v14.45.6

- Adds test logs to help validate new V2 LabKit Logging Setup !1348

v14.45.5

- Update ruby version to 3.3.10 !1342

v14.45.3

- Add gitlab-sshd acceptance tests for all supported SSH key types !1326

- Move GOLANG_FIPS=1 back into tests:fips CI job !1327

- Clean up FF geo_proxy_fetch_direct_to_primary_with_options !1329

- Clean up FF geo_proxy_fetch_direct_to_primary !1330

- Fix race in tests !1332

- Clean up FF geo_proxy_direct_to_primary !1331

v14.45.2

- Update labkit to v1.27.1 to allow ED25519 with FIPS !1324

v14.45.1

- Relax FIPS default algorithms !1322

v14.45.0

- Make CI jobs use the local Go toolchain !1319

- Add back default SSH algorithms for non-FIPS builds !1320

v14.44.0

- Update dependency go to v1.24.5 !1306

- Update module golang.org/x/sync to v0.16.0 !1307

- Update module github.com/golang-jwt/jwt/v5 to v5.2.3 !1310

- Update Ruby development version to 3.3.9 !1312

- Update module github.com/golang-jwt/jwt/v5 to v5.3.0 !1313

- Remove hard-coded SSH supported algorithms !1315

v14.43.0

- Update module golang.org/x/crypto to v0.38.0 !1281

- Send `check_ip` parameter in Git streaming audit event !1290

- Allow dots, underscores, and uppercase in key_id validation !1284

- Update Ruby dependencies !1292

- Update module golang.org/x/sync to v0.15.0 !1293

- Use `SOURCE_DATE_EPOCH` if set for build time !1291

- Update dependency go to v1.24.4 !1294

- Update dependency golang to v1.24.4 !1295

- Update module gitlab.com/gitlab-org/labkit to v1.24.1 !1297

- Fix "context-keys-type" linter warning !1301

- Update module golang.org/x/crypto to v0.39.0 !1299

- Include changes param in shellhorse Git over SSH !1300

v14.42.0

- Update CI RUBY_VERSION to 3.4.2 !1248

- Revert "Merge branch 'pb-ci-ruby-version-3-4-2' into 'main'" !1249

- Update github.com/charmbracelet/git-lfs-transfer digest to d4ecc24 !1250

- Update Gitaly client dependency to include DNS lookup change !1251

- Update module gitlab.com/gitlab-org/labkit to v1.23.1 !1252

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.10 !1253

- Update module gitlab.com/gitlab-org/labkit to v1.23.2 !1254

- Update module github.com/golang-jwt/jwt/v5 to v5.2.2 !1256

- Update module google.golang.org/protobuf to v1.36.6 !1257

- Update dependency danger-review to v2.1.0 !1258

- Update github.com/charmbracelet/git-lfs-transfer digest to fd7f679 !1259

- Update dependency golang to v1.24.2 !1261

- Update github.com/charmbracelet/git-lfs-transfer digest to e9f7fdb !1262

- Update module github.com/prometheus/client_golang to v1.22.0 !1263

- Update Gitlab-shell Gitaly client dependency !1266

- Update github.com/charmbracelet/git-lfs-transfer digest to 4db3867 !1267

- Update dependency ruby to v3.4.3 !1268

- Update module google.golang.org/grpc to v1.72.0 !1269

- Update github.com/charmbracelet/git-lfs-transfer digest to cdc13fa !1273

- Update module gitlab.com/gitlab-org/labkit to v1.24.0 !1274

- Go 1.24.2 update !1275

- Update dependency gitlab-dangerfiles to '~> 4.9.1' !1278

- Update github.com/charmbracelet/git-lfs-transfer digest to 0d51139 !1279

- Update dependency go to v1.24.3 !1282

- Update dependency golang to v1.24.3 !1283

- Ensure nilaway only scans gitlab-shell !1285

v14.41.0

- Update module golang.org/x/sync to v0.12.0 !1244

- Update dependency golang to v1.24.1 !1243

- Update module github.com/prometheus/client_golang to v1.21.1 !1242

- Update github.com/charmbracelet/git-lfs-transfer digest to 805ee9c !1241

- Update module github.com/prometheus/client_golang to v1.21.0 !1234

- Update module gitlab.com/gitlab-org/labkit to v1.22.0 !1240

- Update dependency ruby to v3.4.2 !1232

- Update module golang.org/x/crypto to v0.35.0 !1237

- Update github.com/charmbracelet/git-lfs-transfer digest to ccc940e !1231

- Update module golang.org/x/crypto to v0.33.0 !1222

- Update dependency golang to v1.24.0 !1226

- Update module google.golang.org/protobuf to v1.36.5 !1217

- Update github.com/charmbracelet/git-lfs-transfer digest to db48881 !1219

- Update dependency gitlab-dangerfiles to '~> 4.8.1' !1223

v14.40.0

- Bump development Ruby version to 3.3.7 !1224

- Update module github.com/otiai10/copy to v1.14.1 !1220

- Update module google.golang.org/grpc to v1.69.2 !1216

- Update github.com/charmbracelet/git-lfs-transfer digest to e0340c3 !1215

- Update module golang.org/x/crypto to v0.31.0 !1214

- Update dependency webrick to '~> 1.9', '>= 1.9.1' !1212

- Update module google.golang.org/grpc to v1.68.1 !1196

- Update github.com/charmbracelet/git-lfs-transfer digest to f587eea !1210

- Update module golang.org/x/crypto to v0.30.0 !1208

- Update dependency danger-review to v2 !1206

- Update module golang.org/x/sync to v0.10.0 !1207

- Update dependency golang to v1.23.4 !1205

- Update dependency danger-review to v1.4.2 !1204

- Update github.com/charmbracelet/git-lfs-transfer digest to b2a2ff3 !1202

- Update dependency ruby to v3.3.6 !1192

- Update github.com/charmbracelet/git-lfs-transfer digest to b9a7efd !1199

- Update module github.com/stretchr/testify to v1.10.0 !1201

- Update module google.golang.org/protobuf to v1.35.2 !1200

- Update module golang.org/x/crypto to v0.29.0 !1198

- Update module golang.org/x/sync to v0.9.0 !1197

- Update dependency golang to v1.23.3 !1194

- Update CONTRIBUTING.md and LICENSE !1193

- Update dependency webrick to '~> 1.9' !1191

- Upgrade golang-code-intel version !1190

- Fix code-navigation job !1189

- Update module github.com/prometheus/client_golang to v1.20.5 !1187

- Update module github.com/pires/go-proxyproto to v0.8.0 !1184

- Update LabKit library to v1.21.2 !1186

- Update github.com/charmbracelet/git-lfs-transfer digest to 422d244 !1181

- Update module google.golang.org/protobuf to v1.35.1 !1180

- Update module golang.org/x/crypto to v0.28.0 !1178

- Update dependency golang to v1.23.2 !1177

- Update module google.golang.org/grpc to v1.67.1 !1169

- Update dependency webrick to '~> 1.8', '>= 1.8.2' !1175

- Lint fixes for commandargs packages !1145

- Update module github.com/prometheus/client_golang to v1.20.4 !1172

- Resolve "Add current release process to the new README.md" !1174

- Resolve "Expand the README.md with more details" !1173

- ci: Bump Ruby/RubyGems versions in CI images !1171

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.10 !1170

- Lint fixes for console executable and gitaly packages !1154

- Fix 'go-require: do not use require in http handlers (testifylint)' linter errors !1168

