v0.17.7

0.17.7 (2026-01-09)

Performance Improvements

• Reduction of CPU and memory footprint (#2955) (2278df6)

Bug Fixes

• Request duration metric resolution adjusted for sub-millisecond latencies (#2954) (a8e1cbc)

Documentation

• Kubernetes examples updated to include working observability stack and a Grafana dashboard (#2958) (6a6d4bb)

Dependencies

• update google.golang.org/genproto/googleapis/rpc digest to 0a764e5 (#2945) (9c213ab)
• update kubernetes packages to v0.35.0 (#2942) (7e0bc65)
• update module github.com/go-co-op/gocron/v2 to v2.19.0 (#2935) (34cadef)
• update module github.com/go-playground/validator/v10 to v10.30.1 (#2947) (298040c)
• update module github.com/redis/rueidis to v1.0.70 (#2950) (960f031)
• update module github.com/redis/rueidis/rueidisotel to v1.0.70 (#2951) (3df1f08)
• update module google.golang.org/grpc to v1.78.0 (#2946) (3bf3a82)
• update module google.golang.org/protobuf to v1.36.11 (#2933) (a5fe579)

v0.17.6

0.17.6 (2025-12-12)

Bug Fixes

• Ensure watcher reacts to atomic file updates in Kubernetes mounts (#2928) (4800b05)

Dependencies

• update github.com/dadrus/httpsig digest to 72e0076 (#2925) (f5d6312)
• update kubernetes packages to v0.34.3 (#2924) (5e38f33)
• update module github.com/redis/rueidis to v1.0.69 (#2914) (5078b0c)
• update module github.com/redis/rueidis/rueidisotel to v1.0.69 (#2914) (5078b0c)
• update opentelemetry-go monorepo to v1.39.0 (#2916) (c4aaeee)
• update opentelemetry-go-contrib monorepo to v0.64.0 (#2917) (f19f2ed)

v0.17.5

0.17.5 (2025-12-05)

Even though this is a regular patch release, there are two noticeable updates:

• The gocloud.dev update in #2896 dropped support for the AWS v1 APIs. This means that if you were using the cloudblob provider to load your rulesets from S3 buckets and configured heimdall to use that API version, you will encounter a breaking change.
• The Kubernetes-based examples were migrated to Terraform/OpenTofu in #2886, which makes using them a breeze :)

Documentation

• cert-manager helm chart version used in kubernetes examples updated to v1.19.1 (#2874) (1b12e5a)
• envoy gateway helm chart version used in kubernetes examples updated to v1.6.0 (#2876) (c319e7e)
• haproxy helm chart version used in kubernetes examples updated to v0.15.0 (#2872) (c781fd3)
• istio helm chart version used in kubernetes examples updated to v1.28.0 (#2886) (15a4cb1)
• Kubernetes examples migrated to terraform/opentofu (#2886) (15a4cb1)
• metallb helm chart version used in kubernetes examples updated to v0.15.2 (#2870) (e34e3c1)
• nginx helm chart version used in kubernetes examples updated to v4.14.0 (#2871) (d93c70b)
• traefik helm chart version used in kubernetes examples updated to v37.3.0 (#2873) (d5a8675)
• trust-manager helm chart version used in kubernetes examples updated to v0.20.2 (#2874) (1b12e5a)
• Using the official helm chart from the contour project instead of the one from bitnami in examples (#2869) (9260360)

Dependencies

• update github.com/dadrus/httpsig digest to 2baa34b (#2902) (047833d)
• update golang to v1.25.5 (#2899) (23c8a92)
• update google.golang.org/genproto/googleapis/rpc digest to ff82c1b (#2900) (87ac757)
• update kubernetes packages to v0.34.2 (#2868) (9197d95)
• update module github.com/go-co-op/gocron/v2 to v2.18.2 (#2890) (dd3e9b6)
• update module github.com/redis/rueidis to v1.0.68 (#2865) (9119bbd)
• update module github.com/redis/rueidis/rueidisotel to v1.0.68 (#2865) (9119bbd)
• update module github.com/spf13/cobra to v1.10.2 (#2906) (ee05617)
• update module gocloud.dev to v0.44.0 (#2896) (3533ca7)
• update module google.golang.org/grpc to v1.77.0 (#2880) (805261d)

v0.17.4

0.17.4 (2025-11-10)

