Skip to content

Releases: freifunkMUC/wg-access-server

v0.12.1

09 Jun 13:40
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v0.12.0...v0.12.1

v0.12.0

10 Mar 14:05
30e734e
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.11.0...v0.12.0

v0.11.0

03 Feb 19:38
Compare
Choose a tag to compare

What's Changed

Notable change

As of Alpine Linux 3.19, wg-access-server uses iptables-nft instead of iptables-legacy. docker-ce 25.x has also made some changes to the network_mode = "host" logic (moby/moby#47100). If you are doing more sophisticated firewalling (e.g. NATing), you may want to take a look at your iptables rules and see if your host is using iptables-legacy or iptables-nft.

UI changes

We are now using Material UI v5 instead of v4. This results in a more modern user interface.

Security fixes

Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code #490
/sys/devices/virtual/powercap accessible by default to containers #531
...

Other changes

  • build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.13.0 by @dependabot in #495
  • build(deps): bump docker/setup-qemu-action from 2 to 3 by @dependabot in #483
  • build(deps): bump actions/checkout from 3 to 4 by @dependabot in #485
  • [Snyk] Upgrade @mui/material from 5.14.7 to 5.14.8 by @GoliathLabs in #470
  • [Snyk] Upgrade mobx from 6.10.1 to 6.10.2 by @GoliathLabs in #469
  • build(deps): bump docker/login-action from 2 to 3 by @dependabot in #486
  • [Snyk] Upgrade @mui/material from 5.14.8 to 5.14.13 by @GoliathLabs in #502
  • [Snyk] Upgrade mobx from 6.10.2 to 6.11.0 by @GoliathLabs in #517
  • build(deps): bump @babel/traverse from 7.20.13 to 7.23.2 in /website by @dependabot in #490
  • build(deps): bump node from 20.5.1-bullseye to 21.2.0-bullseye by @dependabot in #509
  • [Snyk] Upgrade @mui/icons-material from 5.14.9 to 5.14.18 by @GoliathLabs in #518
  • build(deps): bump golang.org/x/crypto from 0.14.0 to 0.16.0 by @dependabot in #507
  • build(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 by @dependabot in #488
  • build(deps): bump golang from 1.21.0-alpine to 1.21.4-alpine by @dependabot in #510
  • build(deps): bump docker/metadata-action from 4 to 5 by @dependabot in #484
  • build(deps): bump docker/build-push-action from 4 to 5 by @dependabot in #487
  • build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot in #516
  • build(deps-dev): bump fork-ts-checker-webpack-plugin from 6.5.3 to 9.0.2 in /website by @dependabot in #498
  • build(deps): bump alpine from 3.18.3 to 3.19.0 by @dependabot in #521
  • build(deps-dev): bump @types/common-tags from 1.8.1 to 1.8.4 in /website by @dependabot in #514
  • build(deps-dev): bump @types/react-dom from 18.2.7 to 18.2.17 in /website by @dependabot in #513
  • build(deps): bump github.com/miekg/dns from 1.1.55 to 1.1.57 by @dependabot in #508
  • build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #525
  • build(deps): bump @mui/material from 5.14.13 to 5.14.20 in /website by @dependabot in #519
  • build(deps-dev): bump @types/react-dom from 18.2.17 to 18.2.18 in /website by @dependabot in #526
  • fix: drop go 1.18 and introduce 1.20 by @GoliathLabs in #527
  • build(deps): bump google.golang.org/grpc from 1.57.0 to 1.60.1 by @dependabot in #528
  • [Snyk] Upgrade @mui/icons-material from 5.14.18 to 5.14.19 by @GoliathLabs in #529
  • [Snyk] Upgrade react-router-dom from 6.16.0 to 6.20.1 by @GoliathLabs in #530
  • build(deps): bump mobx-react from 7.6.0 to 9.1.0 in /website by @dependabot in #515
  • build(deps): bump github.com/docker/docker from 20.10.24+incompatible to 20.10.27+incompatible by @dependabot in #531
  • build(deps): bump github/codeql-action from 2 to 3 by @dependabot in #532
  • fix: golang linter (io package) by @GoliathLabs in #546
  • build(deps): bump actions/setup-go from 4 to 5 by @dependabot in #533
  • build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 by @dependabot in #537
  • build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 by @dependabot in #538
  • build(deps): bump node from 21.2.0-bullseye to 21.5.0-bullseye by @dependabot in #534
  • [Snyk] Upgrade @mui/material from 5.14.20 to 5.15.0 by @GoliathLabs in #549
  • [Snyk] Upgrade react-router-dom from 6.20.1 to 6.21.0 by @GoliathLabs in #547
  • build(deps): bump github.com/gorilla/sessions from 1.2.1 to 1.2.2 by @dependabot in #539
  • build(deps): bump mobx-utils from 6.0.7 to 6.0.8 in /website by @dependabot in #542
  • build(deps-dev): bump @types/qrcode from 1.5.2 to 1.5.5 in /website by @dependabot in #541
  • build(deps): bump mobx from 6.11.0 to 6.12.0 in /website by @dependabot in #545
  • build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.15.0 by @dependabot in #536
  • build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @dependabot in #540
  • build(deps-dev): bump @types/numeral from 2.0.2 to 2.0.5 in /website by @dependabot in #543
  • build(deps): bump @mui/icons-material from 5.14.19 to 5.15.3 in /website by @dependabot in #550
  • [Snyk] Upgrade @mui/material from 5.15.0 to 5.15.1 by @GoliathLabs in #552
  • build(deps): bump follow-redirects from 1.15.2 to 1.15.4 in /website by @dependabot in #551
  • [Snyk] Upgrade @mui/material from 5.15.1 to 5.15.2 by @GoliathLabs in #555
  • [Snyk] Upgrade react-router-dom from 6.21.0 to 6.21.1 by @GoliathLabs in #553
  • [Snyk] Upgrade @emotion/react from 11.11.1 to 11.11.3 by @GoliathLabs in #554
  • [Snyk] Upgrade @mui/material from 5.15.2 to 5.15.3 by @GoliathLabs in #556
  • [Snyk] Upgrade @mui/material from 5.15.3 to 5.15.4 by @GoliathLabs in #558
  • build(deps): bump github.com/miekg/dns from 1.1.57 to 1.1.58 by @dependabot in #559
  • build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #561
  • build(deps): bump github.com/tg123/go-htpasswd from 1.2.1 to 1.2.2 by @dependabot in #562
  • build(deps): bump node from 21.5.0-bullseye to 21.6.1-bullseye by @dependabot in #566
  • build(deps-dev): bump prettier from 3.0.3 to 3.2.4 in /website by @dependabot in #570
  • build(deps): bump @mui/material from 5.15.4 to 5.15.7 in /website by @dependabot in #568
  • [Snyk] Upgrade react-router-dom from 6.21.1 to 6.21.2 by @GoliathLabs in #567
  • build(deps): bump alpine from 3.19.0 to 3.19.1 by @dependabot in #565
  • build(deps): bump github.com/freifunkMUC/wg-embed from 0.10.0 to 0.10.1 by @dependabot in #563
  • build(deps): bump @mui/icons-material from 5.15.3 to 5.15.7 in /website by @dependabot in #572
  • build(deps): bump react-router-dom from 6.21.2 to 6.22.0 in /website by @dependabot in #573
  • fix golang build by @GoliathLabs in #575
  • bump go-sqlite3 to v1.14.19 by @GoliathLabs in #576
  • build(deps): bump golang from 1.21.4-alpine to 1.21.6-alpine by @dep...
Read more