- Lint fixes for customaction package !1147

- Lint fixes in healthcheck and discover package !1150

- Improve logging on errors !1156

- Lint fixes for personalaccesstoken package !1146

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.9 !1167

- Update github.com/charmbracelet/git-lfs-transfer digest to edbf581 !1165

- Update module google.golang.org/grpc to v1.66.1 !1166

- Lint fixes for sshd packages !1138

- Lint fixes for lfs packages !1139

- Lint fixes for shared packages !1157

- Added inspecting result in connection !1136

- Update module github.com/prometheus/client_golang to v1.20.3 !1161

- Update module golang.org/x/crypto to v0.27.0 !1163

- Lint fixes in gitlabshell packages !1152

- Update dependency golang to v1.23.1 !1162

- Lint fixes for logger metrics and pktline packages !1155

- Lint fixes in accessverifier package !1153

- Lint fixes in gitlabnet git package !1149

- Lint fixes for authorized keys and principal packages !1151

- Update dependency ruby to v3.3.5 !1160

- Lint fixes for githttp package !1144

- Lint fixes for twofactor packages !1143

- Update module google.golang.org/grpc to v1.66.0 !1142

- Lint fixes for audit event packages !1140

- Update config.yml with a configuration for PAT !1141

- Update module github.com/prometheus/client_golang to v1.20.2 !1134

- Update `golangci` to 1.60.3 and `gotestsum` to 1.12.0 !1135

- Improve lint error reporting !1133

- Update golangci to 1.60.2 !1132

- Update module github.com/prometheus/client_golang to v1.20.1 !1130

- Resolve "Add support for Go 1.23 to gitlab-shell" !1128

- Resolve "Only run `nilaway` CI job when there's actual `.go` changes" !1127

v14.39.0

- Revise CODEOWNERS to use entire TW team !1125

- Rename bin/check to bin/gitlab-shell-check to to avoid name clash !801

- Update golangci to 1.60.1 !1122

- Move bin/install to support/make_necessary_dirs !799

- Update dependency golang to v1.23.0 !1121

- Use go build so we can use -o !1117

- Add 'make make_necessary_dirs' alias !1119

- Add GitLab Advanced SAST to CI/CD config !1120

- Update github.com/charmbracelet/git-lfs-transfer digest to 2cab0ea !1118

- Update module golang.org/x/crypto to v0.26.0 !1115

- Update dependency golang to v1.22.6 !1116

- Update github.com/charmbracelet/git-lfs-transfer digest to c3aa24b !1113

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.8 !1114

- Update module golang.org/x/sync to v0.8.0 !1112

v14.38.0

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.7 !1110

- Add basic LFS connections metric for SSH !1107

- Update module google.golang.org/grpc to v1.65.0 !1098

- Add basic LFS connections metric for HTTP !1108

- Remove migration section as no longer supported !1106

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.6 !1104

- Update dependency ruby to v3.3.4 !1102

- Update Ruby to 3.3.4 !1105

- Update module golang.org/x/crypto to v0.25.0 !1100

- Update github.com/charmbracelet/git-lfs-transfer digest to bacbfdb !1101

- Restructure CI jobs !1097

- Update dependency golang to v1.22.5 !1099

v14.37.0

- Update dependency danger-review to v1.4.1 !1095

- Allow pure_ssh_protocol to be set !1093

- Update dependency gitlab-dangerfiles to '~> 4.8.0' !1094

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.5 !1091

- Update dependency danger-review to v1.4.0 !1090

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.4 !1085

- Update golangci to 1.59.1 !1089

v14.36.0

- Use the danger-review component !1086

- Update module google.golang.org/protobuf to v1.34.2 !1083

- Geo: Replace Git over HTTP calls with Workhorse HTTP endpoint for SSH pull !1081

- Update github.com/charmbracelet/git-lfs-transfer digest to 0ffd62e !1080

- Update dependency golang to v1.22.4 !1079

- Update module golang.org/x/crypto to v0.24.0 !1078

- Update golang default to 1.22 !1077

- Geo: Replace Git over HTTP calls with Workhorse HTTP endpoint for SSH push !1076

- Update module github.com/hashicorp/go-retryablehttp to v0.7.7 !1074

- Update CI image to latest one !1073

- Update module golang.org/x/sync to v0.7.0 !1072

- git-lfs-transfer: Add support for lock and unlocking of files !1071

- Update golangci to 1.58.2 !1069

- Update github.com/charmbracelet/git-lfs-transfer digest to 4ef8f58 !1067

- Continue work on Git LFS over SSH !1066

- Update module google.golang.org/grpc to v1.64.0 !1065

- Update module github.com/prometheus/client_golang to v1.19.1 !1063

- Update module github.com/hashicorp/go-retryablehttp to v0.7.6 !1061

- Update dependency golang to v1.22.3 !1060

- Update golangci to 1.58.1 !1057

- Update module google.golang.org/protobuf to v1.34.1 !1056

- Update module golang.org/x/crypto to v0.23.0 !1055

- Update github.com/charmbracelet/git-lfs-transfer digest to cc13460 !1054

- Add configuration objects to PAT token !1053

- Update module google.golang.org/protobuf to v1.34.0 !1052

- Fix lint issues for sshd server_config !1043

- Resolve `make lint` (golangci-lint) issues for `internal/sshd/sshd.go` and `internal/sshd/sshd_test.go` !1040

- Update github.com/charmbracelet/git-lfs-transfer digest to 9e9a21d !1038

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.3 !1037

- Resolve `make lint` (golangci-lint) issues for `internal/command/uploadarchive/uploadarchive.go` and `internal/command/uploadarchive/uploadarchive_test.go` !1034

- Resolve `make lint` (golangci-lint) issues for `internal/command/uploadpack/uploadpack.go` and `internal/command/uploadpack/uploadpack_test.go` !1033

- Resolve `make lint` (golangci-lint) issues for `internal/sshd/session.go` and `internal/sshd/session_test.go` !1032

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/authorizedkeys/client.go` and `internal/gitlabnet/authorizedkeys/client_test.go` !1031

- Resolve `make lint` (golangci-lint) issues for `internal/command/receivepack/receivepack.go` and `internal/command/receivepack/receivepack_test.go` !1030

- Resolve `make lint` (golangci-lint) issues for `internal/command/lfsauthenticate/lfsauthenticate.go` and `internal/command/lfsauthenticate/lfsauthenticate_test.go !1029

- Update HttpClient method name !1028

- Resolves `make lint` (golangci-lint) issues for `cmd/gitlab-shell-authorized-keys-check/main.go` !1027

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/git/client.go` and `internal/gitlabnet/git/client_test.go` !1026

- Resolve `make lint` (golangci-lint) issues or `internal/command/uploadpack/gitalycall.go` and `internal/command/uploadpack/gitalycall_test.go` !1025

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/twofactorverify/client.go` and `internal/gitlabnet/twofactorverify/client_test.go` !1024

- Resolve `make lint` (golangci-lint) issues for `internal/command/twofactorverify/twofactorverify.go` and `internal/command/twofactorverify/twofactorverify_test.go` !1023

- Resolve `make lint` (golangci-lint) issues for `internal/command/shared/customaction/customaction.go` and `internal/command/shared/customaction/customaction_test.go` !1022

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/accessverifier/client.go` and `internal/gitlabnet/accessverifier/client_test.go` !1021

- Resolve `make lint` (golangci-lint) issues for `cmd/gitlab-shell/command/command.go` and `cmd/gitlab-shell/command/command_test.go` !1020

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/discover/client.go` and `internal/gitlabnet/discover/client_test.go` !1019

- Resolve `make lint` (golangci-lint) issues for `cmd/check/command/command.go` and `cmd/check/command/command_test.go` !1018

- Resolve `make lint` (golangci-lint) issues for `internal/keyline/key_line.go` and `internal/keyline/key_line_test.go` !1017

