Isolation Segment Component Updates

Last Updated March 13, 2025

This page lists component updates and release notes for Isolation Segment components through the sequence of builds that led from v6.0 through the most recent v10.0 patch version. In addition to released versions, this includes the internal build versions 10.0.0-build.5, 10.0.0-build.4, 10.0.0-build.3, 7.0.0-build.8, 7.0.0-build.6, and 7.0.0-build.4

10.0.3

Release Date: 03/11/2025

[Feature Improvement] Operators can now let Puma auto-configure the number of workers based on the number of available cores.
[Bug Fix] SMB Broker now supports all the mount parameters that the SMB Driver does (‘sec’, ‘dir_mode’, ‘file_mode’ were missing)
Bump bpm to version 1.4.16
Bump cf-networking to version 3.66.0
Bump cflinuxfs4 to version 1.288.0
Bump diego to version 2.115.0
Bump garden-runc to version 1.70.0
Bump loggregator-agent to version 8.3.5
Bump nfs-volume to version 7.23.0
Bump routing to version 0.331.0
Bump silk to version 3.66.0
Bump smb-volume to version 3.22.0
Bump syslog to version 12.3.7

Component	Version	Release Notes
ubuntu-jammy stemcell	1.775
bpm	1.4.16
cf-networking	3.66.0	v3.66.0 ## 3.66.0 Release Date: February 18, 2025 ## Changes - bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.65.0...v3.66.0 ## Resources - [Download release 3.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.66.0). v3.65.0 ## 3.65.0 Release Date: January 31, 2025 ## Changes - Bump dependancies - Update iptables-writter to work with multi-cidr overlay networks, which are now available in silk-release 3.65.0. [See here for more info on this effort. ](https://github.com/cloudfoundry/silk-release/pull/148) ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.64.0...v3.65.0 ## Resources - [Download release 3.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.65.0). v3.64.0 ## 3.64.0 Release Date: January 21, 2025 ## Changes - Bump to go 1.23.5 - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.63.0...v3.64.0 ## Resources - [Download release 3.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.64.0).
cflinuxfs4	1.288.0
cf-cli	1.68.0
count-cores-indicator	2.0.0
diego	2.115.0	v2.115.0 ## 2.115.0 Release Date: February 24, 2025 ## Changes - Expose configuration option to select rootfs used for container's sidecar processes. This configuration resolves the following issue [983](https://github.com/cloudfoundry/diego-release/issues/983) observed on systems running with multiple FS stacks. Thanks to @Ivo1116 , @PlamenDoychev! ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 012234e12..ecff35fa5 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -54,6 +54,9 @@ properties: default: false diego.rep.preloaded_rootfses: description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden" + diego.rep.sidecar_rootfs_path: + description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/var/vcap/packages/cflinuxfs4/rootfs.tar'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses" + default: "" diego.rep.rootfs_providers: description: "Array of schemes for which the underlying garden can support arbitrary root filesystems" default: diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 4a7dfefc6..d34483c0b 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -45,6 +45,9 @@ properties: description: "Array of name:absolute_path pairs representing root filesystems preloaded onto the underlying garden" default: - windows2012R2:/tmp/windows2012R2 + diego.rep.sidecar_rootfs_path: + description: "absolute_path representing the root filesystem used for sidecar processes (ie. '/tmp/windows2012R2'). Must be one of the preloaded_rootfses paths. Leaving the default empty string is ok, as it will then select the first of he preloaded_rootfses" + default: "" diego.rep.rootfs_providers: description: "Array of schemes for which the underlying garden can support arbitrary root filesystems" default: [] ``` ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.114.0...v2.115.0 ## Resources - [Download release 2.115.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.115.0). v2.114.0 ## 2.114.0 Release Date: February 18, 2025 ## Changes - Add support to Diego for file-based service bindings - https://github.com/cloudfoundry/diego-release/pull/990 - Thank you @klapkov , @dimitardimitrov13! ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 0737d9d1a..012234e12 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -22,7 +22,8 @@ templates: tls.key.erb: config/certs/tls.key tls_ca.crt.erb: config/certs/tls_ca.crt indicators.yml.erb: config/indicators.yml - + volume_mounted_files.erb: bin/volume_mounted_files + packages: - pid_utils - rep ``` ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.113.0...v2.114.0 ## Resources - [Download release 2.114.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.114.0). v2.113.0 ## 2.113.0 Release Date: February 03, 2025 ## Changes - ⚠️ BREAKING CHANGE⚠️ : `chacha20-poly1305@openssh.com` has been removed from the default allowed ciphers for ssh-proxy. https://github.com/cloudfoundry/diego-ssh/pull/62 Thank you @DimitarSch - Bump dependencies - https://github.com/cloudfoundry/diego-release/pull/986 Keep `filepath-securejoin` at `v0.3.6` until `runc` is compatible with `v0.4.0` (thanks @winkingturtle-vmw) ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.112.0...v2.113.0 ## Resources - [Download release 2.113.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.113.0).
garden-runc	1.70.0	v1.70.0 ## 1.70.0 Release Date: February 05, 2025 ## Changes - Upgrade containerd to V2 (https://github.com/cloudfoundry/garden-runc-release/pull/368, https://github.com/cloudfoundry/guardian/pull/466, https://github.com/cloudfoundry/wg-app-platform-runtime-ci/pull/61) - Various dependency bumps ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.69.0...v1.70.0 ## Resources - [Download release 1.70.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.70.0). v1.69.0 ## 1.69.0 Release Date: February 03, 2025 ## Changes - bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.68.0...v1.69.0 ## Resources - [Download release 1.69.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.69.0). v1.68.0 ## 1.68.0 Release Date: January 22, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.67.0...v1.68.0 ## Resources - [Download release 1.68.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.68.0).
loggregator-agent	8.3.5	v8.3.5 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.23.6 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.4...v8.3.5 v8.3.4 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.23.5 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.3...v8.3.4
nfs-volume	7.23.0	v7.23.0 ## 7.23.0 Release Date: March 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.22.0...v7.23.0 ## Resources - [Download release 7.23.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.23.0). v7.22.0 ## 7.22.0 Release Date: February 28, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.21.0...v7.22.0 ## Resources - [Download release 7.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.22.0). v7.21.0 ## 7.21.0 Release Date: February 18, 2025 ## Changes - bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.20.0...v7.21.0 ## Resources - [Download release 7.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.21.0). v7.20.0 ## 7.20.0 Release Date: February 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.19.0...v7.20.0 ## Resources - [Download release 7.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.20.0). v7.19.0 ## 7.19.0 Release Date: January 31, 2025 ## Changes - Fix map-fs-fuse packaging script to avoid collision with binaries installed on compilation-vms in case of re-using compilation vms. ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.18.0...v7.19.0 ## Resources - [Download release 7.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.19.0). v7.18.0 ## 7.18.0 Release Date: January 27, 2025 ## Changes - Move code base from mapfs-release into nfs-volume-release - Add map-fs-performance-acceptance-tests errand ## Bosh Job Spec changes: ```diff diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec index 51e78351..02a908e9 100644 --- a/jobs/dockerdriver-integration/spec +++ b/jobs/dockerdriver-integration/spec @@ -9,6 +9,7 @@ templates: packages: - dockerdriver-integration - nfs-debs +- map-fs - nfsv3driver @@ -19,4 +20,4 @@ properties: mapfs_path: description: "Path to mapfs binary" - default: /var/vcap/packages/mapfs/bin/mapfs + default: /var/vcap/packages/map-fs/bin/mapfs diff --git a/jobs/map-fs-performance-acceptance-tests/spec b/jobs/map-fs-performance-acceptance-tests/spec new file mode 100644 index 00000000..a3f30383 --- /dev/null +++ b/jobs/map-fs-performance-acceptance-tests/spec @@ -0,0 +1,23 @@ +--- +name: map-fs-performance-acceptance-tests + +templates: + pre-start.erb: bin/pre-start + run.erb: bin/run + config.json.erb: config/config.json + +packages: +- map-fs-performance-acceptance-tests +- map-fs +- map-fs-fuse +- nfs-debs + + +properties: + nfs_remote_path: + description: Address for SMB Remote Path + default: nfstestserver.service.cf.internal:export + + mapfs_path: + description: "Path to mapfs binary" + default: /var/vcap/packages/map-fs/bin/mapfs diff --git a/jobs/nfsv3driver/spec b/jobs/nfsv3driver/spec index fc9fe47b..7d5262d8 100644 --- a/jobs/nfsv3driver/spec +++ b/jobs/nfsv3driver/spec @@ -17,10 +17,8 @@ templates: packages: - nfs-debs - nfsv3driver - -consumes: -- name: mapfs - type: mapfs +- map-fs +- map-fs-fuse properties: nfsv3driver.statd_port: ``` ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.17.0...v7.18.0 ## Resources - [Download release 7.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.18.0).
otel-collector	0.11.2
routing	0.331.0	v0.331.0 ## 0.331.0 Release Date: February 28, 2025 ## Changes - Bump dependancies - Inline multierror submodule - https://github.com/cloudfoundry/routing-release/pull/454 - Thanks @maxmoehl ! ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.330.0...v0.331.0 ## Resources - [Download release 0.331.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.331.0). v0.330.0 ## 0.330.0 Release Date: February 07, 2025 ## Changes - bump dependancies - add extendable bosh property to log extra access log fields - https://github.com/cloudfoundry/routing-release/pull/448 - thanks @maxmoehl ! ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 868629ac..9d694a02 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -322,6 +322,14 @@ properties: router.logging.syslog_network: description: "Network protocol to use when connecting to the syslog server. Valid values are 'tcp', 'udp', . When choosing an empty string value, the local syslog daemon is used." default: "udp" + router.logging.extra_access_log_fields: + description: \| + An array of additional access log fields to log. Any new log fields will only be exposed via + this property and operators have to explicitly enable them. This is done to prevent breaking + log parsing in existing setups by the introduction of new fields. Does not affect stdout / + stderr logs. + Available fields are: local_address + default: [] router.logging.format.timestamp: description: \| Format for timestamp in component logs. Valid values are 'rfc3339', 'deprecated', and 'unix-epoch'." ``` ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.329.0...v0.330.0 ## Resources - [Download release 0.330.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.330.0).
silk	3.66.0	v3.66.0 ## 3.66.0 Release Date: February 18, 2025 ## Changes - bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.65.0...v3.66.0 ## Resources - [Download release 3.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.66.0). v3.65.0 ## 3.65.0 Release Date: January 31, 2025 ## Changes - Bump dependancies - New feature: the overlay network (as defined in the silk-controller job as the "network" property) can now be an array of CIDR addresses instead of just one CIDR address. For backwards compatibility reasons providing a string of one CIDR is still an allowed format. [See here for more info on this effort. ](https://github.com/cloudfoundry/silk-release/pull/148) Thanks @ameowlia ! 🎉 ## Bosh Job Spec changes: ```diff diff --git a/jobs/silk-cni/spec b/jobs/silk-cni/spec index 670763da..75936752 100644 --- a/jobs/silk-cni/spec +++ b/jobs/silk-cni/spec @@ -10,8 +10,6 @@ packages: - silk-cni consumes: -- name: cf_network - type: cf_network - name: vpa type: policy-agent @@ -31,7 +29,10 @@ provides: properties: no_masquerade_cidr_range: - description: "CIDR address block that should not be masqueraded. Fallsback to cf_network.network link property if property is not provided." + description: \| + When set, app traffic sent to this CIDR will not be masqueraded. If this + property is not set, then silk-cni will not masquerade traffic sent to the + overlay network, which allows container-to-container networking to work. default: "" mtu: diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec index cc7529a8..cb66a1e8 100644 --- a/jobs/silk-controller/spec +++ b/jobs/silk-controller/spec @@ -29,8 +29,12 @@ provides: properties: network: - description: "CIDR address block for overlay network. Subnets for each diego cell are allocated out of this network." - default: "10.255.0.0/16" + description: \| + A single CIDR address block as a string, or an array of CIDR address + blocks for overlay network as an array of strings. Subnets for each diego + cell are allocated out of this network. The "subnet_prefix_length" + property must be smaller than the smallest CIDR address block. + default: ["10.255.0.0/16"] subnet_prefix_length: description: "Length, in bits, of the prefix for subnets allocated per Diego cell, e.g. '24' for a '/24' subnet." diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec index e3786357..572b08c9 100644 --- a/jobs/silk-daemon/spec +++ b/jobs/silk-daemon/spec @@ -88,7 +88,13 @@ properties: default: false single_ip_only: - description: "When true, this VM will get assigned exactly one IP address on the Silk network. Use this to connect this VM to the Silk network without acquiring a whole block of addresses (as would be required for a Diego Cell)." + description: \| + When true, this VM will get assigned exactly one IP address on the Silk + network. Use this to connect this VM to the Silk network without + acquiring a whole block of addresses (as would be required for a Diego + Cell). WARNING: Do not use single_ip_only mode when the overylay network has + more than one CIDR. The overlay network is set on the silk-controller + job via the "network" bosh property. default: false policy_server_url: ``` ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.64.0...v3.65.0 ## Resources - [Download release 3.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.65.0). v3.64.0 ## 3.64.0 Release Date: January 21, 2025 ## Changes - Bump to go 1.23.5 - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.63.0...v3.64.0 ## Resources - [Download release 3.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.64.0).
smb-volume	3.22.0	v3.22.0 ## 3.22.0 Release Date: March 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.21.0...v3.22.0 ## Resources - [Download release 3.22.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.22.0). v3.21.0 ## 3.21.0 Release Date: February 28, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.20.0...v3.21.0 ## Resources - [Download release 3.21.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.21.0). v3.20.0 ## 3.20.0 Release Date: February 18, 2025 ## Changes - bump dependancies ## ✨ Built with go 1.23.6 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.19.0...v3.20.0 ## Resources - [Download release 3.20.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.20.0). v3.19.0 ## 3.19.0 Release Date: February 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.18.0...v3.19.0 ## Resources - [Download release 3.19.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.19.0). v3.18.0 ## 3.18.0 Release Date: January 30, 2025 ## Changes - 🐛Fixes a bug where smb broker didn't allow the same mount options that smb driver allowed (was missing `sec`, `dir_mode`, and `file_mode`) - Dependency bumps ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.17.0...v3.18.0 ## Resources - [Download release 3.18.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.18.0). v3.17.0 ## 3.17.0 Release Date: January 22, 2025 ## Changes - Bump to go 1.23.5 - Bump dependancies ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.16.0...v3.17.0 ## Resources - [Download release 3.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.17.0).
smoke-tests	4.10.0
syslog	12.3.7	v12.3.7 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.23.5 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.6...v12.3.7
tanzu-jammy-stack	1.0.1

10.0.2

Release Date: 02/03/2025

[Feature Improvement] Add OTel Collector to every BOSH VM that already has Forwarder Agent to collect service tile signals
[Feature Improvement] Add optional, experimental pprof extension to OTel Collector
Bump bpm to version 1.4.11
Bump cf-networking to version 3.63.0
Bump cflinuxfs4 to version 1.274.0
Bump diego to version 2.112.0
Bump garden-runc to version 1.67.0
Bump loggregator-agent to version 8.3.3
Bump mapfs to version 1.17.0
Bump nfs-volume to version 7.17.0
Bump otel-collector to version 0.11.2
Bump routing to version 0.329.0
Bump silk to version 3.63.0
Bump smb-volume to version 3.16.0
Bump syslog to version 12.3.6

Security Fixes

The following table lists CVEs that were fixed in each Isolation Segment component since the previous patch version of Isolation Segment:

Component	Vulnerabilities Resolved
garden-runc	CVE-2024-45336 CVE-2024-45341
bpm	CVE-2024-45336 CVE-2024-45341
otel-collector	GHSA-45x7-px36-x8w8 GHSA-36jr-mh4h-2g58 GHSA-4v7x-pqxf-cx7m GHSA-xr7q-jx4m-x55m GHSA-mh55-gqvf-xfwm
syslog	GHSA-45x7-px36-x8w8 GHSA-36jr-mh4h-2g58 GHSA-4v7x-pqxf-cx7m
loggregator-agent	GHSA-45x7-px36-x8w8 GHSA-36jr-mh4h-2g58 GHSA-4v7x-pqxf-cx7m

