Syn-commodore

Latest version: v1.22.0

Safety actively analyzes 638437 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 13

1.14.0

Summary

We're pleased to announce Commodore v1.14.0. This release introduces support for Commodore components to take over the library prefix of another component. A component can take over the library prefix of another component if that component is either not deployed in the same cluster catalog, or if that component is marked deprecated and has nominated the component to be its replacement. See https://syn.tools/commodore/reference/architecture.html#_component_template_libraries for more details.

Apart from this, the release contains many dependency updates. Most notably, the container image now includes Kustomize v5.0.0. See the "Dependency Updates" section below for the full list of dependency updates.

Changes

1.13.0

Summary

We're pleased to announce Commodore v1.13.0. This release vendors the Bitnami `kube-libsonnet` Jsonnet library, and patches a few functions of the library which use Kubernetes API versions that will be removed in Kubernetes 1.25. We've decided to vendor the library in Commodore since the upstream repository isn't very active.

Changes

1.12.0

Summary

We're pleased to announce release v1.12.0 of Commodore. This release adjusts the YAML rendering of postprocessing filter outputs to indent list entries as follows:


list:
- a
- b


This should reduce the amount of noise generated by introducing a postprocessing filter as the formatting now matches the formatting used by Helm and Kapitan.

However, this will generate one noisy diff as we're rolling out Commodore v1.12.0. You can verify that there's no hidden changes in such diffs by using the new Commodore catalog migration option `ignore-yaml-formatting` by running `commodore catalog compile -m ignore-yaml-formatting` to show a diff with all non-semantic YAML changes hidden. The migration treats white space changes, indentation changes, changes in string representation and object ordering as non-semantic.

Additionally, the new release also introduces flag `--force` for `commodore catalog compile`. Starting with this release, `commodore catalog compile` without flag `--force` won't silently discard local changes in the global, tenant, and dependency repo checkouts.

For the global and tenant repo, untracked files, uncommitted changes, and unpushed branches are treated as local changes. For dependency repos, only uncommitted changes are treated as local changes, since we don't delete and recreate the dependency repo checkouts during catalog compilation (in contrast to the global and tenant repo checkouts).

Changes

1.11.0

Summary

We're pleased to announce Commodore v1.11.0. Apart from dependency updates, this release improves the `catalog list` command, introduces support for skipping paths in `inventory lint`, introduces optional filtering of dependencies to sync in `component sync` and `package sync` and adds support for Python 3.11.

The `catalog list` command has new options to sort the output, to filter the output by tenant id, and to print the output in various formats. The new default format is a tabular view intended for humans. To restore the old default behavior, please use `-o id`. Additionally, the command now also provides output formats JSON and YAML which dump the complete Lieutenant responses for consumption by other tools.

In `inventory lint`, we add support for skipping paths both as a command line option and through a `.commodoreignore` file in the root of the directory structure to lint. This can be useful when linting tenant repos which contain YAML manifests which are inputs to component `adhoc-configurations`, and which shouldn't be linted as Commodore inventory classes. Additionally, `inventory lint` now treats a top-level key `parameters` which isn't a dictionary as an error.

Finally, we've added support for filtering the list of depedencies to sync in `component sync` and `package sync` through command line option `--filter`. This option takes a regex and skips any dependencies which don't match the regex. We plan to make this option available in the Commodore component template sync GitHub action for manual runs.

Changes

1.10.0

Summary

We're pleased to announce the release of Commodore v1.10.0. This release provides improved support for rendering kustomizations. Commodore now ships with a bundled helper script which simplifies how users can use `kustomize` from Commodore components.

Additionally, Commodore provides a new function `Kustomization()` in `commodore.libjsonnet` which renders an object which -- when used as a Jsonnet output -- generates a `kustomization.yaml` which can be processed by `kustomize build`.

See the best practices documentation for [using kustomizations] for more details on how to make use of the new features.

[using kustomizations]: https://syn.tools/syn/explanations/commodore-components/kustomizations.html

Changes

1.9.1

Summary

We're pleased to announce the release of Commodore v1.9.1.

This is a patch release which fixes some issues when performing component boilerplate updates and improves the handling of GitHub's secondary rate limits in `commodore component sync`.

See below for the full list of changes.

Changes

Page 3 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.