- Resolve `make lint` (golangci-lint) issues for `internal/gitlabnet/lfsauthenticate/client.go` and `internal/gitlabnet/lfsauthenticate/client_test.go` !1016

- Resolve `make lint` (golangci-lint) issues for `internal/sshenv/sshenv.go` and `internal/sshenv/sshenv_test.go` !1015

- Resolve `make lint` (golangci-lint) issues for `cmd/gitlab-shell-authorized-keys-check/command/command.go` and `cmd/gitlab-shell-authorized-keys-check/command/command_test.go` !1014

- Fix `make lint` (golangci-lint) issues for `client/httpclient.go` and `client/httpsclient_test.go` !1013

- Fix `make lint` (golangci-lint) issues for `internal/handler/exec.go` and `internal/handler/exec_test.go` !1012

- Fix `make lint` (golangci-lint) issues for `internal/gitlabnet/personalaccesstoken/client.go` and `internal/gitlabnet/personalaccesstoken/client_test.go` !1011

- Fix `make lint` (golangci-lint) issues for `client/gitlabnet.go` !1010

- Fixes `make lint` (golangci-lint) issues for `internal/gitlabnet/twofactorrecover/client.go` and `internal/gitlabnet/twofactorrecover/client_test.go` !1009

- Fix `make lint` (golangci-lint) issues for `internal/sshd/connection.go` and `internal/sshd/connection_test.go` !1008

- Fix `make lint` (golangci-lint) issues for `internal/console/console.go` and `internal/console/console_test.go` !1007