Component Release Notes

Component	Version	Release Notes
ubuntu-jammy stemcell	1.719
bpm	1.4.11
cf-networking	3.63.0	v3.63.0 ## 3.63.0 Release Date: January 06, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.62.0...v3.63.0 ## Resources - [Download release 3.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.63.0). v3.62.0 ## 3.62.0 Release Date: December 21, 2024 ## Changes - Bump go mod dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.61.0...v3.62.0 ## Resources - [Download release 3.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.62.0). v3.61.0 ## 3.61.0 Release Date: December 16, 2024 ## Changes - Bump dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.60.0...v3.61.0 ## Resources - [Download release 3.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.61.0).
cflinuxfs4	1.274.0
cf-cli	1.68.0
count-cores-indicator	2.0.0
diego	2.112.0	v2.112.0 ## 2.112.0 Release Date: January 03, 2025 ## Changes - Bump dependancies. ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.111.0...v2.112.0 ## Resources - [Download release 2.112.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.112.0). v2.111.0 ## 2.111.0 Release Date: December 19, 2024 ## Changes - Bump envoy from 1.32.2 to 1.32.3. [Envoy v1.32.3](https://github.com/envoyproxy/envoy/releases/tag/v1.32.3) contains multiple CVE fixes. - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.110.0...v2.111.0 ## Resources - [Download release 2.111.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.111.0). v2.110.0 ## 2.110.0 Release Date: December 10, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.109.0...v2.110.0 ## Resources - [Download release 2.110.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.110.0). v2.109.0 ## 2.109.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.108.0...v2.109.0 ## Resources - [Download release 2.109.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.109.0). v2.108.0 ## 2.108.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.107.0...v2.108.0 ## Resources - [Download release 2.108.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.108.0).
garden-runc	1.67.0	v1.67.0 ## 1.67.0 Release Date: January 17, 2025 ## Changes - Add support for cgroups v2 https://github.com/cloudfoundry/guardian/pull/465 ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.66.0...v1.67.0 ## Resources - [Download release 1.67.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.67.0). v1.66.0 ## 1.66.0 Release Date: January 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.65.0...v1.66.0 ## Resources - [Download release 1.66.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.66.0). v1.65.0 ## 1.65.0 Release Date: December 20, 2024 ## Changes - Fix path for functions #367 - Various dependency bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.64.0...v1.65.0 ## Resources - [Download release 1.65.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.65.0).
loggregator-agent	8.3.3	v8.3.3 ## What's Changed * Bump dependencies * Bump packaged Go to go1.23.4 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.2...v8.3.3
mapfs	1.17.0	v1.17.0 ## 1.17.0 Release Date: January 06, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.16.0...v1.17.0 ## Resources - [Download release 1.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.17.0). v1.16.0 ## 1.16.0 Release Date: January 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.15.0...v1.16.0 ## Resources - [Download release 1.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.16.0). v1.15.0 ## 1.15.0 Release Date: December 20, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.14.0...v1.15.0 ## Resources - [Download release 1.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.15.0). v1.14.0 ## 1.14.0 Release Date: December 17, 2024 ## Changes * [Bump](https://github.com/cloudfoundry/mapfs-release/commit/782c0f7f2e877f175d5796708af02ecd67bc7065) https://github.com/mesonbuild/meson/releases/tag/1.6.1 ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.13.0...v1.14.0 ## Resources - [Download release 1.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.14.0). v1.13.0 ## 1.13.0 Release Date: December 16, 2024 ## Changes - Update dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.12.0...v1.13.0 ## Resources - [Download release 1.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.13.0).
nfs-volume	7.17.0	v7.17.0 ## 7.17.0 Release Date: January 06, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.16.0...v7.17.0 ## Resources - [Download release 7.17.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.17.0). v7.16.0 ## 7.16.0 Release Date: January 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.15.0...v7.16.0 ## Resources - [Download release 7.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.16.0). v7.15.0 ## 7.15.0 Release Date: December 20, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.14.0...v7.15.0 ## Resources - [Download release 7.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.15.0). v7.14.0 ## 7.14.0 Release Date: December 16, 2024 ## Changes - Bump dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.13.0...v7.14.0 ## Resources - [Download release 7.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.14.0).
otel-collector	0.11.2	v0.11.2 ## What's Changed * Bump packaged Go to go1.23.4 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.11.1...v0.11.2 v0.11.1 ## What's Changed * Correctly interpolate `secret` properties when the `name` includes a hyphen by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/58 * Load string values in `allow_list` properties by @ctlong in https://github.com/cloudfoundry/otel-collector-release/pull/59 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.11.0...v0.11.1 v0.11.0 ## What's Changed * Bump packaged Golang to go1.22.8 * Bump OTel Collector components to v0.111.0 by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/56 * `otlp` exporter now has batching built in * Internal metrics are now emitted with names prefixed with `otelcol_` * Change `allow_list` properties by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/57 * Unspecified or `nil` still equates to "allow all" * An empty array now equates to "allow nothing" instead of "allow all" * Add `pprof` extension by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/57 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.10.1...v0.11.0
routing	0.329.0	v0.329.0 ## 0.329.0 Release Date: January 21, 2025 ## Changes - BREAKING CHANGE: The `lb_algo` load balancing option key name has been renamed to `loadbalancing`. This standardizes the name across components. Read more about this change [here](https://github.com/cloudfoundry/community/pull/1039). - Bump to go 1.23.5. - Bump dependancies. ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index b9afabbe..c39eac91 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -144,7 +144,7 @@ properties: writable (optional, boolean): sets the writable flag. defaults to false options object - lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. + loadbalancing (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. example: \| - name: my-service @@ -162,7 +162,7 @@ properties: timeout: 5s route_service_url: https://my-oauth-proxy-route-service.example.com options: - lb_algo: least-connection + loadbalancing: least-connection - name: my-tls-endpoint tls_port: 12346 server_cert_domain_san: "my-tls-endpoint.internal.com" ``` ## ✨ Built with go 1.23.5 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.328.0...v0.329.0 ## Resources - [Download release 0.329.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.329.0). v0.328.0 ## 0.328.0 Release Date: January 06, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.327.0...v0.328.0 ## Resources - [Download release 0.328.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.328.0). v0.327.0 ## 0.327.0 Release Date: December 20, 2024 ## Changes - Bug fix: update the tcp_routes table to have host_tls_port default to 0 instead of NULL. Before this fix, tcp routes registered via external-to-cf route registrars running routing-release 0.301.0 or lower will have intermittent connectivity issues. - https://github.com/cloudfoundry/routing-api/pull/67 - Thanks @ameowlia! - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.326.0...v0.327.0 ## Resources - [Download release 0.327.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.327.0). v0.326.0 ## 0.326.0 Release Date: December 16, 2024 ## Changes - ❗ Breaking Change: Gorouter will now properly emit [RFC5424](https://datatracker.ietf.org/doc/html/rfc5424) syslog messages instead of broken BSD-style syslog messages. It now only supports syslog over UDP and TCP like it is documented for some time now - [gorouter #459](https://github.com/cloudfoundry/gorouter/pull/459) & [gorouter #411](https://github.com/cloudfoundry/gorouter/pull/411) - Thanks @maxmoehl and @peanball ! - Gorouter now supports configurable syslog message truncation via gorouter's new router.logging.syslog_message_limit bosh property [gorouter #447](https://github.com/cloudfoundry/routing-release/pull/447) - Thanks @maxmoehl ! - Bump tcp-router's haproxy to 2.8.13 - Bump dependencies ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index cdebbd5a..868629ac 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -313,6 +313,9 @@ properties: router.logging.syslog_tag: description: "Tag to use when writing syslog messages" default: "vcap.gorouter" + router.logging.syslog_message_limit: + description: "Limit the number of bytes per access log written to syslog. A value of zero disables the limit." + default: 0 router.logging.syslog_addr: description: "Address of a syslog server to send access logs" default: "localhost:514" ``` ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.325.0...v0.326.0 ## Resources - [Download release 0.326.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.326.0).
silk	3.63.0	v3.63.0 ## 3.63.0 Release Date: January 06, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.62.0...v3.63.0 ## Resources - [Download release 3.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.63.0). v3.62.0 ## 3.62.0 Release Date: December 21, 2024 ## Changes - Bump go mod dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.61.0...v3.62.0 ## Resources - [Download release 3.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.62.0). v3.61.0 ## 3.61.0 Release Date: December 16, 2024 ## Changes - Bump dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.60.0...v3.61.0 ## Resources - [Download release 3.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.61.0).
smb-volume	3.16.0	v3.16.0 ## 3.16.0 Release Date: January 03, 2025 ## Changes - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.15.0...v3.16.0 ## Resources - [Download release 3.16.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.16.0). v3.15.0 ## 3.15.0 Release Date: December 20, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.14.0...v3.15.0 ## Resources - [Download release 3.15.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.15.0). v3.14.0 ## 3.14.0 Release Date: December 16, 2024 ## Changes - Bump dependencies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.13.0...v3.14.0 ## Resources - [Download release 3.14.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.14.0).
smoke-tests	4.10.0
syslog	12.3.6	v12.3.6 ## What's Changed * Bump blackbox dependencies * Bump packaged Go to go1.23.4 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.5...v12.3.6
tanzu-jammy-stack	1.0.1

10.0.1

Release Date: 01/09/2025

Bump bpm to version 1.4.6
Bump cf-networking to version 3.60.0
Bump cf-cli to version 1.68.0
Bump diego to version 2.107.0
Bump garden-runc to version 1.64.0
Bump loggregator-agent to version 8.3.2
Bump mapfs to version 1.12.0
Bump nfs-volume to version 7.13.0
Bump routing to version 0.325.0
Bump silk to version 3.60.0
Bump smb-volume to version 3.13.0
Bump syslog to version 12.3.5

Security Fixes

The following table lists CVEs that were fixed in each Isolation Segment component since the previous patch version of Isolation Segment:

Component	Vulnerabilities Resolved
syslog	CVE-2023-45288 CVE-2022-29526 CVE-2023-48795
cf-networking	CVE-2022-29526
mapfs	CVE-2022-29526
garden-runc	CVE-2022-29526
otel-collector	CVE-2023-45288 CVE-2022-29526 CVE-2023-48795
smb-volume	CVE-2022-29526
routing	CVE-2022-29526
silk	CVE-2022-29526
smoke-tests	CVE-2024-26141 CVE-2022-29526 CVE-2023-48795 CVE-2024-25126 CVE-2024-47220 CVE-2024-21510 CVE-2024-26146
cflinuxfs4	CVE-2022-29526
bpm	CVE-2022-29526
tanzu-jammy-stack	CVE-2023-3978 CVE-2022-41723 CVE-2022-29526 CVE-2023-48795
loggregator-agent	CVE-2023-45288 CVE-2022-29526 CVE-2023-48795
nfs-volume	CVE-2022-29526
diego	CVE-2024-51744 CVE-2022-29526 GHSA-29wx-vh33-7x7r

