Wrongsecrets Versions Save

What's Changed

Docs:

• Update README.md by @commjoen in https://github.com/OWASP/wrongsecrets/pull/940

Bugfixes:

• Update Challenge35 as there as a bug in the component ordering by @commjoen in https://github.com/OWASP/wrongsecrets/pull/942
• Update challenge32 to explain external website usage by @commjoen in https://github.com/OWASP/wrongsecrets/pull/948
• Replace Challenge32 with another prompting game (Gandalf) as the old prompting game is shut down by @commjoen in https://github.com/OWASP/wrongsecrets/pull/950
• Fix for challenge29 as there was an issue with decyrpting the actual answer by @commjoen in https://github.com/OWASP/wrongsecrets/pull/949
• Fixes for Challenge17 generation by @commjoen in https://github.com/OWASP/wrongsecrets/pull/951

LCM:

• Bump s4u/setup-maven-action from 1.8.0 to 1.9.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/944

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.8...1.6.9

Special Thanks

Special thanks to @bendehaan , @commjoen, and @djvinnie for their hard work on this release!

What's Changed

New challenges

• Challenge35: Add experimental key by @commjoen in https://github.com/OWASP/wrongsecrets/pull/938

Bugfixes

• Update container-alts-test.yml to test bug fix in action by @commjoen in https://github.com/OWASP/wrongsecrets/pull/939

LCM

• Bump hashicorp/google-beta from 4.75.1 to 4.76.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/933
• Bump aws.sdk.version from 2.20.115 to 2.20.116 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/934
• Bump hashicorp/google from 4.75.1 to 4.76.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/932
• Bump zaproxy/action-baseline from 0.8.2 to 0.9.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/936
• Bump tough-cookie and @cypress/request by @dependabot in https://github.com/OWASP/wrongsecrets/pull/937
• Bump org.webjars:bootstrap from 5.3.0 to 5.3.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/935

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.7...1.6.8

Special Thanks

Special thanks to @bendehaan and @commjoen for their hard work on this release!

What's Changed

Bugfixes:

• Fixes in challengeUI for CTF Party by @commjoen in https://github.com/OWASP/wrongsecrets/pull/900
• Downgrade to patched java17 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/911

LCM:

• Bump spring-cloud-azure-dependencies from 5.1.0 to 5.3.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/890
• Bump @commitlint/config-conventional from 17.6.5 to 17.6.6 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/895
• Bump checkstyle from 10.12.0 to 10.12.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/889
• Bump spring-boot-starter-parent from 3.0.6 to 3.1.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/874
• Bump hashicorp/google-beta from 4.70.0 to 4.71.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/885
• Bump hashicorp/google from 4.70.0 to 4.71.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/886
• Bump azurerm from 3.62.1 to 3.63.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/897
• Bump eslint-plugin-n from 16.0.0 to 16.0.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/892
• Bump eslint from 8.43.0 to 8.44.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/893
• Bump aws.sdk.version from 2.20.91 to 2.20.97 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/888
• Bump spring-cloud-gcp-dependencies from 4.5.0 to 4.5.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/891
• Bump aws from 5.5.0 to 5.6.2 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/896
• Bump minimatch from 9.0.1 to 9.0.2 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/887
• Bump cypress from 12.15.0 to 12.16.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/894
• Bump frontend-maven-plugin from 1.12.1 to 1.13.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/898
• Bump zaproxy/action-baseline from 0.7.0 to 0.8.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/899
• Bump zaproxy/action-baseline from 0.8.0 to 0.8.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/902
• Bump eslint-plugin-jest from 27.2.2 to 27.2.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/910
• Bump cypress from 12.16.0 to 12.17.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/909
• Bump aws.sdk.version from 2.20.97 to 2.20.103 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/905
• Bump word-wrap from 1.2.3 to 1.2.4 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/912
• Bump eslint from 8.44.0 to 8.45.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/908
• Bump frontend-maven-plugin from 1.13.3 to 1.13.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/906
• Bump minimatch from 9.0.2 to 9.0.3 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/904
• Bump datatables from 1.13.4 to 1.13.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/907
• Bump com.diffplug.spotless:spotless-maven-plugin from 2.37.0 to 2.38.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/915
• Bump eslint-plugin-import from 2.27.5 to 2.28.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/923
• Bump org.springframework.boot:spring-boot-starter-parent from 3.1.1 to 3.1.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/929
• Bump org.springframework.cloud:spring-cloud-dependencies from 2022.0.3 to 2022.0.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/913
• Bump cypress from 12.17.1 to 12.17.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/927
• Bump azurerm from 3.63.0 to 3.67.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/918
• Bump hashicorp/google-beta from 4.71.0 to 4.75.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/922
• Bump hashicorp/google from 4.71.0 to 4.75.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/921
• Bump terraform-aws-modules/eks/aws from 19.15.3 to 19.15.4 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/920
• Update terraform-aws-modules/vpc/aws requirement from ~> 5.0.0 to ~> 5.1.1 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/916
• Bump com.google.cloud:spring-cloud-gcp-dependencies from 4.5.1 to 4.7.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/917
• Bump eslint from 8.45.0 to 8.46.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/924
• Bump com.puppycrawl.tools:checkstyle from 10.12.1 to 10.12.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/930
• Bump @commitlint/config-conventional from 17.6.6 to 17.6.7 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/926
• Bump aws.sdk.version from 2.20.103 to 2.20.115 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/919
• Bump org.webjars:jquery from 3.6.4 to 3.7.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/931
• Bump org.thymeleaf.extras:thymeleaf-extras-springsecurity6 from 3.1.1.RELEASE to 3.1.2.RELEASE by @dependabot in https://github.com/OWASP/wrongsecrets/pull/928
• Bump aws from 5.6.2 to 5.10.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/925

