Stacklok Minder Files

This is a new minder client release. Server releases are in the helm chart, which is published on each commit.

Highlights of the client release include:

Improved CLI output, including emoji for rule status (disable with --emoji=false) and more informative columns. Here's a sample:

Reduced CLI noise -- minder will automatically attempt to authenticate if your token is expired, rather than asking you to run minder auth login again. Also, you should no longer receive a message amount no config file present after the first invocation, as minder will automatically create an empty config file in your home directory.

Client changes

• Minder CLI output cleanup - column changes and emoji by @evankanderson in https://github.com/mindersec/minder/pull/5711
• Polish default CLI behavior by @evankanderson in https://github.com/mindersec/minder/pull/5745
• Add GitHub Actions auth token support by @evankanderson in https://github.com/mindersec/minder/pull/5746

Server changes

• Use current branch when sending pull requests, rather than hard-coding main by @evankanderson in https://github.com/mindersec/minder/pull/5630
• Clean up project naming: avoid UUID-like names by @evankanderson in https://github.com/mindersec/minder/pull/5642
• Allow project context and profile to use name as well as UUID by @evankanderson in https://github.com/mindersec/minder/pull/5653
• Allow delete ruletype by name by @evankanderson in https://github.com/mindersec/minder/pull/5665
• Enable outputting 'message' from deny-by-default evaluation by @evankanderson in https://github.com/mindersec/minder/pull/5664
• Simplify ingestion interfaces for engine by @evankanderson in https://github.com/mindersec/minder/pull/5688
• Include redirect URL in provider enrollment, rather than defaulting to first callback URL by @evankanderson in https://github.com/mindersec/minder/pull/5697
• Add templates for REST ingest and remediate, and YQ remediation by @evankanderson in https://github.com/mindersec/minder/pull/5702

Documentation updates

• Fix return value documentation for actions list by @evankanderson in https://github.com/mindersec/minder/pull/5667
• Add documentation for using GitHub Actions identities by @evankanderson in https://github.com/mindersec/minder/pull/5666
• Auto-generated cli documentation update - 2025-06-24 09:40:05 by @github-actions in https://github.com/mindersec/minder/pull/5712

Test and infrastructure changes

• Re-use embedded postgres instance across tests by @evankanderson in https://github.com/mindersec/minder/pull/5652
• Update GitHub chart push action to not run on forks, use digests consistently by @evankanderson in https://github.com/mindersec/minder/pull/5727
• Record image refs during build for later use by cosign by @evankanderson in https://github.com/mindersec/minder/pull/5729
• Fix WaitGroup race on embeddedpostgres by @evankanderson in https://github.com/mindersec/minder/pull/5728
• Fix body reuse in test retries by @evankanderson in https://github.com/mindersec/minder/pull/5742
• Fix WaitGroup mis-use in shared postgres DB by @evankanderson in https://github.com/mindersec/minder/pull/5743

