Paraxial v2.6.1

View Source Paraxial.io Changelog

2-6-1

 2.6.1

  • The Sobelow scan in mix paraxial.scan now has the --config flag by default, so it can read .sobelow-conf.

2-6-0

 2.6.0

  • Add the mix paraxial.scan --github_app flag, for use with the Paraxial.io Github App
  • Additional required arguments: --install_id, --repo_owner, --repo_name, --pr_number
  • See the Github App page for installation instructions.

2-5-2

 2.5.2

2-5-1

 2.5.1

  • iptrie from ~> 0.8.0 to >= 0.8.0.
  • sobelow from ~> 0.12.2 to >= 0.12.2.
  • Change warn to error to better reflect error conditions.

2-5-0

 2.5.0

  • Add App Audit to agent.

2-4-0

 2.4.0

  • Add Exploit Guard to agent.

2-3-4

 2.3.4

  • mix paraxial.scan now has the --add-exit-code flag, returns unix exit code 1 if scan has findings. Returns 0 if no findings.

2-3-3

 2.3.3

  • Allow HTTPoison versions 2.0.0 and higher

2-3-2

 2.3.2

  • Upgrade Sobelow from 0.12.1 to 0.12.2

2-3-1

 2.3.1

  • Sobelow 0.12.0 required castore ~> 1.0
  • Sobelow 0.12.1 relaxes this requirement for backwards compatibility

2-3-0

 2.3.0

  • Upgrade Sobelow from 0.11.1 to 0.12.0
  • Sobelow now checks for XSS in HEEx templates

2-2-0

 2.2.0

2-1-0

 2.1.0

  • You can now disable the Paraxial.io agent. If there is no configuration set for :paraxial_api_key or :paraxial_url, the agent will not start, and the Paraxial plugs will do nothing to conn.
  • To disable the agent in your dev or test environment, ensure there are no values set for your :paraxial configuration. If :paraxial_api_key and :paraxial_url have non-nil values, the agent will start and the Paraxial plugs will function normally.

2-0-0

 2.0.0

  • WARNING: Breaking changes to the only/except configuration values. Previously these were read via Application.get_env, and would not raise an error if runtime and compile time settings were different.
  • only/except are now read with Application.compile_env/3 in 2.0.0. From the docs, "By using compile_env/3, tools like Mix will store the values used during compilation and compare the compilation values with the runtime values whenever your system starts, raising an error in case they differ."
  • There is no change in features from 1.1.0 to 2.0.0. The reason for this release is to make debugging CI/CD pipelines easier, because compile_env will trigger an error if runtime and compile time configuration differs.
  • After changing only/except in your dev environment run mix deps.clean paraxial. If you don't, you will get an error, ERROR! the application :paraxial has a different value set for key :except during runtime.

1-1-0

 1.1.0

1-0-0

 1.0.0

  • If fetch_cloud_ips is set to true, and there is no internet connection, ip_trie will be set to an empty trie.
  • PARAXIAL_API_KEY environment variable support added.