What's Changed Merging to release-5.13.2: chore: update swagger info.version to 5.13.2 (#8648) by @probelabs[bot] in #8655 [TT-17927] Restore verbose TLS and policy-id doc comments (5.13) by @olamilekan000 in #8662 [releng release-5.13.2] gromit: sync templates by @probelabs[bot] in #8692 Merging to release-5.13.2: Fix/tt 18285/bump dependencies (#8736) by @probelabs[bot] in #8741 Merging to relea…
What's Changed [releng release-5.15] gromit: sync templates by @probelabs[bot] in #8612 Merging to release-5.15: TT-17795: bump golang.org/x/text and google.golang.org/grpc for CVE fixes (#8582) by @probelabs[bot] in #8606 [releng release-5.15] gromit: sync templates by @buger in #8619 Merging to release-5.15: TT-17795: update version of TykTechnologies/opentelemetry with fixed CVEs (#8614) by @pr…
Merging to release-5.15.1: [TT-18285] Bump otlptrace exporters to v1.…
Merging to release-5.13.3: [TT-18285] Bump otlptrace exporters to v1.…
Merging to release-5.13.2: Fix/tt 18285/bump dependencies (#8736) (#8…
Fix/tt 18285/bump dependencies (#8736) Related tickets: https://tyktech.atlassian.net/browse/TT-18285 https://tyktech.atlassian.net/browse/TT-18481 What has been done? https://tyktech.atlassian.net/browse/CVE-317 -> kin-openapi from v0.133.0 to v0.149.0 https://tyktech.atlassian.net/browse/CVE-318 -> CVE-317 covers this. https://tyktech.atlassian.net/browse/CVE-330 -> golang.org/x/crypto from v0.5…
Fix/tt 18285/bump dependencies (#8736) Related tickets: https://tyktech.atlassian.net/browse/TT-18285 https://tyktech.atlassian.net/browse/TT-18481 What has been done? https://tyktech.atlassian.net/browse/CVE-317 -> kin-openapi from v0.133.0 to v0.149.0 https://tyktech.atlassian.net/browse/CVE-318 -> CVE-317 covers this. https://tyktech.atlassian.net/browse/CVE-330 -> golang.org/x/crypto from v0.5…
Merging to release-5.8.16: Fix release 5.8.15 FIPS plugin compiler (#…
TT-18305 bump dependencies (#8723) User description This PR bumps dependencies to newer versions to cover CVEs. PR Type Bug fix, Enhancement Description Bump core Go networking dependencies Upgrade gRPC and OAuth libraries Refresh OpenTelemetry dependency set Update indirect transitive dependencies Diagram Walkthrough flowchart LR mod["go.mod dependency updates"] core["Core Go modules"] grpc["gRPC…
TT-18305 bump dependencies (#8723) User description This PR bumps dependencies to newer versions to cover CVEs. PR Type Bug fix, Enhancement Description Bump core Go networking dependencies Upgrade gRPC and OAuth libraries Refresh OpenTelemetry dependency set Update indirect transitive dependencies Diagram Walkthrough flowchart LR mod["go.mod dependency updates"] core["Core Go modules"] grpc["gRPC…
Merging to release-5.8.16: [TT-18305] follow up: bump kin-openapi (#8…
User description TT-18283 update kin-openapi (#8715) User description This PR updates the kin-openapi dependency to the latest fork version that supports release-5.8. PR Type Enhancement Description Update kin-openapi fork reference Pin newer fork commit version Keep release-5.8 compatible dependency Diagram Walkthrough flowchart LR mod["go.mod dependency replacement"] old["Old kin-openapi fork ve…
Merging to release-5.8.16: Merging to release-5.8: [TT-18299] Improve…
Description Related Issue Motivation and Context How This Has Been Tested Screenshots (if appropriate) Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Refactoring or add test (improvements in base code or adds test coverage to functionali…
Merging to release-5.15.0: [TT-18136] Tolerate stale MCP selectors on…
Description Related Issue Motivation and Context How This Has Been Tested Screenshots (if appropriate) Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Refactoring or add test (improvements in base code or adds test coverage to functionali…
Description Update go.mod and go.sum to bump S3 SDK version to v1.97.3 Related Issue Motivation and Context How This Has Been Tested Screenshots (if appropriate) Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Refactoring or add test (imp…
Description Update go.mod and go.sum to bump S3 SDK version to v1.97.3 Related Issue Motivation and Context How This Has Been Tested Screenshots (if appropriate) Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Refactoring or add test (imp…
Merging to release-5.15.0: [TT-17921] Improve header handling for Gra…
Merging to release-5.15.0: [TT-17921] Improve header handling for Gra…
Merging to release-5.13.2: [TT-17921] Improve header handling for Gra…
Merging to release-5.13.2: [TT-17921] Improve header handling for Gra…
TT-17795: Update path for avro's replace directive and fix new CVEs (…
First NG plugin compiler tag published for linux/arm64 as well as linux/amd64, so the image runs natively on Apple silicon and Graviton rather than under emulation. amd64 keeps its Go toolchain from golang-cross unchanged. arm64 takes the stock go.dev tarball at the version golang-cross reports, sha256-pinned. Plugin validation now compares against a gateway Go version declared from outside the im…
TT-17509: Update s1-cns-scans.yml workflow to use policy_id and produ…
Access conditions reused the URL Rewrite trigger matcher, but the two want opposite defaults. A rewrite trigger decides whether to apply a transformation, so leaning towards firing is harmless; an access condition decides whether to let a request through, so it has to lean the other way. Borrowing that matcher meant a policy could not express the rule the customer actually needs, and three ways to…
Access conditions reused the URL Rewrite trigger matcher, but the two want opposite defaults. A rewrite trigger decides whether to apply a transformation, so leaning towards firing is harmless; an access condition decides whether to let a request through, so it has to lean the other way. Borrowing that matcher meant a policy could not express the rule the customer actually needs, and three ways to…
Access conditions reused the URL Rewrite trigger matcher, but the two want opposite defaults. A rewrite trigger decides whether to apply a transformation, so leaning towards firing is harmless; an access condition decides whether to let a request through, so it has to lean the other way. Borrowing that matcher meant a policy could not express the rule the customer actually needs, and three ways to…
Access conditions reused the URL Rewrite trigger matcher, but the two want opposite defaults. A rewrite trigger decides whether to apply a transformation, so leaning towards firing is harmless; an access condition decides whether to let a request through, so it has to lean the other way. Borrowing that matcher meant a policy could not express the rule the customer actually needs, and three ways to…
Access conditions reused the URL Rewrite trigger matcher, but the two want opposite defaults. A rewrite trigger decides whether to apply a transformation, so leaning towards firing is harmless; an access condition decides whether to let a request through, so it has to lean the other way. Borrowing that matcher meant a policy could not express the rule the customer actually needs, and three ways to…