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.6...1.6.7

Thanks

Thanks to @commjoen for his hard work on this release!

What's Changed

New Challenges

• feat(#692): Challenge 34 with a focus on determenistic use of KDFs by @commjoen in https://github.com/OWASP/wrongsecrets/pull/866

Small Fixes

• Textual fixes for consistency by @commjoen in https://github.com/OWASP/wrongsecrets/pull/884

LCM:

• Bump maven-checkstyle-plugin from 3.2.2 to 3.3.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/852
• Bump spring-cloud-gcp-dependencies from 4.3.1 to 4.4.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/854
• Bump asciidoctorj.version from 2.5.8 to 2.5.9 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/853
• Bump checkstyle from 10.10.0 to 10.12.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/855
• Bump aws.sdk.version from 2.20.56 to 2.20.78 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/856
• Bump asciidoctor-maven-plugin from 2.2.3 to 2.2.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/857
• Bump jruby-complete from 9.4.2.0 to 9.4.3.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/862
• Bump aws.sdk.version from 2.20.78 to 2.20.82 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/861
• Bump asciidoctorj.version from 2.5.9 to 2.5.10 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/863
• Bump s4u/setup-maven-action from 1.7.0 to 1.8.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/864
• Bump aws.sdk.version from 2.20.82 to 2.20.85 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/865
• Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/875
• Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/868
• Bump eslint from 8.41.0 to 8.43.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/867
• Bump aws.sdk.version from 2.20.85 to 2.20.91 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/869
• Bump spring-cloud-gcp-dependencies from 4.4.0 to 4.5.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/872
• Bump terraform-aws-modules/eks/aws from 19.15.2 to 19.15.3 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/876
• Bump hashicorp/google from 4.67.0 to 4.70.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/877
• Bump http from 3.3.0 to 3.4.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/878
• Bump hashicorp/google-beta from 4.67.0 to 4.70.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/880
• Bump azurerm from 3.58.0 to 3.62.1 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/881
• Bump aws from 5.0.1 to 5.5.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/883
• Bump http from 3.3.0 to 3.4.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/882
• Bump cypress from 12.13.0 to 12.15.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/871
• Bump eslint-plugin-n from 15.7.0 to 16.0.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/873
• Bump http from 3.3.0 to 3.4.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/879
• Bump datatables from 1.13.2 to 1.13.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/870

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.5...1.6.6

Special Thanks

We would like to thank @commjoen and @bendehaan for their hard work on this release.