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.11.0 !1006

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.10.3 !1005

- Fix golanci shadow warning !1004

- Fix lint issues in requesthandlers.go !1003

- Resolve Use golang-1.21 for GO_VERSION in CI !1001

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.10.2 !997

- Update github.com/charmbracelet/git-lfs-transfer digest to 3263d2f !996

- Update module golang.org/x/crypto to v0.22.0 !995

- Extend shell logs with additional metadata !991

- git-lfs-transfer: Add support for batch upload and get object !989

v14.35.0

- sshd: limit server_host_key_algorithms in server config !986

- Update github.com/charmbracelet/git-lfs-transfer digest to f0b226f !990

- Update module google.golang.org/grpc to v1.63.2 !993

- Update dependency golang to v1.22.2 !992

- Update golangci-lint to 1.57.2 !988

- Remove Gitlab-Shared-Secret reference that is no longer used !985

- git-lfs-transfer: Enable in shell and introduce batch download !942

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.10.0 !983

- Update golangci-lint to 1.57.1 !984

- Update github.com/charmbracelet/git-lfs-transfer digest to 6dbff1b !981

- Update dependency gitlab-dangerfiles to '~> 4.7.0' !982

- chore: Fix lint issues in cmd/gitlab-sshd/acceptance_test.go !979

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.9.2 !980

- Update module google.golang.org/protobuf to v1.33.0 !977

- Update module google.golang.org/grpc to v1.62.1 !976

- Update github.com/charmbracelet/git-lfs-transfer digest to 00bfe2e !974

- Update module github.com/golang-jwt/jwt/v5 to v5.2.1 !973

- Update module golang.org/x/crypto to v0.21.0 !972

- chore: Fixed lint issues in internal/testhelper/testhelper.go !978

- Update dependency golang to v1.22.1 !975

- Update module github.com/stretchr/testify to v1.9.0 !970

- Update github.com/charmbracelet/git-lfs-transfer digest to 3853b28 !968

- Update github.com/charmbracelet/git-lfs-transfer digest to df8ee50 !971

- Update module golang.org/x/crypto to v0.20.0 !966

- Update module github.com/prometheus/client_golang to v1.19.0 !967

- Update module google.golang.org/grpc to v1.62.0 !964

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.9.1 !963

v14.34.0

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.9.0 !960

- Update golangci-lint and gotestsum to latest stable !962

- Also test against go 1.22 !949

- Update dependency golang to v1.22.0 !952

- Update module google.golang.org/grpc to v1.61.1 !961

- Update github.com/charmbracelet/git-lfs-transfer digest to e8645ad !959

- Update github.com/charmbracelet/git-lfs-transfer digest to 8d8e152 !957

- Upgrade to using bookworm instead of bullseye !956

- Update GOLANGCI_LINT_VERSION to 1.56.1 !958

- Update golangci lint to v1.56.0 !954

- Set random correlation ID in uploadarchive test !955

- Update module golang.org/x/crypto to v0.19.0 !953

- Use GracefulStop() instead of Stop() !951

- Update dependency rspec to '~> 3.13.0' !947

- Fix scanner findings error !948

- Log error instead of warning when parsing keys !944

- Fix PureSSHProtocal name typo !945

- Update github.com/charmbracelet/git-lfs-transfer digest to 732ff5e !943

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.9.0-rc3 !941

- Run CI with FIPS_MODE enabled !940

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.8.1 !939

- Update module google.golang.org/grpc to v1.61.0 !937

- New lfs.pure_ssh_protocol setting !936

- Update local Ruby version !938

v14.33.0

- Load gssapi lib per server/connection !934

- Update module google.golang.org/grpc to v1.60.0 !912

- Expose error messages for failed Git operations !906

- Update module google.golang.org/protobuf to v1.32.0 !918

- Ensure build tags are used when testing !921

- Update module golang.org/x/sync to v0.6.0 !922

- Update module golang.org/x/crypto to v0.18.0 !923

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.8.0 !932

v14.32.0

- Geo: Add `done` pktline when git clone --depth option is given !905

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.6.1 !907

- Update module github.com/golang-jwt/jwt/v5 to v5.2.0 !908

- Update module golang.org/x/crypto to v0.16.0 !904

- Replace os.MkdirTemp() usages with t.TempDir() !909

- Update dependency golang to v1.21.5 !911

v14.31.0

- Update dependency gitlab-dangerfiles to '~> 4.6.0' !887

- Update module golang.org/x/crypto to v0.15.0 !884

- Revert workaround to start gitaly service in test !891

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.6.0 !890

- Remove the RPC call for Namespace removal !895

- Update module gitlab.com/gitlab-org/labkit to v1.21.0 !892

- Revert sending SSH certificate as a separate protocol !894

- Bump GO_VERSION to 1.21 !898