v0.10.1

21 Sep 10:45
4e6007e
Compare
Choose a tag to compare

What's Changed

Features / manual changes 🔧

Dependency upgrades 🤖

  • [Snyk] Upgrade mobx-utils from 6.0.6 to 6.0.7 by @GoliathLabs in #433
  • [Snyk] Upgrade mobx from 6.9.0 to 6.9.1 by @GoliathLabs in #445
  • build(deps): bump @mui/icons-material from 5.11.16 to 5.14.3 in /website by @dependabot in #442
  • build(deps): bump golang from 1.20.5-alpine to 1.20.6-alpine by @dependabot in #435
  • build(deps): bump node from 20.3.1-bullseye to 20.5.0-bullseye by @dependabot in #434
  • build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 by @dependabot in #440
  • build(deps): bump github.com/freifunkMUC/pg-events from 0.4.1 to 0.4.2 by @dependabot in #439
  • build(deps): bump google.golang.org/grpc from 1.56.1 to 1.57.0 by @dependabot in #438
  • [Snyk] Upgrade mobx from 6.9.1 to 6.10.0 by @GoliathLabs in #448
  • build(deps): bump golang.org/x/oauth2 from 0.9.0 to 0.11.0 by @dependabot in #446
  • build(deps-dev): bump prettier from 2.8.8 to 3.0.0 in /website by @dependabot in #441
  • build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 by @dependabot in #459
  • build(deps): bump node from 20.5.0-bullseye to 20.5.1-bullseye by @dependabot in #457
  • build(deps): bump alpine from 3.18.2 to 3.18.3 by @dependabot in #456
  • build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in #454
  • build(deps-dev): bump prettier from 3.0.0 to 3.0.3 in /website by @dependabot in #451
  • build(deps-dev): bump @types/qrcode from 1.5.0 to 1.5.2 in /website by @dependabot in #452
  • build(deps): bump golang from 1.20.6-alpine to 1.21.0-alpine by @dependabot in #455
  • build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0 by @dependabot in #458
  • [Snyk] Upgrade @mui/material from 5.13.7 to 5.14.5 by @GoliathLabs in #460
  • build(deps-dev): bump typescript from 4.9.5 to 5.2.2 in /website by @dependabot in #453
  • build(deps): bump react-router-dom from 5.3.4 to 6.15.0 in /website by @dependabot in #450
  • [Snyk] Upgrade @mui/icons-material from 5.14.3 to 5.14.6 by @GoliathLabs in #464
  • Bumps versions of react and react-dom. Fixes dependency issues and deprecated component invocations. by @nwaldispuehl in #462
  • [Snyk] Upgrade @mui/material from 5.14.5 to 5.14.6 by @GoliathLabs in #465
  • [Snyk] Upgrade mobx from 6.10.0 to 6.10.1 by @GoliathLabs in #466
  • [Snyk] Upgrade @mui/material from 5.14.6 to 5.14.7 by @GoliathLabs in #468