Component Release Notes

Component	Version	Release Notes
ubuntu-jammy stemcell	1.651
bpm	1.4.6
cf-networking	3.60.0	v3.60.0 ## 3.60.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.59.0...v3.60.0 ## Resources - [Download release 3.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.60.0). v3.59.0 ## 3.59.0 Release Date: December 04, 2024 ## Changes - Upgrade cf-networking-healthchecker ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.58.0...v3.59.0 ## Resources - [Download release 3.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.59.0). v3.58.0 ## 3.58.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 - Bump healthchecker ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.57.0...v3.58.0 ## Resources - [Download release 3.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.58.0). v3.57.0 ## 3.57.0 Release Date: December 02, 2024 ## Changes - Dependency Bumps - Updated unit/integration/cf-networking-acceptance testing output to be less verbose on happy paths. Thanks @davewalter! ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.56.0...v3.57.0 ## Resources - [Download release 3.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.57.0). v3.56.0 ## 3.56.0 Release Date: November 18, 2024 ## Changes - Upgrade cf-networking-healthchecker - Bump Go - Add Extra Response Headers handler to proxy example app - https://github.com/cloudfoundry/cf-networking-release/pull/310 - Thanks @ameowlia ! - Bump dependancies ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.55.0...v3.56.0 ## Resources - [Download release 3.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.56.0). v3.55.0 ## 3.55.0 Release Date: November 14, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.54.0...v3.55.0 ## Resources - [Download release 3.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.55.0). v3.54.0 ## 3.54.0 Release Date: November 05, 2024 ## Changes - [Convert PortAllocator's ints to uint32 to avoid int overflows when picking ports](https://github.com/cloudfoundry/cf-networking-release/commit/7d4c9490695f1cab72341d13300b15c0b35707bf) ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.53.0...v3.54.0 ## Resources - [Download release 3.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.54.0). v3.53.0 ## 3.53.0 Release Date: October 22, 2024 ## Changes - Bump dependancies - Use Server struct to address gosec G114 - https://github.com/cloudfoundry/cf-networking-release/pull/305 Thanks @andy-a-d-nguyen! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.52.0...v3.53.0 ## Resources - [Download release 3.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.53.0).
cflinuxfs4	1.130.0
cf-cli	1.68.0	v1.68.0 ### Included CF CLI versions: 7.7.15 8.8.3
count-cores-indicator	2.0.0
diego	2.107.0	v2.107.0 ## 2.107.0 Release Date: November 20, 2024 ## Changes - Bump Go - Bump dependancies ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.106.0...v2.107.0 ## Resources - [Download release 2.107.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.107.0). v2.106.0 ## 2.106.0 Release Date: November 12, 2024 ## Changes - Various dependency bumps - Various doc and link fixes - Azure zone logs are now in json format with timestamps: https://github.com/cloudfoundry/diego-release/pull/958 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.105.0...v2.106.0 ## Resources - [Download release 2.106.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.106.0).
garden-runc	1.64.0	v1.64.0 ## 1.64.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 - Bump dependancies ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.63.0...v1.64.0 ## Resources - [Download release 1.64.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.64.0). v1.63.0 ## 1.63.0 Release Date: December 02, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.62.0...v1.63.0 ## Resources - [Download release 1.63.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.63.0). v1.62.0 ## 1.62.0 Release Date: November 18, 2024 ## Changes - Bump golang ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.61.0...v1.62.0 ## Resources - [Download release 1.62.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.62.0). v1.61.0 ## 1.61.0 Release Date: November 14, 2024 ## Changes - Bump iptables to 1.8.11 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.60.0...v1.61.0 ## Resources - [Download release 1.61.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.61.0). v1.60.0 ## 1.60.0 Release Date: November 07, 2024 ## Changes - G115 fixes - Pin runc to 1.1.14 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.59.0...v1.60.0 ## Resources - [Download release 1.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.60.0). v1.59.0 ## 1.59.0 Release Date: October 30, 2024 ## Changes - Update dependencies ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.58.0...v1.59.0 ## Resources - [Download release 1.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.59.0). v1.58.0 ## 1.58.0 Release Date: October 24, 2024 ## Changes - Bump dependancies ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.57.0...v1.58.0 ## Resources - [Download release 1.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.58.0).
loggregator-agent	8.3.2	v8.3.2 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.22.10 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.1...v8.3.2 v8.3.1 ## What's Changed * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.3.0...v8.3.1
mapfs	1.12.0	v1.12.0 ## 1.12.0 Release Date: December 09, 2024 ## Changes - Dependency updates ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.11.0...v1.12.0 ## Resources - [Download release 1.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.12.0). v1.11.0 ## 1.11.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.10.0...v1.11.0 ## Resources - [Download release 1.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.11.0). v1.10.0 ## 1.10.0 Release Date: December 02, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.9.0...v1.10.0 ## Resources - [Download release 1.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.10.0). v1.9.0 ## 1.9.0 Release Date: November 27, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.8.0...v1.9.0 ## Resources - [Download release 1.9.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.9.0). v1.8.0 ## 1.8.0 Release Date: November 14, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.7.0...v1.8.0 ## Resources - [Download release 1.8.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.8.0). v1.7.0 ## 1.7.0 Release Date: November 08, 2024 ## Changes - Bump dependancies. - Validate against integer overflows in mapfs's Chown() call - https://github.com/cloudfoundry/mapfs-release/pull/283 - Thanks @geofffranks ! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.6.0...v1.7.0 ## Resources - [Download release 1.7.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.7.0). v1.6.0 ## 1.6.0 Release Date: October 31, 2024 ## Changes - Bump dependancies. ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.5.0...v1.6.0 ## Resources - [Download release 1.6.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.6.0). v1.5.0 ## 1.5.0 Release Date: October 24, 2024 ## Changes - Bump dependancies ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.4.0...v1.5.0 ## Resources - [Download release 1.5.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.5.0).
nfs-volume	7.13.0	v7.13.0 ## 7.13.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.12.0...v7.13.0 ## Resources - [Download release 7.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.13.0). v7.12.0 ## 7.12.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4. ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.11.0...v7.12.0 ## Resources - [Download release 7.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.12.0). v7.11.0 ## 7.11.0 Release Date: December 02, 2024 ## Changes - Dependency Bumps - OpenLDAP bumped to 2.6.9 ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.10.0...v7.11.0 ## Resources - [Download release 7.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.11.0). v7.10.0 ## 7.10.0 Release Date: November 27, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.9.0...v7.10.0 ## Resources - [Download release 7.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.10.0). v7.9.0 ## 7.9.0 Release Date: November 18, 2024 ## Changes - Restart rpc group as asked by in man pages - https://github.com/cloudfoundry/nfs-volume-release/pull/1044 - Thank you @krsna-m ! - Bump go - Bump dependancies ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.8.0...v7.9.0 ## Resources - [Download release 7.9.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.9.0).
otel-collector	0.10.1
routing	0.325.0	v0.325.0 ## 0.325.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.324.0...v0.325.0 ## Resources - [Download release 0.325.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.325.0). v0.324.0 ## 0.324.0 Release Date: December 05, 2024 ## Changes - [Upgrade routing-healthchecker](https://github.com/cloudfoundry/routing-release/commit/d429341973f55be5f69e57176ee9c971fb2cf375) - [Upgrade golang-1.23-linux (1.23.4)](https://github.com/cloudfoundry/routing-release/commit/8fb1521593bb8aa9881aa3206c42a5a1bfefbfd1) ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.323.0...v0.324.0 ## Resources - [Download release 0.324.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.324.0). v0.323.0 ## 0.323.0 Release Date: December 02, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.322.0...v0.323.0 ## Resources - [Download release 0.323.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.323.0). v0.322.0 ## 0.322.0 Release Date: November 27, 2024 ## Changes - Various minor dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.321.0...v0.322.0 ## Resources - [Download release 0.322.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.322.0). v0.321.0 ## 0.321.0 Release Date: November 18, 2024 ## Changes - Add bosh properties for additional header (request and response) limits - https://github.com/cloudfoundry/routing-release/issues/309, https://github.com/cloudfoundry/routing-release/pull/443, https://github.com/cloudfoundry/gorouter/pull/453 - Thanks @maxmoehl ! - Bump Go - Bump dependancies ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index c7896a27..cdebbd5a 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -266,12 +266,41 @@ properties: description: "Enforce strict validation of a route service signature" default: false router.max_header_kb: + description: \| + Deprecated, use router.max_request_header_kb instead which is equivalent to this option. + default: 1024 # 1Mb + router.max_request_header_kb: description: \| This value controls the maximum number of bytes (in KB) the gorouter will read parsing the request header's keys and values, including the request line. It does not limit the size of the request body. Requests with larger headers will result in a 431 status code. Must be between 1 and 1024kb. - default: 1024 # 1Mb + Note: This value takes precedence over router.max_header_kb but has no default to not break + existing setups. If you previously configured router.max_header_kb it is recommended to + switch to this property instead. + example: 1024 # 1Mb + router.max_response_header_kb: + description: \| + This value controls the maximum number of bytes (in KB) the gorouter will read + parsing the response header's keys and values, including the request + line. It does not limit the size of the response body. Responses with + larger headers will result in a 502 status code. A limit of zero or less will + result in the default GoLang limit being used. + default: 0 + router.max_request_headers: + description: \| + This value controls the maximum number of headers gorouter will accept in a + single request. Only the header keys are counted and values separated by commas + are not considered additional headers. Setting this to zero or less disables the + limit. Must be at least 30 for CF to function properly (enforced). + default: 0 + router.max_response_headers: + description: \| + This value controls the maximum number of headers gorouter will accept in a + single response. Only the header keys are counted and values separated by commas + are not considered additional headers. Setting this to zero or less disables the + limit. Must be at least 30 for CF to function properly (enforced). + default: 0 router.extra_headers_to_log: description: "An array of headers that access log events will be annotated with. This only applies to headers on requests." default: [] ``` ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.320.0...v0.321.0 ## Resources - [Download release 0.321.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.321.0). v0.320.0 ## 0.320.0 Release Date: November 15, 2024 ## Changes - Upgrade routing-healthchecker ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.319.0...v0.320.0 ## Resources - [Download release 0.320.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.320.0).
silk	3.60.0	v3.60.0 ## 3.60.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.59.0...v3.60.0 ## Resources - [Download release 3.60.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.60.0). v3.59.0 ## 3.59.0 Release Date: December 04, 2024 ## Changes - Upgrade silk-healthchecker ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.58.0...v3.59.0 ## Resources - [Download release 3.59.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.59.0). v3.58.0 ## 3.58.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 - Bump healthchecker ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.57.0...v3.58.0 ## Resources - [Download release 3.58.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.58.0). v3.57.0 ## 3.57.0 Release Date: December 02, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.56.0...v3.57.0 ## Resources - [Download release 3.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.57.0). v3.56.0 ## 3.56.0 Release Date: November 18, 2024 ## Changes - [Upgrade silk-healthchecker](https://github.com/cloudfoundry/silk-release/commit/9a64b05ce674243a2b738d0253407661a03b1159) - Bump Go - Bump dependancies ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.55.0...v3.56.0 ## Resources - [Download release 3.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.56.0). v3.55.0 ## 3.55.0 Release Date: November 14, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.54.0...v3.55.0 ## Resources - [Download release 3.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.55.0). v3.54.0 ## 3.54.0 Release Date: November 05, 2024 ## Changes - [Address integer overflows when downcasting for G115](https://github.com/cloudfoundry/silk-release/commit/58a8d27d505cc0cc8f69ed91a35d9cbbc8cc9c46) - [Address integer overflows when downcasting for G115](https://github.com/cloudfoundry/silk-release/pull/145) - [add retry logic for LinkList and AddrList netlink calls in cni](https://github.com/cloudfoundry/silk-release/commit/2f280324816cef03771099b1a34552d35d4cb55e) - [Retry with backoff tests](https://github.com/cloudfoundry/silk-release/commit/f0ebfc864d0588f39765c9c38e30aacb1dce7588) - [Add retry logic for LinkList and AddrList netlink calls in cni #147](https://github.com/cloudfoundry/silk-release/pull/147) ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.53.0...v3.54.0 ## Resources - [Download release 3.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.54.0). v3.53.0 ## 3.53.0 Release Date: October 22, 2024 ## Changes - Bump dependancies ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.52.0...v3.53.0 ## Resources - [Download release 3.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.53.0).
smb-volume	3.13.0	v3.13.0 ## 3.13.0 Release Date: December 09, 2024 ## Changes - Dependency Bumps ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.12.0...v3.13.0 ## Resources - [Download release 3.13.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.13.0). v3.12.0 ## 3.12.0 Release Date: December 04, 2024 ## Changes - Bump go to 1.23.4 ## ✨ Built with go 1.23.4 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.11.0...v3.12.0 ## Resources - [Download release 3.12.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.12.0). v3.11.0 ## 3.11.0 Release Date: December 02, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.10.0...v3.11.0 ## Resources - [Download release 3.11.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.11.0). v3.10.0 ## 3.10.0 Release Date: November 27, 2024 ## Changes - Minor dependency bumps ## ✨ Built with go 1.23.3 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.9.0...v3.10.0 ## Resources - [Download release 3.10.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.10.0).
smoke-tests	4.10.0
syslog	12.3.5	v12.3.5 ## What's Changed * Bump dependencies * bump packaged Golang to go1.22.9 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.4...v12.3.5 v12.3.4 ## What's Changed * Fix syslog_storer write permissions in Noble stemcells with new apparmor rules by @ramonskie in https://github.com/cloudfoundry/syslog-release/pull/188 * Bump packaged Golang to go1.22.8 * Bump blackbox dependencies ## New Contributors * @ramonskie made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/188 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.3...v12.3.4
tanzu-jammy-stack	1.0.1

10.0.0

Release Date: 11/27/2024

Security Fixes

The following table lists CVEs that were present in Isolation Segment v6.0.9 and are fixed in each component in v10.0.0:

Component	Vulnerabilities Resolved
garden-runc	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
otel-collector	CVE-2023-28154 CVE-2024-21538 CVE-2022-25858 CVE-2024-43788
diego	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
mapfs	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
bpm	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
cf-networking	GHSA-45x7-px36-x8w8 CVE-2023-28154 CVE-2023-44270 CVE-2024-21538 CVE-2023-45288 GHSA-36jr-mh4h-2g58 CVE-2024-4068 CVE-2022-25858 CVE-2023-48795 CVE-2024-4067 CVE-2024-43788 GHSA-4v7x-pqxf-cx7m
loggregator-agent	CVE-2023-28154 CVE-2024-21538 CVE-2022-25858 CVE-2024-43788
cflinuxfs4	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
silk	GHSA-45x7-px36-x8w8 CVE-2023-28154 CVE-2023-44270 CVE-2024-21538 CVE-2023-45288 GHSA-36jr-mh4h-2g58 CVE-2024-4068 CVE-2022-25858 CVE-2023-48795 CVE-2024-4067 CVE-2024-43788 GHSA-4v7x-pqxf-cx7m
nfs-volume	CVE-2023-44270 CVE-2024-21538 CVE-2024-9143 CVE-2024-4068 CVE-2024-4067
cflinuxfs3	CVE-2023-5678 CVE-2021-23336 CVE-2021-31799 CVE-2022-32221 CVE-2018-1000120 CVE-2022-4304 CVE-2025-0725 CVE-2019-1559 CVE-2024-7592 CVE-2024-11168 CVE-2021-42385 CVE-2022-27781 CVE-2022-48174 CVE-2020-8315 CVE-2023-6597 CVE-2024-8096 GHSA-qg54-694p-wgpp CVE-2007-4559 CVE-2018-1000122 CVE-2022-35252 CVE-2018-13348 CVE-2019-16056 CVE-2021-22922 CVE-2024-27280 CVE-2022-48564 CVE-2023-44270 CVE-2022-48560 CVE-2017-17522 CVE-2020-8284 CVE-2019-5482 CVE-2022-29526 CVE-2020-14343 CVE-2018-1000517 CVE-2019-1543 CVE-2023-27533 CVE-2021-3712 GHSA-mmrq-6999-72v8 CVE-2019-5747 CVE-2018-16842 CVE-2022-22576 CVE-2018-17983 CVE-2018-20679 GHSA-6f62-3596-g6w7 GHSA-rprw-h62v-c2w7 CVE-2020-1971 CVE-2024-11053 CVE-2023-3446 CVE-2025-1795 CVE-2024-45336 CVE-2023-27534 CVE-2021-4189 CVE-2018-0735 GHSA-jppv-gw3r-w3q8 CVE-2021-42384 CVE-2024-21538 CVE-2019-1551 CVE-2021-42376 CVE-2022-1271 CVE-2024-5642 CVE-2018-20406 CVE-2019-5443 CVE-2020-8177 CVE-2024-6923 CVE-2023-3817 CVE-2023-28319 CVE-2020-8130 GHSA-3mjj-mr4f-qxmx CVE-2022-43552 CVE-2021-42378 CVE-2024-5535 CVE-2024-0397 CVE-2022-48565 CVE-2019-1552 CVE-2019-3902 GHSA-v778-237x-gjrc CVE-2021-22925 CVE-2018-1000300 CVE-2024-4741 CVE-2022-26488 GHSA-3v62-ww8w-758m CVE-2024-9287 CVE-2021-4160 CVE-2017-15874 CVE-2020-1968 CVE-2021-3733 CVE-2023-46218 GHSA-c33w-24p9-8m24 CVE-2019-1563 CVE-2024-45341 CVE-2020-10663 CVE-2024-2511 CVE-2021-41817 CVE-2023-0465 GHSA-p782-xgp4-8hr8 CVE-2018-0737 CVE-2024-9143 CVE-2018-1000121 CVE-2022-2068 CVE-2020-14422 CVE-2023-4807 CVE-2021-42379 CVE-2020-8492 CVE-2022-27782 CVE-2021-3737 CVE-2021-3449 CVE-2024-2398 CVE-2021-22923 CVE-2022-28391 CVE-2024-3220 CVE-2024-4068 CVE-2015-5652 CVE-2019-1549 CVE-2017-16544 CVE-2024-6232 GHSA-ggxm-pgc9-g7fp CVE-2019-18348 CVE-2021-3177 CVE-2024-13176 CVE-2021-23841 CVE-2018-0732 CVE-2023-28322 CVE-2018-0739 CVE-2022-4450 GHSA-mq66-vcfc-8246 CVE-2017-18207 CVE-2025-22866 CVE-2018-16395 CVE-2023-0215 CVE-2021-3426 CVE-2024-0727 CVE-2023-28321 GHSA-w32m-9786-jp63 CVE-2019-9674 CVE-2021-22946 GHSA-v5h6-c2hv-hv3r CVE-2021-42381 CVE-2021-22947 CVE-2023-28320 CVE-2024-3219 CVE-2017-15873 CVE-2019-20907 CVE-2022-37454 CVE-2024-28085 CVE-2018-13346 CVE-2018-16839 CVE-2023-23916 CVE-2019-5481 GHSA-jphg-qwrw-7w9g CVE-2018-13347 CVE-2023-0466 CVE-2022-0563 GHSA-p575-cf9h-wv42 CVE-2023-24329 CVE-2020-26116 CVE-2024-0450 CVE-2020-15523 CVE-2019-18276 CVE-2025-0938 CVE-2018-1000500 CVE-2020-25613 CVE-2022-0391 CVE-2024-4030 CVE-2018-5407 CVE-2022-32208 CVE-2022-27774 CVE-2019-15903 CVE-2024-4067 CVE-2023-0286 CVE-2021-22926 CVE-2024-47611 CVE-2023-27043 CVE-2022-48566 CVE-2021-22898 CVE-2024-4032 CVE-2024-7264 CVE-2021-23840 CVE-2022-1292 CVE-2023-40217 CVE-2023-0464 GHSA-9xv4-r2hf-26gh CVE-2021-42382 CVE-2021-3711 CVE-2017-18342 CVE-2023-26112 CVE-2018-0734 CVE-2022-2097 CVE-2018-0500 CVE-2022-27776 CVE-2021-42374 CVE-2019-1547 CVE-2024-47220 CVE-2013-0340 CVE-2021-42386 CVE-2023-36632 CVE-2019-16935 CVE-2022-45061 CVE-2022-0778 GHSA-gwfg-cqmg-cf8f CVE-2018-1000301 CVE-2024-8088 CVE-2024-50602 GHSA-8q59-q68h-6hv4 CVE-2021-37600 CVE-2023-2650 CVE-2020-27619 CVE-2021-28861 CVE-2022-32206
smb-volume	CVE-2023-44270 CVE-2024-21538 CVE-2024-4068 CVE-2024-4067
smoke-tests	CVE-2023-28154 CVE-2024-21538 CVE-2022-25858 CVE-2024-43788
syslog	CVE-2023-28154 CVE-2024-21538 CVE-2022-25858 CVE-2024-43788
tanzu-jammy-stack	CVE-2023-28154 CVE-2024-21538 CVE-2022-25858 CVE-2024-43788
routing	CVE-2024-34156 GHSA-45x7-px36-x8w8 CVE-2023-28154 CVE-2024-34158 CVE-2024-21538 GHSA-29wx-vh33-7x7r CVE-2024-34155 CVE-2023-45288 GHSA-36jr-mh4h-2g58 CVE-2022-25858 CVE-2024-51744 CVE-2023-48795 CVE-2024-43788 CVE-2024-53008 GHSA-4v7x-pqxf-cx7m

