v2.8.0

Major Scope

The release contains many fixes and minor changes and the first step of a complete rework of the CI 🏗️

For more info, read the docs 📝

Changelog

Feat

• Auto unchanged approval #869

Fix

• Cosign output adjusted to new error #899
• Repair script for getting root key #890
• Add timeout to top-level mutate call #873
• Adjust formatting to use {} instead of dict #877
• Black formatting #879
• Ignore secret scanning config rules for trivy config scanner #879

Refactor

• Switched to cached_property #869

Build

• Add virtualenv folder to .dockerignore #873

Ci

• Fix docs deployment #904
• Fix ossf scorecard branch pipeline #904
• Fix trivy permissions #901
• Use ghcr, signatures, sboms, slsa, reusable workflows, ossf scorecard and checkov #622
• Use trivy github action for vuln scan #879
• Fix codeql permissions #867
• Ignore cve-2022-41723 #891

Test

• Test workload readiness #868
• Fix typo #868
• Actually fail if edge case test fails #868
• Remove fixed vulns #862
• Ignore cve-2022-41721 #862
• Fixing expired tests #862

Docs

• Add automatic update approval to nav #903
• Remove freezelist workaround from test guide #873
• Fix config docstrings #873

Update

• Update mkdocs-material requirement from ~=9.0.13 to ~=9.0.14 (#898) #898
• Bump prometheus-flask-exporter from 0.21.0 to 0.22.2 (#897) #897
• Update setuptools requirement from ~=67.3.2 to ~=67.4.0 (#896) #896
• Update mkdocs-material requirement from ~=9.0.12 to ~=9.0.13 (#893) #893
• Update flask requirement from ~=2.2.2 to ~=2.2.3 (#889) #889
• Update setuptools requirement from ~=67.3.1 to ~=67.3.2 (#888) #888
• Update setuptools requirement from ~=67.2.0 to ~=67.3.1 (#886) #886
• Update pylint requirement from ~=2.16.1 to ~=2.16.2 (#885) #885
• Update aiohttp requirement from ~=3.8.3 to ~=3.8.4 (#884) #884
• Update pylint requirement from ~=2.15.10 to ~=2.16.1 #877
• Update setuptools requirement from ~=67.0.0 to ~=67.2.0 (#881) #881
• Update mkdocs-material requirement from ~=9.0.8 to ~=9.0.12 (#882) #882
• Update pytest-subprocess requirement from ~=1.4.2 to ~=1.5.0 #871
• Update mkdocs-material requirement from ~=9.0.6 to ~=9.0.8 #870
• Update setuptools requirement from ~=66.1.1 to ~=67.0.0 #872
• Update setuptools requirement from ~=66.0.0 to ~=66.1.1 #866
• Update mkdocs-material requirement from ~=9.0.5 to ~=9.0.6 (#865) #865
• Update requests requirement from ~=2.28.1 to ~=2.28.2 (#863) #863
• Update mkdocs-material requirement from ~=8.5.8 to ~=9.0.5 (#860) #860
• Update aioresponses requirement from ~=0.7.3 to ~=0.7.4 (#850) #850
• Bump prometheus-flask-exporter from 0.20.3 to 0.21.0 (#849) #849
• Update setuptools requirement from ~=65.6.3 to ~=66.0.0 (#859) #859
• Update pylint requirement from ~=2.15.9 to ~=2.15.10 (#856) #856
• Update cheroot requirement from ~=8.6.0 to ~=9.0.0 (#851) #851

What's Changed

• update: update cheroot requirement from ~=8.6.0 to ~=9.0.0 by @dependabot in #851
• update: update pylint requirement from ~=2.15.9 to ~=2.15.10 by @dependabot in #856
• tests: fixing expired tests by @xopham in #862
• update: update setuptools requirement from ~=65.6.3 to ~=66.0.0 by @dependabot in #859
• update: bump prometheus-flask-exporter from 0.20.3 to 0.21.0 by @dependabot in #849
• update: update aioresponses requirement from ~=0.7.3 to ~=0.7.4 by @dependabot in #850
• update: update mkdocs-material requirement from ~=8.5.8 to ~=9.0.5 by @dependabot in #860
• update: update requests requirement from ~=2.28.1 to ~=2.28.2 by @dependabot in #863
• update: update mkdocs-material requirement from ~=9.0.5 to ~=9.0.6 by @dependabot in #865
• update: update setuptools requirement from ~=66.0.0 to ~=66.1.1 by @dependabot in #866
• ci: Fix CodeQL permissions by @Starkteetje in #867
• test: Test workload readiness by @Starkteetje in #868
• feat: auto update approval by @phbelitz in #869
• update: update setuptools requirement from ~=66.1.1 to ~=67.0.0 by @dependabot in #872
• update: update mkdocs-material requirement from ~=9.0.6 to ~=9.0.8 by @dependabot in #870
• update: update pytest-subprocess requirement from ~=1.4.2 to ~=1.5.0 by @dependabot in #871
• fix: ignore secret scanning config rules for trivy config scanner by @xopham in #879
• update: update mkdocs-material requirement from ~=9.0.8 to ~=9.0.12 by @dependabot in #882
• update: update setuptools requirement from ~=67.0.0 to ~=67.2.0 by @dependabot in #881
• update: update pylint requirement from ~=2.15.10 to ~=2.16.1 by @dependabot in #877
• Fix mutate timeout by @Starkteetje in #873
• update: update aiohttp requirement from ~=3.8.3 to ~=3.8.4 by @dependabot in #884
• update: update pylint requirement from ~=2.16.1 to ~=2.16.2 by @dependabot in #885
• update: update setuptools requirement from ~=67.2.0 to ~=67.3.1 by @dependabot in #886
• update: update setuptools requirement from ~=67.3.1 to ~=67.3.2 by @dependabot in #888
• update: update flask requirement from ~=2.2.2 to ~=2.2.3 by @dependabot in #889
• Fix: Repair script for getting root key by @Starkteetje in #890
• Ignore CVE-2022-41723 by @Starkteetje in #891
• update: update mkdocs-material requirement from ~=9.0.12 to ~=9.0.13 by @dependabot in #893
• update: update setuptools requirement from ~=67.3.2 to ~=67.4.0 by @dependabot in #896
• update: bump prometheus-flask-exporter from 0.21.0 to 0.22.2 by @dependabot in #897
• fix: cosign output adjusted to new error by @xopham in #899
• update: update mkdocs-material requirement from ~=9.0.13 to ~=9.0.14 by @dependabot in #898
• ci: use ghcr, signatures, sboms, slsa, reusable workflows, ossf by @xopham in #622
• ci: fix trivy permissions by @xopham in #901
• ci: fix ossf scorecard branch pipeline by @xopham in #902
• Ci/fix docs deployment by @xopham in #904
• Docs/add to nav by @phbelitz in #903
• Release v2.8.0 by @xopham in #900
• ci: fix release by @xopham in #906
• ci: fix release by @xopham in #908

Full Changelog: v2.7.0...v2.8.0