- Drop support for go 1.19 !899

- Move global tempDir into StartSocketHttpServer() !902

- New nilaway CI job !897

- Resolve "Remove NilAway detections for 'client' package" !896

- call git_autid_event during git pull/clone if in need !888

v14.30.1

- Update dependency golang to v1.21.4 !881

- Update module github.com/golang-jwt/jwt/v5 to v5.1.0 !882

- Set CI_DEBUG_SERVICES: true to assist debugging !883

- Update module github.com/hashicorp/go-retryablehttp to v0.7.5 !885

v14.30.0

- Disable GSSAPI when CGO is enabled to support DNS resolution !866

- Add log for public key authentication type !870

- Update dependency golang to v1.21.3 !867

- Update dependency gitlab-dangerfiles to '~> 4.3.2' !871

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.5.0 !873

- Update module google.golang.org/grpc to v1.59.0 !872

- Update dependency gitlab-dangerfiles to '~> 4.4.0' !874

- Update dependency gitlab-dangerfiles to '~> 4.5.1' !876

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.5.1 !877

- Update module golang.org/x/sync to v0.5.0 !879

- Fix race conditions in GSSAPI calls !875

v14.29.0

- Update module google.golang.org/grpc to v1.58.2 !850

- Update dependency gitlab-dangerfiles to v4 !852

- Optimize Ruby and Go job caching !805

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.4.0 !853

- Update module github.com/prometheus/client_golang to v1.17.0 !854

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.4.1 !856

- Update dependency gitlab-dangerfiles to '~> 4.1.0' !857

- Always return stdin/stdout errors !847

- Update module golang.org/x/sync to v0.4.0 !860

- Update dependency golang to v1.21.2 !862

- Removes module github.com/grpc-ecosystem/go-grpc-middleware !859

- Update module github.com/otiai10/copy to v1.14.0 !858

- Update module golang.org/x/crypto to v0.14.0 !861

- Allow only git commands for auth via SSH certs !864

- Send ssh_certificates as protocol !863

- Update module google.golang.org/grpc to v1.58.3 !868

v14.28.0

- Add PullCommand to githttp package !836

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.3.3 !849

- Fix `make lint` on aarch64 platforms !848

- Update dependency golang to v1.21.1 !844

- Update module google.golang.org/grpc to v1.58.0 !845

- Add golangci-lint to CI job !839

- Update module golang.org/x/crypto to v0.13.0 !842

v14.27.0

- Workaround to allow gitaly service to start !838

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.3.1 !837

- Resolve "GitLab sshd should include data transfer bytes in logs" !831

- Update dependency golang to v1.21.0 !828

- Log metadata refactor !832

- Support authentication using SSH Certificates !812

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.3.0 !833

- Implement geo_proxy_direct_to_primary feature flag !834

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.2.4 !830

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.2.2 !818

- Add Go v1.21 to CI !829

v14.26.0

- Include error and log as Error when recovering !825

- Fix the established session metric !826

- Require Go 1.19 and drop use of golang-crypto fork !806

- Update dependency gitlab-dangerfiles to '~> 3.13.0' !824

- Create gotestsum in support/bin and ignore !825

v14.25.0

- Ensure context is not nil before processing !820

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.2.1 !814

- Update module google.golang.org/grpc to v1.57.0 !815

- Update module gitlab.com/gitlab-org/labkit to v1.20.0 !817

- Update dependency golang to v1.20.7 !819

v14.24.1

- Return metadata context without using channels !810

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.2.0 !813

- Update dependency gitlab-dangerfiles to '~> 3.12.0' !811

v14.24.0

- Bump golang to 1.20.6 !808

- Ensure all binaries respond to -version !800

- Update module google.golang.org/grpc to v1.56.2 !804

- Update module golang.org/x/crypto to v0.11.0 !803

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.1.2 !802

- Add support for gotestsum !796

- Log 'access: finish' line with additional metadata !783

- Ensure prometheus counter has time to increment !795

- Use both go and ruby cache for test jobs !793

- Split caching of go and ruby jobs !792

- Optimise Ruby and Go based CI jobs !787

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.1.1 !794

- Update module google.golang.org/protobuf to v1.31.0 !789

- Update dependency gitlab-dangerfiles to '~> 3.11.0' !788

- New modules:tidy and modules:download jobs !784

- Update module google.golang.org/grpc to v1.56.1 !786

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.1.0 !785

- Tidy up go.mod and go.sum !781

- Create a 'msg: "access"' log entry at the completion of work, including a `duration_s` field !782

