Relay Proxy

[7.2.5] - 2023-05-12

Changed:

• Updated Alpine docker image to 3.18.0.

[7.2.4] - 2023-05-05

Fixed:

• Upgrade go from 1.20.2 -> 1.20.4 to address CVE-2023-24538.

This is an alpha release of Relay Proxy supporting Payload Filtering functionality.

[7.2.3] - 2023-04-13

Changed:

• Updated Alpine docker image to 3.17.3.
• Bumped docker dependency from 20.10.21+incompatible to 20.10.24+incompatible.

Fixed:

• Removed redundant autoconfig stream restart upon receiving reconnect event.

[6.8.2] - 2023-04-13

Changed:

• Updated Alpine docker image to 3.17.3.

[7.2.2] - 2023-04-04

Changed:

• CI tests now execute for Go 1.20.2 and Go 1.19.7.
• Upgraded 3rd party dependencies.

Fixed:

• Fixed a broken link in configuration.md.

[6.8.1] - 2023-04-04

Changed:

• Upgraded 3rd party dependencies.

[6.8.0] - 2023-03-17

Changed:

• Updated goreleaser to v1.16.1: release artifact names now follow goreleaser's standard ConventionalFileName template. Additionally, the deb and rpm packages now install ld-relay to /usr/bin instead of /usr/local/bin.
• Updated Alpine image to use Go 1.20.2.
• Updated CI tests to use Go 1.20.2 and Go 1.19.7.

[7.2.1] - 2023-03-07

Changed:

• Updated Alpine image to use Go 1.20.1.
• CI tests now execute for Go 1.20.1 and Go 1.19.6; removed Go 1.18.

[6.7.18] - 2023-03-06

Changed:

• Updated Alpine image to use Go 1.20.1.
• CI tests now execute for Go 1.20.1 and Go 1.19.6; removed Go 1.17 and 1.18.

Fixed:

• Bumped golang.org/x/net to 0.7.0 to address CVE-2022-41723.

[7.2.0] - 2023-02-21

Changed:

• Updated goreleaser to v1.15.2: release artifact names now follow goreleaser's standard ConventionalFileName template. Additionally, the deb and rpm packages now install ld-relay to /usr/bin instead of /usr/local/bin.

Fixed:

• Updated golang.org/x/net to v0.7.0 to address CVE-2022-41723.
• Fixed typo in docs/metrics.md.

[7.1.0] - 2023-02-10

Added:

• Added ability to specify Redis username via config file or environment variable.

[7.0.3] - 2023-02-06

Fixed:

• Fixed Go module path to match the major version number, which was preventing installation using Go tooling. (Thanks, @macro1).

[7.0.2] - 2023-01-19

Fixed:

• Removed logging of "Big Segment store status query" error messages in a situation where the Relay Proxy has not been able to synchronize Big Segment data with LaunchDarkly. These messages were redundant since there is already a different and clearer error being logged for the synchronization failure.

[6.7.17] - 2023-01-17

Fixed:

• Removed logging of "Big Segment store status query" error messages in a situation where the Relay Proxy has not been able to synchronize Big Segment data with LaunchDarkly. These messages were redundant since there is already a different and clearer error being logged for the synchronization failure.

[6.7.16] - 2023-01-06

The 6.7.15 release was incomplete and has been skipped.

Changed:

• It is no longer possible to build the Relay Proxy from source code in Go 1.16, or to import it as a module in a Go 1.16 project. This is because the security patch described below is not possible for Go 1.16. Although LaunchDarkly tries to maintain compatibility with old platform versions within the same major version of a LaunchDarkly product, maintaining support for Relay Proxy 6.x requires that we patch security vulnerabilities for the most common use cases; building Relay from source code with an EOL Go version is an uncommon use case.
• Updated Alpine to 3.16.3 in the published Docker image.

Fixed:

• Updated Go networking code to address CVE-2022-41717. (#210)

[7.0.1] - 2022-12-29

Changed:

• Updated Alpine to 3.16.3 in the published Docker image.

Fixed:

• Updated Go to 1.19.4 in the published Docker image and executables, to address CVE-2022-41717. (#210)

[7.0.0] - 2022-12-07

The latest version of the Relay Proxy supports LaunchDarkly's new custom contexts feature. Contexts are an evolution of a previously-existing concept, "users." Contexts let you create targeting rules for feature flags based on a variety of different information, including attributes pertaining to users, organizations, devices, and more. You can even combine contexts to create "multi-contexts."

This feature is only available to members of LaunchDarkly's Early Access Program (EAP). If you're in the EAP, and the SDK you are using also has an EAP release, you can use contexts by updating your SDK to the latest version and, updating your Relay Proxy. Outdated SDK versions do not support contexts, and will cause unpredictable flag evaluation behavior.

If you are not in the EAP, only use single contexts of kind "user", or continue to use the user type if available. If you try to create contexts, the context will be sent to LaunchDarkly, but any data not related to the user object will be ignored.

For detailed information about this version, please refer to the list below.

Added:

• Added support for new context-based features in flag evaluations.
• Added evaluation endpoints that are used by new versions of client-side SDKs.

Changed:

• When building the Relay Proxy from source code or using its packages from application code, the minimum Go version is now 1.18.
• The pre-built binaries and Docker image are now built with Go 1.19.

Removed:

• Removed support for obsolete evaluation endpoints that were used by very old client-side SDKs.

[6.7.14] - 2022-10-26

This is a security patch release.

Fixed:

• Updated Go runtime version in the Docker image to 1.19.2, to address multiple vulnerability reports in Go 1.17.x and 1.18.x. (#205)
• Updated Consul API module version as a workaround for a false-positive report of CVE-2022-40716. (#205)
• Removed a transitive dependency on AWS SDK v1, which was causing vulnerability reports for CVE-2020-8911 and CVE-2020-8912; in practice, this functionality was never being used by the Relay Proxy. (#204)
• Enforce a minimum TLS version of 1.2 when connecting to a secure Redis instance.
• In offline mode, added a check to prevent a maliciously crafted archive file from causing file data to be written outside of the directory where the archive is being expanded.
• Minor code changes to avoid using the deprecated ioutil package.
• CI tests now include Go 1.18 and 1.19.

[6.7.13] - 2022-08-12

Fixed:

• Updated Alpine version in Docker image to 3.16.2 to address a vulnerability warning. (#201)