10.0.0-build.5

Release Date: 11/19/2024

Bump cf-networking to version 3.52.0
Bump loggregator-agent to version 8.3.0
Bump nfs-volume to version 7.8.0
Bump routing to version 0.319.0
Bump silk to version 3.52.0
Bump smb-volume to version 3.9.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.639
bpm	1.4.0
cf-networking	3.52.0	v3.52.0 ## 3.52.0 Release Date: October 03, 2024 ## Changes - [Bump the example-apps to Golang 1.23 (](https://github.com/cloudfoundry/cf-networking-release/commit/0a4815b48b911c4ef3201bb1faa9c097c99f3e74)https://github.com/cloudfoundry/cf-networking-release/pull/303[)](https://github.com/cloudfoundry/cf-networking-release/commit/0a4815b48b911c4ef3201bb1faa9c097c99f3e74) - [Upgrade cf-networking-healthchecker](https://github.com/cloudfoundry/cf-networking-release/commit/6b0bf9b821719b2097608117e1760f3a3e4cda93) ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.51.0...v3.52.0 ## Resources - [Download release 3.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.52.0).
cflinuxfs4	1.130.0
cf-cli	1.67.0
count-cores-indicator	2.0.0
diego	2.105.0
garden-runc	1.57.0
loggregator-agent	8.3.0	v8.3.0 ## What's Changed * Add `https-batch` protocol to loggr-syslog-agent for more efficient (batched) https drains by @nicklas-dohrn in https://github.com/cloudfoundry/loggregator-agent-release/pull/491 * Bump dependencies * Bump packaged Golang to go1.22.8 ## New Contributors * @nicklas-dohrn made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/491 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.2.1...v8.3.0
mapfs	1.4.0
nfs-volume	7.8.0	v7.8.0 ## 7.8.0 Release Date: November 14, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.7.0...v7.8.0 ## Resources - [Download release 7.8.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.8.0). v7.7.0 ## 7.7.0 Release Date: November 08, 2024 ## Changes - Bump dependancies. - Ensure uid/guids are parsed for uint32 compatibility before downcasting - https://github.com/cloudfoundry/nfs-volume-release/pull/1043 - Thanks @geofffranks ! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.6.0...v7.7.0 ## Resources - [Download release 7.7.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.7.0). v7.6.0 ## 7.6.0 Release Date: October 31, 2024 ## Changes - Fix bbr metadata.sh.erb - https://github.com/cloudfoundry/nfs-volume-release/pull/1042 - Thanks @jochenehret! - Bump dependancies. ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.5.0...v7.6.0 ## Resources - [Download release 7.6.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.6.0). v7.5.0 ## 7.5.0 Release Date: October 18, 2024 ## Changes - Bump to golang 1.23.2 - 🐛 Now requires 3 consecutive failures to conenct to rpcbind + statd ports before monit restarting the services, to avoid problems with ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.4.0...v7.5.0 ## Resources - [Download release 7.5.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.5.0).
otel-collector	0.10.1
routing	0.319.0	v0.319.0 ## 0.319.0 Release Date: November 14, 2024 ## Changes - Bumps haproxy to 2.8.12 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.318.0...v0.319.0 ## Resources - [Download release 0.319.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.319.0). v0.318.0 ## 0.318.0 Release Date: November 05, 2024 ## Changes - Enhance Gorouter retry logic - https://github.com/cloudfoundry/gorouter/issues/437 - Thanks @b1tamara! - Update Routing-API and route registrar for tcp routes - https://github.com/cloudfoundry/routing-release/commit/80cab2aafbbbe30c9fd01458d9ac5452fe0457f1 - Thanks @geofffranks! - Convert all port handling logic to uint16 - Thanks @geofffranks ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index 4f887265..b9afabbe 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -71,16 +71,13 @@ properties: description: "Log level for route_registrar" default: "info" route_registrar.routing_api.api_url: - description: (optional, string) The routing API's URL. This is required to register any TCP routes. - default: https://routing-api.service.cf.internal:3001 + description: (optional, string) The routing API's URL. This is required to register any TCP routes. If not provided here or via link, this defaults to 'https://routing-api.service.cf.internal:3001' route_registrar.routing_api.oauth_url: - description: (optional, string) The OAuth server's URL. This is required to register any TCP routes. - default: https://uaa.service.cf.internal:8443 + description: (optional, string) The OAuth server's URL. This is required to register any TCP routes. If not provided here or via link, this defaults to 'https://uaa.service.cf.internal:8443' route_registrar.routing_api.client_id: - description: (optional, string) An OAuth client ID for a client that is permitted to add new TCP routes. This is required to register any TCP routes. - default: routing_api_client + description: (optional, string) An OAuth client ID for a client that is permitted to add new TCP routes. This is required to register any TCP routes. If set, overrides values provided via routing_api's link. If not provided via link or property, defaults to 'routing_api_client'. route_registrar.routing_api.client_secret: - description: (optional, string) The OAuth client secret for the above client. This is required to register any TCP routes. + description: (optional, string) The OAuth client secret for the above client. This is required to register any TCP routes. If set, overrides values provided via routing_api's link. If not provided via link, this must be set when registering TCP routes. route_registrar.routing_api.ca_certs: description: (optional, array of strings) The certificate authority certificates for any APIs that the route registrar is communicating with over HTTPS, e.g., the OAuth server. This is required to register any TCP routes. route_registrar.routing_api.skip_ssl_validation: diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec index 2e5cd361..bea7e6ca 100644 --- a/jobs/routing-api/spec +++ b/jobs/routing-api/spec @@ -47,6 +47,8 @@ provides: - routing_api.reserved_system_component_ports - routing_api.enabled_api_endpoints - routing_api.max_ttl + - uaa.token_endpoint + - uaa.tls_port - uaa.ca_cert - skip_ssl_validation - name: routing_api_db ``` ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.317.0...v0.318.0 ## Resources - [Download release 0.318.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.318.0). v0.317.0 ## 0.317.0 Release Date: October 21, 2024 ## Changes - 🐛Fixes a bug where gorouter was incorrectly calculating HTTP request header lengths when evaluating the `router.max_header_kb` property - 🐛Fixes a bug with tcp_router where BOSH was incorrectly determining that the tcp_router job had templates needing to be updated, when not using backend TLS certificates. ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.316.0...v0.317.0 ## Resources - [Download release 0.317.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.317.0). v0.316.0 ## 0.316.0 Release Date: October 17, 2024 ## Changes - 🐛 Bug fix: Map reserved_system_component_ports to integer - https://github.com/cloudfoundry/routing-release/pull/438 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.315.0...v0.316.0 ## Resources - [Download release 0.316.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.316.0). v0.315.0 ## 0.315.0 Release Date: October 17, 2024 ## Changes - Bug fix: Fix memory leak from calling ifrit.Wait. Fixes https://github.com/cloudfoundry/route-registrar/issues/59. Thank you @b1tamara , @charleshansen, and @maxmoehl ! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.314.0...v0.315.0 ## Resources - [Download release 0.315.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.315.0). v0.314.0 ## 0.314.0 Release Date: October 03, 2024 ## ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ KNOWN ISSUE ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ CAUTION: This release is affected by a memory leak in the route registrar job. Users can monitor their VMs’ memory usage and monit restart the route_registrar process as necessary. ## Changes - Bump to Go 1.23.2 ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.313.0...v0.314.0 ## Resources - [Download release 0.314.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.314.0). v0.313.0 ## 0.313.0 Release Date: October 02, 2024 ## ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ KNOWN ISSUE ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ CAUTION: This release is affected by a memory leak in the route registrar job. Users can monitor their VMs’ memory usage and monit restart the route_registrar process as necessary. ## Changes * Upgrade zap to 1.x, remove zap 0.x in https://github.com/cloudfoundry/routing-release/pull/434. Thank you @hoffmaen! ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.312.0...v0.313.0 ## Resources - [Download release 0.313.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.313.0). Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.312.0...v0.313.0 v0.312.0 ## 0.312.0 Release Date: September 30, 2024 ## ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ KNOWN ISSUE ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ CAUTION: This release is affected by a memory leak in the route registrar job. Users can monitor their VMs’ memory usage and monit restart the route_registrar process as necessary. ## Changes - Upgrade to Go 1.23 - [Make ReadHeaderTimeout configurable in release](https://github.com/cloudfoundry/routing-release/commit/b4013be629c709437b871f60bc5b3793f6a8d348) - [fix: bump minimum go version to 1.23 for partitioned cookies (](https://github.com/cloudfoundry/routing-release/commit/f8b9f683418a8c458db2eb139d1bfd045986c11e)https://github.com/cloudfoundry/routing-release/pull/437[)](https://github.com/cloudfoundry/routing-release/commit/f8b9f683418a8c458db2eb139d1bfd045986c11e) - Various Minor Bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/acceptance_tests/spec b/jobs/acceptance_tests/spec index 8122ddaf..51a81762 100644 --- a/jobs/acceptance_tests/spec +++ b/jobs/acceptance_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.22-linux + - golang-1.23-linux - acceptance_tests - rtr - cf-cli-8-linux diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 60c7b520..c7896a27 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -364,6 +364,9 @@ properties: Generally, this timeout must be greater than that of the load balancer. As examples, GCP HTTP(S) load balancer has a default timeout of 600 seconds so a value greater than 600 is recommended and AWS ELB has a default timeout of 60 seconds so a value greater than 60 is recommended. However, depending on the IaaS, this timeout may need to be shorter than the load balancer's timeout, e.g., Azure's load balancer times out at 240 seconds (by default) and GCP TCP load balancer times out at 600 seconds without sending a TCP RST to clients, so a value lower than this is recommended in order to force it to send the TCP RST. default: 900 + router.read_header_timeout: + description: "The amount of time allowed to read request headers." + default: 0 router.backends.max_conns: description: "Maximum concurrent TCP connections per backend. When set to 0 there is no limit" default: 500 diff --git a/jobs/smoke_tests/spec b/jobs/smoke_tests/spec index 02edfd9d..4ea8eb07 100644 --- a/jobs/smoke_tests/spec +++ b/jobs/smoke_tests/spec @@ -7,7 +7,7 @@ templates: bpm.yml.erb: config/bpm.yml packages: - - golang-1.22-linux + - golang-1.23-linux - acceptance_tests - cf-cli-8-linux ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.311.0...v0.312.0 ## Resources - [Download release 0.312.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.312.0).
silk	3.52.0	v3.52.0 ## 3.52.0 Release Date: October 03, 2024 ## Changes - [Upgrade silk-healthchecker](https://github.com/cloudfoundry/silk-release/commit/727573775dcbc122423fa1789a3ccf26893125be) - Various dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.51.0...v3.52.0 ## Resources - [Download release 3.52.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.52.0).
smb-volume	3.9.0	v3.9.0 ## 3.9.0 Release Date: November 14, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.8.0...v3.9.0 ## Resources - [Download release 3.9.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.9.0). v3.8.0 ## 3.8.0 Release Date: November 08, 2024 ## Changes - Bump dependancies. - Fix bbr metadata - https://github.com/cloudfoundry/smb-volume-release/pull/441 - Thanks @jochenehret ! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.7.0...v3.8.0 ## Resources - [Download release 3.8.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.8.0). v3.7.0 ## 3.7.0 Release Date: October 31, 2024 ## Changes - Bump dependancies. ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.6.0...v3.7.0 ## Resources - [Download release 3.7.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.7.0). v3.6.0 ## 3.6.0 Release Date: October 24, 2024 ## Changes - Update BBR lock/unlock dependencies - https://github.com/cloudfoundry/smb-volume-release/pull/438 - Thanks @davewalter! - Update for staticcheck compliant error message - https://github.com/cloudfoundry/smb-volume-release/pull/440 - Thanks @geofffranks! - Convert ioutilshim to osshim - https://github.com/cloudfoundry/smb-volume-release/pull/439 - Thanks @geofffranks! ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.5.0...v3.6.0 ## Resources - [Download release 3.6.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.6.0).
smoke-tests	4.10.0
syslog	12.3.3
tanzu-jammy-stack	1.0.1

10.0.0-build.4

Release Date: 10/07/2024

Bump bpm to version 1.4.0
Bump cf-networking to version 3.51.0
Bump cflinuxfs4 to version 1.130.0
Bump diego to version 2.105.0
Bump garden-runc to version 1.57.0
Bump mapfs to version 1.4.0
Bump nfs-volume to version 7.4.0
Bump silk to version 3.51.0
Bump smb-volume to version 3.5.0