Bug Fixes

• Configured keystores must contain at least one key entry (#2857) (e1a4c27)
• Prevent loss of Request.URL.Captures with Envoy ext_auth integration (#2859) (bedbed2)

Dependencies

• update github.com/dadrus/httpsig digest to a4e2c1d (#2824) (8ccfacb)
• update golang to v1.25.4 (#2856) (5ba0506)
• update google.golang.org/genproto/googleapis/rpc digest to 83f4791 (#2860) (21aeec6)
• update module github.com/ccoveille/go-safecast to v2 (#2845) (27e50c4)
• update module github.com/envoyproxy/go-control-plane/envoy to v1.36.0 (#2852) (47b200f)
• update module github.com/go-co-op/gocron/v2 to v2.18.0 (#2855) (b68e414)
• update module github.com/grpc-ecosystem/go-grpc-middleware/v2 to v2.3.3 (#2850) (45c8885)

v0.17.3

0.17.3 (2025-10-17)

Bug Fixes

• generic authenticator updated to raise authentication errors on 401 and 403 responses returned from the identity_info_endpoint (#2807) (ee4b977) by @Kakadus
• Verbose errors always contain high level detail message (#2809) (68e9a5c)

Documentation

• Heimdall image version set in documentation generated during release builds fixed (#2811) (002fef2)
• OTEL disabled in Kubernetes examples (used bitnami images are not available anymore) (#2815) (68684a6)

Dependencies

• update golang to v1.25.3 (#2802) (5634ac8)
• update google.golang.org/genproto/googleapis/rpc digest to 4626949 (#2808) (b023955)
• update module github.com/ccoveille/go-safecast to v1.7.0 (#2810) (c66ff1b)
• update module github.com/envoyproxy/go-control-plane/envoy to v1.35.0 (#2783) (eaa3695)
• update module github.com/go-co-op/gocron/v2 to v2.17.0 (#2798) (07ee22f)
• update module github.com/go-jose/go-jose/v4 to v4.1.3 (#2790) (1d1e649)
• update module github.com/go-playground/validator/v10 to v10.28.0 (#2791) (1bff5cf)
• update module github.com/redis/rueidis to v1.0.67 #2801 (3c146b3)
• update module github.com/redis/rueidis/rueidisotel to v1.0.67 (#2801) (3c146b3)
• update module google.golang.org/grpc to v1.76.0 (#2793) (c8a57b1)
• update module google.golang.org/protobuf to v1.36.10 (#2787) (1e4b5df)

v0.17.2

0.17.2 (2025-09-21)

Bug Fixes

• Helm Chart updated to set appProtocol to kubernetes.io/h2c if heimdall is integrted with Envoy proxy based solutions (#2741) (2824e59)

Documentation

• "Protect an Application" chapter updated to make use of the most recent versions of nginx and opa (#2750) (c000c04)
• contour helm chart version used in kubernetes examples updated to v21.1.4 (#2743) (ebfde4c)
• docker compose examples updated to use the most recent versions of caddy, traefik and envoy (#2751) (501f246)
• emissary helm chart version used in kubernetes examples updated to v8.12.2 (#2745) (4908aa9)
• haproxy helm chart version used in kubernetes examples updated to v0.14.9 (#2746) (445b7cc)
• nginx helm chart version used in kubernetes examples updated to v4.13.2 (#2742) (cd2f689)
• traefik helm chart version used in kubernetes examples updated to v37.1.1 (#2749) (971d195)

Dependencies

• update github.com/dadrus/httpsig digest to 5ddc1d6 (#2738) (64308ca)
• update golang v1.25.1 (#2725) (c3f02a9)
• update google.golang.org/genproto/googleapis/rpc digest to 9702482 (#2732) (f18651e)
• update kubernetes packages to v0.34.1 (#2736) (1839456)
• update module github.com/go-co-op/gocron/v2 to v2.16.5 (#2723) (b40b989)
• update module github.com/google/cel-go to v0.26.1 (#2711) (7541d97)
• update module github.com/knadh/koanf/v2 to v2.3.0 (#2757) (3c693dd)
• update module github.com/prometheus/client_golang to v1.23.2 (#2731) (382fbd2)
• update module github.com/redis/rueidis to v1.0.65 (#2763) (ab0ea94)
• update module github.com/redis/rueidis/rueidisotel to v1.0.65 (#2763) (ab0ea94)
• update module github.com/spf13/cobra to v1.10.1 (#2722) (a48a973)
• update module github.com/spf13/pflag to v1.0.10 (#2724) (db0e2df)
• update module google.golang.org/grpc to v1.75.1 (#2737) (4f266bc)
• update module google.golang.org/protobuf to v1.36.9 (#2734) (91d6087)
• update opentelemetry-go monorepo to v1.38.0 (#2716) (b30ec47)
• update opentelemetry-go-contrib monorepo to v0.63.0 (#2717) (759d7a7)

v0.17.1

0.17.1 (2025-08-18)

