Release - 0.5.3 New release published by javuto 🔖 Release 0.5.3 What's New • docker-compose standalone is not the standard way to trigger docker c… by @ITJamie in #824 • osctrl: defensive hardening round — login timing, rate-limit XFF bypass, JWT rotation, info-disclosure closes by @alvarofraguas in #826 • Fix for goreleaser error when tagging a new release by @javuto in #827 • release: fix multi-arch Docker builds (manifest list export error) by @alvarofraguas in #828 • make: actionable errors for docker_dev + add docker_dev_certs target by @alvarofraguas in #834 • provision: fix yq and Go installer arch detection on x86_64 by @alvarofraguas in #838 • release: pass GOARCH build-arg to arm64 docker builds by @alvarofraguas in #839 • provision: auto-detect repo root instead of assuming ~/osctrl by @alvarofraguas in #835 • api: fine-grained permission control for service account creation by @alvarofraguas in #837 • auth: lift OIDC into reusable pkg/auth provider package by @alvarofraguas in #829 • auth: OIDC support for osctrl-api + React SPA by @alvarofraguas in #830 • auth: SAML 2.0 support for osctrl-api + React SPA by @alvarofraguas in #831 • frontend: SPA Users page — Add/Delete/Reset Password parity with legacy admin by @alvarofraguas in #832 • frontend: SPA UX polish — TargetSelector, audit fix, CSRF priming by @alvarofraguas in #833 • frontend: bump Node from 20 to 22 in Docker builds by @alvarofraguas in #840 • fix: OIDC/SAML logout, empty-target queries/carves, carve bulk actions, envless login by @alvarofraguas in #842 • security: fix 13 findings from security audit by @alvarofraguas in #843 • Adapt CI pipelines to have develop as default branch by @javuto in #844 • Annotations in osctrl-api to keep API documented by @javuto in #845 • Generator of swagger YAML and JSON using

Makefile

by @javuto in #846 • Up to date OpenAPI 3 YAML and tool to convert generated swagger by @javuto in #847 • Exposing frontend via nginx for TLS termination in docker dev environment by @javuto in #848 • Enrollment & config parity: per-OS flags, cert upload, assembled config + SPA tabs/sliders/forms/docs links by @alvarofraguas in #849 • Fix merge against

main

and update

develop

by @javuto in #850 • frontend: responsive sidenav — mobile drawer + desktop icon-rail collapse by @alvarofraguas in #851 • Banner to warn users about upcoming deprecation of

osctrl-admin

by @javuto in #852 • Updated README with notice about deprecation of osctrl-admin by @javuto in #853 • Removed legacy port from dev env by @javuto in #854 • Show permissions in profile page by @javuto in #855 • Reload frontend build when changes to code by @javuto in #856 • Prepare release 0.5.3 by @javuto in #857 • Makefile job to merge develop into main by @javuto in #858 New Contributors • @ITJamie made their first contribution in #824 Full Changelog: v0.5.2...v0.5.3 jmpsec/osctrl