github.com/tg123/sshpiper

What's Changed

• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #826

Full Changelog: v1.6.0...v1.6.1

What's Changed

• plugin: drop dependency on the sshpiper crypto fork by @tg123 in #786
• chore: drop crypto git submodule, consume sshpiper.crypto as Go module by @tg123 in #788
• e2e: upgrade kind to v0.32.0 and pin node image to fix E2E failure by @tg123 with @Copilot in #792
• feat: env injection on upstream session by @tg123 in #791
• chore(deps): bump k8s.io/api from 0.36.1 to 0.36.2 by @dependabot[bot] in #795
• chore(deps-dev): bump esbuild from 0.25.0 to 0.28.1 in /cmd/sshpiperd-webadmin/internal/httpapi/web in the npm_and_yarn group across 1 directory by @dependabot[bot] in #797
• chore(deps): bump k8s.io/client-go from 0.36.1 to 0.36.2 by @dependabot[bot] in #794
• chore(deps): bump k8s.io/code-generator from 0.36.1 to 0.36.2 by @dependabot[bot] in #793
• Split E2E and benchmark into separate CI pipelines by @tg123 with @Copilot in #798
• Migrate from Logrus to native log/slog, harden plugin stdio safety, and add plugin logger bridge hooks by @tg123 with @Copilot in #735
• Add CreateConn plugin callback to let plugins create the upstream net.Conn by @tg123 with @Copilot in #737
• e2e: bump openssh-server hosts to 10.2_p1-r0-ls227 by @tg123 with @Copilot in #800
• chore(deps): bump github.com/tg123/go-htpasswd from 1.2.4 to 1.2.5 by @dependabot[bot] in #801
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #803
• chore(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0 by @dependabot[bot] in #805
• chore(deps): bump github.com/moby/moby/client from 0.4.1 to 0.5.0 by @dependabot[bot] in #804
• chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #810
• chore(deps): bump k8s.io/client-go from 0.36.2 to 0.36.3 by @dependabot[bot] in #814
• chore: rebase crypto onto v0.54.0 by @tg123 in #816
• Add controls to disable SSH port forwarding by @tg123 with @Copilot in #813
• ci: pin lhstrh/action-repo-semver to a commit SHA by @tg123 in #821
• feat: add revtunnel plugin exposing ssh -R reverse tunnels under a generated GUID by @tg123 in #802
• yaml plugin: sanitize path placeholders and fail closed on empty known_hosts by @tg123 in #820
• chore(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @dependabot[bot] in #818
• fix(daemon): keep username-based recording dir within configured root by @tg123 in #819
• chore(deps): bump k8s.io/code-generator from 0.36.2 to 0.36.3 by @dependabot[bot] in #823
• chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #822
• chore(deps): bump docker/login-action from 4 to 4.5.2 by @dependabot[bot] in #824
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 by @dependabot[bot] in #811

Full Changelog: v1.5.4...v1.5.5

What's Changed

• Upgrade project/tooling runtime pins to Go 1.26 by @Copilot in #734
• chore(deps): bump github.com/pires/go-proxyproto from 0.10.0 to 0.11.0 by @dependabot[bot] in #729
• chore(deps): bump k8s.io/api from 0.35.0 to 0.35.1 by @dependabot[bot] in #731
• chore(deps): bump k8s.io/code-generator from 0.35.0 to 0.35.1 by @dependabot[bot] in #730
• chore(deps): bump k8s.io/client-go from 0.35.0 to 0.35.1 by @dependabot[bot] in #733
• Stabilize docker no-sshd E2E stdin command flow by waiting for SSH completion before assertion by @Copilot in #736
• Add Lua plugin entry to README plugin catalog by @Copilot in #740
• Add kubectl-exec mode to Kubernetes plugin and bump docker-sshd by @Copilot in #739
• Prune stale docker-sshd bridge state when docker-exec containers disappear from list() by @Copilot in #741
• chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1 by @dependabot[bot] in #738
• chore(deps): bump goreleaser/goreleaser-action from 6 to 7 by @dependabot[bot] in #743
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #751
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #750
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #749
• chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in the go_modules group across 1 directory by @dependabot[bot] in #753
• Add -trimpath to GoReleaser builds by @Copilot in #744
• chore(deps): bump k8s.io/client-go from 0.35.1 to 0.35.2 by @dependabot[bot] in #748
• migrate to github.com/moby/moby/client module by @thaJeztah in #757
• chore(deps): bump k8s.io/apimachinery from 0.35.1 to 0.35.2 by @dependabot[bot] in #747
• chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #752
• chore: rebase crypto onto v0.50.0 by @tg123 in #760
• docs: add copilot instructions for sshpiper by @tg123 in #761
• Add Docker Compose examples for username routing and Lua publickey Git routing by @Copilot in #742
• chore(deps): bump k8s.io/client-go from 0.35.2 to 0.36.0 by @dependabot[bot] in #766
• chore(deps): bump k8s.io/code-generator from 0.35.1 to 0.36.0 by @dependabot[bot] in #763
• chore(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in the go_modules group across 1 directory by @dependabot[bot] in #769
• chore(deps): bump github.com/yuin/gopher-lua from 1.1.1 to 1.1.2 by @dependabot[bot] in #768
• chore(deps): bump github.com/moby/moby/client from 0.4.0 to 0.4.1 by @dependabot[bot] in #764
• chore(deps): bump github.com/pires/go-proxyproto from 0.11.0 to 0.12.0 by @dependabot[bot] in #765
• Admin gRPC API on sshpiperd (with TLS/mTLS) + sshpiperd-webadmin aggregator by @Copilot in #770
• Refine sshpiperd-webadmin UI: native dialog, vendored xterm, UX wins by @Copilot in #772
• examples: add honeypot-on-failure demo by @Copilot in #773
• chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in #777
• e2e: fix kubetools Dockerfile to use modern apt keyring by @Copilot in #779
• cmd: add sshpiperd-admin CLI for the admin gRPC API (with SSH server mode) by @Copilot in #771
• chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @dependabot[bot] in #784
• chore(deps): bump k8s.io/code-generator from 0.36.0 to 0.36.1 by @dependabot[bot] in #781
• chore(deps): bump k8s.io/client-go from 0.36.0 to 0.36.1 by @dependabot[bot] in #782
• chore(deps): bump k8s.io/api from 0.36.0 to 0.36.1 by @dependabot[bot] in #783
• chore: rebase crypto onto v0.52.0 by @tg123 in #785
• Add GITHUB_STEP_SUMMARY support to benchmark by @Copilot in #787