Component	Version	Release Notes
ubuntu-jammy stemcell	1.572
bpm	1.4.0
cf-networking	3.51.0	v3.51.0 ## 3.51.0 Release Date: September 24, 2024 ## Changes - Bump to Go 1.23 - [Add ReadHeaderTimeout option on the server](https://github.com/cloudfoundry/cf-networking-release/commit/a32d19d7120dfec4037121232b84c238f3eaa2f3) - [Pass ReadHeaderTimeout to lagerlevel Server](https://github.com/cloudfoundry/cf-networking-release/commit/b1fc8c3ad3abfd94fbcafd9b2c4c32987c556222) - [Fix file/dir creation permissions](https://github.com/cloudfoundry/cf-networking-release/commit/2a095f5b94a449585a3082e60cd0d1466d1611ed) - [Catch or explicitly ignore unhandled errors](https://github.com/cloudfoundry/cf-networking-release/commit/a4d4085dfeb78c3ee06bad109ba073f6a853d80f) ## Bosh Job Spec changes: ```diff diff --git a/jobs/performance-test-sd/spec b/jobs/performance-test-sd/spec index 0583340e..fd83a044 100644 --- a/jobs/performance-test-sd/spec +++ b/jobs/performance-test-sd/spec @@ -6,7 +6,7 @@ templates: config.json.erb: config.json packages: - - golang-1.22-linux + - golang-1.23-linux - performance-test-sd consumes: diff --git a/jobs/service-discovery-controller/spec b/jobs/service-discovery-controller/spec index 6786aad9..46deb276 100644 --- a/jobs/service-discovery-controller/spec +++ b/jobs/service-discovery-controller/spec @@ -51,6 +51,10 @@ properties: description: "Interval in seconds for which the route emitter is told to emit all routes. This value should be less than the staleness_threshold_seconds" default: 60 + read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + dnshttps.server.tls: description: "Server-side mutual TLS configuration for dns over http" dnshttps.client.ca: ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.50.0...v3.51.0 ## Resources - [Download release 3.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.51.0).
cflinuxfs4	1.130.0	v1.130.0 This release ships with cflinuxfs4 version 1.130.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.130.0) v1.129.0 This release ships with cflinuxfs4 version 1.129.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.129.0) v1.128.0 This release ships with cflinuxfs4 version 1.128.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.128.0) v1.127.0 This release ships with cflinuxfs4 version 1.127.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.127.0) v1.126.0 This release ships with cflinuxfs4 version 1.126.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.126.0) v1.125.0 This release ships with cflinuxfs4 version 1.125.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.125.0) v1.124.0 This release ships with cflinuxfs4 version 1.124.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.124.0) v1.122.0 This release ships with cflinuxfs4 version 1.122.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.122.0) v1.121.0 This release ships with cflinuxfs4 version 1.121.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.121.0) v1.120.0 This release ships with cflinuxfs4 version 1.120.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.120.0) v1.119.0 This release ships with cflinuxfs4 version 1.119.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.119.0) v1.118.0 This release ships with cflinuxfs4 version 1.118.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.118.0) v1.117.0 This release ships with cflinuxfs4 version 1.117.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.117.0) v1.115.0 This release ships with cflinuxfs4 version 1.115.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.115.0) v1.114.0 This release ships with cflinuxfs4 version 1.114.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.114.0) v1.113.0 This release ships with cflinuxfs4 version 1.113.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.113.0) v1.108.0 This release ships with cflinuxfs4 version 1.108.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.108.0)
cf-cli	1.67.0
count-cores-indicator	2.0.0
diego	2.105.0	v2.105.0 ## 2.105.0 Release Date: October 01, 2024 ## Changes - Upgrade to Go 1.23! - [add healtcheck metrics property](https://github.com/cloudfoundry/diego-release/commit/fe3aae75d48e6340b526e1d5d327732cd7bf1a8c) - [add healthcheck property to rep_windows config template](https://github.com/cloudfoundry/diego-release/commit/7dce01426b119d53d0b8923e2681884bb5a4cab7) - [add missing default params for linters](https://github.com/cloudfoundry/diego-release/commit/e9ccee2dd2bf78c83b15d27c711669c67261d103) - [add metadata to docs and reorder them](https://github.com/cloudfoundry/diego-release/commit/af178fa335254d47a8fd507822003c60bad4ba59) - Various dependency bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/rep/spec b/jobs/rep/spec index 405f90f46..0737d9d1a 100644 --- a/jobs/rep/spec +++ b/jobs/rep/spec @@ -235,7 +235,9 @@ properties: enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action. Requires Garden-Runc v1.10.0+" default: false - + enable_healthcheck_metrics: + description: "When set, enables the rep to emit healtcheck failure metrics. Requires enable_declarative_healthcheck to be set to true." + default: false cell_registrations.locket.enabled: description: Enable the cell rep to register itself as a service with Locket. default: true diff --git a/jobs/rep_windows/spec b/jobs/rep_windows/spec index 0521d1061..4a7dfefc6 100644 --- a/jobs/rep_windows/spec +++ b/jobs/rep_windows/spec @@ -237,13 +237,16 @@ properties: diego.rep.locket.client_keepalive_timeout: description: "Timeout in seconds to receive a response to the keepalive ping. If a response is not received within this time, the locket client will reconnect to another server." default: 22 - + enable_declarative_healthcheck: description: "When set, enables the rep to prefer the LRP CheckDefinition to healthcheck instances over the Monitor action." default: false declarative_healthcheck_path: description: "The directory containing the declarative healthcheck binary" default: "/var/vcap/packages/healthcheck_windows/external" + enable_healthcheck_metrics: + description: "When set, enables the rep to emit healtcheck failure metrics. Requires enable_declarative_healthcheck to be set to true." + default: false cell_registrations.locket.enabled: description: Enable the cell rep to register itself as a service with Locket. diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec index d61278357..901e5236d 100644 --- a/jobs/vizzini/spec +++ b/jobs/vizzini/spec @@ -1,7 +1,7 @@ --- name: vizzini packages: - - golang-1.22-linux + - golang-1.23-linux - vizzini templates: ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.104.0...v2.105.0 ## Resources - [Download release 2.105.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.105.0). v2.104.0 ## 2.104.0 Release Date: September 24, 2024 ## Changes - Bumped to Envoy to 1.28.7 - [Update file permissions for BBS access log](https://github.com/cloudfoundry/bbs/compare/9be69c0199dbd4818203b7382454616d56463e69...4b574f98c713f8e77467ec6a4ac953ab52ddc718) - [Update file permissions for Buildpack App Lifecycle access log](https://github.com/cloudfoundry/bbs/compare/9be69c0199dbd4818203b7382454616d56463e69...4b574f98c713f8e77467ec6a4ac953ab52ddc718) - [Update file permissions for cacheddownloader](https://github.com/cloudfoundry/cacheddownloader/compare/09b8631e33d0adb38bbae81529b63fa3f92d0925...a52cc2a85daa3e138cead7c748881d24af914c4a) - [Update file permissions for Executor](https://github.com/cloudfoundry/executor/compare/0a01dbec448f78e493c86b0d2672a646f43e9a53...a8f0e01a67921c94cfabfc933bb436f1c101faae) - [Update file permissions for Inigo](https://github.com/cloudfoundry/inigo/compare/18074ea13ef2ca3a6195fed63ce639b2e677ee39...3d1daff34a1d91f50f1615cc6089658f953c7d59) - Various dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.103.0...v2.104.0 ## Resources - [Download release 2.104.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.104.0).
garden-runc	1.57.0	v1.57.0 ## 1.57.0 Release Date: October 02, 2024 ## Changes - Upgrade to Go 1.23 - [Create a top-level dir for libtool](https://github.com/cloudfoundry/garden-runc-release/commit/fb83c7757f43ec7d4f39b7a9d5fbacbdbd224b11) ## ✨ Built with go 1.23.2 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.56.0...v1.57.0 ## Resources - [Download release 1.57.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.57.0).
loggregator-agent	8.2.1
mapfs	1.4.0	v1.4.0 ## 1.4.0 Release Date: September 25, 2024 ## Changes - Bump to Go 1.23 - Minor dependency bumps ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.3.0...v1.4.0 ## Resources - [Download release 1.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.4.0).
nfs-volume	7.4.0	v7.4.0 ## 7.4.0 Release Date: October 01, 2024 ## Changes - 🐛 Updates the nfsbrokerpush errand to apply the security group to staging containers as well as running, for greater success talking to credhub in test environments. Thanks @jochenehret! - 🐛 Updates the BBR metdata to add more CAPI dependencies to resolve intermittent lock/unlock race conditions when running pre-restore actions in BBR. Thanks @davewalter! ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.3.0...v7.4.0 ## Resources - [Download release 7.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.4.0). v7.3.0 ## 7.3.0 Release Date: September 30, 2024 ## Changes - [Output rpcbind and statd logs to a sensible place](https://github.com/cloudfoundry/nfs-volume-release/commit/bb54df64b42100c5c64b98a2818258f2a51cb79e) - [Add retries for monit statd and rpcbind check](https://github.com/cloudfoundry/nfs-volume-release/commit/03f06e61244424593f34b446e0b7a7dce06d6773) - [Remove sqlite](https://github.com/cloudfoundry/nfs-volume-release/commit/86327f2336d4bfeadc2bb0389d981c41f6815750) - [Remove libevent and rpcsvc-proto](https://github.com/cloudfoundry/nfs-volume-release/commit/6e818a0ca00f79f8117d69eebab95a7273170239) - [Remove nfs-legacy option](https://github.com/cloudfoundry/nfs-volume-release/commit/bc3fbc7a609434acb966fab601df110be18a2f0b) - [Output rpcbind and statd logs to a sensible place #1024](https://github.com/cloudfoundry/nfs-volume-release/pull/1024) - [Add retries for monit statd and rpcbind check #1027](https://github.com/cloudfoundry/nfs-volume-release/pull/1027) - [Add retries for monit statd and rpcbind check #1027](https://github.com/cloudfoundry/nfs-volume-release/pull/1027) - [Remove unneeded packages for nfs-debs #1035 ](https://github.com/cloudfoundry/nfs-volume-release/pull/1035) - [Remove nfs-legacy option #1036 ](https://github.com/cloudfoundry/nfs-volume-release/pull/1036) - Various Dependency Bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/nfsbrokerpush/spec b/jobs/nfsbrokerpush/spec index 9bf3138..bb67a94 100644 --- a/jobs/nfsbrokerpush/spec +++ b/jobs/nfsbrokerpush/spec @@ -97,29 +97,6 @@ properties: nfsbrokerpush.services: description: "List of services and plans supported by broker" default: - - id: nfsbroker - name: "nfs-legacy" - description: "Existing NFSv3 volumes (Deprecated)" - bindable: true - plan_updatable: false - tags: ["nfs"] - requires: ["volume_mount"] - metadata: - display_name: "Legacy NFS V3 Volume Broker" - image_url: data:image/png;base64,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 - long_description: "Legacy broker for existing NFSv3 volumes (deprecated)" - provider_display_name: "Dell / Pivotal" - documentation_url: https://docs.cloudfoundry.org/devguide/services/using-vol-services.html - plans: - - id: Existing - name: "Existing" - description: "A preexisting filesystem" - metadata: - costs: - - amount: - usd: 0.0 - unit: "MONTHLY" - display_name: "Existing Filesystems" - id: "997f8f26-e10c-11e7-80c1-9a214cf093ae" name: "nfs" description: "Existing NFSv3 and v4 volumes (see: https://code.cloudfoundry.org/nfs-volume-release/)" ``` ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.2.0...v7.3.0 ## Resources - [Download release 7.3.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.3.0).
otel-collector	0.10.1
routing	0.311.0
silk	3.51.0	v3.51.0 ## 3.51.0 Release Date: September 24, 2024 ## Changes - Bump to Go 1.23.1 - [Fix file/dir creation permissions](https://github.com/cloudfoundry/silk-release/commit/a085a2b0909ad849bce96e142381bdf67658990f) - [Catch or explicitly ignore unhandled errors](https://github.com/cloudfoundry/silk-release/commit/460ea10df9e8b8d32179b53ac5e22e1f1b58a4da) ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.50.0...v3.51.0 ## Resources - [Download release 3.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.51.0).
smb-volume	3.5.0	v3.5.0 ## 3.5.0 Release Date: September 26, 2024 ## Changes - Upgrade to Go 1.23! ## ✨ Built with go 1.23.1 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.4.0...v3.5.0 ## Resources - [Download release 3.5.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.5.0).
smoke-tests	4.10.0
syslog	12.3.3
tanzu-jammy-stack	1.0.1

10.0.0-build.3

Release Date: 09/27/2024

[Feature] Adds the ability to enable TLS on TCP Routes, so strict Route Integrity can be enabled when using TCP Routes
[Feature] Support egress of OTLP logs and traces with OTel Collector
[Feature Improvement] Adds the ability for operators to configure additional request attempt details in Gorouter
Bump bpm to version 1.3.2
Bump cf-networking to version 3.50.0
Bump cflinuxfs4 to version 1.107.0
Bump cf-cli to version 1.67.0
Bump diego to version 2.103.0
Bump garden-runc to version 1.56.0
Bump loggregator-agent to version 8.2.1
Bump mapfs to version 1.3.0
Bump nfs-volume to version 7.2.0
Bump otel-collector to version 0.10.1
Bump routing to version 0.311.0
Bump silk to version 3.50.0
Bump smb-volume to version 3.4.0
Bump syslog to version 12.3.3

