RC 88

Internal

• Add Secret detection to Gitlab CI (!76 (merged))
• Update rack gem to address vulnerability (!78 (merged))

RC 87

Internal

• Log URL and response body for failed issuer request

RC 86

Internal

• Update nginx.Dockerfile to pin alpine image to 3.20 (!61)

RC 85

Internal

• Add missing certificates(!60)

RC 84

Internal

• Maintenance: Update rails to 7.1.5.1 to patch vulnerabilities in actionpack (!58)

RC 83

• Update rails-html-sanitizer to patch vulnerability
• Update FICAM certificate check to compare fingerprint
• Add DOD DERILITY CA-3 cert
• Log mapped policies

RC 82

Internal

• Update certificate for DoD Root CA 3

RC 81

Internal

• Updating echo statement, adding additional environment vars (!35)
• Updates LOGIN_ENV to point at reviewapps (!36)
• Updates rexml from 3.3.8 to 3.3.9, to resolve a security advisory (!39)

RC 80

User-Facing Improvements

• Add new Entrust certificate (!29)

Internal

• Add a default merge request template (!22)
• Fix platform-specific gem specification (!28)
• Add EKS deploy step (!30)
• Add Kustomize-based deploy (!27)
• Add info and label with some tracing info to ArgoCD Application (!31)
• Update dependencies to resolve security advisories (!33)

RC 79

Internal

• Add production pivcac image
• Make sure image is largely read-only to the app user
• Add RDS certificate bundle
• Add Nginx image
• Make prod pivcac image and nginx images be built automatically by GitLab