New Contributors

• @thaJeztah made their first contribution in #757

Full Changelog: v1.5.3...v1.5.4

What's Changed

• chore(deps): bump github.com/pires/go-proxyproto from 0.9.2 to 0.10.0 by @dependabot[bot] in #723
• Strip GoReleaser outputs for smaller release binaries by @Copilot in #722
• Add SSH host certificate support with --server-cert flag by @codergs in #724
• chore(deps): update golang.org/x/crypto to 0.48 by @tg123 in #728

New Contributors

• @codergs made their first contribution in #724

Full Changelog: v1.5.2...v1.5.3

What's Changed

• fix typos, re-run protoc by @josharian in #686
• chore(deps): bump k8s.io/client-go from 0.34.2 to 0.34.3 by @dependabot[bot] in #689
• chore(deps): bump k8s.io/code-generator from 0.34.2 to 0.34.3 by @dependabot[bot] in #690
• chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 by @dependabot[bot] in #687
• chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @dependabot[bot] in #695
• chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 by @dependabot[bot] in #694
• chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in #693
• Correct spelling of nextAvailablePort helper by @Copilot in #698
• Add SSH/SCP throughput benchmark and unify e2e key setup by @Copilot in #692
• Add trusted user CA support to Docker plugin by @Copilot in #699
• Add Lua plugin for dynamic SSH routing with hot-reload support by @Copilot in #697
• Add Lua plugin search path support and document CLI flag by @Copilot in #701
• Add benchmark summary comparing sshpiper vs baseline by @Copilot in #704
• Add targeted unit tests for Kubernetes plugin mapping helpers by @Copilot in #707
• chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 by @dependabot[bot] in #709
• chore(deps): update golang.org/x/crypto to v0.46.0 and golang.org/x/sync to v0.19.0 by @tg123 in #710
• Add targeted unit tests for workingdir plugin by @Copilot in #705
• Add unit tests for chain plugin behaviors in sshpiperd by @Copilot in #706
• Add unit tests for libplugin skel plugin by @Copilot in #708
• chore(deps): bump github.com/pires/go-proxyproto from 0.8.1 to 0.9.0 by @dependabot[bot] in #712
• chore(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #711
• Finalize Lua callback handling and e2e coverage by @Copilot in #703
• Increase yaml plugin unit test coverage by @Copilot in #715
• Add metrics plugin to GoReleaser with full build tag by @Copilot in #718
• chore(deps): bump github.com/pires/go-proxyproto from 0.9.0 to 0.9.2 by @dependabot[bot] in #721