Dependency updates

• build(deps): bump golang.org/x/tools from 0.32.0 to 0.33.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5632
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/mindersec/minder/pull/5633
• build(deps): bump github.com/mikefarah/yq/v4 from 4.45.2 to 4.45.4 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5631
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/mindersec/minder/pull/5634
• build(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.11 by @dependabot in https://github.com/mindersec/minder/pull/5635
• build(deps-dev): bump globals from 16.0.0 to 16.1.0 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5640
• build(deps): bump styled-components from 6.1.17 to 6.1.18 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5638
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot in https://github.com/mindersec/minder/pull/5636
• build(deps-dev): bump the eslint group in /docs with 2 updates by @dependabot in https://github.com/mindersec/minder/pull/5637
• build(deps-dev): bump markdownlint-cli2 from 0.17.2 to 0.18.0 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5639
• build(deps): bump github.com/getkin/kin-openapi from 0.127.0 to 0.131.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5641
• build(deps-dev): bump markdownlint-cli2 from 0.18.0 to 0.18.1 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5651
• build(deps-dev): bump the eslint group in /docs with 4 updates by @dependabot in https://github.com/mindersec/minder/pull/5650
• build(deps): bump bufbuild/buf-action from 1.1.1 to 1.1.4 by @dependabot in https://github.com/mindersec/minder/pull/5649
• build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by @dependabot in https://github.com/mindersec/minder/pull/5648
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in https://github.com/mindersec/minder/pull/5647
• build(deps): bump github.com/bufbuild/buf from 1.53.0 to 1.54.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5643
• build(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in https://github.com/mindersec/minder/pull/5645
• build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in https://github.com/mindersec/minder/pull/5646
• Update to new paths for buf.build/go/protovalidate by @evankanderson in https://github.com/mindersec/minder/pull/5654
• build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.1 to 2.3.2 by @dependabot in https://github.com/mindersec/minder/pull/5644
• build(deps): bump github.com/openfga/openfga from 1.8.11 to 1.8.13 by @dependabot in https://github.com/mindersec/minder/pull/5656
• build(deps): bump github.com/openfga/openfga from 1.8.11 to 1.8.13 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5655
• build(deps): bump the otel group with 11 updates by @dependabot in https://github.com/mindersec/minder/pull/5659
• build(deps): bump redocusaurus from 2.2.3 to 2.3.0 in /docs in the docusaurus group by @dependabot in https://github.com/mindersec/minder/pull/5657
• build(deps-dev): bump globals from 16.1.0 to 16.2.0 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5658
• build(deps): bump github.com/std-uritemplate/std-uritemplate/go/v2 from 2.0.3 to 2.0.5 by @dependabot in https://github.com/mindersec/minder/pull/5660
• build(deps): bump gitlab.com/gitlab-org/api/client-go from 0.128.0 to 0.129.0 by @dependabot in https://github.com/mindersec/minder/pull/5662
• build(deps): bump github.com/zitadel/oidc/v3 from 3.34.1 to 3.38.1 by @dependabot in https://github.com/mindersec/minder/pull/5663
• build(deps): bump github.com/google/go-containerregistry from 0.20.3 to 0.20.5 by @dependabot in https://github.com/mindersec/minder/pull/5661
• build(deps): bump k8s.io/client-go from 0.32.2 to 0.33.1 by @dependabot in https://github.com/mindersec/minder/pull/5668
• build(deps): bump github.com/spf13/afero from 1.12.0 to 1.14.0 by @dependabot in https://github.com/mindersec/minder/pull/5674
• build(deps): bump github.com/yuin/goldmark from 1.7.11 to 1.7.12 by @dependabot in https://github.com/mindersec/minder/pull/5673
• build(deps): bump github.com/stacklok/frizbee from 0.1.6 to 0.1.7 by @dependabot in https://github.com/mindersec/minder/pull/5672
• build(deps-dev): bump the eslint group in /docs with 3 updates by @dependabot in https://github.com/mindersec/minder/pull/5671
• build(deps): bump github.com/openfga/go-sdk from 0.6.3 to 0.7.1 by @dependabot in https://github.com/mindersec/minder/pull/5675
• build(deps): bump the docusaurus group in /docs with 6 updates by @dependabot in https://github.com/mindersec/minder/pull/5670
• Upgrade osv-scalibr from 0.1.x to 0.2.x by @evankanderson in https://github.com/mindersec/minder/pull/5677
• build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5687
• build(deps): bump the docusaurus group in /docs with 5 updates by @dependabot in https://github.com/mindersec/minder/pull/5686
• build(deps-dev): bump typescript-eslint from 8.33.0 to 8.33.1 in /docs in the eslint group by @dependabot in https://github.com/mindersec/minder/pull/5685
• build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot in https://github.com/mindersec/minder/pull/5684
• build(deps): bump bufbuild/buf-action from 1.1.4 to 1.2.0 by @dependabot in https://github.com/mindersec/minder/pull/5683
• build(deps): bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot in https://github.com/mindersec/minder/pull/5682
• build(deps): bump github.com/ThreeDotsLabs/watermill from 1.4.4 to 1.4.6 by @dependabot in https://github.com/mindersec/minder/pull/5681
• build(deps): bump dario.cat/mergo from 1.0.1 to 1.0.2 by @dependabot in https://github.com/mindersec/minder/pull/5680
• build(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.16.1 by @dependabot in https://github.com/mindersec/minder/pull/5678
• build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by @dependabot in https://github.com/mindersec/minder/pull/5696