Full Changelog: v0.10.0...v0.10.1

v0.10.0

28 Jul 19:15
722ead1
Compare
Choose a tag to compare

What's Changed

Notable configuration changes ✨

With #401 and #429 the maximum transmission unit ('MTU') of the server and client interfaces can now each be configured with a new configuration item:

Server MTU configuration

YAML configuration file / Helm chart:

wireguard:
  ...
  mtu: 1420

Environment variable: WG_WIREGUARD_MTU
CLI argument: --wireguard-mtu

If omitted, a default MTU of 1420 is used (as before).

Client MTU configuration

YAML configuration file / Helm chart:

...
clientConfig:
  ...
  mtu: 1380
...

Environment variable: WG_CLIENTCONFIG_MTU
CLI argument: --clientconfig-mtu

If omitted, the client uses a default at its own discretion, usually 1420 as well.

Features / manual changes 🔧

Dependency upgrades 🤖

  • [Snyk] Upgrade @mui/material from 5.12.3 to 5.13.0 by @GoliathLabs in #394
  • build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 by @dependabot in #390
  • build(deps): bump golang from 1.20.3-alpine to 1.20.4-alpine by @dependabot in #389
  • build(deps): bump alpine from 3.17.3 to 3.18.0 by @dependabot in #386
  • Revert "build(deps): bump alpine from 3.17.3 to 3.18.0" by @GoliathLabs in #395
  • build(deps): bump @mui/material from 5.12.3 to 5.13.3 in /website by @dependabot in #393
  • build(deps-dev): bump prettier from 2.8.4 to 2.8.8 in /website by @dependabot in #388
  • [Snyk] Upgrade @mui/material from 5.13.3 to 5.13.4 by @GoliathLabs in #399
  • build(deps): bump @mui/material from 5.13.4 to 5.13.6 in /website by @dependabot in #407
  • build(deps): bump @emotion/react from 11.11.0 to 11.11.1 in /website by @dependabot in #406
  • build(deps): bump golang from 1.20.4-alpine to 1.20.5-alpine by @dependabot in #403
  • build(deps): bump node from 20.0.0-bullseye to 20.3.1-bullseye by @dependabot in #404
  • build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.6.0 by @dependabot in #410
  • build(deps): bump alpine from 3.17.3 to 3.18.2 by @dependabot in #405
  • build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 by @dependabot in #413
  • build(deps): bump github.com/miekg/dns from 1.1.54 to 1.1.55 by @dependabot in #415
  • build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in #411
  • build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.1 by @dependabot in #412
  • build(deps): bump tough-cookie from 4.1.2 to 4.1.3 in /website by @dependabot in #422
  • build(deps): bump semver from 6.3.0 to 6.3.1 in /website by @dependabot in #423
  • build(deps): bump word-wrap from 1.2.3 to 1.2.4 in /website by @dependabot in #428
  • [Snyk] Upgrade @mui/material from 5.13.6 to 5.13.7 by @GoliathLabs in #432