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.0.5 !779

- Update module github.com/otiai10/copy to v1.12.0 !780

- Ensure test cache is not used for 'go test' !778

- Update module google.golang.org/grpc to v1.56.0 !777

- Update module github.com/prometheus/client_golang to v1.16.0 !776

- Update module gitlab.com/gitlab-org/labkit to v1.19.0 !771

- Update module golang.org/x/sync to v0.3.0 !775

- Update module golang.org/x/crypto to v0.10.0 !774

- Update Ruby dependencies !773

- Update module gitlab.com/gitlab-org/gitaly/v16 to v16.0.4 !772

- Update dependency golang to v1.20.5 !768

- Use gitlab-shell maintainers group instead for CODEOWNERS !770

- Update module github.com/golang-jwt/jwt/v4 to v5 !759

- Update module github.com/hashicorp/go-retryablehttp to v0.7.4 !767

v14.23.0

- Update module github.com/golang-jwt/jwt/v4 to v5 !759

- Update module gopkg.in/yaml.v2 to v3 !763

- Update module gitlab.com/gitlab-org/gitaly/v15 to v16 !762

- Update logrus to v1.9.3 !760

- Update module golang.org/x/sync to v0.2.0 !757

- Update module github.com/pires/go-proxyproto to v0.7.0 !752

- Update module google.golang.org/grpc to v1.55.0 !758

- Update module github.com/prometheus/client_golang to v1.15.1 !756

- Update module github.com/otiai10/copy to v1.11.0 !751

- Make golang 1.20 the default for gitlab-shell development and CI !750

- Update module golang.org/x/crypto to v0.9.0 !742

- Update dependency golang to v1.20.4 !748

- Update module github.com/hashicorp/go-retryablehttp to v0.7.2 !745

v14.22.0

- Update dependency ruby to v3.2.2 !743

v14.21.0

- Use a separate HTTP Client for Geo requests !739

v14.20.0

- Configure a default ttl for personal access tokens !736

v14.19.0

- Bump go to 1.19.9 !730

- Update golang-crypto fork version !729

- Add build-package-and-qa job !728

- refactor: success api on acceptance tests !727

- Make the boringcrypto check POSIX shell compliant !725

- Fix CGO_CFLAGS to use output from `brew --prefix` !724

- Acceptance test for Geo Push !719

- Configure Gitaly storage acceptance tests !723

- Prepare for Go 1.19 FIPS support !721

- Make golang 1.19 the default !718

v14.18.0

- Perform HTTP request to primary on Geo push !716

- sshd: exclude gssapi when building without cgo !720

- Add DNS discovery support for Gitaly/Praefect !717

- Add bin/gitlab-sshd as an explicit Makefile target !714

v14.17.0

- Bump golang to 1.18.9 !712

v14.16.0

- feat: make retryable http default client !710

- Add support for the gssapi-with-mic auth method !682

- docs: Truncate pages, point users to GitLab repo !705

v14.15.0

- Incorporate older edits to README !696

- Upgrade to Ruby 3.x !706

- feat: retry on http error !703

v14.14.0

- Add developer documentation to sshd package !683

- Improve error message for Gitaly `LimitError`s !691

- Drop 1.16 compatibility in go.sum !692

- Bump x/text to 0.3.8 !692

- Update prometheus package to 1.13.1 !692

- Restrict IP access for PROXY protocol !693

- Fix broken Gitaly integration tests !694

- Clean up .gitlab-ci.yml file !695

- Use the images provided by Gitlab to run tests !698

- Use Ruby 2.7.7 as the default !699

- Use blocking reader to fix race in test !700

v14.13.0

- Update .tool-versions to Go 1.18.7 !688

- Remove secret from request headers !689

v14.12.0

- Trim secret before signing JWT tokens !686

- Bump .tool-versions to use Go 1.18.6 !685

- Update Gitaly to 15.4.0-rc2 !681

- Test against Golang v1.19 !680

v14.11.0

- Update Gitaly to v15 !676

- Fixed extra slashes in API request paths generated for geo !673

v14.10.0

- Implement Push Auth support for 2FA verification !454

v14.9.0

- Update LabKit library to v1.16.0 !668

v14.8.0

- go: Bump major version to v14 !666

- Pass original IP from PROXY requests to internal API calls !665

- Fix make install copying the wrong binaries !664

- gitlab-sshd: Add support for configuring host certificates !661

v14.7.4

- gitlab-sshd: Update crypto module to fix RSA keys with old gpg-agent !662

v14.7.3

- Ignore "not our ref" errors from gitlab-sshd error metrics !656

v14.7.2

- Exclude disallowed command from error rate !654

v14.7.1

- Log gitlab-sshd session level indicator errors !650

- Improve establish session duration metrics !651

v14.7.0

- Abort long-running unauthenticated SSH connections !647

- Close the connection when context is canceled !646

v14.6.1

- Return support for diffie-hellman-group14-sha1 !644

v14.6.0

- Exclude Gitaly unavailable error from error rate !641

- Downgrade auth EOF messages from warning to debug !641

- Display constistently in gitlab-sshd and gitlab-shell !641

- Downgrade host key mismatch messages from warning to debug !639