Full Changelog: v1.5.1...v1.5.2

What's Changed

• chore(deps): bump github.com/ramr/go-reaper from 0.2.3 to 0.3.0 by @dependabot[bot] in #618
• chore(deps): bump k8s.io/code-generator from 0.33.2 to 0.33.3 by @dependabot[bot] in #625
• chore(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 by @dependabot[bot] in #624
• chore(deps): bump github.com/docker/docker from 28.3.0+incompatible to 28.3.2+incompatible by @dependabot[bot] in #621
• chore(deps): bump k8s.io/api from 0.33.2 to 0.33.3 by @dependabot[bot] in #623
• chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] in #620
• chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 by @dependabot[bot] in #627
• chore(deps): bump k8s.io/client-go from 0.33.2 to 0.33.3 by @dependabot[bot] in #626
• Metrics server plugin by @bhperry in #622
• chore(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 by @dependabot[bot] in #628
• chore(deps): update golang.org/x/crypto to v0.40.0 and other dependencies by @tg123 in #629
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #636
• chore(deps): bump github.com/ramr/go-reaper from 0.3.0 to 0.3.1 by @dependabot[bot] in #630
• chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #633
• chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #631
• chore(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 by @dependabot[bot] in #637
• chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in #632
• chore(deps): bump k8s.io/client-go from 0.33.3 to 0.33.4 by @dependabot[bot] in #642
• chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #641
• chore(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in #643
• chore(deps): bump k8s.io/code-generator from 0.33.3 to 0.33.4 by @dependabot[bot] in #639
• chore(deps): bump k8s.io/client-go from 0.33.4 to 0.34.0 by @dependabot[bot] in #645
• chore(deps): bump k8s.io/code-generator from 0.33.4 to 0.34.0 by @dependabot[bot] in #646
• chore(deps): update golang version to 1.25 and bump crypto module to v0.41.0 by @tg123 in #649
• all: run gofumpt by @josharian in #652
• e2e: make e2e tests runnable on !linux by @josharian in #651
• chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #655
• chore(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 by @dependabot[bot] in #658
• chore(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible by @dependabot[bot] in #656
• chore(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by @dependabot[bot] in #660
• chore(deps): bump k8s.io/code-generator from 0.34.0 to 0.34.1 by @dependabot[bot] in #661
• chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1 by @dependabot[bot] in #664
• chore(deps): bump k8s.io/client-go from 0.34.0 to 0.34.1 by @dependabot[bot] in #662
• chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 by @dependabot[bot] in #665
• chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @dependabot[bot] in #667
• chore(deps): bump github.com/docker/docker from 28.4.0+incompatible to 28.5.1+incompatible by @dependabot[bot] in #668
• chore(deps): update Go version and bump dependencies by @tg123 in #670
• Remove deprecated // +build directive from tools.go by @Copilot in #674
• chore(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible by @dependabot[bot] in #673
• feat(docker): set port default to 22 if not set by @11notes in #672
• chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #675
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #681
• chore(deps): bump k8s.io/client-go from 0.34.1 to 0.34.2 by @dependabot[bot] in #679
• chore(deps): bump k8s.io/code-generator from 0.34.1 to 0.34.2 by @dependabot[bot] in #680
• chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @dependabot[bot] in #683
• chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 by @dependabot[bot] in #676
• chore(deps): update golang.org/x/crypto to v0.45.0 by @tg123 in #684

New Contributors

• @bhperry made their first contribution in #622
• @Copilot made their first contribution in #674

Full Changelog: v1.5.0...v1.5.1

What's Changed

• support handle ping@openssh packet by @tg123 in #582
• Bump k8s.io/client-go from 0.32.3 to 0.33.0 by @dependabot in #573
• Enable Darwin support for multiple build configurations by @tg123 in #583
• Bump k8s.io/code-generator from 0.32.3 to 0.33.0 by @dependabot in #584
• feat: add proxy-read-header-timeout flag for PROXY protocol support by @tg123 in #586
• Bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in #587
• Bump k8s.io/client-go from 0.33.0 to 0.33.1 by @dependabot in #590
• Bump github.com/pquerna/otp from 1.4.0 to 1.5.0 by @dependabot in #589
• Bump k8s.io/code-generator from 0.33.0 to 0.33.1 by @dependabot in #591
• Add go-reaper integration for process reaping by @tg123 in #580
• Fix linting issues by @tg123 in #595
• Add upstream banner mode and refactor banner callbacks by @tg123 in #594
• extract skel into its own package by @josharian in #596
• Enhance upstream banner handling with deduplication mode and refactor connection metadata by @tg123 in #597
• refactor: Revise Dockerfile - Remove entrypoint.sh by @tg123 in #598
• feat: Enhance PipeSpec and FromSpec with AuthorizedKeysSecret by @tg123 in #581
• feat: Add username-router plugin for SSHPiper to route connections based on username by @tg123 in #599
• chore(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot in #600
• chore(deps): bump github.com/docker/docker from 28.1.1+incompatible to 28.2.0+incompatible by @dependabot in #602
• chore(deps): bump github.com/docker/docker from 28.2.0+incompatible to 28.2.1+incompatible by @dependabot in #603
• add permission to e2e by @tg123 in #604
• chore(deps): bump github.com/docker/docker from 28.2.1+incompatible to 28.2.2+incompatible by @dependabot in #605
• add version APIVersionNegotiation to docker plugin by @tg123 in #607
• chore(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot in #609
• chore(deps): bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7 by @dependabot in #610
• chore(deps): bump k8s.io/client-go from 0.33.1 to 0.33.2 by @dependabot in #612
• chore(deps): bump k8s.io/code-generator from 0.33.1 to 0.33.2 by @dependabot in #613
• chore(deps): update golang.org/x/crypto to v0.39.0 and other dependencies by @tg123 in #616
• chore(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.0+incompatible by @dependabot in #617
• introduce uri for flexable upstream conn by @tg123 in #615

