v9.0.0

Release run: #29

What's Changed

• key-rotation: monitor non-active-key use by @rtyley in #182

Full Changelog: v8.0.1...v9.0.0

v8.0.1

Release run: #28

What's Changed

• Support Scala 3, drop Scala 2.12 & Play 2.8 by @rtyley in #165

Full Changelog: v8.0.0...v8.0.1

v8.0.0

Release run: #27

This release removes the 'high' vulnerability on software.amazon.ion:ion-java (CVE-2024-21634), as the later version of the AWS SDK library no longer uses ion-java:

What's Changed

• Update CI GitHub Actions (actions/checkout, actions/setup-node, actions/setup-java) by @rtyley in #157
• chore(deps): Non-AWS dependency updates by @gu-scala-steward-public-repos in #159
• chore(deps): AWS dependency updates by @gu-scala-steward-public-repos in #158
• Submit sbt dependencies to GitHub for vulnerability monitoring by @gu-dependency-graph-integrator in #162
• node: add changesets workflow by @andrew-nowak in #168
• changesets: set workflow default working-directory by @andrew-nowak in #169
• Update node-release.yml by @andrew-nowak in #170
• Set working directory everywhere by @andrew-nowak in #171
• node: Correct the time comparison used for cookie expiry by @andrew-nowak in #167
• changesets action won't run on node 12, so upgrade to 20 by @andrew-nowak in #172
• Set up the gu-changesets-release bot by @andrew-nowak in #174
• 🦋 Release package updates by @gu-changesets-release-pr in #175
• configure changesets to publish package as public by @andrew-nowak in #176
• Transplant pan-domain-node to its own repo by @rtyley in #178
• pass the user data with multifactor checked to invalidUserMessage by @andrew-nowak in #179
• Sort some typos in the readme by @rhystmills in #180
• chore(deps): Guardian library updates by @gu-scala-steward-public-repos in #166

New Contributors

• @gu-scala-steward-public-repos made their first contribution in #159
• @gu-dependency-graph-integrator made their first contribution in #162
• @gu-changesets-release-pr made their first contribution in #175
• @rhystmills made their first contribution in #180

Full Changelog: v7.0.0...v8.0.0

v0.5.0

Minor Changes

• 01ddac5: Fix bug preventing cookie expiry from being correctly validated

v7.0.0

Release run: #20

Updating to Panda v7

See #160 for a full guide on upgrading a project from Panda v4 to v7.

Updated requirements

• Java 11 (see also guardian/maintaining-scala-projects#3)

What's Changed

• Support accepting multiple public keys by @rtyley in #150 (re-merged as #156)

Full Changelog: v6.0.0...v7.0.0

v6.0.0

Release run: #19

What's Changed

• Refactor Settings loading-&-parsing by @rtyley in #151
• Refactor Cookie generation-&-parsing by @rtyley in #152
• Fix creation of superfluous PanDomainAuthSettingsRefresher instances, make panDomainSettings a val by @rtyley in #155

Full Changelog: v5.0.0...v6.0.0

v5.0.0

Release run: #6

Although this release is a major-version-bump (from 4.0.0 to 5.0.0) this new version has no new functionality, just a few refactors and some dependency changes. The gha-scala-library-release-workflow detected potential binary-incompatible changes, and so allocated a major-version-bump.

A project upgrading to Panda v5 from v4 will need to make at most minimal changes due to #147, eg:

• guardian/atom-workshop#360 - no code changes
• guardian/s3-upload#59 - changes to imports for PublicKey
• guardian/#.gutools#82 - settings.privateKey becomes settings.signingKeyPair.getPrivate

What's Changed

• Update docs to link to Emergency Panda key-rotation Guide by @rtyley in #146
• Remove manual override for google-oauth-client by @bryophyta in #148
• Use java.security classes in preference to string-wrappers by @rtyley in #147

New Contributors

• @bryophyta made their first contribution in #148

Full Changelog: v4.0.0...v5.0.0

v4.0.0

Release run: #5

What's Changed

• Avoid recommending preview releases in README.md by @rtyley in #138
• Add Java version - see guardian/gha-scala-library-release-workflow#36 by @rtyley in #139
• Remove unused com.gu.pandomainauth.Secret class by @rtyley in #144
• Use token auth for Sonatype by @rtyley in #145

New Contributors

• @rtyley made their first contribution in #138

Full Changelog: v3.1.0...v4.0.0

v3.1.0

Release run: #4

What's Changed

• expose an authenticateRequest function by @twrichards in #137

New Contributors

• @twrichards made their first contribution in #137

Full Changelog: v3.0.3...v3.1.0

v3.0.3

Release run: #3

What's Changed

• Automated releases using gha-scala-library-release-workflow by @andrew-nowak in #135
• update to latest scalas (2.12 and 2.13) to avoid binary incompatibility on 2.13.9 by @andrew-nowak in #136

Full Changelog: v3.0.2...v3.0.3