diff --git a/.changeset/bright-cats-check.md b/.changeset/bright-cats-check.md deleted file mode 100644 index dfbbebab66e..00000000000 --- a/.changeset/bright-cats-check.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'hive': patch ---- - -Clarify successful GitHub schema checks by annotating breaking changes that are safe based on usage or approved. diff --git a/.changeset/itchy-otters-lead.md b/.changeset/itchy-otters-lead.md deleted file mode 100644 index 72a9028ac16..00000000000 --- a/.changeset/itchy-otters-lead.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'hive': patch ---- - -Metric Alerts: enhance Grafana with additional panels for tracking filtered vs unfiltered rule and -group population and attaches additional data to evaluate-group span diff --git a/.changeset/jolly-chefs-behave.md b/.changeset/jolly-chefs-behave.md deleted file mode 100644 index 59d4a284d57..00000000000 --- a/.changeset/jolly-chefs-behave.md +++ /dev/null @@ -1,24 +0,0 @@ ---- -'hive': minor ---- - -Added opt-in AWS IAM authentication for S3 connections. When IAM is enabled, services authenticate -to S3 using short-lived SigV4 pre-signed tokens instead of static passwords, since S3 connections -are HTTP requests a new token will be generate for each call. - -### New environment variables - -| Variable | Service | Description | -| ----------------------------------- | ------- | --------------------------------------------------------- | -| `S3_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3. | -| `S3_MIRROR_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3 Mirror. | -| `S3_AUDIT_LOG_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3 Audit Log. | - -### To enable - -- `S3_*_AWS_IAM_AUTH_ENABLED=1`. -- `S3_BUCKET_NAME` set to the AWS S3 bucket. -- `S3_ENDPOINT` set with the S3 endpoint with the AWS Region (i.e. https://s3.us-east-1.amazonaws.com) - -When `CDN_API=1` is set on the server, the CDN artifact handler also uses IAM-authenticated S3 clients. -Adds support for S3 Audit Logs exported to AWS S3. diff --git a/.changeset/large-pets-pay.md b/.changeset/large-pets-pay.md deleted file mode 100644 index d7c1a4667dd..00000000000 --- a/.changeset/large-pets-pay.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'hive': patch ---- - -Metric Alerts optimization: Creates a new daily ClickHouse rollup and routes long-windowed rules/groups diff --git a/.changeset/petite-geckos-type.md b/.changeset/petite-geckos-type.md deleted file mode 100644 index 61dc6ab44cd..00000000000 --- a/.changeset/petite-geckos-type.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -'hive': patch ---- - -Address vulnerabilities [GHSA-gcfj-64vw-6mp9](https://github.com/advisories/GHSA-gcfj-64vw-6mp9), -[GHSA-hcpx-6fm6-wx23](https://github.com/advisories/GHSA-hcpx-6fm6-wx23), [GHSA-f4gw-2p7v-4548](https://github.com/advisories/GHSA-f4gw-2p7v-4548), -[GHSA-mwf2-3pr3-8698](https://github.com/advisories/GHSA-mwf2-3pr3-8698), [GHSA-xj6q-8x83-jv6g](https://github.com/advisories/GHSA-xj6q-8x83-jv6g), -and [GHSA-j3f2-48v5-ccww](https://github.com/advisories/GHSA-j3f2-48v5-ccww). diff --git a/deployment/CHANGELOG.md b/deployment/CHANGELOG.md index a951683536f..f066d6496d8 100644 --- a/deployment/CHANGELOG.md +++ b/deployment/CHANGELOG.md @@ -1,5 +1,62 @@ # hive +## 11.7.0 + +### Minor Changes + +- [#8079](https://github.com/graphql-hive/console/pull/8079) + [`2b6d22f`](https://github.com/graphql-hive/console/commit/2b6d22f5d36c46e9bdc2425451fc96c5d42a0dbb) + Thanks [@mish-elle](https://github.com/mish-elle)! - Added opt-in AWS IAM authentication for S3 + connections. When IAM is enabled, services authenticate to S3 using short-lived SigV4 pre-signed + tokens instead of static passwords, since S3 connections are HTTP requests a new token will be + generate for each call. + + ### New environment variables + + | Variable | Service | Description | + | ----------------------------------- | ------- | --------------------------------------------------------- | + | `S3_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3. | + | `S3_MIRROR_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3 Mirror. | + | `S3_AUDIT_LOG_AWS_IAM_AUTH_ENABLED` | server | Set to `1` to enable IAM authentication for S3 Audit Log. | + + ### To enable + + - `S3_*_AWS_IAM_AUTH_ENABLED=1`. + - `S3_BUCKET_NAME` set to the AWS S3 bucket. + - `S3_ENDPOINT` set with the S3 endpoint with the AWS Region (i.e. + https://s3.us-east-1.amazonaws.com) + + When `CDN_API=1` is set on the server, the CDN artifact handler also uses IAM-authenticated S3 + clients. Adds support for S3 Audit Logs exported to AWS S3. + +### Patch Changes + +- [#8226](https://github.com/graphql-hive/console/pull/8226) + [`c0873ac`](https://github.com/graphql-hive/console/commit/c0873ac45dfc893e7dd12115902bc7cdb2878419) + Thanks [@n1ru4l](https://github.com/n1ru4l)! - Clarify successful GitHub schema checks by + annotating breaking changes that are safe based on usage or approved. + +- [#8232](https://github.com/graphql-hive/console/pull/8232) + [`78f4ed4`](https://github.com/graphql-hive/console/commit/78f4ed4d0fcef0dcf9a89b3a80a2ca1cd3d2e1e6) + Thanks [@jonathanawesome](https://github.com/jonathanawesome)! - Metric Alerts: enhance Grafana + with additional panels for tracking filtered vs unfiltered rule and group population and attaches + additional data to evaluate-group span + +- [#8235](https://github.com/graphql-hive/console/pull/8235) + [`91f971f`](https://github.com/graphql-hive/console/commit/91f971f8f0c51b6960f4b1d484cfbf87e037a8d4) + Thanks [@jonathanawesome](https://github.com/jonathanawesome)! - Metric Alerts optimization: + Creates a new daily ClickHouse rollup and routes long-windowed rules/groups + +- [#8237](https://github.com/graphql-hive/console/pull/8237) + [`68361c9`](https://github.com/graphql-hive/console/commit/68361c948180cf461aea4d04e1607407a8043344) + Thanks [@n1ru4l](https://github.com/n1ru4l)! - Address vulnerabilities + [GHSA-gcfj-64vw-6mp9](https://github.com/advisories/GHSA-gcfj-64vw-6mp9), + [GHSA-hcpx-6fm6-wx23](https://github.com/advisories/GHSA-hcpx-6fm6-wx23), + [GHSA-f4gw-2p7v-4548](https://github.com/advisories/GHSA-f4gw-2p7v-4548), + [GHSA-mwf2-3pr3-8698](https://github.com/advisories/GHSA-mwf2-3pr3-8698), + [GHSA-xj6q-8x83-jv6g](https://github.com/advisories/GHSA-xj6q-8x83-jv6g), and + [GHSA-j3f2-48v5-ccww](https://github.com/advisories/GHSA-j3f2-48v5-ccww). + ## 11.6.0 ### Minor Changes diff --git a/deployment/package.json b/deployment/package.json index 95dac2b9beb..2db718ba100 100644 --- a/deployment/package.json +++ b/deployment/package.json @@ -1,6 +1,6 @@ { "name": "hive", - "version": "11.6.0", + "version": "11.7.0", "private": true, "scripts": { "generate": "tsx generate.ts",