Upcoming Release Changes

deployment/CHANGELOG.md

@@ -1,5 +1,62 @@
 # hive
 
+## 11.7.0
+
+### Minor Changes
+
+- [#8079](https://github.com/graphql-hive/console/pull/8079)
+  [`2b6d22f`](https://github.com/graphql-hive/console/commit/2b6d22f5d36c46e9bdc2425451fc96c5d42a0dbb)
+  Thanks [@mish-elle](https://github.com/mish-elle)! - Added opt-in AWS IAM authentication for S3
+  connections. When IAM is enabled, services authenticate to S3 using short-lived SigV4 pre-signed
+  tokens instead of static passwords, since S3 connections are HTTP requests a new token will be
+  generate for each call.
+
+  ### New environment variables
+
+  | Variable                            | Service | Description                                               |
+  | ----------------------------------- | ------- | --------------------------------------------------------- |
+  | `S3_AWS_IAM_AUTH_ENABLED`           | server  | Set to `1` to enable IAM authentication for S3.           |
+  | `S3_MIRROR_AWS_IAM_AUTH_ENABLED`    | server  | Set to `1` to enable IAM authentication for S3 Mirror.    |
+  | `S3_AUDIT_LOG_AWS_IAM_AUTH_ENABLED` | server  | Set to `1` to enable IAM authentication for S3 Audit Log. |
+
+  ### To enable
+
+  - `S3_*_AWS_IAM_AUTH_ENABLED=1`.
+  - `S3_BUCKET_NAME` set to the AWS S3 bucket.
+  - `S3_ENDPOINT` set with the S3 endpoint with the AWS Region (i.e.
+    https://s3.us-east-1.amazonaws.com)
+
+  When `CDN_API=1` is set on the server, the CDN artifact handler also uses IAM-authenticated S3
+  clients. Adds support for S3 Audit Logs exported to AWS S3.
+
+### Patch Changes
+
+- [#8226](https://github.com/graphql-hive/console/pull/8226)
+  [`c0873ac`](https://github.com/graphql-hive/console/commit/c0873ac45dfc893e7dd12115902bc7cdb2878419)
+  Thanks [@n1ru4l](https://github.com/n1ru4l)! - Clarify successful GitHub schema checks by
+  annotating breaking changes that are safe based on usage or approved.
+
+- [#8232](https://github.com/graphql-hive/console/pull/8232)
+  [`78f4ed4`](https://github.com/graphql-hive/console/commit/78f4ed4d0fcef0dcf9a89b3a80a2ca1cd3d2e1e6)
+  Thanks [@jonathanawesome](https://github.com/jonathanawesome)! - Metric Alerts: enhance Grafana
+  with additional panels for tracking filtered vs unfiltered rule and group population and attaches
+  additional data to evaluate-group span
+
+- [#8235](https://github.com/graphql-hive/console/pull/8235)
+  [`91f971f`](https://github.com/graphql-hive/console/commit/91f971f8f0c51b6960f4b1d484cfbf87e037a8d4)
+  Thanks [@jonathanawesome](https://github.com/jonathanawesome)! - Metric Alerts optimization:
+  Creates a new daily ClickHouse rollup and routes long-windowed rules/groups
+
+- [#8237](https://github.com/graphql-hive/console/pull/8237)
+  [`68361c9`](https://github.com/graphql-hive/console/commit/68361c948180cf461aea4d04e1607407a8043344)
+  Thanks [@n1ru4l](https://github.com/n1ru4l)! - Address vulnerabilities
+  [GHSA-gcfj-64vw-6mp9](https://github.com/advisories/GHSA-gcfj-64vw-6mp9),
+  [GHSA-hcpx-6fm6-wx23](https://github.com/advisories/GHSA-hcpx-6fm6-wx23),
+  [GHSA-f4gw-2p7v-4548](https://github.com/advisories/GHSA-f4gw-2p7v-4548),
+  [GHSA-mwf2-3pr3-8698](https://github.com/advisories/GHSA-mwf2-3pr3-8698),
+  [GHSA-xj6q-8x83-jv6g](https://github.com/advisories/GHSA-xj6q-8x83-jv6g), and
+  [GHSA-j3f2-48v5-ccww](https://github.com/advisories/GHSA-j3f2-48v5-ccww).
+
 ## 11.6.0
 
 ### Minor Changes

deployment/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hive",
-  "version": "11.6.0",
+  "version": "11.7.0",
   "private": true,
   "scripts": {
     "generate": "tsx generate.ts",