- Introduce a GitLab-SSHD server version during handshake !640

- Narrow supported kex algorithms !638

v14.5.0

- Make ProxyHeaderTimeout configurable !635

v14.4.0

- Allow configuring SSH server algorithms !633

- Update gitlab-org/golang-crypto module version !632

v14.3.1

- Exclude API errors from error rate !630

v14.3.0

- Remove deprecated bundler-audit !626

- Wait until all Gitaly sessions are executed !624

v14.2.0

- Implement ClientKeepAlive option !622

- build: bump go-proxyproto to 0.6.2 !610

v14.1.1

- Log the error that happens on sconn.Wait() !613

v14.1.0

- Make PROXY policy configurable !619

- Exclude authentication errors from apdex !611

- Fix check_ip argument when gitlab-sshd used with PROXY protocol !616

- Use labkit for FIPS check !607

v14.0.0

- Always use Gitaly sidechannel connections !567

v13.26.0

- Add JWT token to GitLab Rails request !596

- Drop go 1.16 support !601

- Remove `self_signed_cert` option !602

v13.25.2

- Revert "Abort long-running unauthenticated SSH connections" !605

- Bump Go to 1.17.9 for asdf users !600

v13.25.1

- Upgrade golang to 1.17.8 !591

- Add additional metrics to gitlab-sshd !593

- Add support for FIPS encryption !597

v13.25.0

- Fix connections duration metrics !588

- ci: start integrating go 1.18 into the CI pipelines !587

- Abort long-running unauthenticated SSH connections !582

v13.24.2

- Bump gitaly client !584

v13.24.1

- Default to info level for an empty log-level !579

- Update Gitaly dependency to v14.9.0-rc1 !578

- Reuse Gitaly connections and sidechannel !575

v13.24.0

- Upgrade golang to 1.17.7 !576

- Add more metrics for gitlab-sshd !574

- Move code guidelines to doc/beginners_guide.md !572

- Add docs for full feature list !571

- Add aqualls as codeowner for docs files !573

v13.23.2

- Bump labkit version to 1.12.0 !569

- Add title and correct copyright notice to license !568

- Bump go-proxyproto package !563

- Update Go to version 1.17.6 !562

v13.23.1

- Replace golang.org/x/crypto with gitlab-org/golang-crypto !560

v13.23.0

- Add support for SSHUploadPackWithSidechannel RPC !557

- Rate limiting documentation !556

v13.22.2

- Update to Ruby 2.7.5 !553

- Deprecate self_signed_cert config setting !552

- Send full git request/response in SSHD tests !550

- Suppress internal errors in client output !549

- Bump .tool_versions to use Go v1.16.12 !548

v13.22.1

- Remove SSL_CERT_DIR logging !546

v13.22.0

- Relax key and username matching for sshd !540

- Add logging to handler/exec.go and config/config.go !539

- Improve logging for non-git commands !538

- Update to Go v1.16.9 !537

- Reject non-proxied connections when proxy protocol is enabled !536

- Log command invocation !535

- Fix logging channel type !534

- Resolve an error-swallowing issue !533

- Add more logging to gitlab-sshd !531

- Respect log-level configuration again !530

- Improve err message given when Gitaly unavailable !526

- makefile: properly escape '$' in VERSION_STRING !525

- Add context fields to logging !524

- Extract server config related code out of sshd.go !523

- Add TestInvalidClientConfig and TestNewServerWithoutHosts for sshd.go !518

- Update Ruby version to 2.7.4 and add Go version 1.16.8 for tooling !517

v13.21.1

- Only validate SSL cert file exists if a value is supplied !527

v13.21.0

- Switch to labkit for logging system setup !504

- Remove some unreliable tests !503

- Make gofmt check fail if there are any matching files !500

- Update go-proxyproto to v0.6.0 !499

- Switch to labkit/log for logging functionality !498

- Unit tests for internal/sshd/connection.go !497

- Prometheus metrics for HTTP requests !496

- Refactor testhelper.PrepareTestRootDir using t.Cleanup !493

- Change default logging format to JSON !476

- Shutdown sshd gracefully !484

- Provide liveness and readiness probes !494

- Add tracing instrumentation to http client !495

- Log same correlation_id on auth keys check of ssh connections !501

- fix: validate client cert paths exist on disk before proceeding !508

- Modify regex to prevent partial matches

v13.20.0

- Remove bin/authorized_keys !491

- Add a make install command !490

- Create PROCESS.md page with Security release process !488

- Fix the Geo SSH push proxy hanging !487

- Standardize logging timestamp format !485

v13.19.1

- Modify regex to prevent partial matches

v13.19.0

- Don't finish the opentracing span early !466

- gitlab-sshd: Respect the ssl_cert_dir config !467

- Stop changing directory to the filesystem root !470

- Fix opentracing setup for gitlab-sshd !473

v13.18.1

- Modify regex to prevent partial matches

v13.18.0

- Fix thread-safety issues in gitlab-shell !463