New Contributors

• @josharian made their first contribution in #596

Full Changelog: v1.4.8...v1.4.9

What's Changed

• Bump github.com/docker/docker from 28.0.1+incompatible to 28.0.2+incompatible by @dependabot in #547
• support proxy banner from upstream by @tg123 in #548
• chore: update .goreleaser.yaml configuration for versioning and formats by @tg123 in #549
• Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #556
• Bump github.com/docker/docker from 28.0.2+incompatible to 28.0.4+incompatible by @dependabot in #553
• Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot in #551
• feat: Decide upstream based on user's unix group membership by @eesaanatluri in #536
• fix the username for group routing test case by @eesaanatluri in #558
• Bump github.com/tg123/go-htpasswd from 1.2.3 to 1.2.4 by @dependabot in #560
• fix: entrypoint.sh - Transfer PID1 to sshpiperd by @polarathene in #561
• docs: Improve YAML plugin config examples by @polarathene in #564
• Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #570
• Bump github.com/docker/docker from 28.0.4+incompatible to 28.1.1+incompatible by @dependabot in #569
• chore: Dockerfile - Use HereDoc syntax by @polarathene in #567
• option to no CA public key before retrieving public key certs by @tg123 in #579

New Contributors

• @eesaanatluri made their first contribution in #536
• @polarathene made their first contribution in #561

Full Changelog: v1.4.7...v1.4.8

What's Changed

• fix e2e by @tg123 in #540
• Update dependencies: bump golang.org/x/crypto to v0.36.0, golang.org/x/sync to v0.12.0, golang.org/x/sys to v0.31.0, golang.org/x/term to v0.30.0, and golang.org/x/text to v0.23.0 by @tg123 in #541
• Bump github.com/docker/docker from 27.5.1+incompatible to 28.0.1+incompatible by @dependabot in #534
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @dependabot in #537
• Bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6 by @dependabot in #539
• Bump k8s.io/apimachinery from 0.32.2 to 0.32.3 by @dependabot in #544
• Bump k8s.io/client-go from 0.32.2 to 0.32.3 by @dependabot in #543
• Bump k8s.io/api from 0.32.2 to 0.32.3 by @dependabot in #542
• Bump k8s.io/code-generator from 0.32.2 to 0.32.3 by @dependabot in #545
• Feat: fail2ban whitelist by @diedpigs in #546

New Contributors

• @diedpigs made their first contribution in #546

Full Changelog: v1.4.6...v1.4.7

What's Changed

• Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @dependabot in #503
• Add configuration options for allowed downstream algorithms by @tg123 in #504
• lock e2e sshd version by @tg123 in #517
• Bump k8s.io/api from 0.32.0 to 0.32.1 by @dependabot in #511
• Bump google.golang.org/grpc from 1.69.2 to 1.70.0 by @dependabot in #513
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.4 by @dependabot in #514
• Bump github.com/docker/docker from 27.4.1+incompatible to 27.5.1+incompatible by @dependabot in #512
• Bump k8s.io/code-generator from 0.32.0 to 0.32.1 by @dependabot in #521
• Enhance failtoban plugin with log-only mode and SIGHUP cache reset by @tg123 in #519
• Bump k8s.io/client-go from 0.32.0 to 0.32.1 by @dependabot in #520
• Update Dockerfile to use pre-built OpenSSH binary and fix test reference to SSH binary by @tg123 in #522
• Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #523
• Bump Go version to 1.24 in Dockerfile and go.mod by @tg123 in #524
• Bump k8s.io/api from 0.32.1 to 0.32.2 by @dependabot in #529
• Bump k8s.io/client-go from 0.32.1 to 0.32.2 by @dependabot in #528
• Bump k8s.io/code-generator from 0.32.1 to 0.32.2 by @dependabot in #530
• Customize sshd with sshd config.d by @tg123 in #525
• Update dependencies: bump golang.org/x/crypto to v0.33.0, golang.org/x/sync to v0.11.0, golang.org/x/sys to v0.30.0, golang.org/x/term to v0.29.0, and golang.org/x/text to v0.22.0 by @tg123 in #531

Full Changelog: v1.4.5...v1.4.6