release(client): prepare release/v0.5.4 (#736)

* release(dir): prepare release v0.5.4
* docs: update CHANGELOG and README

Signed-off-by: Tibor Kircsi <tkircsi@cisco.com>

Author: tkircsi

CHANGELOG.md

@@ -5,6 +5,35 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v0.5.4] - 2025-11-26
+
+### Key Highlights
+
+This patch release improves SPIFFE authentication reliability for short-lived workloads:
+- Client-side retry logic with exponential backoff for X509-SVID fetching
+- Handles SPIRE agent sync delays in CronJobs and ephemeral pods
+- Prevents "certificate contains no URI SAN" authentication failures
+
+### Compatibility Matrix
+
+| Component              | Version | Compatible With             |
+| ---------------------- | ------- | --------------------------- |
+| **dir-apiserver**      | v0.5.4  | oasf v0.3.x, v0.7.x, v0.8.x |
+| **dirctl**             | v0.5.4  | dir-apiserver >= v0.5.0     |
+| **dir-go**             | v0.5.4  | dir-apiserver >= v0.5.0     |
+| **dir-py**             | v0.5.4  | dir-apiserver >= v0.5.0     |
+| **dir-js**             | v0.5.4  | dir-apiserver >= v0.5.0     |
+| **helm-charts/dir**    | v0.5.4  | dir-apiserver >= v0.5.0     |
+| **helm-charts/dirctl** | v0.5.4  | dirctl >= v0.5.0            |
+
+### Fixed
+- **Client**: X509-SVID retry logic with exponential backoff to handle SPIRE agent sync delays (#725)
+- **Client**: "certificate contains no URI SAN" errors in CronJobs and short-lived workloads (#725)
+
+[Full Changelog](https://github.com/agntcy/dir/compare/v0.5.3...v0.5.4)
+
+---
+
 ## [v0.5.3] - 2025-11-25
 
 ### Key Highlights

README.md

@@ -112,16 +112,16 @@ It is not advised to use artifacts with mismatched versions.
 All container images are distributed via [GitHub Packages](https://github.com/orgs/agntcy/packages?repo_name=dir).
 
 ```bash
-docker pull ghcr.io/agntcy/dir-ctl:v0.5.3
-docker pull ghcr.io/agntcy/dir-apiserver:v0.5.3
+docker pull ghcr.io/agntcy/dir-ctl:v0.5.4
+docker pull ghcr.io/agntcy/dir-apiserver:v0.5.4
 ```
 
 ### Helm charts
 
 All helm charts are distributed as OCI artifacts via [GitHub Packages](https://github.com/agntcy/dir/pkgs/container/dir%2Fhelm-charts%2Fdir).
 
 ```bash
-helm pull oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.3
+helm pull oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.4
 ```
 
 ### Binaries
@@ -153,8 +153,8 @@ task server:start
 This will deploy Directory services into an existing Kubernetes cluster.
 
 ```bash
-helm pull oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.3
-helm upgrade --install dir oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.3
+helm pull oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.4
+helm upgrade --install dir oci://ghcr.io/agntcy/dir/helm-charts/dir --version v0.5.4
 ```
 
 ### Using Docker Compose

cli/go.mod

@@ -12,12 +12,12 @@ replace (
 )
 
 require (
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/client v0.5.3
-	github.com/agntcy/dir/hub v0.5.3
-	github.com/agntcy/dir/importer v0.5.3
-	github.com/agntcy/dir/mcp v0.5.3
-	github.com/agntcy/dir/utils v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/client v0.5.4
+	github.com/agntcy/dir/hub v0.5.4
+	github.com/agntcy/dir/importer v0.5.4
+	github.com/agntcy/dir/mcp v0.5.4
+	github.com/agntcy/dir/utils v0.5.4
 	github.com/libp2p/go-libp2p v0.44.0
 	github.com/sigstore/sigstore v1.9.5
 	github.com/spf13/cobra v1.10.1

client/go.mod

@@ -8,8 +8,8 @@ replace (
 )
 
 require (
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/utils v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/utils v0.5.4
 	github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c
 	github.com/spf13/viper v1.21.0
 	github.com/spiffe/go-spiffe/v2 v2.5.0

e2e/go.mod

@@ -13,10 +13,10 @@ replace (
 )
 
 require (
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/cli v0.5.3
-	github.com/agntcy/dir/client v0.5.3
-	github.com/agntcy/dir/utils v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/cli v0.5.4
+	github.com/agntcy/dir/client v0.5.4
+	github.com/agntcy/dir/utils v0.5.4
 	github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c
 	github.com/onsi/ginkgo/v2 v2.23.0
 	github.com/onsi/gomega v1.36.2
@@ -48,9 +48,9 @@ require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/PuerkitoBio/goquery v1.10.3 // indirect
 	github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
-	github.com/agntcy/dir/hub v0.5.3 // indirect
-	github.com/agntcy/dir/importer v0.5.3 // indirect
-	github.com/agntcy/dir/mcp v0.5.3 // indirect
+	github.com/agntcy/dir/hub v0.5.4 // indirect
+	github.com/agntcy/dir/importer v0.5.4 // indirect
+	github.com/agntcy/dir/mcp v0.5.4 // indirect
 	github.com/agntcy/oasf-sdk/pkg v0.0.11 // indirect
 	github.com/alecthomas/chroma/v2 v2.20.0 // indirect
 	github.com/andybalholm/cascadia v1.3.3 // indirect

hub/go.mod

@@ -11,9 +11,9 @@ replace (
 require (
 	buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.10-20251022143645-07a420b66e81.1
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20250912141014-52f32327d4b0.1
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/cli v0.5.3
-	github.com/agntcy/dir/utils v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/cli v0.5.4
+	github.com/agntcy/dir/utils v0.5.4
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/mux v1.8.1

importer/go.mod

@@ -10,9 +10,9 @@ replace (
 
 require (
 	buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.10-20251022143645-07a420b66e81.1
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/client v0.5.3
-	github.com/agntcy/dir/utils v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/client v0.5.4
+	github.com/agntcy/dir/utils v0.5.4
 	github.com/agntcy/oasf-sdk/pkg v0.0.11
 	github.com/mark3labs/mcphost v0.31.3
 	github.com/modelcontextprotocol/registry v1.2.3

mcp/go.mod

@@ -9,8 +9,8 @@ replace (
 )
 
 require (
-	github.com/agntcy/dir/api v0.5.3
-	github.com/agntcy/dir/client v0.5.3
+	github.com/agntcy/dir/api v0.5.4
+	github.com/agntcy/dir/client v0.5.4
 	github.com/agntcy/oasf-sdk/pkg v0.0.11
 	github.com/modelcontextprotocol/go-sdk v0.8.0
 	github.com/stretchr/testify v1.11.1
@@ -36,7 +36,7 @@ require (
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.53.0 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
-	github.com/agntcy/dir/utils v0.5.3 // indirect
+	github.com/agntcy/dir/utils v0.5.4 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/avast/retry-go/v4 v4.6.1 // indirect
 	github.com/blang/semver v3.5.1+incompatible // indirect

sdk/dir-js/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "agntcy-dir",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Directory SDK",
   "homepage": "https://github.com/agntcy/dir",
   "bugs": {