Repository navigation

Release: sync v2.1.x to main (pre-archive — main shows latest) - #109

Merged

PenguinzTech merged 244 commits into

mainfrom

v2.1.x

Oct 10, 2026

Merged

Release: sync v2.1.x to main (pre-archive — main shows latest)#109
PenguinzTech merged 244 commits into
mainfrom
v2.1.x

Commits on Dec 11, 2025
- Add per-package version files and reorganize release notes
  
  PenguinzTech
  and
  claude
  committed
  70f9824
- feat: implement .WORKFLOW compliance for squawk
  
  PenguinzTech
  and
  claude
  committed
  9056677
Commits on Jan 5, 2026
- feat: implement DHCP and Time (NTP/PTP) services across all components
  
  PenguinzTech
  and
  claude
  committed
  c2484f2
Commits on Jan 6, 2026
- periodic save
  PenguinzTech
  committed
  e1697cf
Commits on Jan 7, 2026
- periodic save
  PenguinzTech
  committed
  65becbf
Commits on Jan 8, 2026
- periodic save
  PenguinzTech
  committed
  b65f71a
Commits on Jan 12, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  09d7459
Commits on Jan 14, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  740ffbf
- Updating documentation to new base standard
  PenguinzTech
  committed
  64f0790
- Updating documentation to new base standard
  PenguinzTech
  committed
  41f838e
- Updating documentation to new base standard
  PenguinzTech
  committed
  48e0bfd
Commits on Jan 15, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  e978f0b
Commits on Jan 22, 2026
- Updating documentation to new base standard
  Penguin Developer
  committed
  ff43017
- Updating documentation to new base standard
  Penguin Developer
  committed
  5482214
- Updating documentation to new base standard
  Penguin Developer
  committed
  6db0e0f
Commits on Jan 28, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  915f716
Commits on Jan 30, 2026
- Convert Flask web console to API-only backend with React WebUI
  
  PenguinzTech
  and
  claude
  committed
  7bb170f
- Update Next.js to 15.5.10 to fix high severity vulnerabilities
  
  PenguinzTech
  and
  claude
  committed
  7362575
- Updating documentation to new base standard
  PenguinzTech
  committed
  1510d80
- Fix .dockerignore excluding docs needed by root Dockerfile
  
  PenguinzTech
  and
  claude
  committed
  e17d82b
Commits on Feb 2, 2026
- Fix critical security vulnerabilities and add comprehensive test suite
  
  PenguinzTech
  and
  claude
  committed
  14cc6eb
- Fix zod dependency version (4.3.6 -> 3.24.1)
  
  PenguinzTech
  and
  claude
  committed
  1e46e89
- Fix dns-webui build by installing react_libs dependencies
  
  PenguinzTech
  and
  claude
  committed
  544aed6
- Fix beta K8s deployment to use Cloudflare wildcard certificate
  
  PenguinzTech
  and
  claude
  committed
  a345d96
Commits on Feb 3, 2026
- Fix K8s deployment health checks and add required volume mounts
  
  PenguinzTech
  and
  claude
  committed
  4b944f4
- Update to use penguin-libs from GitHub instead of local copy
  
  PenguinzTech
  and
  claude
  committed
  ea685f3
Commits on Feb 4, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  cd4a885
Commits on Feb 12, 2026
- Remove vendored shared/ libraries in favor of centralized penguin-libs
  
  PenguinzTech
  and
  claude
  committed
  ef64a2c
Commits on Feb 13, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  ffff0f6
- Updating documentation to new base standard
  PenguinzTech
  committed
  99c9741
- Add standardized k8s deployment configuration
  
  PenguinzTech
  and
  claude
  committed
  2b7c9e6
- Remove extra k8s documentation files
  
  PenguinzTech
  and
  claude
  committed
  95883cf
- Updating documentation to new base standard
  PenguinzTech
  committed
  be79a74
Commits on Feb 17, 2026
- fix(k8s): standardize deploy-beta.sh TLD to .penguintech.cloud
  
  PenguinzTech
  and
  claude
  committed
  3ebf929
Commits on Feb 18, 2026
- Remove website folder - moved to centralized website repo
  
  PenguinzTech
  and
  claude
  committed
  56b4472
Commits on Feb 19, 2026
- Remove app.md template (replaced by {subject}.local.md convention)
  
  PenguinzTech
  and
  claude
  committed
  c127eda
- Updating documentation to new base standard
  PenguinzTech
  committed
  3b1cb36
- Updating documentation to new base standard
  PenguinzTech
  committed
  31ad77d
Commits on Feb 26, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  1f83992
- Updating documentation to new base standard
  PenguinzTech
  committed
  7f0313f
Commits on Mar 2, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  c39e4aa
- Add standardized GitHub issue templates
  
