descriptor programmatically (#1623)
- Add test to make sure exception causes aren't sent to callers (#1639)
- Switch gradle to info logging for improved test debugging (#1646)
- Remove artifact step from CI workflow (#1645)
- Adds ssl script (#1530)
- Adds Java-17 to CI matrix (#1609)
- Reverts ssl script PR (#1637)
- Remove java17 from 1.3 build matrix (#1668)
Bug fixes
- Bumps JJWT version (#1589)
- Updates backport workflow with custom branch and github app (#1597)
- Always run checks on PRs (#1615)
- Adds 'opens' command-line argument for java.io libraries to unblock build (#1616)
- Adds jacoco report and pass the location to codecov (#1617)
- Fixes the settings of roles_separator (#1618)
- Use standard opensearch.version property (#1622)
Maintenance
- Updates bug template (#1582)
- Updates jackson-databind library version (#1584)
- Upgrades Kafka version (#1598)
- Upgrades Guava version (#1594)
- Update maintainers list (#1607)
- Exclude velocity 1.7 from OpenSAML dependency (#1606)
- Migrate build system to gradle (#1592)
- Updates documentation for practices for maintainers (#1611)
- Remove jcenter repository (#1625)
- Remove '-SNAPSHOT' from opensearch.version in plugin descriptor (#1634)
- Add git ignore for VScode IDE settings (#1629)
- Remove netty-tcnative dependency to unblock security plugin build on ARM64 (#1649)
- Add plugin-descriptor.properties to .gitignore (#1651)
- Removes Github DCO action as it is replaced by Github app (1657)
- Configure ML reserved roles and system indices (#1662)
- Release Notes for 1.3.0.0 (#1671)
Version 1.2.4.0
Release 1.2.3.0
Release 1.2.2.0
Release 1.2.1.0
Release 1.2.0.0
Compatible with OpenSearch 1.2.0
Enhancements
- Add observability permissions and index (#1484)
- Add AD validate, multi-category results API permissions to AD read access (#1480)
Bug fixes
- Fix to include hidden indices when resolving wildcards (#1472)
Maintenance
- Adding DCO check to repo (#1468)
- Moved dco.yml to workflows folder (#1469)
- Incremented version to 1.2.0.0-SNAPSHOT (#1464)
- Moved SNAPSHOTS repo to project level (#1479)
- Update OpenSearch core dependency version to 1.2.0 (#1482)
- Bump xmlsec from 2.2.0 to 2.2.3 (#1450)
- Create 1.2.0.0 release notes (#1494)
- Updated copyright notices (#1477)
- Updated release notes for 1.2 with copyright updates (#1496)
Release 1.1.0.0
Compatible with OpenSearch 1.1.0
Enhancements
- Added replication specific roles and system index to the configuration (#1408)
- Handled DLS/FLS/Field masking for replication actions (#1330)
- Extended role injection support for cross cluster requests (#1195)
- Added changes to support validation of security roles for plugins (#1367)
- Adding the default role for IM plugin (#1427)
Maintenance
- Upgrade OpenSearch version to 1.1.0 (#1335)
- Incremented version to 1.1.0.0-SNAPSHOT. (#1429)
- Remove alerting and ism indices from protected indices usage in sample configuration (#1416)
- Build against OpenSearch 1.1.0-SNAPSHOT. (#1430)
- Create release notes 1.1.0.0 (#1440)
- Switch opensearch from 1.x to 1.1 (#1445)
Release 1.0.1.0
Compatible with OpenSearch 1.0.0.
Bug fixes
- Return HTTP 409 if get parallel put request (#1158)
- Add validation for null array DataType (#1157)
- Add support for ResolveIndexAction handling (#1312)
- Fix LDAP authentication when using StartTLS (#1415)
- Fix index permissions for negative lookahead and negated regex index patterns (#1300)
Maintenance
- Fix maven build ${version} deprecation warning (#1209)
- Fix race condition on async test for PR #1158 (#1331)
- Build OpenSearch in CD workflow in order to build security plugin (#1364)
- Update checkNullElementsInArray() unit test to check both error message and error code instead of only checking the error code (#1370)
- Add themed logo to README (#1333)
- Checkout OpenSearch after Cache in CD (#1410)
- Address follow up comments for PR #1172 (#1224)
- Upgrade CXF to v3.4.4 (#1412)
- Bump version to 1.0.1.0 (#1418)