Releases: shieldproject/shield
Releases · shieldproject/shield
v9.0.1
Improvements
- Updated Go toolchain to 1.25 and aligned the Dockerfile base.
- Migrated
google/go-githubfrom a 2015 pseudo-version to v76 (fixes a latentListUserTeamsAPI-drift bug acknowledged in-code). - Bumped
go-sql-driver/mysql,mattn/go-sqlite3,hashicorp/consul/api,golang.org/x/{crypto,net,oauth2},fsouza/go-dockerclient,prometheus/client_golang. - Updated
webdavanddemonginx images tobookwormbases (bullseye EOL 2026-06). - Refreshed vendored UI libs: jQuery 3.2.1 → 3.7.1 (covers CVE-2020-11022 / CVE-2020-11023), showdown 1.9.0 → 2.1.0, FontAwesome 5.3.1 → 6.7.2 free.
- Carries the two prior
v9.0.1-rc.1fixes: S3 plugin IMDSv2 support and S3 REST API change handling.
v9.0.1-rc.1
Improvements
- Updates to S3 plugin to handle updates to S3 API
Testing
s3 plug-in included below for in place testing
v9.0.0
Improvements
- Update GoLang to 1.24.6
- Fixed issue with initialization on newer Vault versions #775
- Fix for Health State Handling in Storage Health Check #774
- Added code to catch a possible null pointer exception #782
- Update oauth2 for CVE-2025-22868 - https://pkg.go.dev/vuln/GO-2025-3488
- Update go-dockerclient for CVE-2025-54410
- Improve recovery workflow in UI
v9.0.0-rc.2
Improvements
- Update GoLang to 1.24.3
- Fixed issue with initialization on newer Vault versions #775
- Fix for Health State Handling in Storage Health Check #774
- Added code to catch a possible null pointer exception #782
- Update oauth2 for CVE-2025-22868 - https://pkg.go.dev/vuln/GO-2025-3488
- Update go-dockerclient for CVE-2025-54410
v9.0.0-rc.1
v8.9.0-rc.2
This is a prerelease - please see commit messages for changes
v8.8.8-rc1
v8.8.7
Improvements
- Updated go modules and vendored them to resolve latest CVEs and bugs
- Compiled with Go v1.22.5 on Ubuntu Jammy to address CVEs inherent to previous versions of language/OS.
Full Changelog: v8.8.6...v8.8.7
v8.8.7-rc1
Improvements
- Updated go modules and vendored them to resolve latest CVEs and bugs
- Compiled with Go v1.22.5 on Ubuntu Jammy to address CVEs inherent to previous versions of language/OS.
Full Changelog: v8.8.6...v8.8.7-rc1
V8.8.6
Breaking Change
-
Shield was compiled on Ubuntu Jammy, and as such, requires Jammy stemcell from this release on.
-
The azure plugin was removed due to incompatible changes in upstream libraries -- this will be restored in a future release, but if you're using this plugin, please refrain from upgrading to this release.
Improvements
- Updated go modules and vendored them to resolve latent CVEs and bugs
- Compiled with Go v1.20.4 on Ubuntu Jammy to address CVEs inherent to previous versions of language/OS.
Full Changelog: v8.8.5...v8.8.6