Stacklok Minder Files

User-visible client changes

• Several Minder client/server fixes by @evankanderson in https://github.com/mindersec/minder/pull/6088
• Add device authorization flow and request debugging logs by @evankanderson in https://github.com/mindersec/minder/pull/6107
• Fix terminal checking on Windows by @evankanderson in https://github.com/mindersec/minder/pull/6141
• Refine error messages in batch processing by @evankanderson in https://github.com/mindersec/minder/pull/6142
• Allow omitting def in profile rule definitions by @Copilot in https://github.com/mindersec/minder/pull/6137

Server-side changes

Note that the Minder server is released as a rolling release,

• Use rule short_failure_message as fallback for evaluation failure message by @JAORMX in https://github.com/mindersec/minder/pull/5933
• Publish docs to mindersec.dev domain by @evankanderson in https://github.com/mindersec/minder/pull/5948
• Add names to returned entities-with-types by @evankanderson in https://github.com/mindersec/minder/pull/5944
• refactor: omit unnecessary reassignment by @rifeplight in https://github.com/mindersec/minder/pull/5999
• Avoid leaking internal error messages, simplify code by @evankanderson in https://github.com/mindersec/minder/pull/6074
• Implement RegisterEntity generic API endpoint by @JAORMX in https://github.com/mindersec/minder/pull/5959
• Remove: machine_accounts feature flag. by @Mujib-Ahasan in https://github.com/mindersec/minder/pull/5971
• Remove user_management feature flag by @navnitms in https://github.com/mindersec/minder/pull/6106

Infrastructure changes

• Phase 1 + 2: Remove legacy table writes and migrate reads by @JAORMX in https://github.com/mindersec/minder/pull/5913
• Phase 3: Drop legacy columns from evaluation_rule_entities by @JAORMX in https://github.com/mindersec/minder/pull/5931
• Phase 4: Drop legacy entity tables by @JAORMX in https://github.com/mindersec/minder/pull/5932
• feat: adds scorecard workflow to publish openssf scores by @gaganhr94 in https://github.com/mindersec/minder/pull/6090

Developer-visible changes

• Add CLAUDE.md by @JAORMX in https://github.com/mindersec/minder/pull/5946
• Document bootstrap target in CLAUDE.md by @JAORMX in https://github.com/mindersec/minder/pull/5947
• Implement RegisterEntity consistently across providers, with test by @evankanderson in https://github.com/mindersec/minder/pull/6047
• Update pull request CI to produce markdown summary by @evankanderson in https://github.com/mindersec/minder/pull/6063
• Deflake flagged_driver_test by expanding mutex by @evankanderson in https://github.com/mindersec/minder/pull/6062
• Replace mock service with simpler-to-configure fake by @evankanderson in https://github.com/mindersec/minder/pull/6052
• Generate and store failed test results for later consumption by @evankanderson in https://github.com/mindersec/minder/pull/6073
• Fix race between message.Ack and field access in tests by @evankanderson in https://github.com/mindersec/minder/pull/6075
• Fix race in invites service test by @evankanderson in https://github.com/mindersec/minder/pull/6092
• Fix remaining lint error by @evankanderson in https://github.com/mindersec/minder/pull/6140

Security / Dependency CVE changes (partial list)

• Upgrade github.com/sigstore/sigstore-go to resolve CVE by @evankanderson in https://github.com/mindersec/minder/pull/6031

New Contributors

• @rifeplight made their first contribution in https://github.com/mindersec/minder/pull/5999
• @Mujib-Ahasan made their first contribution in https://github.com/mindersec/minder/pull/5971
• @gaganhr94 made their first contribution in https://github.com/mindersec/minder/pull/6090
• @Copilot made their first contribution in https://github.com/mindersec/minder/pull/6137

Full Changelog: https://github.com/mindersec/minder/compare/v0.1.1...v0.1.2