Component	Version	Release Notes
ubuntu-jammy stemcell	1.572
bpm	1.3.2
cf-networking	3.50.0	v3.50.0 ## 3.50.0 Release Date: September 11, 2024 ## Changes - Bump to golang 1.22.7 - Dependency updates ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.49.0...v3.50.0 ## Resources - [Download release 3.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.50.0). v3.49.0 ## 3.49.0 Release Date: August 27, 2024 ## Changes - Bumps healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.48.0...v3.49.0 ## Resources - [Download release 3.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.49.0). v3.48.0 ## 3.48.0 Release Date: August 20, 2024 ## Changes - Update dependancies ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.47.0...v3.48.0 ## Resources - [Download release 3.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.48.0). v3.47.0 ## 3.47.0 Release Date: July 19, 2024 ## Changes - 🐛Fixed a bug in the pre-start script of garden-cni that deleted the iptables.lock file + directory unnecessarily, causing issues with the vxlan-policy-agent pre-start script - Refactored polling logic in policy-server - Bump to go 1.22.5 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.46.0...v3.47.0 ## Resources - [Download release 3.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.47.0).
cflinuxfs4	1.107.0	v1.107.0 This release ships with cflinuxfs4 version 1.107.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.107.0) v1.106.0 This release ships with cflinuxfs4 version 1.106.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.106.0) v1.105.0 This release ships with cflinuxfs4 version 1.105.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.105.0) v1.104.0 This release ships with cflinuxfs4 version 1.104.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.104.0) v1.103.0 This release ships with cflinuxfs4 version 1.103.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.103.0) v1.102.0 This release ships with cflinuxfs4 version 1.102.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.102.0) v1.101.0 This release ships with cflinuxfs4 version 1.101.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.101.0) v1.100.0 This release ships with cflinuxfs4 version 1.100.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.100.0) v1.99.0 This release ships with cflinuxfs4 version 1.99.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.99.0) v1.98.0 This release ships with cflinuxfs4 version 1.98.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.98.0) v1.97.0 This release ships with cflinuxfs4 version 1.97.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.97.0) v1.96.0 This release ships with cflinuxfs4 version 1.96.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.96.0) v1.95.0 This release ships with cflinuxfs4 version 1.95.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.95.0) v1.94.0 This release ships with cflinuxfs4 version 1.94.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.94.0) v1.93.0 This release ships with cflinuxfs4 version 1.93.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.93.0) v1.92.0 This release ships with cflinuxfs4 version 1.92.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.92.0)
cf-cli	1.67.0	v1.67.0 ### Included CF CLI versions: 7.7.14 8.8.2 v1.66.0 ### Included CF CLI versions: 7.7.12 8.8.0 v1.65.0 ### Included CF CLI versions: 7.7.11 8.7.11 v1.64.0 ### Included CF CLI versions: 7.7.10 8.7.10
count-cores-indicator	2.0.0
diego	2.103.0	v2.103.0 ## 2.103.0 Release Date: September 12, 2024 ## Changes - Go dependency bumps - Remove toolchain directive for compatibility when building binaries ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.102.0...v2.103.0 ## Resources - [Download release 2.103.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.103.0). v2.102.0 ## 2.102.0 Release Date: August 09, 2024 ## Changes - Add TLS support for tcp routes in route-emitter - Split metric_tags from run_info in desired LRP in BBS to minimize database queries issued by convergence ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_emitter/spec b/jobs/route_emitter/spec index 11dae3aec..df1b8383c 100644 --- a/jobs/route_emitter/spec +++ b/jobs/route_emitter/spec @@ -112,6 +112,9 @@ properties: tcp.enabled: description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API." default: false + tcp.enable_tls: + description: "When enabled route-emitter will include TLS port and instance GUID when emitting TCP routes." + default: false routing_api.url: description: "Routing API uri to be used by the tcp route-emitter" default: http://routing-api.service.cf.internal diff --git a/jobs/route_emitter_windows/spec b/jobs/route_emitter_windows/spec index cec39c995..9db9e8b69 100644 --- a/jobs/route_emitter_windows/spec +++ b/jobs/route_emitter_windows/spec @@ -112,6 +112,9 @@ properties: tcp.enabled: description: "Enable the route-emitter in cell-local mode to emit TCP routes for instances to the Routing API." default: false + tcp.enable_tls: + description: "When enabled route-emitter will include TLS port and instance GUID when emitting TCP routes." + default: false routing_api.url: description: "Routing API uri to be used by the tcp route-emitter" default: http://routing-api.service.cf.internal ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.101.0...v2.102.0 ## Resources - [Download release 2.102.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.102.0). v2.101.0 ## 2.101.0 Release Date: July 31, 2024 ## Changes - ✨Adds the cnb-app-lifecycle package as a possible app lifecycle for diego. Thanks @pbusko @nicolasbender @modulo11 for this huge effort! - 🐛Resolves an issue where CPUWeight could be set to 0 on a container. This value will now always be at least 1, complying with the spec. - Bumped golang to 1.22.5 - Bumped envoy to 1.28.4 - Various testing enhancements ## Bosh Job Spec changes: ```diff diff --git a/jobs/file_server/spec b/jobs/file_server/spec index dddda86c2..f530805b3 100644 --- a/jobs/file_server/spec +++ b/jobs/file_server/spec @@ -20,6 +20,7 @@ packages: - buildpack_app_lifecycle - docker_app_lifecycle - windows_app_lifecycle + - cnb_app_lifecycle provides: - name: file_server ``` ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.100.0...v2.101.0 ## Resources - [Download release 2.101.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.101.0). v2.100.0 ## Changes - Bumped loggregator usage to loggregator v9 - Thanks @Birdrock! - Bumped cfhttp usage to cfhttp v2 - Thanks @jrussett ! - Bumped go dependency bumps ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.99.0...v2.100.0 ## Resources - [Download release 2.100.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.100.0).
garden-runc	1.56.0	v1.56.0 ## 1.56.0 Release Date: September 11, 2024 ## Changes - ✨Introduces a new `garden.read_header_timeout` property to configure how long garden's HTTP server will wait to read all HTTP request headers. - Bumps to go 1.22.7 - Dependency Bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-windows/spec b/jobs/garden-windows/spec index 004e4e7f..74f545db 100644 --- a/jobs/garden-windows/spec +++ b/jobs/garden-windows/spec @@ -36,6 +36,10 @@ properties: description: "An array of additional arguments which will be passed to the runtime plugin binary" default: [] + garden.read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + garden.image_plugin: description: "Path to an image plugin binary" diff --git a/jobs/garden/spec b/jobs/garden/spec index 093e53e1..5a78d357 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -128,6 +128,10 @@ properties: description: "Path to a runtime plugin binary" default: /var/vcap/packages/runc/bin/runc + garden.read_header_timeout: + description: "The amount of time allowed to read request headers" + default: 30s + garden.no_image_plugin: description: "If true, disables image plugin usage, thus ignoring other image plugin settings" default: false ``` ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.55.0...v1.56.0 ## Resources - [Download release 1.56.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.56.0). v1.55.0 ## 1.55.0 Release Date: August 27, 2024 ## Changes - Bump to golang 1.22.6 ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.54.0...v1.55.0 ## Resources - [Download release 1.55.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.55.0). v1.54.0 ## 1.54.0 Release Date: July 31, 2024 ## Changes - Bump to golang 1.22.5 - Bump libnftnl to 1.2.8 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.53.0...v1.54.0 ## Resources - [Download release 1.54.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.54.0).
loggregator-agent	8.2.1	v8.2.1 ## What's Changed * Fix loggr-forwarder-agent-windows to emit all OTLP signals by default by @ctlong in https://github.com/cloudfoundry/loggregator-agent-release/pull/611 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.2.0...v8.2.1 v8.2.0 ## What's Changed * Bump to Golang 1.22.7 * Emit all OTel signals by default by @mkocher in https://github.com/cloudfoundry/loggregator-agent-release/pull/609 * Bump dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.7...v8.2.0 v8.1.7 ## What's Changed * Bump dependencies * Fix flaky unit tests by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/604 * Ignore linter warnings for G115 by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/607 * Fix uint to int conversion for otelcolclient by @iprotsiuk in https://github.com/cloudfoundry/loggregator-agent-release/pull/608 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.6...v8.1.7 v8.1.6 ## What's Changed * ⚠️ the `temporary_enable_otel_traces` property has been renamed to `enable_otel_traces`. Since this was prefixed as temporary this release is not a major version bump. * Add support to send LOG and EVENT to OtelCollector as logs by @mkocher in https://github.com/cloudfoundry/loggregator-agent-release/pull/603. For backwards compatibility `enable_otel_metrics` is true by default, and `enable_otel_traces` and `enable_otel_logs` are false by default. * Bump dependencies ## New Contributors * @iprotsiuk made their first contribution in https://github.com/cloudfoundry/loggregator-agent-release/pull/600 * @jriguera contributed log support for OTLP forwarding Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.5...v8.1.6 v8.1.5 ## What's Changed * Bump go dependencies v8.1.4 ## What's Changed * Bump to Go1.22 by @aqstack in https://github.com/cloudfoundry/loggregator-agent-release/pull/598 * Bump go dependencies Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.3...v8.1.4 v8.1.3 ## What's Changed * Cache failed dns lookups for 120 seconds which reduced load on DNS system when invalid drains are present by @acosta11 in https://github.com/cloudfoundry/loggregator-agent-release/pull/596 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.2...v8.1.3 v8.1.2 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.12 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.1...v8.1.2
mapfs	1.3.0	v1.3.0 ## 1.3.0 Release Date: September 16, 2024 ## Changes - Mapfs-release has been refactored to remove submodules and localize all documentation ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.2.80...v1.3.0 ## Resources - [Download release 1.3.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.3.0). v1.2.80 ## 1.2.80 Release Date: August 27, 2024 ## Changes - Bumped to golang 1.22.6 - Many CI + testing changes/improvements - Dependency bumps ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/mapfs-release/compare/v1.2.79...v1.2.80 ## Resources - [Download release 1.2.80 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/mapfs-release?version=1.2.80). v1.2.79 ## Changes * Add final release 1.2.72 [ci skip] * Golang: Updated to v1.22.4 (#269) * bump mapfs ## Dependencies * v2: Updated to v2.19.0. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`756bafb`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.72 ## Changes * Add final release 1.2.71 [ci skip] * Bump mapfs (#263) ## Dependencies * mapfs: Updated to v`ac01341`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.2.0	v7.2.0 ## 7.2.0 Release Date: September 11, 2024 ## Changes - Add dockerdriver-integration errand - Move nfsv3driver and nfsbroker into the release - Bump to go1.22.7 - Update processes to sync with [runtime ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) and update release to be on Minor versions - Update bosh blobs to latest - Update ldap test server configuration to have the correct users for tests - Remove support for cf cli v6 ## Bosh Job Spec changes: ```diff diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec new file mode 100644 index 0000000..51e7835 --- /dev/null +++ b/jobs/dockerdriver-integration/spec @@ -0,0 +1,22 @@ +--- +name: dockerdriver-integration + +templates: + pre-start.erb: bin/pre-start + run.erb: bin/run + config.json.erb: config/config.json + +packages: +- dockerdriver-integration +- nfs-debs +- nfsv3driver + + +properties: + nfs_remote_path: + description: Address for SMB Remote Path + default: nfs://nfstestserver.service.cf.internal/export + + mapfs_path: + description: "Path to mapfs binary" + default: /var/vcap/packages/mapfs/bin/mapfs diff --git a/jobs/nfstestldapserver/spec b/jobs/nfstestldapserver/spec index ec232e3..0408886 100644 --- a/jobs/nfstestldapserver/spec +++ b/jobs/nfstestldapserver/spec @@ -9,7 +9,8 @@ templates: config/core.ldif: config/core.ldif config/core.schema: config/core.schema config/addou.ldif: config/addou.ldif - config/adduser.ldif: config/adduser.ldif + config/adduser1000.ldif: config/adduser1000.ldif + config/adduser2000.ldif: config/adduser2000.ldif helpers/ctl_setup.sh: helpers/ctl_setup.sh helpers/ctl_utils.sh: helpers/ctl_utils.sh slapd.ldif.erb: config/slapd.ldif ``` ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/nfs-volume-release/compare/v7.1.75...v7.2.0 ## Resources - [Download release 7.2.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/nfs-volume-release?version=7.2.0). v7.1.75 ## Changes ## Dependencies * nfsv3driver: Updated to v`44424a7`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.74 ## Changes * Golang: Updated to v1.22.4 (#963) v7.1.73 ## Changes * Add final release 7.1.72 [ci skip] * Use cf create\|update-service-broker to register the service (#972) * Bump openssl- from 3.3.0 to 3.3.1 (https://github.com/cloudfoundry/nfs-volume-release/pull/959) * Golang: Updated to v1.22.4 (https://github.com/cloudfoundry/nfs-volume-release/pull/962) v7.1.72 ## Changes * Add final release 7.1.71 [ci skip] * Bump openssl- from 3.3.0 to 3.3.1 (#959) * Golang: Updated to v1.22.4 (#962) v7.1.71 ## Changes ## Dependencies * nfsbroker: Updated to v`b8a1e4c`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). v7.1.68 ## Changes * Add final release 7.1.66 [ci skip] * Bump submodules (#938) ## Dependencies * nfsbroker: Updated to v`e1d14e4`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker).
otel-collector	0.10.1	v0.10.1 ## What's Changed * Bump packaged Golang to go1.22.7 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.10.0...v0.10.1 v0.10.0 ## What's Changed * Add 'splunk_hec' exporter, 'filter' processor, and 'transform' processor by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/51 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.9.0...v0.10.0 v0.9.0 ## What's Changed * feat: Add CPU limit by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/46 * fix: config secret interpolation by @acosta11 in https://github.com/cloudfoundry/otel-collector-release/pull/49 ## New Contributors * @acosta11 made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/49 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.8.1...v0.9.0 v0.8.1 ## What's Changed * Automatically configure nop pipelines in config when necessary by @iprotsiuk in https://github.com/cloudfoundry/otel-collector-release/pull/48 ## New Contributors * @iprotsiuk made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/48 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.8.0...v0.8.1 v0.8.0 ## What's Changed * add integration tests by @mkocher in https://github.com/cloudfoundry/otel-collector-release/pull/45 * Feat: Add secrets property by @ctlong in https://github.com/cloudfoundry/otel-collector-release/pull/47 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.7.0...v0.8.0 v0.7.0 ## What's Changed * feat: Add memory limits by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/43 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.2...v0.7.0 v0.6.2 ## What's Changed * Config to allow subset of processors and exporters by @oppegard in https://github.com/cloudfoundry/otel-collector-release/pull/40 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.1...v0.6.2 v0.6.1 ## What's Changed * Move config.yaml and update scripting by @oppegard in https://github.com/cloudfoundry/otel-collector-release/pull/37 * chore: Bump to Go1.22 by @aqstack in https://github.com/cloudfoundry/otel-collector-release/pull/38 ## New Contributors * @oppegard made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/37 * @aqstack made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/38 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.6.0...v0.6.1 v0.6.0 ## What's Changed * Expose wider collector configuration by @acrmp in https://github.com/cloudfoundry/otel-collector-release/pull/31. This allows for configuring processors, pipelines & exporters which provides a lot more flexibility to platform engineers. * Add PrometheusRemoteWrite Exporter by @benjaminguttmann-avtq in https://github.com/cloudfoundry/otel-collector-release/pull/26 * Add batch processor by @acrmp in https://github.com/cloudfoundry/otel-collector-release/pull/32 * Bump go.opentelemetry.io/collector/cmd/builder from 0.103.0 to 0.104.0 in /src/otel-collector-builder by @dependabot in https://github.com/cloudfoundry/otel-collector-release/pull/30 ## New Contributors * @benjaminguttmann-avtq made their first contribution in https://github.com/cloudfoundry/otel-collector-release/pull/26 Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.5.0...v0.6.0 v0.5.0 ## What's Changed * Bump otel-collector to v0.103.0 in https://github.com/cloudfoundry/otel-collector-release/pull/28. * If you have configured exporters to use persistent queues note that [re-enqueuing of failed batches has been removed](https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.92.0). * Bump to [go1.21.11](https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ). Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.1...v0.5.0
routing	0.311.0	v0.311.0 ## 0.311.0 Release Date: September 12, 2024 ## Changes - Fix route-registrar dynamic config YAML field names to match JSON names ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.310.0...v0.311.0 ## Resources - [Download release 0.311.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.311.0). v0.310.0 ## 0.310.0 Release Date: September 09, 2024 ## Changes - dep: bump gopkg.in/yaml from v2 to v3; adjusted submodules listed in [routing-release#435](https://github.com/cloudfoundry/routing-release/pull/435) - minor dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.309.0...v0.310.0 ## Resources - [Download release 0.310.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.310.0). v0.309.0 ## 0.309.0 Release Date: September 06, 2024 ## Changes - Dependency bumps ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.308.0...v0.309.0 ## Resources - [Download release 0.309.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.309.0). v0.308.0 ## 0.308.0 Release Date: September 04, 2024 ## Changes - Route Registrar now allows hosts to be configured per route - By default it will use the top level host config ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.307.0...v0.308.0 ## Resources - [Download release 0.308.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.308.0). v0.307.0 ## 0.307.0 Release Date: August 27, 2024 ## Changes - Bump healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.306.0...v0.307.0 ## Resources - [Download release 0.307.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.307.0). v0.306.0 ## 0.306.0 Release Date: August 26, 2024 ## Changes - 🐛Fixes a bug where TCP routes were incorrectly detected as existing records in routing-api when the only difference between the new route and existing record was that the SNI Hostname or TLS TCP Port were different. This resulted in backends for TLS TCP Routes being ignored in certain scenarios. ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.305.0...v0.306.0 ## Resources - [Download release 0.306.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.306.0). v0.305.0 ## 0.305.0 Release Date: August 23, 2024 ## Changes - Route-registrar can dynamically scan and register routes at paths matching `route_registrar.dynamic_config_globs` ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index feafaf10..4f887265 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -94,6 +94,10 @@ properties: route_registrar.routing_api.server_ca_cert: description: "Routing API Certificate Authority" + route_registrar.dynamic_config_globs: + description: "Files matching the globs contain routes configuration that will be loaded dynamically. Parent directory must exist for bpm to mount it." + default: [/var/vcap/jobs//config/route_registrar/config.yml] + route_registrar.routes: description: \| (required, array of objects): Routes that will be registered ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.304.0...v0.305.0 ## Resources - [Download release 0.305.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.305.0). v0.304.0 ## 0.304.0 Release Date: August 13, 2024 ## Changes - Addresses issues with routing-api DB migration logic to fix the following bugs: - 🐛 Failed DB migrations would not re-run without manual intervention in the database - 🐛 DB migrations could run prior to the active routing-api server receiving code updates - 🐛 Failed DB migrations did not result in BOSH deployment failures - 🐛Works around an issue with Gorm + the V6 schema changes for TLS TCP Routing that did not always get applied properly. ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.303.0...v0.304.0 ## Resources - [Download release 0.304.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.304.0). v0.303.0 ## 0.303.0 Release Date: August 09, 2024 ## Changes add additional unsafe params by @pnikonowicz in https://github.com/cloudfoundry/routing-release/pull/431 ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index de81a0e8..feafaf10 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -132,10 +132,16 @@ properties: name (required, string): Human-readable reference for the healthcheck script_path (required, string): Path to script that will be run periodically to determine service health + unrestricted_volumes (optional, array of unrestricted_volumes): Additional directories to be mounted in the bpm config for the route_registrar job. + privileged: (optional, boolean): Sets bpm privileged flag. defaults to false timeout (optional, string): The healthcheck script must exit within this timeout, otherwise the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`. Default: Half of the value of `registration_interval` + unrestricted_volume object + path (required, string): the path to be mounted + writable (optional, boolean): sets the writable flag. defaults to false + options object lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.302.0...v0.303.0 v0.302.0 ## 0.302.0 Release Date: August 08, 2024 ## Changes - ✨Adds drain_wait + load_balancer_healthy_threshold properties behaving similarly to gorouter's to provide better uptime during BOSH deployments by waiting for LBs to pull nodes about to be shut down out of service, and re-add them before moving on to the next. - ✨Adds support for TLS backends with TCP routes. This enables TCP routes to use the envoy proxy settings on app containers used by HTTP routes, providing guaranteed TLS encryption between tcp-router + diego-cell VMs, without intervention from app teams. Additionally it allows for the disabling of the unproxied ports on containers since TCP route traffic can now go through envoy. - 🐛Fixed a bug with v0.301.0 that caused problems with TCP routes when a postgres database was used for the routing-api. Thanks for [finding this](https://github.com/cloudfoundry/routing-api/issues/57) @schmidtsv! - Bumped to golang 1.22.5 - Bumped tcp_router's haproxy to 2.8.10 - Testing + docs improvements ## Bosh Job Spec changes: ```diff diff --git a/jobs/tcp_router/spec b/jobs/tcp_router/spec index 44fbb41a..aa6b764c 100644 --- a/jobs/tcp_router/spec +++ b/jobs/tcp_router/spec @@ -10,10 +10,16 @@ templates: routing_api_client_certificate.crt.erb: config/certs/routing-api/client.crt routing_api_client_private.key.erb: config/keys/routing-api/client.key routing_api_ca_certificate.crt.erb: config/certs/routing-api/ca_cert.crt + tcp_router_backend_client_cert_and_key.pem.erb: config/keys/tcp-router/backend/client_cert_and_key.pem + tcp_router_backend_ca.crt.erb: config/certs/tcp-router/backend/ca.crt tcp_router_health_check_certificate.pem.erb: config/certs/health.pem + # config/haproxy.conf is used for initial haproxy config when starting up haproxy.conf.erb: config/haproxy.conf - haproxy.conf.template.erb: config/haproxy.conf.template + # config/haproxy.conf.template is rendered by tcp-router when routes are provided + haproxy.conf.template.erb: config/haproxy.conf.template bpm.yml.erb: config/bpm.yml + drain.erb: bin/drain + post-start.erb: bin/post-start packages: - routing_utils @@ -46,6 +52,18 @@ properties: default: "1m" tcp_router.oauth_secret: description: "OAuth client secret used to obtain token for Routing API from UAA." + tcp_router.backend_tls.enabled: + description: \| + Turns on support for TLS for TCP Router. Requires tcp_router.backend_tls.ca_cert to + be set. For mTLS also set tcp_router.backend_tls.client_cert and + tcp_router.backend_tls.client_key. + default: false + tcp_router.backend_tls.client_cert: + description: "TCP Router's TLS client cert used for mTLS with route backends" + tcp_router.backend_tls.client_key: + description: "TCP Router's TLS client private key used for mTLS with route backends" + tcp_router.backend_tls.ca_cert: + description: "TCP Router's TLS CA used with route backends" routing_api.uri: description: "URL where the routing API can be reached internally" @@ -86,6 +104,19 @@ properties: description: "Fail the tcp router if routing_api.reserved_system_component_ports conflict with ports in existing router groups." default: "false" + tcp_router.drain_wait: + description: \| + Delay in seconds after shut down is initiated before haproxy stops listening. + During this time haproxy will reject requests to the /health endpoint. + This accommodates requests forwarded by a load balancer until it considers the tcp_router unhealthy. + default: 20 + tcp_router.load_balancer_healthy_threshold: + description: \| + Time period in seconds to wait until declaring the tcp_router instance + started after starting the listener socket. This allows an external load + balancer time to register the instance as healthy." + default: 20 + uaa.token_endpoint: description: "UAA token endpoint host name. Do not include a scheme in this value; TCP Router will always use TLS to connect to UAA." default: uaa.service.cf.internal ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.301.0...v0.302.0 ## Resources - [Download release 0.302.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.302.0). v0.301.0 ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ KNOWN ISSUE ⚠️ ⚠️ ⚠️ ⚠️ ⚠️ CAUTION: This release is affected by a known issue for users who use both Postgres for the Cloud Foundry database and TCP Routes. This will be fixed in a future release. Users who use both Postgres and TCP Routes should not upgrade to this version. This only applies if postgres is used for the core Cloud Foundry databases, not if apps use postgres services. ## Changes - 🐛Fixes a bug introduced in [v0.298.0](https://github.com/cloudfoundry/routing-release/releases/tag/v0.298.0) where the `X-Forwarded-Host` header was incorrectly set for requests containing an `Expect: 100-continue` header. Thanks @maxmoehl ! ## ✨ Built with go 1.22.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.300.0...v0.301.0 ## Resources - [Download release 0.301.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.301.0). v0.300.0 ## Changes - Update route registrar to only send 5 unregistration messages for an unhealthy route - https://github.com/cloudfoundry/route-registrar/pull/46 . Thanks @andy-a-d-nguyen for your first contribution to CF! ## ✨ Built with go 1.22.4 ## Resources - [Download release 0.300.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.300.0). Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.299.0...v0.300.0 v0.299.0 ## Changes - Bumped to Golang 1.22.4 - Added ability to enforce strict validation of route service signature. Thanks @maxmoehl, @b1tamara and @plowin ! ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 8269440b..60c7b520 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -262,6 +262,9 @@ properties: router.route_services_timeout: description: "Expiry time of a route service signature in seconds" default: 60 + router.route_services_strict_signature_validation: + description: "Enforce strict validation of a route service signature" + default: false router.max_header_kb: description: \| This value controls the maximum number of bytes (in KB) the gorouter will read ``` ## ✨ Built with go 1.22.4 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.298.0...v0.299.0 ## Resources - [Download release 0.299.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.299.0).
silk	3.50.0	v3.50.0 ## 3.50.0 Release Date: September 11, 2024 ## Changes - Bumps to go 1.22.7 - Dependency bumps - 🐛Fixes an issue in vxlan-policy-agent where certain chains were not cleaned up properly - 🐛Adjusts how ASG related iptables chain names are generated in vxlan-policy-agent to provide more uniqueness, and better error messaging on collisions. ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.49.0...v3.50.0 ## Resources - [Download release 3.50.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.50.0). v3.49.0 ## 3.49.0 Release Date: August 27, 2024 ## Changes - Bumps healthchecker-boshrelease vendored packages ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.48.0...v3.49.0 ## Resources - [Download release 3.49.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.49.0). v3.48.0 ## 3.48.0 Release Date: August 20, 2024 ## Changes - Update dependancies ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.47.0...v3.48.0 ## Resources - [Download release 3.48.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.48.0). v3.47.0 Release Date: July 19, 2024 ## Changes - 🐛 Fixed a race condition in the pre-start script of vxlan-policy-agent that would cause failures if the iptables.lock file's directory was deleted by another process while the pre-start was obtaining a lock. - Updated go-loggregator usage to v9 - Refactored polling logic of vxlan-policy-agent and silk-daemon - Bump to go 1.22.5 ## ✨ Built with go 1.22.5 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.46.0...v3.47.0 ## Resources - [Download release 3.47.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.47.0).
smb-volume	3.4.0	v3.4.0 ## 3.4.0 Release Date: September 17, 2024 ## Changes - Add documentation - Removed support for cf cli v6 ## ✨ Built with go 1.22.7 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.2.0...v3.4.0 ## Resources - [Download release 3.4.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.4.0). v3.2.0 ## 3.2.0 Release Date: August 20, 2024 ## Changes - Added dockerdriver-integration errand - Moved `smbbroker` and `smbdriver` into the release instead of having them as submodule - Standardize blob name to match garden-runc and other releases - Fixed an error with smbtestserver when it couldn't be deployed twice in a row - Move config for smbtestserver into the bosh job instead - Allow consuming username and password for smbtestserver - Fix a bug with smbtestserver to allow the correct CIDR range for access - Allow SMB version 3.1.1 for broker since the move to Jammy stemcells [More context](https://learn.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-linux?tabs=Ubuntu%2Csmb311) - Bump to golang 1.22.6 - Update processes to sync with [runtime ci](https://github.com/cloudfoundry/wg-app-platform-runtime-ci) and update release to be on Minor versions ## Bosh Job Spec changes: ```diff diff --git a/jobs/dockerdriver-integration/spec b/jobs/dockerdriver-integration/spec new file mode 100644 index 0000000..a269658 --- /dev/null +++ b/jobs/dockerdriver-integration/spec @@ -0,0 +1,21 @@ +--- +name: dockerdriver-integration + +templates: + pre-start.erb: bin/pre-start + run.erb: bin/run + config.json.erb: config/config.json + +packages: +- cifs-utils +- dockerdriver-integration +- smbdriver + +consumes: +- name: smbtestserver + type: credentials + +properties: + smb_remote_path: + description: Address for SMB Remote Path + default: //smbtestserver.service.cf.internal/vol diff --git a/jobs/smbtestserver/spec b/jobs/smbtestserver/spec index 6e4d88d..de9a091 100755 --- a/jobs/smbtestserver/spec +++ b/jobs/smbtestserver/spec @@ -2,11 +2,19 @@ name: smbtestserver templates: - install.erb: bin/pre-start + smb.conf.erb: config/smb.conf + pre-start.erb: bin/pre-start ctl.erb: bin/smbtestserver_ctl packages: [] +provides: +- name: smbtestserver + type: credentials + properties: + - username + - password + properties: export_cidr: description: "cidr range to use for smb exports" ``` ## ✨ Built with go 1.22.6 Full Changelog: https://github.com/cloudfoundry/smb-volume-release/compare/v3.1.74...v3.2.0 ## Resources - [Download release 3.2.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/smb-volume-release?version=3.2.0). v3.1.74 ## Changes * Golang: Updated to v1.22.5 (#428) v3.1.73 ## Changes ## Dependencies * smbdriver: Updated to v`9ec4dc3`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.72 ## Changes * Bump smbdriver (#414) * Golang: Updated to v1.22.4 (#422) * Use cf create\|update-service-broker to register the service (#424) ## Dependencies * v2: Updated to v2.19.0. For more information, see [v2](https://github.com/onsi/ginkgo). * smbdriver: Updated to v`4b6cce2`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.69 ## Changes * Add final release 3.1.68 [ci skip] ## Dependencies * smbbroker: Updated to v`da19354`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`6a0de14`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0
syslog	12.3.3	v12.3.3 ## What's Changed * Bump packaged Golang to go1.22.7 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.2...v12.3.3 v12.3.2 ## What's Changed * Bump packaged Golang to go1.22.6 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.1...v12.3.2 v12.3.1 ## What's Changed * Bump packaged Golang to go1.22.5 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.3.0...v12.3.1 v12.3.0 ## What's Changed ### Features * Use service command to restart rsyslog, enabling BOSH Lite deployment by @ohkyle in https://github.com/cloudfoundry/syslog-release/pull/178 ### Maintenance * Bump blackbox dependencies * Bump packaged Golang to go1.21.11 ## New Contributors * @ohkyle made their first contribution in https://github.com/cloudfoundry/syslog-release/pull/178 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.2.5...v12.3.0
tanzu-jammy-stack	1.0.1

