Generated from templates by gromit. Do not edit by hand. The DHI customization providing the compiler toolchain is a private Docker Hub repository, but the Docker Hub login was gated to non-pull_request events -- correct only while pull requests used the public debian:bookworm-slim fallback that has now been removed. Every pull-request run would have failed in "Resolve source base digest" with a 4…
[TT-16039] Add configurable client authentication method for upstream…
fix(ci): prune unsupported compiler sysroot libraries
fix(ci): harden next-gen plugin compiler
Assert NG compiler excludes self-test binary
Use Buildx for image attestations
What's Changed [TT-13727] Add RFC3339 compliant option for consistent GW application logs by @shults in #8157 [TT-17137] Support remote MCPs as upstream — routing fix + auto-mirror PRM + OAuth proxy by @andrei-tyk in #8181 [TT-16865]: Gateway reads node id and nonce on 409 by @kofoworola in #8137 [TT-17190] Upgrade apache/thrift to 0.23.0 by @MFCaballero in #8194 TT-17162: update github-actions wo…
Fix release 5.8.15 FIPS plugin compiler
User description Summary align the FIPS plugin compiler with the v5.8.15 FIPS gateway native Go FIPS build replace legacy GOEXPERIMENT=boringcrypto with GOFIPS140=v1.0.0 for the FIPS compiler image leave standard and EE plugin compiler build args unchanged Validation parsed plugin-compiler workflow YAML locally ran git diff --check This is intended to generate a new v5.8.15 RC compiler image for c…
Description Update the swagger info.version to 5.14.0 for tyk on the release-5.14.0 branch. Related Issue TT-17417 (subtask of TT-17415, R3 release prep). Clone of the R2 work in #8170 (TT-16944). Motivation and Context The swagger version on release-5.14.0 was stale (5.11.0). It must reflect the 5.14.0 release before the docs sync copies the spec into tyk-docs. How This Has Been Tested Verified t…
Backport of PR #8409 to release-5.13.1. Requested by: U3P2L4XNE Slack thread: https://slack.com/archives/C0ATZQCMG58/p1782915217567649 Co-authored-by: Leonid Bugaev leonsbox@gmail.com
Backport of PR #8409 to release-5.13.1. Requested by: U3P2L4XNE Slack thread: https://slack.com/archives/C0ATZQCMG58/p1782915217567649 Co-authored-by: Leonid Bugaev leonsbox@gmail.com
Problem / Task Backport PR #8409 to release branch release-5.14.0. Changes Added a local mock of the httpbin.org service to the smoke tests' docker-compose.yml file (ci/smoke-tests/plugin-aliasing/docker-compose.yml). Testing Smoke tests will use the local mock instead of the public httpbin.org service. Requested by: U3P2L4XNE Slack thread: https://slack.com/archives/C0ATZQCMG58/p1782915217567649…
Summary backport dependency bumps for fixable Trivy Go library findings bump golang.org/x/image to v0.43.0 bump github.com/slack-go/slack to v0.23.1 bump github.com/opencontainers/runc to v1.3.6 Verification go test ./ee/middleware/streams ./apidef/adapter Master PR: #8410
Problem / Task The step 'Attach base image VEX to ee' was missing for the 'ee' build because of an explicit override setting dockerbaseimage: distroless for recent release branches. This created an inconsistency in security procedures between different image types. Requested by: U3P2L4XNE Slack thread: https://slack.com/archives/C0ATZQCMG58/p1782763844850069 Changes Regenerated workflows from grom…
fix: bump aws-sdk-go-v2 kinesis and lambda to fix CVE GHSA-xmrv-pmrh-…
fix: bump aws-sdk-go-v2 kinesis and lambda to fix CVE GHSA-xmrv-pmrh-…
Problem / Task Bump github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 to fix CVE GHSA-xmrv-pmrh-hhx2 (aws-sdk-go-v2 eventstream DoS). Resolves TT-17637. Requested by: U3P2L4XNE Slack thread: https://slack.com/archives/C0ATZQCMG58/p1782736352621879 Changes Updated github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 in go.mod Added blank import for github.com/aws/aws-sdk-go-v2/service/s3 in ee/middl…
fix: bump github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 (release…
Add next-generation plugin compiler
Add next-generation plugin compiler