  PenguinzTech
  and
  claude
  committed
  8652efc
Commits on Mar 4, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  f953d17
Commits on Mar 9, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  25205fd
Commits on Mar 11, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  741e524
- Updating documentation to new base standard
  PenguinzTech
  committed
  181a467
Commits on Mar 13, 2026
- feat: coverage 98%, Codecov v4, README badges, penguin-libs migration
  
  PenguinzTech
  and
  claude
  committed
  440bffe
- chore: exclude worktree directory from git tracking
  
  PenguinzTech
  and
  claude
  committed
  ac65aa4
Commits on Mar 24, 2026
- security: pin trivy-action to v0.35.0 (supply chain fix)
  
  PenguinzTech
  and
  claude
  committed
  bbd622e
Commits on Mar 25, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  a1895d7
- chore: pin all dependencies to immutable SHA references
  
  PenguinzTech
  and
  claude
  committed
  c65d8db
- chore: pin gosec to immutable SHA reference
  
  PenguinzTech
  and
  claude
  committed
  7af5adf
Commits on Mar 26, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  f7d7b41
- Updating documentation to new base standard
  PenguinzTech
  committed
  1a988cb
Commits on Mar 28, 2026
Commits on Apr 1, 2026
- ci: update Go version to 1.24.2 to match go.mod
  PenguinzTech
  committed
  136ab5f
- security: fix gosec G115 and G104 warnings in Go client
  PenguinzTech
  committed
  c26de93
- Updating documentation to new base standard
  PenguinzTech
  committed
  134676a
- Fixed CICD workflow
  PenguinzTech
  committed
  053d12d
- Fixed CICD workflow
  PenguinzTech
  committed
  8e0a90b
- Fixed CICD workflow
  PenguinzTech
  committed
  1a26483
Commits on Apr 8, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  fc8d875
Commits on Apr 10, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  f15727d
Commits on Apr 12, 2026
- chore: migrate containers to rootless non-root users
  
  PenguinzTech
  and
  claude
  committed
  af0315a
Commits on Apr 18, 2026
- chore: pre-wipe backup
  PenguinzTech
  committed
  30ab266
Commits on Apr 22, 2026
- ci: parallel arm64/amd64 builds with manifest merge (#47)
  
  PenguinzTech
  and
  claude
  authored
  240e0aa
- chore: upgrade GitHub Actions + close e2e/smoke test coverage gaps
  
  PenguinzTech
  and
  claude
  authored
  469fb51
Commits on Apr 24, 2026
- Updating documentation to new base standard
  PenguinzTech
  committed
  2f4fe14
Commits on May 9, 2026
- feat: deploy squawk to dal2-beta as external DNS resolver
  
  PenguinzTech
  and
  claude
  committed
  b7ce7ae
- feat: complete k8s deployment infrastructure - Helm chart + kustomize overlays
  PenguinzTech
  committed
  0ad9b12
Commits on May 10, 2026
- feat: add squawk-k8s-dns internal Kubernetes DNS plugin
  
  PenguinzTech
  and
  claude
  committed
  9b826c5
Commits on May 26, 2026
- Update squawk-dns-client binary.
  
  PenguinzTech
  and
  claude
  committed
  b613d3a
Commits on Jul 9, 2026
- Enterprise hardening + dns-server consolidation to Quart app.main (#50)
  
  PenguinzTech
  and
  claude
  authored
  2eabe3d
- Merge origin/main into v2.1.x: union release reconciliation
  
  PenguinzTech
  and
  claude
  committed
  fb1750c
- feat(dhcp): harden DHCP server — penguin-dal persistence + JWT auth
  
  PenguinzTech
  and
  claude
  committed
  e21c6d9
- feat(ntp): harden NTP server to full RFC 8915 NTS
  
  PenguinzTech
  and
  claude
  committed
  7ec5fa4
- fix(client): never send bearer token over plaintext transport
  
  PenguinzTech
  and
  claude
  committed
  ce43089
- feat(k8s): wire dhcp-server and ntp-server (Helm + Kustomize)
  
  PenguinzTech
  and
  claude
  committed
  cb4f2fb
- fix(dhcp): correct uninstallable dependency pins
  
  PenguinzTech
  and
  claude
  committed
  4ed4773
- ci: build, test, and publish dhcp-server and ntp-server
  
  PenguinzTech
  and
  claude
  committed
  9cf7047
- style: black-format dhcp-server, ntp-server, and python client
  