Bug Fixes

• CRD updated to include wildcard host expression type (#2675) (ea69a03)

Dependencies

• update github.com/dadrus/httpsig digest to 05a2ee6 (#2680) (4be7ef7)
• update golang to v1.25.0 (#2670) (1d79d2c)
• update google.golang.org/genproto/googleapis/rpc digest to 5f3141c (#2657) (9fdbd45)
• update kubernetes packages to v0.33.4 (#2671) (dfb3334)

v0.17.0

0.17.0 (2025-08-11)

⚠ BREAKING CHANGES

• Backtracking happens automatically and is limited to a rule set (#2544)

Features

• cel authorizer extended to support "templating" via values property (#2547) (c597712)
• Backtracking happens automatically and is limited to a rule set (#2544) (6abbf7f)
• Better Host matching support (#2544) (6abbf7f)
• New map contextualizer (#2537) (8c1fcab) by @martin31821
• Overlapping rule matching expressions can be defined in the same rule set only (#2544) (6abbf7f)
• Steps in the pipeline can optionally have their own ids. (#2645) (913e276)

Dependencies

• update golang to v1.24.6 (#2653) (e70d5b7)
• update google.golang.org/genproto/googleapis/rpc digest to 6b04f9b (#2653) (e70d5b7)
• update module google.golang.org/protobuf to v1.36.7 (#2653) (e70d5b7)

v0.16.8

0.16.8 (2025-08-06)

This is just a regular monthly patch release with updated dependencies.

Dependencies

• update github.com/dadrus/httpsig digest to f7ecd42 (#2611) (9f4de03)
• update google.golang.org/genproto/googleapis/rpc digest to a7a43d2 (#2632) (6bf40b4)
• update kubernetes packages to v0.33.3 (#2600) (0919fa5)
• update module github.com/go-co-op/gocron/v2 to v2.16.3 (#2627) (c9a0a46)
• update module github.com/go-jose/go-jose/v4 to v4.1.2 (#2630) (bfd8f3e)
• update module github.com/go-viper/mapstructure/v2 to v2.4.0 (#2596) (34bc499)
• update module github.com/google/cel-go to v0.26.0 (#2595) (5770ab4)
• update module github.com/prometheus/client_golang to v1.23.0 (#2628) (15a0f77)
• update module github.com/redis/rueidis to v1.0.64 (#2635) (b7579da)
• update module github.com/redis/rueidis/rueidisotel to v1.0.64 (#2635) (b7579da)
• update module github.com/spf13/pflag to v1.0.7 (#2604) (8a38675)
• update module go.opentelemetry.io/otel/exporters/prometheus to v0.59.1 (#2615) (84982d1)
• update module gocloud.dev to v0.43.0 (#2610) (d81a540)
• update module google.golang.org/grpc to v1.74.2 (#2619) (4b9053a)

v0.16.7

0.16.7 (2025-07-10)

Bug Fixes

• Correct evaluation of named path params in routes with trailing free wildcard (#2586) (b75be67)
• TLS errors during mechanism execution always result in pipeline failure (#2580) (adf1a83)

Documentation

• Added missing description for the --insecure-skip-all-tls-enforcement flag (#2578) (0728154)
• Clarifications that CORS related functionality is only supported if heimdall is operated as proxy (#2588) (d4fe70d)

Dependencies

• update github.com/dadrus/httpsig digest to 7390907 (#2566) (49fc4dc)
• update golang to v1.24.5 (#2584) (af14f7a)
• update google.golang.org/genproto/googleapis/rpc digest to 8d1bb00 (#2583) (d4a9298)
• update module github.com/go-playground/validator/v10 to v10.27.0 (#2574) (0d71576)
• update module github.com/knadh/koanf/providers/env to v2 (#2571) (2ad5e1c)
• update module github.com/knadh/koanf/v2 to v2.2.2 (#2587) (1cdc739)
• update module gocloud.dev to v0.42.0 (#2568) (7aa2365)