v0.5.0

Upgrade Guide

NOTE: there are several dependency changes

• java 11 is no longer supported; please upgrade to a jdk of at least 17

Steps to upgrade:

1. If you began with one of our examples, hopefully you have a ./upgrade-terraform-modules script at the root of your configuration. Run this to update to ./upgrade-terraform-modules v0.5.0; if you don't have this script, you must find and replace the version numbers (eg v0.4.49 for example) by hand (editing main.tf, and any other msft-365.tf, google-workspace.tf, etc.
2. If you are coming from a 0.4.x version below 0.4.61, we recommend upgrading to that (or later 0.4.x) first:
   • ./upgrade-terraform-modules v0.4.61
   • terraform init --upgrade
   • terraform apply
3. once you're ready for 0.5.x:
   • ./upgrade-terraform-modules v0.5.0
   • terraform init --upgrade
4. try terraform validate; fix any errors. Some you're likely to encounter a couple variables whose names have changed
   • rename psoxy_host_platform_id --> host_platform_id in main.tf
   • rename psoxy_instance_id --> proxy_instance_id in main.tf
   • rename psoxy_endpoint_url --> proxy_endpoint_url in main.tf
   • rename application_object_id to application_id in msft-365.tf
   • if you have a value for connector.application_id, rename it to connector.client_id in msft-365.tf
5. after that, you should be able to run terraform apply; plan should be fairly minimal (just updating java source code bundles); if more extensive, customers should contact Worklytics for assistance.

Features

• java17 for both source and byte code #840 #841
• drop pseudonym scope, legacy format/hash support #835
• avoid conflicts with standard AWS vars #831
• jira cloud docs #416
• improve error handling #828
• env var only config #823
• misc docs improvement #826
• update/drop ip block stuff #821
• remove 0.4.x migrations #824
• slack examples #825
• remove legacy examples #816
• concise phrase transform #811
• some MSFT doc cleanup/fixes #822 #820
• msft provider to > 2.44, <4.0
• enforce https at application layer, when possible #815
• enforce PRs via rc #812

Fixes

• customization fixes / support #832
• fix path urldecoding via api gw v2 #827

Logistics

• v0.5.0 logistics #842
• v0.5.0 #843

Full Changelog: v0.4.62...v0.5.0

v0.4.62

Features

• Slack conversations ids support #836

Fixes

• docs fixes #829
• Add teams with default scopes #833
• Fix missing attendance id pseudonymization for MSFT Teams #834
• rules fixes redux #837

Logistics

• update release refs to v0.4.62 #838
• v0.4.62 #839

Full Changelog: v0.4.61...v0.4.62

v0.4.61

Features

• AWS API gateway with custom domain #809
• default to TLS 1.3 out to datasource #810
• misc docs for v0.4.61 #807
• IP logging, in health check #813

Logistics

• update release refs to v0.4.61 #808
• v0.4.61 #814

Full Changelog: v0.4.60...v0.4.61

v0.4.60

Features

• add rules sha to bulk #797
• OOO through proxy for meeting titles #800
• worklytics ip blocks module, example on usage #802
• display processed bulk file metadata #803
• metrics import connector #801
• improve Implementation Guide #799
• extended meeting title tokens #804
• align metrics connector spec with w8s version #805

Fixes

• avoid node deprecation warnings #795

• discard bulk processing if control-chars in headers #796

• Teams chat pagination & misc fixes #798

• v0.4.60 #806

Full Changelog: v0.4.59...v0.4.60

v0.4.59

Fixes

• Fix teams paths and chat response sanitization #789

Features

• default to calendar-only #792
• cut calendar fields #793
• relax TF version constraints #791

Logistics

• update release refs to v0.4.59 #790
• v0.4.59 #794

Full Changelog: v0.4.58...v0.4.59

v0.4.58

Features

• drop basic exec policy from caller role #763
• alternative approach to lock s3 to ssl #765
• Slack huddles support #767
• bulk mode test case #769
• GitHub: include email in SAML graphQL #771
• example tooling and doc improvements #772
• tf security scanning with trivy; fix or mark exceptions for its issues #773
• sec scan helper script #775
• avoid host platform prompt #777
• bulk mode compress always #785

Fixes

• top-level secrets missing prefix for AWS Secrets Manager #766
• Upgrade vulnerable dependencies #770
• file upload test feedback #768
• Fixing tokenization for MSFT cal, mail and teams #774
• fix min provisioner perms #776
• fix missing column failure #779
• aws secrets manager fixes #780
• consistent sanitized bucket names in GCP #781
• Tokenize MSFT Teams PSTN call ids #782
• Fix invalid link files #783
• avoid fatal unmapped transforms #786
• bump ephemeral amount for aws bulk mode #784
• fix bulk test tool for ALWAYS_COMPRESS mode #787
• Always use current directory to save files #788

Logistics

• v0.4.58 #778

Full Changelog: v0.4.57...v0.4.58

v0.4.57

Features

• document scopes per-connector for MSFT sources #745
• param for aws iam role permissions boundary #761
• GCP container scanning tooling #758
• add Implementation Guide to docs #753
• Teams cleanup #756
• java17 runtimes by default #757
• Support mailboxsettings for directory #755

Fixes

• avoid codeql log injection complaint #746
• docs fixes #747
• fix gcp build with latest maven #750
• Get default owners #754
• tooling fixes #760

Logistics and Maintenance

• prep release v0.4.57 #752
• update gcp deps #751
• v0.4.57 #764

Full Changelog: v0.4.56...v0.4.57

v0.4.56

Features

• BYO msft connector app #741
• more auth docs #739

Fixes

• Bump braces from 3.0.2 to 3.0.3 in /tools/js-reference #737
• Bump braces from 3.0.2 to 3.0.3 in /tools/js-reference #742
• fix typing a bit in msft-365 tf #743
• v0.4.56 #744

Full Changelog: v0.4.55...v0.4.56

v0.4.55

Changes

• improve msft rules #733
• MSFT rules update for using /v1.0 #735

above changes make default MSFT rules more conservative; avoid jobTitle, and disable beta endpoints by default

Features

• improve docs #719
• Using data for getting Graph API app #721
• more examples #725
• doc aws secretsmanager, lookup tables #727
• avoid gcp key creation #728
• optimize S3 handler for bulk processing #730
• Fix reverse tokenized urls #732

Fixes

• Jira cloud drop cloudid from deep linking #705
• doc fixes #720
• Bump @grpc/grpc-js from 1.10.6 to 1.10.9 in /tools/psoxy-test #722
• Upgrade deps: fix vulnerabilities #724
• Crop diagram #729
• recover cmd line support #731
• fix examples-dev #726

Logistics

• v0.4.55 #736
• update release refs to v0.4.55 #734

Full Changelog: v0.4.54...v0.4.55

v0.4.54

Features

• docs data source examples #715
• some docs improvements #716
• source availability concept in connector specs #717

Fixes

• tooling fixes #714

Logistics

• v0.4.54 #718

Full Changelog: v0.4.53...v0.4.54