What's Changed

Documentation:

• #630 Docker image jeroenwillemsen/wrongsecrets:1.5.14-no-vault hangs … by @MarcinNowak-codes in https://github.com/OWASP/wrongsecrets/pull/631
• Update ctf instructions for challenge 30 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/821
• Update README.md (badges & screenshots), challenge1 text, and a ui-bug by @commjoen in https://github.com/OWASP/wrongsecrets/pull/825

Quality updates:

• chore: add Spotless formatter by @nbaars in https://github.com/OWASP/wrongsecrets/pull/790
• UI Test Framework by @RemakingEden in https://github.com/OWASP/wrongsecrets/pull/808
• Automate spotless apply as part of pre-commit by @commjoen in https://github.com/OWASP/wrongsecrets/pull/824
• Fix for okteto; namespace substitution in challenge33.yml by @commjoen in https://github.com/OWASP/wrongsecrets/pull/827
• Scoring UI test tweaks by @RemakingEden in https://github.com/OWASP/wrongsecrets/pull/828
• Pre-release fixes (docs, tests, bugfixes in challenge 33 & challenge 13, pre-commit&node upgrades) and setting up 1.6.5 release by @commjoen in https://github.com/OWASP/wrongsecrets/pull/829

New Features:

• feat(#647): initial scoring and highlighting by @commjoen in https://github.com/OWASP/wrongsecrets/pull/804

New Challenges:

• feat(#765): k8s challenge with securestring by @commjoen in https://github.com/OWASP/wrongsecrets/pull/818

LCM

• Bump cyclonedx-maven-plugin from 2.7.8 to 2.7.9 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/834
• Bump spotless-maven-plugin from 2.36.0 to 2.37.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/833
• Bump spring-cloud-dependencies from 2022.0.2 to 2022.0.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/835
• Bump eslint-config-standard from 17.0.0 to 17.1.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/841
• Bump minimatch from 9.0.0 to 9.0.1 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/837
• Bump cypress from 12.10.0 to 12.13.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/840
• Bump eslint from 8.39.0 to 8.41.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/842
• Bump terraform-aws-modules/eks/aws from 19.13.1 to 19.15.2 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/845
• Bump aws from 4.65.0 to 5.0.1 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/844
• Bump hashicorp/google-beta from 4.63.1 to 4.67.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/839
• Bump hashicorp/google from 4.63.1 to 4.67.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/838
• Update terraform-aws-modules/vpc/aws requirement from ~> 4.0.1 to ~> 5.0.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/846
• Bump spring-cloud-gcp-dependencies from 4.2.0 to 4.3.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/847
• Bump lombok from 1.18.26 to 1.18.28 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/849
• Bump bootstrap from 5.2.3 to 5.3.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/832
• Bump @commitlint/config-conventional from 17.6.1 to 17.6.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/843
• Bump azurerm from 3.54.0 to 3.58.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/836
• Delete secondkey.txt by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/850

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.4...1.6.5

Special Thanks

We would like to thank @bendehaan, @RemakingEden , @nbaars, @MarcinNowak-codes , @commjoen , and @devsecops

What's Changed

New challenges

• Feature(#648): Add the localstorage challenge by @Novice-expert in https://github.com/OWASP/wrongsecrets/pull/716
• Feature(#816): first LLM based challenge by @commjoen in https://github.com/OWASP/wrongsecrets/pull/817
• Feature(#423): Addition of Challenge 31 (third documentation challenge) by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/757

Small updates

• Code tidying, challenge difficulty refactor, removal of unnecessary code by @nbaars in https://github.com/OWASP/wrongsecrets/pull/789
• fix: wire challenges to compute size dynamically. by @nbaars in https://github.com/OWASP/wrongsecrets/pull/820

Other features

• Optimize performance of the app by means of JS minification and enabling GZIP compression by @commjoen in https://github.com/OWASP/wrongsecrets/pull/805
• Fixes for docs and challenges by @commjoen in https://github.com/OWASP/wrongsecrets/pull/806
• Update README.md to add new contributor Novice-Expert by @commjoen in https://github.com/OWASP/wrongsecrets/pull/807