7.0.0-build.8

Release Date: 05/29/2024

[Breaking Change] Remove replication-canary
[Breaking Change] Requests with empty Content-Length headers are rejected by Gorouter
Bump bpm to version 1.2.19
Bump cflinuxfs4 to version 1.91.0
Bump diego to version 2.99.0
Bump garden-runc to version 1.53.0
Bump loggregator-agent to version 8.1.1
Bump mapfs to version 1.2.70
Bump nfs-volume to version 7.1.66
Bump routing to version 0.298.0
Bump smb-volume to version 3.1.68

Component	Version	Release Notes
ubuntu-jammy stemcell	1.445
bpm	1.2.19
cf-networking	3.46.0
cflinuxfs3	0.387.0
cflinuxfs4	1.91.0	v1.91.0 This release ships with cflinuxfs4 version 1.91.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.91.0) v1.90.0 This release ships with cflinuxfs4 version 1.90.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.90.0) v1.89.0 This release ships with cflinuxfs4 version 1.89.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.89.0) v1.88.0 This release ships with cflinuxfs4 version 1.88.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.88.0) v1.87.0 This release ships with cflinuxfs4 version 1.87.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.87.0) v1.86.0 This release ships with cflinuxfs4 version 1.86.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.86.0) v1.85.0 This release ships with cflinuxfs4 version 1.85.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.85.0) v1.84.0 This release ships with cflinuxfs4 version 1.84.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.84.0) v1.83.0 This release ships with cflinuxfs4 version 1.83.0. For more information, see the [release notes](https://github.com/cloudfoundry/cflinuxfs4/releases/tag/1.83.0)
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.99.0	v2.99.0 ## Changes - Do not remove evacuating actual LRP during cleanup ([rep#53](https://github.com/cloudfoundry/rep/pull/53)) - Add additional retries when apps make use of credhub for credentials. ([buildpackapplifecycle#71](https://github.com/cloudfoundry/buildpackapplifecycle/pull/71)) - Prevent panics in BBS by checking for all types of errors ([bbs#95](https://github.com/cloudfoundry/bbs/pull/95)) - Add retry logic and more explicit failure in router emitter start-up ([router-emitter#34](https://github.com/cloudfoundry/route-emitter/pull/34)) - Bump envoy blob version to `1.28.3` - Go mod dependency bumps ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.98.0...v2.99.0 ## Resources - [Download release 2.99.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.99.0).
garden-runc	1.53.0	v1.53.0 ## Changes - DEPRECATION NOTICE The `garden.experimental_use_containerd_mode_for_processes` property and usage of Garden when run in containerd mode for processes is now deprecated and no longer tested. - DEFAULT CHANGE - The default mode for garden containers is now containerd. This has been the default in cf-deployment since 2018. - REMOVAL OF EXPERIMENTAL FUNCTIONALITY NOTICE The experimental option to run the garden server process in rootless mode has been removed, as it did not work as expected and was an abandoned feature. - Go package dependency bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/garden-binaries/spec b/jobs/garden-binaries/spec index 0433639a..a8a96bae 100644 --- a/jobs/garden-binaries/spec +++ b/jobs/garden-binaries/spec @@ -15,7 +15,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini diff --git a/jobs/garden/spec b/jobs/garden/spec index 027df351..093e53e1 100644 --- a/jobs/garden/spec +++ b/jobs/garden/spec @@ -36,7 +36,6 @@ packages: - grootfs - xfs-progs - thresholder - - netplugin-shim - dontpanic - tini @@ -199,10 +198,6 @@ properties: description: AppArmor profile to use for unprivileged container processes default: garden-default - garden.experimental_rootless_mode: - description: A boolean stating whether or not to run garden-server as a non-root user - default: false - # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0 # For diego/cf, this should be set to true garden.cleanup_process_dirs_on_wait: @@ -210,8 +205,8 @@ properties: default: false garden.containerd_mode: - description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm or rootless" - default: false + description: "Use containerd for container lifecycle management. NOTE: cannot be used in combination with bpm" + default: true garden.tcp_keepalive_time: description: Sets the `net.ipv4.tcp_keepalive_time` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. @@ -229,7 +224,7 @@ properties: description: Sets the `net.ipv4.tcp_retries2` kernel parameter in containers. If not specified, the value from the linux init_net namespace is used. garden.experimental_use_containerd_mode_for_processes: - description: "(Under development) Use containerd for container process management. Must be used with containerd_mode also set to true. NOTE: cannot be used in combination with bpm or rootless" + description: "(Deprecated) No longer used/tested." default: false garden.experimental_cpu_throttling: diff --git a/jobs/gats/spec b/jobs/gats/spec index 916a35eb..065e3ace 100644 --- a/jobs/gats/spec +++ b/jobs/gats/spec @@ -22,12 +22,6 @@ properties: garden_test_rootfs: description: Test rootfs to use default: 'docker:///cloudfoundry/garden-rootfs' - containerd_for_processes: - description: Run GATS with CONTAINERD_FOR_PROCESSES_ENABLED - default: false - rootless: - description: Run GATS with ROOTLESS env var - default: false cpu_throttling: description: Run GATS with CPU_THROTTLING_ENABLED default: false ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.52.0...v1.53.0 ## Resources - [Download release 1.53.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.53.0).
loggregator-agent	8.1.1	v8.1.1 ## What's Changed * Bump dependencies * Fix Syslog Binding Cache polling to wait for the entire polling interval between each operation in https://github.com/cloudfoundry/loggregator-agent-release/pull/572 Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.1.0...v8.1.1
mapfs	1.2.70	v1.2.70 ## Changes * Golang: Updated to v1.22.3. (#259) ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`0de16f2`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.69 ## Dependencies * v2: Updated to v2.17.2. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * mapfs: Updated to v`7f382bc`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.66	v7.1.66 ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * nfsbroker: Updated to v`90964d1`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`4d13326`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.65 ## Changes * Golang: Updated to v1.22.3 (#920) * Bump util-linux from 2.40 to 2.40.1 (#922) * Change nfsv3driver statd default port to `41793` (non-ephemeral) (#909) * Use newest cf-cli available (#913) ## Dependencies * nfsbroker: Updated to v`071d3d8`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`49ad37b`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.64 ## Dependencies * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * nfsbroker: Updated to v`33b1b44`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`2e98b36`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.1
routing	0.298.0	v0.298.0 ## Changes - :bug: Improve support for requests using the Expect: 100-continue header. - :bug: The missing_content_length_header metric introduced in 0.297.0 has been renamed to empty_content_length_header for more accuracy. Thanks @peanball! - :bug: The empty_content_length_header was fixed to more accurately capture events when the content-length header of a request was empty. Previously extra request types were being included erroneously. ## Bosh Job Spec changes: ```diff diff --git a/jobs/gorouter/spec b/jobs/gorouter/spec index 712a761f..8269440b 100644 --- a/jobs/gorouter/spec +++ b/jobs/gorouter/spec @@ -306,6 +306,9 @@ properties: router.keep_alive_probe_interval: default: 1s description: Interval between TCP keep alive probes. Value is a string (e.g. "10s") + router.keep_alive_100_continue_requests: + description: "If set gorouter reuses backend connection for requests expecting 100-Continue" + default: false router.force_forwarded_proto_https: description: "Enables setting X-Forwarded-Proto header if SSL termination happened upstream and incorrectly set the header value. When this property is set to true gorouter sets the header X-Forwarded-Proto to https. When this value set to false, gorouter set the header X-Forwarded-Proto to the protocol of the incoming request" default: false ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.297.0...v0.298.0 ## Resources - [Download release 0.298.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.298.0). v0.297.0 ## Changes - 🐛FIXES KNOWN ISSUE Gorouter now correctly returns the status code provided by backends for workflows using 100-continue, or other 1xx interim status codes. Thanks for catching this @plowin @domdom82 and thanks @geofffranks for the quick fix! - 🐛The TLS listener for the health status endpoint in gorouter now handles custom cipher-suites that do not include any of the required HTTP/2 ciphers. Thanks @MarcPaquette + @geofffranks! - 🐛 Failing to establish a TCP connection to a backend no longer causes a panic when setting up a WebSocket connection. Thanks @domdom82! - ✨The health status endpoint for gorouter is now able to log error messages encountered when it starts up, to aid in troubleshooting. Thanks @MarcPaquette and @geofffranks ! - ✨Gorouter now provides a `missing_content_length_header` metric that will flag requests that would have been hit by Golang 1.22's new check to reject requests that have an empty content-length header. This can be used to determine if an environment will be affected by disabling the `go.httplaxcontentlength` gorouter property. Thanks @mariash! - NOTE: The metric is counting requests unaffected by the new golang behavior and will be updated in 0.298.0+, where it is also renamed to `empty_content_length_header`. - ✨Route registrar now allows operators to specify load blancing algorithms for individual routes. Thanks @b1tamara and @domdom82 ! - Bumped to golang 1.22.3 ## Bosh Job Spec changes: ```diff diff --git a/jobs/route_registrar/spec b/jobs/route_registrar/spec index c51dbb9f..de81a0e8 100644 --- a/jobs/route_registrar/spec +++ b/jobs/route_registrar/spec @@ -125,7 +125,8 @@ properties: with error, the route is unregistered. router_group (required, string, for tcp routes): Name of the router group to which the TCP route should be added. external_port (required, string, for tcp routes): Port that the TCP router will listen on. - server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames + server_cert_domain_name_modifier (optional, string, for sni routes): a regex replace to help with complicated hostnames. + options (optional, object, for http routes): Custom per-route options health_check object name (required, string): Human-readable reference for the healthcheck @@ -135,6 +136,9 @@ properties: the script is terminated with `SIGKILL` and the route is unregistered. Value is a string (e.g. "10s") and must parse to a positive time duration i.e. "-5s" is not permitted. Must be less than the value of `registration_interval`. Default: Half of the value of `registration_interval` + options object + lb_algo (optional, string): Load balancing algorithm for routing incoming requests to the backend: 'round-robin' or 'least-connection'. In cases where this option is not specified, the algorithm defined in gorouter spec is applied. + example: \| - name: my-service uris: @@ -150,6 +154,8 @@ properties: script_path: /path/to/script timeout: 5s route_service_url: https://my-oauth-proxy-route-service.example.com + options: + lb_algo: least-connection - name: my-tls-endpoint tls_port: 12346 server_cert_domain_san: "my-tls-endpoint.internal.com" ``` ## ✨ Built with go 1.22.3 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.296.0...v0.297.0 ## Resources - [Download release 0.297.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.297.0).
silk	3.46.0
smb-volume	3.1.68	v3.1.68 ## Changes * Golang: Updated to v1.22.3 (#408) ## Dependencies * v2: Updated to v2.17.3. For more information, see [v2](https://github.com/onsi/ginkgo). * smbbroker: Updated to v`17a844f`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`9ccf77c`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.67 ## Changes * Use newest cf-cli available (#405) ## Dependencies * v2: Updated to v2.17.2. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.33.1. For more information, see [gomega](https://github.com/onsi/gomega). * smbbroker: Updated to v`490615c`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`fa2b5d0`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0
syslog	12.2.5
tanzu-jammy-stack	1.0.1

