- Security upgrade of FasterXML and Guava
- The Strongbox SDK signatures (.asc) use SHA-512 rarther than SHA-1
- The Strongbox GUI joins the SDK/CLI in running on recent JDK/JRE versions as well as Corretto 8
Houskeeping:
- The JDK used for development and releases has been upgraded from 8 to 11, still targeting 8
- Gradle has been upgraded from 3.2.1 to 8.0.1 (Java 8 -> Java 19)
- Gradle verification of dependencies (GPG/SHA-512)
- OWASP Dependency Check Gradle plugin
- './gradlew build' works out of the box
- Upgrade AWS Encryption SDK dependency due to GHSA-55xh-53m6-936r
- Publish Java SDK to Maven Central instead of JCenter
- Stop publishing Archaius and Spring Boot Java libraries
- Stop publishing RPM and Debian packages
- Drop support for Homebrew
- Support newer versions of Java by including jaxb-api
- Archaius derived property support
- Automated homebrew release
- Automated landing page release
- Minor fixes
- Spring Boot Starter integration
- Prefix JARs with
strongbox
- Improve error handling when credential resolving fails
- Change license to Apache 2.0
- Improve help messages when credential resolving fails
- Prefix JARs with 'strongbox'
- Interpret
#
at the beginning of credentials/config file line as a comment.
strongbox --version
gives the version of Strongbox- Stacktraces are no longer printed by default for exceptions, you can ebable it with
strongbox --stacktrace <command>
- Improved error messages in the CLI
- Added
getAll{String,Binary}Secrets()
to theSimpleSecretsGroup
in the Java SDK
- Initial public release