Dependency updates

• build(deps): bump asciidoctorj.version from 2.5.7 to 2.5.8 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/777
• build(deps): bump checkstyle from 10.9.3 to 10.10.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/792
• build(deps): bump cyclonedx-maven-plugin from 2.7.7 to 2.7.8 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/794
• build(deps): bump aws.sdk.version from 2.20.53 to 2.20.56 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/797
• build(deps): bump spring-cloud-azure-dependencies from 5.0.0 to 5.1.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/800
• build(deps): bump aws from 4.64.0 to 4.65.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/801
• build(deps): bump hashicorp/google from 4.62.1 to 4.63.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/799
• build(deps): bump hashicorp/google-beta from 4.62.1 to 4.63.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/791
• build(deps): bump azurerm from 3.53.0 to 3.54.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/796
• build(deps): bump http from 3.2.1 to 3.3.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/793
• build(deps): bump http from 3.2.1 to 3.3.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/798
• build(deps): bump http from 3.2.1 to 3.3.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/795
• build(deps): bump minimatch from 8.0.3 to 9.0.0 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/779
• build(deps): bump lycheeverse/lychee-action from 1.7.0 to 1.8.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/819

New Contributors

• @Novice-expert made their first contribution in https://github.com/OWASP/wrongsecrets/pull/716

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.3...1.6.4

Special Thanks

Special thanks to @nbaars , @bendehaan , @Novice-expert , @puneeth072003 , @commjoen, @mikewoudenberg , and @h43z for their hard work on this release!

What's Changed

Bugfixes

• Fix for string checks for challenge 7, 13, and 14 by @commjoen in https://github.com/OWASP/wrongsecrets/pull/788

New features

• Disabling springdoc on heroku by @commjoen in https://github.com/OWASP/wrongsecrets/pull/761
• Performance improvement 1: Enable Http caching of js/css resources. by @commjoen and @nbaars in https://github.com/OWASP/wrongsecrets/pull/763

LCM

• build(deps): bump lycheeverse/lychee-action from 1.6.1 to 1.7.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/764
• build(deps-dev): bump @commitlint/config-conventional from 17.4.4 to 17.6.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/768
• build(deps-dev): bump eslint from 8.37.0 to 8.39.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/767
• build(deps): bump spring-boot-starter-parent from 3.0.5 to 3.0.6 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/771
• build(deps): bump maven-checkstyle-plugin from 3.2.1 to 3.2.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/774
• build(deps): bump cyclonedx-maven-plugin from 2.7.6 to 2.7.7 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/786
• build(deps): bump spotbugs-maven-plugin from 4.7.3.3 to 4.7.3.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/785
• build(deps): bump spring-cloud-gcp-dependencies from 4.1.3 to 4.2.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/770
• build(deps): bump aws.sdk.version from 2.20.39 to 2.20.53 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/787
• build(deps): bump hashicorp/google-beta from 4.59.0 to 4.62.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/769
• build(deps): update terraform-aws-modules/vpc/aws requirement from ~> 3.19.0 to ~> 4.0.1 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/783
• build(deps): bump random from 3.4.3 to 3.5.1 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/781
• build(deps): bump aws from 4.61.0 to 4.64.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/780
• build(deps): bump terraform-aws-modules/eks/aws from 19.12.0 to 19.13.1 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/782
• build(deps): bump azurerm from 3.50.0 to 3.53.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/773
• build(deps): bump random from 3.4.3 to 3.5.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/778
• build(deps): bump random from 3.4.3 to 3.5.1 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/776
• build(deps): bump hashicorp/google from 4.59.0 to 4.62.1 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/775
• Update README.md by @commjoen in https://github.com/OWASP/wrongsecrets/pull/766

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.2...1.6.3

Special Thanks

Special thanks to @commjoen and @nbaars for their hard work on this release!

What's Changed

This is a big documentation update, with which we are now at 100% passing of the OpenSSF: . Next, we have a new challenge added, and are preparing to add a few more in a couple of weeks ;-).