Full Changelog: v0.9.0...v0.10.0

v0.9.0

21 May 18:33
10289e4
Compare
Choose a tag to compare

What's Changed

Features / manual changes 🔧

Dependency upgrades 🤖

  • build(deps): bump actions/checkout from 2 to 3 by @dependabot in #322
  • build(deps): bump alpine from 3.17.0 to 3.17.2 by @dependabot in #323
  • build(deps): bump mobx from 6.7.0 to 6.8.0 in /website by @dependabot in #324
  • build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by @dependabot in #337
  • build(deps): bump golang from 1.19.4-alpine to 1.20.1-alpine by @dependabot in #325
  • build(deps-dev): bump prettier from 2.8.3 to 2.8.4 in /website by @dependabot in #328
  • build(deps): bump golang.org/x/crypto from 0.0.0-20220411220226-7b82a4e95df4 to 0.7.0 by @dependabot in #338
  • build(deps): bump github.com/miekg/dns from 1.1.50 to 1.1.52 by @dependabot in #339
  • build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in #329
  • build(deps): bump node from 19.5.0-bullseye to 19.7.0-bullseye by @dependabot in #331
  • build(deps): bump github.com/tg123/go-htpasswd from 1.2.0 to 1.2.1 by @dependabot in #332
  • build(deps): bump google.golang.org/grpc from 1.52.3 to 1.53.0 by @dependabot in #327
  • [Snyk] Upgrade mobx from 6.7.0 to 6.8.0 by @snyk-bot in #336
  • build(deps): bump golang from 1.20.1-alpine to 1.20.2-alpine by @dependabot in #341
  • build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 by @dependabot in #342
  • build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 by @dependabot in #343
  • build(deps): bump webpack from 5.75.0 to 5.76.1 in /website by @dependabot in #344
  • build(deps): bump alpine from 3.17.2 to 3.17.3 by @dependabot in #345
  • build(deps): bump node from 19.7.0-bullseye to 19.8.1-bullseye by @dependabot in #346
  • build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.6.0 by @dependabot in #347
  • build(deps): bump mobx from 6.8.0 to 6.9.0 in /website by @dependabot in #351
  • build(deps): bump actions/setup-go from 3 to 4 by @dependabot in #356
  • build(deps): bump github.com/docker/docker from 20.10.8+incompatible to 20.10.24+incompatible by @dependabot in #357
  • build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware from 1.3.0 to 1.4.0 by @dependabot in #353
  • build(deps): bump github.com/miekg/dns from 1.1.52 to 1.1.53 by @dependabot in #350
  • build(deps): bump mobx-utils from 6.0.5 to 6.0.6 in /website by @dependabot in #354
  • build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in #352
  • build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #369
  • build(deps): bump qrcode from 1.5.1 to 1.5.3 in /website by @dependabot in #365
  • build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 by @dependabot in #366
  • build(deps): bump github.com/miekg/dns from 1.1.53 to 1.1.54 by @dependabot in #364
  • build(deps): bump golang from 1.20.2-alpine to 1.20.3-alpine by @dependabot in #363
  • build(deps): bump date-fns from 2.29.3 to 2.30.0 in /website by @dependabot in #368
  • build(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by @dependabot in #367
  • build(deps): bump github.com/golang/protobuf from 1.5.2 to 1.5.3 by @dependabot in #362
  • build(deps): bump node from 19.8.1-bullseye to 20.0.0-bullseye by @dependabot in #360
  • build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in #374
  • build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #379
  • build(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @dependabot in #378
  • build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in #385

Full Changelog: v0.8.4...v0.9.0

v0.8.4

16 Feb 12:33
ba5268c
Compare
Choose a tag to compare

What's Changed

  • Security updates by @awlx in #312
  • build(deps): bump docker/build-push-action from 3 to 4 by @dependabot in #295
  • build(deps): bump node from 19.3.0-bullseye to 19.5.0-bullseye by @dependabot in #298
  • build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.3 by @dependabot in #300
  • build(deps-dev): bump typescript from 4.9.4 to 4.9.5 in /website by @dependabot in #301
  • build(deps): bump loader-utils from 1.4.0 to 1.4.2 in /website by @dependabot in #309
  • build(deps): bump ejs from 3.1.6 to 3.1.8 in /website by @dependabot in #310
  • build(deps): bump terser from 5.10.0 to 5.16.3 in /website by @dependabot in #311
  • More security fixes by @awlx in #313

Full Changelog: v0.8.3...v0.8.4

v0.8.3

12 Feb 11:43
0e5cbcd
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.8.2...v0.8.3

v0.8.2

19 Nov 13:04
d82e5c9
Compare
Choose a tag to compare

What's Changed

Features

  • Require claim to be present to allow access to the user by @nextsux in #259
  • feat: specify stable session cookie secret for HA setup by @nextsux in #263
    • Fix nil pointer dereference without SessionStore config by @DasSkelett in #271

Bugfixes and other changes

-

Dependencies

New Contributors

Full Changelog: v0.8.1...v0.8.2

v0.8.1

16 Aug 14:23
c8da2fc
Compare
Choose a tag to compare

What's Changed

Features

  • Upgrade to latest WireGuard, bump minimum Go version to 1.18 and use new netip package by @DasSkelett in #206
  • Add option to read claims from OIDC ID Token by @DasSkelett in #214

Bugfixes and other changes

Dependencies

Full Changelog: v0.8.0...v0.8.1