• build(deps-dev): bump the eslint group in /docs with 4 updates by @dependabot in https://github.com/mindersec/minder/pull/5690
• build(deps): bump styled-components from 6.1.18 to 6.1.19 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5689
• build(deps): bump github.com/openfga/openfga from 1.8.13 to 1.8.15 by @dependabot in https://github.com/mindersec/minder/pull/5692
• build(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot in https://github.com/mindersec/minder/pull/5695
• Upgrade charmbracelet/glamour to 0.10.0 by @evankanderson in https://github.com/mindersec/minder/pull/5698
• Replace github.com/olekukonko/tablewriter with charmbracelet/lipgloss by @evankanderson in https://github.com/mindersec/minder/pull/5699
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 by @dependabot in https://github.com/mindersec/minder/pull/5700
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5701
• build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in https://github.com/mindersec/minder/pull/5710
• build(deps-dev): bump prettier from 3.5.3 to 3.6.0 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5709
• build(deps): bump github.com/bufbuild/buf from 1.54.0 to 1.55.1 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5708
• build(deps): bump github.com/protobom/protobom from 0.5.0 to 0.5.2 by @dependabot in https://github.com/mindersec/minder/pull/5706
• build(deps): bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @dependabot in https://github.com/mindersec/minder/pull/5705
• build(deps): bump github.com/openfga/cli from 0.6.6 to 0.7.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5694
• build(deps-dev): bump typescript-eslint from 8.34.0 to 8.34.1 in /docs in the eslint group by @dependabot in https://github.com/mindersec/minder/pull/5703
• build(deps): bump github.com/cloudevents/sdk-go/v2 from 2.16.0 to 2.16.1 by @dependabot in https://github.com/mindersec/minder/pull/5704
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.26.3 to 2.27.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5707
• build(deps): bump github.com/sigstore/sigstore-go from 0.7.2 to 1.0.0 by @dependabot in https://github.com/mindersec/minder/pull/5691
• build(deps): bump github.com/google/osv-scalibr from 0.2.1 to 0.3.0 by @dependabot in https://github.com/mindersec/minder/pull/5693
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot in https://github.com/mindersec/minder/pull/5714
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5713
• build(deps): bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.2.1 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5717
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.0 to 2.27.1 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5718
• build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in https://github.com/mindersec/minder/pull/5726
• build(deps): bump github.com/open-feature/go-sdk-contrib/providers/go-feature-flag-in-process from 0.1.0 to 0.1.1 by @dependabot in https://github.com/mindersec/minder/pull/5723
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.29.17 by @dependabot in https://github.com/mindersec/minder/pull/5725
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.1 by @dependabot in https://github.com/mindersec/minder/pull/5724
• build(deps-dev): bump the eslint group in /docs with 3 updates by @dependabot in https://github.com/mindersec/minder/pull/5715
• build(deps): bump slsa-framework/slsa-verifier from 2.7.0 to 2.7.1 by @dependabot in https://github.com/mindersec/minder/pull/5720
• build(deps): bump github.com/openfga/openfga from 1.8.15 to 1.8.16 by @dependabot in https://github.com/mindersec/minder/pull/5721
• build(deps): bump github.com/zitadel/oidc/v3 from 3.38.1 to 3.39.0 by @dependabot in https://github.com/mindersec/minder/pull/5722
• build(deps): bump the otel group with 9 updates by @dependabot in https://github.com/mindersec/minder/pull/5719
• build(deps-dev): bump prettier from 3.6.0 to 3.6.2 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5716
• build(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.3 by @dependabot in https://github.com/mindersec/minder/pull/5738
• build(deps-dev): bump globals from 16.2.0 to 16.3.0 in /docs by @dependabot in https://github.com/mindersec/minder/pull/5739
• build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.6-20250425153114-8976f5be98c1.1 to 1.36.6-20250625184727-c923a0c2a132.1 by @dependabot in https://github.com/mindersec/minder/pull/5735
• build(deps): bump github.com/mikefarah/yq/v4 from 4.45.1 to 4.45.4 by @dependabot in https://github.com/mindersec/minder/pull/5736
• build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot in https://github.com/mindersec/minder/pull/5730
• build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @dependabot in https://github.com/mindersec/minder/pull/5731
• build(deps): bump github/codeql-action from 3.29.1 to 3.29.2 by @dependabot in https://github.com/mindersec/minder/pull/5732
• build(deps): bump the otel group with 2 updates by @dependabot in https://github.com/mindersec/minder/pull/5733
• build(deps): bump buf.build/go/protovalidate from 0.12.0 to 0.13.1 by @dependabot in https://github.com/mindersec/minder/pull/5741
• build(deps): bump github.com/fergusstrange/embedded-postgres from 1.30.0 to 1.31.0 by @dependabot in https://github.com/mindersec/minder/pull/5737
• build(deps-dev): bump the eslint group in /docs with 4 updates by @dependabot in https://github.com/mindersec/minder/pull/5734
• build(deps): bump github.com/charmbracelet/bubbletea from 1.3.4 to 1.3.5 by @dependabot in https://github.com/mindersec/minder/pull/5740
• build(deps): bump helm.sh/helm/v3 from 3.17.3 to 3.18.4 in /tools by @dependabot in https://github.com/mindersec/minder/pull/5744

Full Changelog: https://github.com/mindersec/minder/compare/v0.0.89...v0.1.0