OES Release Notes for Spinnaker Version v1.30.1

OSS Spinnaker reference

The images are forked out of OSS Spinnaker 1.30.1

The halyard version is forked out of Halyard Commits except for the following two auto bump commits

https://github.com/spinnaker/halyard/commit/397efbf2f71d3deca8db3667ef3f287c392c 9097 https://github.com/spinnaker/halyard/commit/c01d64838569d6a8c651130d0bc1e65de7 13cc93

Releases

The following are the releases made in OES for Spinnaker version prior to v1.33.3

OES 1.30.1.20240301 - Patch 1 (18 June 2024)

Fixed Issues

• Pipeline payload gets skipped if expected artifact ID is not found.

Refer OES 1.30.1.20240300 (29 March 2024) for details on the main release.

OES 1.30.1.20240300 (29 March 2024)

Fixed Issues

The following CVEs are fixed in this release:

CVE	Package	Severity
CVE-2024-1597	org.postgresql:postgresql	Critical
CVE-2015-8549	PyAMF	High
CVE-2016-10745	Jinja2	High
CVE-2019-10906	Jinja2	High
CVE-2023-31582	org.bitbucket.b_c:jose4j	High
CVE-2023-3635	com.squareup.okio:okio-jvm	High
CVE-2023-39017	quartz	High
CVE-2023-46589	org.apache.tomcat.embed:tomcat-embed-core	High
CVE-2023-44487	org.apache.tomcat.embed:tomcat-embed-core	High
CVE-2023-49569	http://github.com/go-git/go-git/v5	High

February 2024

Fixed Issues

• Fixable CRITICAL and HIGH CVEs are fixed.

• Fixed the failing UT cases in CloudDriver, Gate, and Kork.

• Fixed the issue of clouddriver not getting ready for more than 1300 Kubernetes accounts.

• Fixed failing test cases in SQL core module.

• Default profiles not effective resulting in “APPLICATION FAILED TO START" error's CloudDriver, Echo, Igor, and Gate.

• Fixed Default profiles issue of the CloudDriver image with AWS component.

• Fixed the Docker accounts not loading issue by removing docker related configuration in clouddriver.yml

• Fixed the issue of Custom Stage Jobs failing with "Index -1 out of bounds for length 0".

• Fixed the issue of gate service with the external Redis cache as well as spin-gate in 0/1 state with LDAP authentication.

• Fixed the issue of igor crash with a large number of user roles.

• Fixed the loading issue of Swagger API with updated Spring boot.

November 2023

Fixed Issues

• Fixed the failing UT cases in CloudDriver, Gate, and Kork

• Junit4 to Junit5 migration and fix related test cases

• snakeyaml vulnerability fix

• Fiat role-sync is running long due to user roles in SAML is fixed by adding rest api only for syncing unrestricted user

• Additional metric requested in Igor

• Spring boot version 3.0.7 > 3.0.9 upgrade

• Upgrade pf4j version to 3.10.0

June 2023

Fixed Issues

• FIPS compliant base image Redhat UBI8.8

• Spring Boot upgraded to 3.0

• springframework 3.0.6

• Java upgraded to 17

• SnakeYAML upgraded to version 2.0