7.0.0-build.6

Release Date: 05/03/2024

Component	Version
ubuntu-jammy stemcell	1.423
bpm	1.2.18
cf-networking	3.46.0
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.98.0
garden-runc	1.52.0
loggregator-agent	8.1.0
mapfs	1.2.68
nfs-volume	7.1.63
otel-collector	0.4.1
routing	0.296.0
silk	3.46.0
smb-volume	3.1.66
smoke-tests	4.10.0
syslog	12.2.5
tanzu-jammy-stack	1.0.1

7.0.0-build.4

Release Date: 04/17/2024

[Feature] Add option to enable concurrent read/writes for HTTP/1
[Feature Improvement] Allow Isolation Segment routers to route to Diego cells in several Isolation Segments
Bump bpm to version 1.2.18
Bump cf-networking to version 3.45.0
Bump diego to version 2.97.0
Bump garden-runc to version 1.51.0
Bump loggregator-agent to version 8.0.3
Bump mapfs to version 1.2.66
Bump nfs-volume to version 7.1.61
Bump otel-collector to version 0.4.1
Bump routing to version 0.295.0
Bump silk to version 3.45.0
Bump smb-volume to version 3.1.64
Bump smoke-tests to version 4.10.0
Bump syslog to version 12.2.4

Component	Version	Release Notes
ubuntu-jammy stemcell	1.423
bpm	1.2.18
cf-networking	3.45.0	v3.45.0 ## Changes - Go dependency bumps - Added config for staticcheck - Removed references to consul from documentation ## Bosh Job Spec changes: ```diff diff --git a/jobs/policy-server-asg-syncer/spec b/jobs/policy-server-asg-syncer/spec index 748c39a7..4c6c9a4e 100644 --- a/jobs/policy-server-asg-syncer/spec +++ b/jobs/policy-server-asg-syncer/spec @@ -109,7 +109,7 @@ properties: description: "Trusted CA for UAA server." uaa_hostname: - description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." + description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." default: uaa.service.cf.internal uaa_port: diff --git a/jobs/policy-server-internal/spec b/jobs/policy-server-internal/spec index 7095775d..029e723f 100644 --- a/jobs/policy-server-internal/spec +++ b/jobs/policy-server-internal/spec @@ -41,7 +41,7 @@ properties: default: 31946 health_check_timeout_seconds: - description: "Health check timeout for Consul DNS." + description: "Health check timeout" default: 5 internal_listen_port: @@ -52,7 +52,7 @@ properties: description: "Trusted CA certificate that was used to sign the vxlan policy agent's client cert and key." server_cert: - description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the policy server, eg `policy-server.service.cf.internal`." + description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the policy server, eg `policy-server.service.cf.internal`." server_key: description: "Server key for TLS." diff --git a/jobs/policy-server/spec b/jobs/policy-server/spec index 0d9f5157..8e2ccfa8 100644 --- a/jobs/policy-server/spec +++ b/jobs/policy-server/spec @@ -101,7 +101,7 @@ properties: description: "Trusted CA for UAA server." uaa_hostname: - description: "Host name for the UAA server. E.g. the service advertised via Consul DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." + description: "Host name for the UAA server. E.g. the service advertised via Bosh DNS. Must match common name in the UAA server cert. Must be listed in `uaa.zones.internal.hostnames`." default: uaa.service.cf.internal uaa_port: ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/cf-networking-release/compare/v3.44.0...v3.45.0 ## Resources - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/cf-networking-release?version=3.45.0).
cflinuxfs3	0.387.0
cflinuxfs4	1.82.0
cf-cli	1.60.0
count-cores-indicator	2.0.0
diego	2.97.0	v2.97.0 ## Changes - Adds support for comma-delimited destinations in ASGs - See: https://github.com/cloudfoundry/executor/pull/96 and https://github.com/cloudfoundry/bbs/pull/94 - Bump bosh package blobs - Bumps `jq` to `1.7.1` - Bumps `tar` - Bump go.mod dependencies ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.96.0...v2.97.0 ## Resources - [Download release 2.97.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.97.0). v2.96.0 ## Changes - Bump to golang 1.21.8 - Golang package dependency bumps - Includes moving from docker v20 to docker v26 - Includes moving from pgx v3 to pgx v5 - Remove references to Consul from boshrelease + documentation - Many fixes to remove deprecated code and otherwise fix linter violations. ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/diego-release/compare/v2.95.0...v2.96.0 ## Resources - [Download release 2.96.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/diego-release?version=2.96.0).
garden-runc	1.51.0	v1.51.0 ## Changes - Bumped Golang to 1.21.8 - Golang package dependency bumps - Many updates to get codebase passing the staticcheck linker - Updated garden-integration-tests to be a little less flakey ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/garden-runc-release/compare/v1.50.0...v1.51.0 ## Resources - [Download release 1.51.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/garden-runc-release?version=1.51.0).
loggregator-agent	8.0.3	v8.0.3 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/loggregator-agent-release/compare/v8.0.2...v8.0.3
mapfs	1.2.66	v1.2.66 ## Dependencies * mapfs: Updated to v`b0b6bfa`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.65 ## Changes * Golang: Updated to v1.22.2. (#241) ## Dependencies * mapfs: Updated to v`a80b833`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.64 ## Dependencies * v2: Updated to v2.17.1. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`cd8e7e6`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs). v1.2.63 ## Dependencies * v2: Updated to v2.17.0. For more information, see [v2](https://github.com/onsi/ginkgo). * mapfs: Updated to v`5381efc`. For more information, see [mapfs](https://github.com/cloudfoundry/mapfs).
nfs-volume	7.1.61	v7.1.61 ## Changes * Golang: Updated to v1.22.2 (#860) * Bump openssl- from 3.2.1 to 3.3.0 (#871) ## Dependencies * nfsbroker: Updated to v`1a70719`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`35b8c6f`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.60 ## Dependencies * nfsbroker: Updated to v`8aec99d`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`fb67285`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.59 ## Changes * Bump util-linux from 2.39.3 to 2.40 (#853) ## Dependencies * nfsbroker: Updated to v`7bc7bb0`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`15c152b`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver). v7.1.58 ## Dependencies * nfsbroker: Updated to v`e850d95`. For more information, see [nfsbroker](https://github.com/cloudfoundry/nfsbroker). * nfsv3driver: Updated to v`8af81b5`. For more information, see [nfsv3driver](https://github.com/cloudfoundry/nfsv3driver).
otel-collector	0.4.1	v0.4.1 ## What's Changed * Bump dependencies * Bump to [go1.21.9](https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M/m/khALNYGdAAAJ) Full Changelog: https://github.com/cloudfoundry/otel-collector-release/compare/v0.4.0...v0.4.1
routing	0.295.0	v0.295.0 ## Changes - Resolves #401 by reverting the removal of the deprecated BuildNameToCertificate() call - Bumps to golang 1.21.9 + golang.org/x/net 0.23.0 to patch CVE-2023-45288 ## ✨ Built with go 1.21.9 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.294.0...v0.295.0 ## Resources - [Download release 0.295.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.295.0). v0.294.0 ⚠️ This release contains a known issue: gorouter will no longer present the most specific certificate match but rather the first certificate that matches. See https://github.com/cloudfoundry/routing-release/issues/401 for details. Upgrading to routing-release 0.295.0 is advised. ⚠️ ## Changes - [Bump haproxy to 2.8.7](https://github.com/cloudfoundry/routing-release/commit/13b39eb5185656c3557c1ab15b5b13752b2ff6d8) - [update templates to not refer to consul](https://github.com/cloudfoundry/routing-release/commit/8216c056b1463bd1d7bf636a749568f70cb924d2) - [Default the routing_api.enabled_api_endpoints to mtls](https://github.com/cloudfoundry/routing-release/commit/2e96c2c932f7f945c3c7c15a768d0affc80de446) - [Update template test for mTLS routing api default](https://github.com/cloudfoundry/routing-release/commit/469d9e0a4eb0ac6015695ba27c6da80576b29801) - [Upgrade cf-cli-8-linux](https://github.com/cloudfoundry/routing-release/commit/b19a25052ed7982c83524ac87d22ed2f316201a2) ## Bosh Job Spec changes: ```diff diff --git a/jobs/routing-api/spec b/jobs/routing-api/spec index 1d7efe3c..2e5cd361 100644 --- a/jobs/routing-api/spec +++ b/jobs/routing-api/spec @@ -95,7 +95,7 @@ properties: routing_api.enabled_api_endpoints: description: "Protocols that the routing api will listen on. Possible values: 'mtls', or 'both' (mTLS + HTTP)" - default: "both" + default: "mtls" routing_api.mtls_port: description: "Port on which Routing API is running, listening with mTLS." default: 3001 ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/routing-release/compare/v0.293.0...v0.294.0 ## Resources - [Download release 0.294.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/routing-release?version=0.294.0).
silk	3.45.0	v3.45.0 ## Changes - Fixes to stop using deprecated code in tests (`net.Error.Temporary()`) - Remove consul references from documentation - Fix issues bumping the code.cloudfoundry.org/executor package - Go package bumps ## Bosh Job Spec changes: ```diff diff --git a/jobs/silk-controller/spec b/jobs/silk-controller/spec index a0966a01..cc7529a8 100644 --- a/jobs/silk-controller/spec +++ b/jobs/silk-controller/spec @@ -45,11 +45,11 @@ properties: default: 46455 health_check_port: - description: "Health check port for silk controller. Used by the Consul DNS health check." + description: "Health check port for silk controller. Used by the Bosh DNS health check." default: 19683 health_check_timeout_seconds: - description: "Health check timeout for Consul DNS." + description: "Health check timeout" default: 5 listen_ip: @@ -64,7 +64,7 @@ properties: description: "Trusted CA certificate that was used to sign the silk daemon client cert and key." server_cert: - description: "Server certificate for TLS. Must have common name that matches the Consul DNS name of the silk controller, eg silk-controller.service.cf.internal" + description: "Server certificate for TLS. Must have common name that matches the Bosh DNS name of the silk controller, eg silk-controller.service.cf.internal" server_key: description: "Server key for TLS." diff --git a/jobs/silk-daemon/spec b/jobs/silk-daemon/spec index 7a1525b3..e3786357 100644 --- a/jobs/silk-daemon/spec +++ b/jobs/silk-daemon/spec @@ -70,7 +70,7 @@ properties: default: 3457 silk_controller.hostname: - description: "Host name for the silk controller. E.g. the service advertised via Consul DNS. Must match common name in the silk_controller.server_cert" + description: "Host name for the silk controller. E.g. the service advertised via Bosh DNS. Must match common name in the silk_controller.server_cert" default: "silk-controller.service.cf.internal" silk_controller.listen_port: diff --git a/jobs/vxlan-policy-agent/spec b/jobs/vxlan-policy-agent/spec index 3118022b..802f04bb 100644 --- a/jobs/vxlan-policy-agent/spec +++ b/jobs/vxlan-policy-agent/spec @@ -41,7 +41,7 @@ properties: default: false policy_server.hostname: - description: "Host name for the policy server. E.g. the service advertised via Consul DNS. Must match common name in the policy_server.server_cert" + description: "Host name for the policy server. E.g. the service advertised via Bosh DNS. Must match common name in the policy_server.server_cert" default: "policy-server.service.cf.internal" policy_server.internal_listen_port: ``` ## ✨ Built with go 1.21.8 Full Changelog: https://github.com/cloudfoundry/silk-release/compare/v3.44.0...v3.45.0 ## Resources - [Download release 3.45.0 from bosh.io](https://bosh.io/releases/github.com/cloudfoundry/silk-release?version=3.45.0).
smb-volume	3.1.64	v3.1.64 ## Dependencies * smbbroker: Updated to v`02f340b`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`fb88dd0`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.63 ## Changes * Golang: Updated to v1.22.2 (#381) ## Dependencies * smbbroker: Updated to v`b380e77`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`0c36c10`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.62 ## Dependencies * v2: Updated to v2.17.1. For more information, see [v2](https://github.com/onsi/ginkgo). * smbbroker: Updated to v`f176916`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`5ee16dc`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver). v3.1.61 ## Dependencies * v2: Updated to v2.17.0. For more information, see [v2](https://github.com/onsi/ginkgo). * gomega: Updated to v1.32.0. For more information, see [gomega](https://github.com/onsi/gomega). * smbbroker: Updated to v`bab4864`. For more information, see [smbbroker](https://github.com/cloudfoundry/smbbroker). * smbdriver: Updated to v`7f3242d`. For more information, see [smbdriver](https://github.com/cloudfoundry/smbdriver).
smoke-tests	4.10.0	4.10.0 Create bosh final release 4.10.0 4.9.5 Create bosh final release 4.9.5 ## What's Changed * Upgrade Golang to 1.22 by @tas-operability-bot in https://github.com/pivotal/smoke-tests/pull/138 Full Changelog: https://github.com/pivotal/smoke-tests/compare/4.9.5...4.9.5
syslog	12.2.4	v12.2.4 ## What's Changed * Bump dependencies * Bump packaged Golang to go1.21.9 Full Changelog: https://github.com/cloudfoundry/syslog-release/compare/v12.2.3...v12.2.4
tanzu-jammy-stack	1.0.1

Content feedback and comments

Tanzu Platform for Cloud Foundry 10.0

Isolation Segment Component Updates

10.0.3

10.0.2

Security Fixes

Component Release Notes

10.0.1

Security Fixes

Component Release Notes

10.0.0

Security Fixes

10.0.0-build.5

10.0.0-build.4

10.0.0-build.3

7.0.0-build.8

7.0.0-build.6

7.0.0-build.4