OWASP WrongSecrets Files

What's Changed

In this version we upgraded to a much newer version of Spring boot, K8s, did tons of LCM and bugfixes and added a new Challenge!

New Content

• Automate docker compose testing for challenge51 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1851
• Update k8s version to 1.31 by @za in https://github.com/OWASP/wrongsecrets/pull/1853
• Challenge 53: k8s debug container sidecars by @Pastekitoo in https://github.com/OWASP/wrongsecrets/pull/1833
• Explicitly write in the README the required helm version to be installed by @za in https://github.com/OWASP/wrongsecrets/pull/1905
• Remove scripts/install-consul.sh by @za in https://github.com/OWASP/wrongsecrets/pull/1923
• add new contributors by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1924

Bugfixes

• support for non lts java in renovate by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1869
• Fixes for Azure deployment: update readme, TF process, and K8s templates by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1887
• fix: patch storage class to use standard as default by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/1900
• update gcp readme and scripts by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1901
• Nety fix for GCP: prevent segfault when running on GCP with cloud challenges by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1903

LCM

• chore(deps): update dependency org.testcontainers:testcontainers to v1.20.5 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1856
• chore(deps): update dependency com.tngtech.archunit:archunit-junit5 to v1.4.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1861
• chore(deps): update dependency go to v1.24.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1864
• chore(deps): update dependency globals to v15.15.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1863
• chore(deps): update dependency eslint to v9.21.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1862
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.1.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1860
• fix(deps): update aws-java-sdk-v2 monorepo to v2.30.31 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1858
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.21.3 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1855
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.4.3 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1866
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.44.3 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1854
• chore(deps): update pre-commit by @renovate in https://github.com/OWASP/wrongsecrets/pull/1857
• chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1872
• fix(deps): update dependency com.azure.spring:spring-cloud-azure-dependencies to v5.20.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1870
• fix(deps): update dependency nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect to v3.4.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1868
• chore(deps): update dependency io.gatling:gatling-maven-plugin to v4.16.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1871
• chore(deps): update dependency maven-wrapper to v3 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1867
• chore(deps): update docker/dockerfile docker tag to v1.14 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1873
• fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v5.11.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1877
• fix(deps): update dependency com.google.cloud:spring-cloud-gcp-dependencies to v6 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1878
• fix(deps): update aws-java-sdk-v2 monorepo to v2.30.33 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1879
• chore(deps): update lycheeverse/lychee-action action to v2.3.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1874
• chore(deps): update dependency org.testcontainers:testcontainers to v1.20.6 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1884
• chore(deps): update dependency go to v1.24.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1883
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.21.4 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1882
• fix(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.9.2 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1885
• chore(deps): update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.9.2.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1881
• chore(deps): update dependency com.github.spotbugs:spotbugs to v4.9.2 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1880
• chore(deps): update terraform random to ~> 3.7.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1876
• chore(deps): update terraform azurerm to v4.21.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1875
• fix(deps): update dependency org.owasp:dependency-check-maven to v12 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1886
• fix(deps): update dependency org.linguafranca.pwdb:keepassjava2 to v2.2.4 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1890
• fix(deps): update aws-java-sdk-v2 monorepo to v2.30.35 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1889
• updated time-out as clusters might be underprovisioned by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1891
• fix(deps): update aws-java-sdk-v2 monorepo to v2.30.36 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1893
• chore(deps): update dependency org.codehaus.mojo:tidy-maven-plugin to v1.4.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1895
• fix(deps): update dependency org.cyclonedx:cyclonedx-core-java to v10 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1898
• chore(deps): update pre-commit hook psf/black to v25 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1897
• chore(deps): update dependency @commitlint/config-conventional to v19.8.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1894
• Fix: updated cloud deployment dependencies in de readme and pre-checks by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1899
• chore(deps): update pre-commit by @renovate in https://github.com/OWASP/wrongsecrets/pull/1888
• fix(deps): update dependency org.cyclonedx:cyclonedx-core-java to v10.2.1 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1908
• chore(deps): update terraform-gcp to ~> 6.25.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1906
• chore(deps): update dependency globals to v16 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1910
• chore(deps): update go (major) by @renovate in https://github.com/OWASP/wrongsecrets/pull/1911
• chore(deps): update terraform-aws by @renovate in https://github.com/OWASP/wrongsecrets/pull/1920
• chore(deps): update dependency @babel/eslint-parser to v7.26.10 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1912
• chore(deps): update eslint - autoclosed by @renovate in https://github.com/OWASP/wrongsecrets/pull/1917
• chore(deps): update dependency io.gatling.highcharts:gatling-charts-highcharts to v3.13.5 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1913
• chore(deps): update terraform azurerm to v4.22.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1919
• chore(deps): update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.22.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1918
• fix(deps): update aws-java-sdk-v2 monorepo to v2.30.38 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1914
• fix(deps): update go by @renovate in https://github.com/OWASP/wrongsecrets/pull/1909
• chore(deps): update dependency kubernetes-sigs/aws-alb-ingress-controller to v2.12.0 by @renovate in https://github.com/OWASP/wrongsecrets/pull/1915
• final updates before release by @commjoen in https://github.com/OWASP/wrongsecrets/pull/1925

New Contributors

• @Pastekitoo made their first contribution in https://github.com/OWASP/wrongsecrets/pull/1833

Special Thanks

We would like to thank @za , @nbaars , @Pastekitoo , @bendehaan and @commjoen for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.10.3...1.11.1