1.11.4

This release updates to Go 1.26.1. Also, some actions and the email address in the SECURITY.md were updated.

What's Changed

• Bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #98
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #100
• Bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #101
• Update Go to 1.26.1, also update email address and PGP key in SECURITY.md by @wollomatic in #102
• prepare 1.11.4 by @wollomatic in #103

Full Changelog: 1.11.3...1.11.4

1.11.3

This release updates to Go 1.26, also the GitHub actions were hardend and the example Compose files were updated.

What's Changed

• Bump golang from 1.25.7-alpine3.23 to 1.26.0-alpine3.23 by @dependabot[bot] in #88
• add #nosec information because the gosec findings are false positives (closes #89) by @wollomatic in #90
• Update examples by @wollomatic in #91
• [StepSecurity] Apply security best practices by @step-security-bot in #92
• Update Go Tooling by @wollomatic in #93
• run gosec with Go 1.26 by @wollomatic in #96
• prepare v1.10.3 by @wollomatic in #97

New Contributors

• @step-security-bot made their first contribution in #92

Full Changelog: 1.11.2...1.11.3

1.11.2

This is technically identical to 1.11.1 (https://github.com/wollomatic/socket-proxy/releases/tag/1.11.1).
It's released to re-trigger the Github Action to build the container images.

Full Changelog: 1.11.0...1.11.2

1.11.1

(Edit: Due to a technical problem with the Github action, no Image was built. Use 1.11.2 instead)

What's Changed

• Bump golang from 1.25.6-alpine3.23 to 1.25.7-alpine3.23 by @dependabot[bot] in #84

Full Changelog: 1.11.0...1.11.1

1.11.0

What's Changed

Per-container allowlists (based on Docker labels) are now possible.

Thank You @amanda-wee for your awesome work and patience!

Also, the build system was updated to Go 1.25.6.

• implement per-container allowlists specified by Docker container labels by @amanda-wee in #69
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #74
• 28 fr support granular api permissions on a per host basis via allowfrom by @wollomatic in #75
• 1.11.0 - add per container allowlists by @wollomatic in #80

Full Changelog: 1.10.1...1.11.0

1.10.1

What's Changed

• Update Go to 1.25.4
• Update CoSign to 2.6.1
• Update CoSign-Installer in GH action to 4.0.0

Full Changelog: 1.10.0...1.10.1

1.10.0

Note

Versions prior to 1.10.0 of socket-proxy set the default file permissions of the Unix socket to 0400, instead of 0600 as stated in the documentation. This is relevant for socket to socket forwarding.

What's Changed

• use 0600 as default proxy socket endpoint file mode by @amanda-wee in #62
• chore: update dependencies by @reneleonhardt in #61

New Contributors

• @reneleonhardt made their first contribution in #61
• @amanda-wee made their first contribution in #62

Full Changelog: 1.9.0...1.10.0

1.9.0

What's Changed

• Add IPv6 support to listenip by @op3 in #58
• Update to Go 1.25.0
• Small improvements on logging and the README file

New Contributors

• @op3 made their first contribution in #58

Full Changelog: 1.8.1...1.9.0

1.8.1

What's Changed

• Fixes error message: Typo in error param for regex by @C4tWithShell in #57

New Contributors

• @C4tWithShell made their first contribution in #57

Full Changelog: 1.8.0...1.8.1

1.8.0

This version adds an optional feature to restrict bind mounts with the Docker socket.

What's Changed

• add bind mount restrictions by @powerman in #54
• 1.8.0 by @wollomatic in #55

New Contributors

• @powerman made their first contribution in #54

Full Changelog: 1.7.0...1.8.0