- gitlab-sshd: Support the PROXY protocol !461

- sshd: Recover from per-session and per-connection panics !464

v13.17.0

- Fix gitlab-shell panic when log file not writable !453

- Add monitoring endpoint to built-in SSH server !449

v13.16.1

- Read limited input when asking to generate new two-factor recovery codes

v13.16.0

- RFC: Simple built-in SSH server !394

- Remove the session duration information from the output of 2fa_verify command !445

v13.15.1

- Read limited input when asking to generate new two-factor recovery codes

v13.15.0

- Update httpclient.go with TLS 1.2 as minimum version !435

v13.14.1

- Read limited input when asking to generate new two-factor recovery codes

v13.14.0

- Add 2fa_verify command !440

- Propagate client identity to gitaly !436

v13.13.1

- Read limited input when asking to generate new two-factor recovery codes

v13.13.0

- GitLab API Client support for client certificates !432

v13.12.0

- Upgrade Bundler from 1.17.2 to 2.1.4 !428

- Log Content-Length bytes in API response !427

- Bump default Ruby version to v2.7.2 !426

v13.11.0

- Set SSL_CERT_DIR env var when building command !423

- Fix incorrect actor used to check permissions for SSH receive-pack !424

v13.10.0

- Add support for -version argument !421

v13.9.0

- Drop "generated random correlation ID" log message !417

- client: Allow User-Agent header to be overridden !418

v13.8.0

- Update Gitaly module dependency !414

- Make it possible to propagate correlation ID across processes !413

- Remove deprecated hooks dir !411

v13.7.0

- Fix gitlab-shell not handling relative URLs over UNIX sockets !406

v13.6.0

- Add support obtaining personal access tokens via SSH !397

v13.5.0

- Generate and log correlation IDs !400

v13.4.0

- Support ssl_cert_dir config setting !393

- Log SSH key details !398

- Log remote IP for executed commands !399

- Drop Go v1.12 support !401

v13.3.0

- Upgrade Ruby version to v2.6.6 !390

- Use default puma socket in example config !388

- Set client name when making requests to Gitaly !387

- Fix race conditions with logrus testing !385

v13.2.0

- Add HTTP status code to internal API logs !376

v13.1.0

- Ensure we are pasing the parsed secret !381

v13.0.0

- Move gitlabnet client into a publicly facing client package !377

v12.2.0

- Geo: Add custom action support for clone/pull !369

v12.1.0

- Log internal HTTP requests !366

- Log git-{upload-pack,receive-pack,upload-archive} requests !367

v12.0.0

- openssh: Accept GIT_PROTOCOL environment variable !364

v11.0.0

- Bump Ruby version to 2.6.5 !357

- Remove support for Custom data.info_message !356

v10.3.0

- Use correct git-lfs download or upload operation names !353

- Add support for Gitaly feature flags !351

- Make console messages consistent !334

v10.2.0

- Remove dead Ruby code and unused binaries !346

v10.1.0

- Remove feature flags and the fallback command !336

- Remove an obsolete section from config.yml.example !339

- Extend group IP restriction to Git activity !335

- Remove deprecated create-hooks script !342

- Rewrite `bin/check` in Go !341

v10.0.0

- Remove gitlab-keys script !329

v9.4.2

- Repurpose bin/authorized_keys script !330

v9.4.1

- Fix bug preventing gitlab-development-kit from updating !327

v9.4.0

- Enable all migration features by default !313

- Set Go111MODULE to 'off' during compilation !315

- Add Makefile for easier building and testing !310

- Resolve "Update .PHONY to have accurate list of targets" !316

- Update rubygems version on CI for go tests !320

- Support falling back to ruby version of checkers !318

- Implement AuthorizedKeys command !321

- Implement AuthorizedPrincipals command !322

- Replace symlinks with actual binaries !324

- Use go mod !323

v9.3.0

- Go implementation for git-receive-pack !300

- Go implementation for git-upload-pack !305

- Return Fallback cmd if feature is enabled, but unimplemented !306

- Go implementation for git-upload-archive !307

- Go implementation for LFS authenticate !308

- Respect GITLAB_SHELL_DIR in the Go version !309

v9.2.0

- Upgrade to Ruby 2.6.3 !298

v9.1.0

- Correctly determine the root directory for gitlab-shell !294

- Support calling internal api using HTTP !295

- Print keys in list-keys command !198

- Support calling internal API using HTTPS !297

v9.0.0

- Add a Go implementation of the "discover" command !283

- Add a Go implementation of the 2fa_recovery_codes" command !285

- Display console messages, if available !287

- Allow the post-receive hook to print warnings !288

- Remove hooks, they belong to Gitaly now !291

v8.7.1

- Fix unmarshalling JSON from the command line !280

v8.7.0

- Add distributed tracing to GitLab-Shell !277