v2.1.0 2023-01-11

• Patch writePump performance hit #613
• Remove logging package and replace go-kit/kit/log & go-kit/log with zap #686
• Fix bookkeeping package tests #465
• removed packages not currently

v2.0.7 2022-08-24

• Dependency update, note vulnerabilities
  • Introduces new vuln https://www.mend.io/vulnerability-database/CVE-2022-29526
• Update dependencies. 603
  • github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available
  • github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available
  • github.com/hashicorp/consul/api v1.13.0 CVE-2022-29153 patched versions 1.9.17 1.10.10 1.11.5
  • guardrails says github.com/gorilla/websocket v1.5.0 has a high vulnerability but no vulnerabilities have been filed atm
  • github.com/gorilla/sessions v1.2.1 CWE-613 no patch available
• Fixed error string sent in response when device ID can't be parsed. #599
• Update Argus & Bascule for jwk migration
• Dependency update, note vulnerabilities
  • Introduces new vuln https://www.mend.io/vulnerability-database/CVE-2022-29526

v2.0.7-dev.1 2022-07-20

• Update dependencies. 603
  • github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available
  • github.com/prometheus/client_golang v1.12.2 CVE-2022-21698 no patch available
  • github.com/hashicorp/consul/api v1.13.0 CVE-2022-29153 patched versions 1.9.17 1.10.10 1.11.5
  • guardrails says github.com/gorilla/websocket v1.5.0 has a high vulnerability but no vulnerabilities have been filed atm
  • github.com/gorilla/sessions v1.2.1 CWE-613 no patch available
• Fixed error string sent in response when device ID can't be parsed. #599

v2.0.6 05/02/2022

- Patch for manager writePump panic. [#595](https://github.com/xmidt-org/webpa-common/pull/595)

v2.0.5 04/29/2022

- Deprecated webhook/aws package, which also won't work with go 1.18+. [#596](https://github.com/xmidt-org/webpa-common/pull/596)
- Bumped argus to v0.9.0. [#596](https://github.com/xmidt-org/webpa-common/pull/596)

v2.0.4 12/10/2021

- Enforce cipher suites for TLS versions less than 1.3 that are not vulnerable to SWEET32

v2.0.3 11/29/2021

- Bumped argus to v0.6.0 and fixed related datacenter watch code. [#589](https://github.com/xmidt-org/webpa-common/pull/589)

v2.0.2 11/09/2021

- Added logic to xhttp for retrying on http errors.[#588](https://github.com/xmidt-org/webpa-common/pull/588)

v2.0.1 08/24/2021

- Avoid service discovery events for index underflow or retryable errors [#586](https://github.com/xmidt-org/webpa-common/pull/586)

v2.0.0 08/06/2021

- Remove device manager option that's no longer used. [#583](https://github.com/xmidt-org/webpa-common/pull/583)
- Delete deprecated packages no longer used in across the XMiDT org. [#584](https://github.com/xmidt-org/webpa-common/pull/584)