v1.1.7: Upgrade Go compiler to 1.26.5 to fix vulnerabilities Latest

This release focuses on updating the build environment to address security vulnerabilities.

🔒 Security

• Go Version Upgrade & OS Package Updates: Upgraded the build image in the Dockerfile to golang:1.26.5-trixie.

v1.1.6: Upgrade Go compiler to 1.26.4 to fix vulnerabilities

This release focuses on updating the build environment to address security vulnerabilities.

🔒 Security

• Go Version Upgrade & OS Package Updates: Upgraded the build image in the Dockerfile to golang:1.26.4-trixie. This single upgrade addresses 23 known vulnerabilities in the Go standard library (GO_STDLIB) and triggers an OS package update during the build process to fix 10 vulnerabilities in OpenSSL and glibc. This resolves a total of 33 vulnerabilities across staging and release images.

v1.1.5 - Increase TDX and SEV-SNP Device Limits

This release unlocks high concurrency for hardware attestation workloads and improves plugin startup stability.

🚀 Features

• Expanded Hardware Capacity: Increased the DeviceLimit for Intel TDX (intel.com/tdx) and AMD SEV-SNP (amd.com/sev-snp) from 1 to 256. This aligns with vTPM limits and allows multiple cloud-native workloads to share hardware devices concurrently on the same node without scheduling blocks.

🐛 Bug Fixes

• Socket Leak Prevention: Fixed a potential resource leak in plugin.go where the UNIX listener and gRPC server could remain dangling if the context was cancelled before the service became ready.

🛠 Maintenance & Testing

• Go Version: Upgraded Go workspace to 1.26 to match the Dockerfile build environment.
• Testing Enhancements:
  • Validated the new 256 limit with E2E concurrency tests (100+ IOCTL iterations without contention).
  • Added TestAllocateHardware to verify hardware allocation strictly excludes vTPM mounts.
  • Added TestDiscoverMultiPaths to verify device fallback glob matching.

v1.1.4 - Go Version Upgrade

This release focuses on upgrading Go version to address security vulnerabilities.

🔒 Security

• Go Version Upgrade: Upgraded Go version to v1.26.2 to addresses vulnerabilities found in the Go standard library in versions prior to 1.26.2.

v1.1.3 - gRPC Upgrade and Stability Improvement

This release focuses on upgrading gRPC to address security vulnerabilities and improving plugin stability.

🔒 Security

• gRPC Upgrade: Upgraded google.golang.org/grpc to v1.79.3 to fix a security vulnerability.

⚙️ Stability & Testing

• Plugin Improvements: Improved plugin retry logic and optimized measurement file copying in ccdevice.go.
• Test Manifest: Added a test pod manifest for vTPM (SEV) validation.

v1.1.2 - Go Version Upgrade and Security Patch

This release focuses on updating the build environment to address security vulnerabilities and updating the deployment manifests.

🔒 Security

• Go Base Image Update: Upgraded the build image in the Dockerfile from golang:1.21 to golang:1.26-trixie. This addresses known vulnerabilities in the Go standard library and ensures the plugin is built using an actively supported version.

⚙️ Deployment

• Manifest Update: Updated the default image tag in manifests/cc-device-plugin.yaml to point to the v1.1.2 release image.

v1.1.1 - Security and Documentation Updates

This release focuses on security improvements and documentation updates.

🔒 Security

• Base Image Update: The Dockerfile has been updated to include OS-level package upgrades (apt update and apt -y upgrade) and cleanup (apt -y autoremove). This addresses vulnerabilities in the base image.

📝 Documentation

• Hardware Requirements: Updated the README.md to clearly specify the technology requirements for AMD SEV-SNP and Intel TDX support.
• Prerequisites: Clarified node pool configuration steps for Confidential Computing features.

v1.1.0 - TDX and SEV-SNP Support

Implement Intel TDX and AMD SEV-SNP support.

v1.0.1

Security:

bump google.golang.org/protobuf version to v1.33.0. fix CVE-2024-24786

v1.0.0

New Features:

Add TPM as a CC device

New Contributors:

@Ruide