  PenguinzTech
  and
  claude
  committed
  946f4d9
- style(go-client): resolve all golangci-lint issues in the union
  
  PenguinzTech
  and
  claude
  committed
  8b19aa0
- fix(ci): align Go version, add pytest-asyncio, accept epoch version, bump oauth2
  
  PenguinzTech
  and
  claude
  committed
  3070e69
- fix(ci): resolve PR #46 round-2 failures (golangci, ntp, dns-client, Trivy, Socket)
  
  PenguinzTech
  and
  claude
  committed
  86b7590
- fix(ci): golangci-lint v1 config + resolve 12 errcheck findings
  
  PenguinzTech
  and
  claude
  committed
  840e29d
- fix(ci): use #nosec annotations for standalone gosec scan
  
  PenguinzTech
  and
  claude
  committed
  614150c
Commits on Jul 10, 2026
- chore(security): enterprise hardening wave — seccomp, deps, supply-chain, renovate
  
  PenguinzTech
  and
  claude
  committed
  35ceb9b
- fix(ci): sign multi-arch manifest in merge jobs (fix arm64 SBOM failure)
  
  PenguinzTech
  and
  claude
  committed
  557bab7
- feat(security): asymmetric JWT (ES256/RS256) + tenant isolation
  
  PenguinzTech
  and
  claude
  committed
  3d5b401
- docs: enterprise security & deployment hardening guide
  
  PenguinzTech
  and
  claude
  committed
  c71d51b
- feat: asymmetric signing for deployment-domain JWTs
  
  PenguinzTech
  and
  claude
  committed
  dd09dc1
- test: NTS wire-format interop tests + fix Next Protocol critical bit
  
  PenguinzTech
  and
  claude
  committed
  e2424ea
- refactor: scope-based authorization (roles are scope bundles)
  
  PenguinzTech
  and
  claude
  committed
  b982ec7
- feat: SPIFFE/mTLS service auth for DNS servers (prefer over static JWT)
  
  PenguinzTech
  and
  claude
  committed
  a164a7c
- fix(security): make SPIFFE XFCC trust opt-in (default off)
  
  PenguinzTech
  and
  claude
  committed
  fa1d7b8
- feat(security): refresh rotation+revocation, security headers, error scrub
  
  PenguinzTech
  and
  claude
  committed
  342eca1
- refactor: de-dup JWT verification, DB lifecycle, and keypair generation
  
  PenguinzTech
  and
  claude
  committed
  4f99e97
Commits on Jul 25, 2026
- chore: gitignore .worktrees/ directory
  
  PenguinzTech
  and
  claude
  committed
  02da3ed
- docs(enterprise): DR, HA, supply-chain verification, CoreDNS guides
  
  PenguinzTech
  and
  claude
  committed
  ad59dc5
- chore(api): OpenAPI 3.0 spec for manager v1 API + spectral CI lint
  
  PenguinzTech
  and
  claude
  committed
  30bf78d
- feat(dns): per-identity rate limiting on DoH endpoints
  
  PenguinzTech
  and
  claude
  committed
  225f516
- simplify spectral config to base oas rules
  PenguinzTech
  committed
  bbb62c4
- feat(auth): kid-based JWT key rotation support
  
  PenguinzTech
  and
  claude
  committed
  086ccbf
- feat(auth): TOTP MFA with recovery codes and pre-auth step-up
  
  PenguinzTech
  and
  claude
  committed
  d936cc9
- feat(auth): OAuth2 client_credentials for machine identities
  
  PenguinzTech
  and
  claude
  committed
  c0f9082
- feat(audit): durable audit_events store with query API
  
  PenguinzTech
  and
  claude
  committed
  49e0601
- feat(auth): OIDC token exchange for federated workload identity
  
  PenguinzTech
  and
  claude
  committed
  08bd409
- chore(helm): PDBs, opt-in HPA, and SPIRE reference chart
  
  PenguinzTech
  and
  claude
  committed
  efeeafa
- fix(audit): enforce least-privilege, add tenant scoping, update tests
  
  PenguinzTech
  and
  claude
  committed
  9b37306
Commits on Jul 26, 2026
- feat(auth): pluggable JWT signing with AWS KMS provider (enterprise)
  
  PenguinzTech
  and
  claude
  committed
  87204f9
- feat(observability): opt-in OpenTelemetry tracing for manager and dns-server
  
  PenguinzTech
  and
  claude
  committed
  7e3473d
- feat(nhi): per-identity DNS domain allowlists enforced at DoH
  
  PenguinzTech
  and
  claude
  committed
  81eb035
- feat(auth): enterprise OIDC SSO login with JIT provisioning
  
  PenguinzTech
  and
  claude
  committed
  1369e3b
- chore(helm): expose SPIFFE values; migrate env values files to house naming
  
  PenguinzTech
  and
  claude
  committed
  c200f9b
- fix: all 3 SSO test failures + scope definitions
  PenguinzTech
  committed
  ae2946d
- feat(scim): SCIM 2.0 user provisioning with deprovision-revokes-sessions
  
  PenguinzTech
  and
  claude
  committed
  66ee0df
- fix(security): address all 6 SSO vulnerabilities (findings 1-6)
  PenguinzTech
  committed
  d30e636
- feat(auth): DPoP sender-constrained tokens for machine identities
  
  PenguinzTech
  and
  claude
  committed
  7689024
Commits on Jul 27, 2026
Commits on Aug 4, 2026
Commits on Aug 5, 2026
- Merge pull request #80 from penguintechinc/fix/local-alpha-deployment-bugs
  PenguinzTech
  authored
  905ed79
Commits on Aug 7, 2026
- fix(manager): RedisStorage expects a client instance, not a URL string
  PenguinzTech
  committed
  13106a3
- Merge pull request #81 from penguintechinc/fix/manager-redis-storage-client-api
  PenguinzTech
  authored
  98eeca7
Commits on Aug 20, 2026
- chore: add security policy and normalize license placement
  
  PenguinzTech
  and
  claude
  committed
  81ea069
Commits on Aug 31, 2026
Commits on Sep 2, 2026
- test(dns-server): raise coverage to ~99% and enforce the 90% gate
  
  PenguinzTech
  and
  claude
  committed
  2e66e5b
- fix(dns-webui): store JWTs in HttpOnly cookies, not localStorage (XSS hardening)
  
  PenguinzTech
  and
  claude
  committed
  a32ab3e
- fix(ci): declare requests-mock test dep + exclude tests from CodeQL
  
  PenguinzTech
  and
  claude
  committed
  0065415
- Merge pull request #97 from penguintechinc/fix/dns-webui-httponly-cookies
  PenguinzTech
  authored
  4fe6969
- fix(dns-server): cap cert CN at 64 chars + declare psutil test dep
  
  PenguinzTech
  and
  claude
  committed
  47fdd5a
- test(dns-server): make selective-routing coverage tests self-contained
  
  PenguinzTech
  and
  claude
  committed
  e73e5df
- Merge pull request #96 from penguintechinc/chore/enforce-coverage-90
  PenguinzTech
  authored
  0b684c9
Commits on Sep 4, 2026
Commits on Sep 14, 2026
- Merge pull request #84 from penguintechinc/chore/security-policy
  PenguinzTech
  authored
  eefcf83
Commits on Sep 22, 2026
- fix(manager): repair alembic migration chain (fresh DB couldn't migrate)
  
  PenguinzTech
  and
  claude
  committed
  c77e622
- Merge pull request #102 from penguintechinc/fix/alembic-migration-baseline
  PenguinzTech
  authored
  3849b58
Commits on Oct 10, 2026
- chore: add CODEOWNERS to the release branch
  
  PenguinzTech
  and
  claude
  committed
  37a9295
- Merge pull request #108 from penguintechinc/chore/sync-codeowners-to-release
  PenguinzTech
  authored
  579789a

Commits

Commits on Dec 11, 2025

Commits on Jan 5, 2026

Commits on Jan 6, 2026

Commits on Jan 7, 2026

Commits on Jan 8, 2026

Commits on Jan 12, 2026

Commits on Jan 14, 2026

Commits on Jan 15, 2026

Commits on Jan 22, 2026

Commits on Jan 28, 2026

Commits on Jan 30, 2026

Commits on Feb 2, 2026

Commits on Feb 3, 2026

Commits on Feb 4, 2026

Commits on Feb 12, 2026

Commits on Feb 13, 2026

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Commits on Feb 19, 2026

Commits on Feb 26, 2026

Commits on Mar 2, 2026

Commits on Mar 4, 2026

Commits on Mar 9, 2026

Commits on Mar 11, 2026

Commits on Mar 13, 2026

Commits on Mar 24, 2026

Commits on Mar 25, 2026

Commits on Mar 26, 2026

Commits on Mar 28, 2026

Commits on Apr 1, 2026

Commits on Apr 8, 2026

Commits on Apr 10, 2026

Commits on Apr 12, 2026

Commits on Apr 18, 2026

Commits on Apr 22, 2026

Commits on Apr 24, 2026

Commits on May 9, 2026

Commits on May 10, 2026

Commits on May 26, 2026

Commits on Jul 9, 2026