Documentation:

• Fix: Small fix in Contributing.md by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/712
• fix: fix link in pre-commit badge by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/711
• feat(#680): first swagger api setup by @commjoen in https://github.com/OWASP/wrongsecrets/pull/710
• fix: add new challenge label to issue template by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/720
• Feat(#695): mention AWS as a sponsor by @commjoen in https://github.com/OWASP/wrongsecrets/pull/722
• Updates the Javadocs and required docs for OpenSSF by @commjoen in https://github.com/OWASP/wrongsecrets/pull/718
• Add missing period by @szh in https://github.com/OWASP/wrongsecrets/pull/725
• feat(#680): added more javadoc by @commjoen in https://github.com/OWASP/wrongsecrets/pull/739
• Make readme more inviting by @commjoen in https://github.com/OWASP/wrongsecrets/pull/759
• (noticket): adding missing contributors by @commjoen in https://github.com/OWASP/wrongsecrets/pull/760
• Update readme with badge locations and setup linkedin post by @commjoen in https://github.com/OWASP/wrongsecrets/pull/741

LCM:

• build(deps-dev): bump eslint from 8.36.0 to 8.37.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/733
• build(deps-dev): bump eslint-plugin-n from 15.6.1 to 15.7.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/735
• build(deps): bump spring-boot-starter-parent from 3.0.4 to 3.0.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/726
• build(deps): bump cyclonedx-maven-plugin from 2.7.5 to 2.7.6 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/730
• build(deps): bump checkstyle from 10.8.0 to 10.9.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/744
• build(deps): bump spotbugs-maven-plugin from 4.7.3.2 to 4.7.3.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/745
• build(deps): bump aws.sdk.version from 2.20.23 to 2.20.37 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/728
• build(deps): bump spring-cloud-dependencies from 2022.0.1 to 2022.0.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/748
• build(deps): bump spring-cloud-gcp-dependencies from 4.1.1 to 4.1.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/729
• build(deps): bump jruby-complete from 9.4.1.0 to 9.4.2.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/731
• build(deps): bump asciidoctor-maven-plugin from 2.2.2 to 2.2.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/746
• build(deps): bump thymeleaf-layout-dialect from 3.2.0 to 3.2.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/749
• build(deps): bump springdoc-openapi-starter-webmvc-ui from 2.0.4 to 2.1.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/747
• build(deps): bump aws.sdk.version from 2.20.37 to 2.20.38 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/750
• build(deps): bump spotbugs-annotations from 4.6.0 to 4.7.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/753
• build(deps): bump aws.sdk.version from 2.20.37 to 2.20.39 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/752
• build(deps): bump hashicorp/google from 4.55.0 to 4.59.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/732
• build(deps): bump hashicorp/google-beta from 4.55.0 to 4.59.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/734
• build(deps): bump azurerm from 3.45.0 to 3.50.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/736
• build(deps): bump terraform-aws-modules/eks/aws from 19.10.0 to 19.12.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/738
• build(deps): bump aws from 4.56.0 to 4.61.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/737
• build(deps): bump minimatch from 7.3.0 to 8.0.3 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/754
• build(deps): bump jquery from 3.6.3 to 3.6.4 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/751

Bugfixes

• fix: save selected theme by @turjoc120 in https://github.com/OWASP/wrongsecrets/pull/715

New Challenges

• Addition of Challenge 29 by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/697

New Contributors

• @szh made their first contribution in https://github.com/OWASP/wrongsecrets/pull/725
• @turjoc120 made their first contribution in https://github.com/OWASP/wrongsecrets/pull/715

Special thanks to

Special thanks to: @bendehaan , @puneeth072003 , @szh , @turjoc120, @nbaars , and @commjoen for their hard work on this release!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.1...1.6.2

What's Changed

UI Changes:

• Add a link to our OWASP Project page and add a Donate link for cloud cost coverage by @commjoen in https://github.com/OWASP/wrongsecrets/pull/691
• feat(#707): Initial overhaul for ui, licenses to be included by @commjoen in https://github.com/OWASP/wrongsecrets/pull/708

Bugfixes:

• Fix(#701): ui rendering on XS screens (stack not rendering) fixed: empty collumn filled again on mobile in portraid by @commjoen in https://github.com/OWASP/wrongsecrets/pull/704

Improved Q/A and OpenSSF Compliance:

• Feat(#683): fix codeql build and a fix for detected issues by @commjoen in https://github.com/OWASP/wrongsecrets/pull/693
• feat(#696): add pre-commit auto-fix by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/703
• feat(#684): add DAST with ZAP by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/705
• 698 Integrate spotbugs and fix many potential java bugs by @commjoen in https://github.com/OWASP/wrongsecrets/pull/700

New Challenge:

• Adding Challenge 28 by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/690

Special thanks to: Special thanks to @bendehaan , @puneeth072003, @nbaars , and @commjoen for making this release a reality!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.6.0...1.6.1

What's Changed

Key Changes

the following items where the core of this release:

• BREAKING CHANGE: re-license project under AGPLv3 by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/627
• Upgrade to kubernetes 1.25 for all K8s environments by @commjoen in https://github.com/OWASP/wrongsecrets/pull/652
• Enable CTF party in Okteto as we no longer always have heroku. Try https://wrongsecrets-ctf-commjoen.cloud.okteto.net/ . By @commjoen in https://github.com/OWASP/wrongsecrets/pull/675

Bug fixes

The following bug fixes were introduced in order to have a smooth experience with the challenges as a user:

• Update challenge13.yml so that the workflow is triggered every month so you can do the challenge by @commjoen in https://github.com/OWASP/wrongsecrets/pull/620
• fix(#676): replaced thymeleaf unwrapped expressions and updated contributing.md by @commjoen in https://github.com/OWASP/wrongsecrets/pull/677
• Fix for challenge 19 and 20 on ARM: now all challenges work on (Linux/Mac OS) with ARM (aarch64) again.
• Updated with #649 RBAC detailed description reason by @madhuakula in https://github.com/OWASP/wrongsecrets/pull/672

Development support updates

We had a lot of work in this release done to make it easier for you to contribute to the project:

• fix: improve PR template by @bendehaan so that PR checklists are more complete in https://github.com/OWASP/wrongsecrets/pull/622
• feat: add CODEOWNERS by @bendehaan so that PRs are better automated in https://github.com/OWASP/wrongsecrets/pull/629
• feat: add commitlint by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/628
• feat: add issue templates for three categories by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/655
• Create SECURITY.md by @commjoen in https://github.com/OWASP/wrongsecrets/pull/656
• Beginner Guide Submission by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/653
• Extended support for ARM on linux and Musl based development environments: Feat(#618) detect musl by @commjoen in https://github.com/OWASP/wrongsecrets/pull/664
• Adding the Table of contents by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/668
• doc(x): added @puneeth072003 as contributor by @commjoen in https://github.com/OWASP/wrongsecrets/pull/669
• Change in code for windows users and adding remark in contributing.md by @puneeth072003 in https://github.com/OWASP/wrongsecrets/pull/678
• feat: add eslint to pre-commit by @bendehaan in https://github.com/OWASP/wrongsecrets/pull/688
• feat(#631):first podman and Colima test by @commjoen in https://github.com/OWASP/wrongsecrets/pull/651
• include spring boot baeldung tutorial by @commjoen in https://github.com/OWASP/wrongsecrets/pull/621
• Reduce confusion on slack channel links by @commjoen in https://github.com/OWASP/wrongsecrets/pull/626
• Small cleanups from spring boot3 migration by @commjoen in https://github.com/OWASP/wrongsecrets/pull/674

LCM/Patches:

• Bump class-validator and javascript-obfuscator in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/623
• Bump s4u/setup-maven-action from 1.6.0 to 1.7.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/633
• Bump lycheeverse/lychee-action from 1.5.4 to 1.6.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/63
• Bump cyclonedx-maven-plugin from 2.7.4 to 2.7.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/636
• Bump spring-boot-starter-parent from 3.0.2 to 3.0.3 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/643
• Bump spring-cloud-gcp-dependencies from 4.0.0 to 4.1.1 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/644
• Bump aws.sdk.version from 2.19.33 to 2.20.12 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/641
• Bump datatables from 1.13.1 to 1.13.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/645
• Update hashicorp/google requirement from ~> 4.52.0 to ~> 4.54.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/642
• Bump terraform-aws-modules/eks/aws from 19.7.0 to 19.10.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/638
• Update aws requirement from ~> 4.53.0 to ~> 4.56.0 in /aws by @dependabot in https://github.com/OWASP/wrongsecrets/pull/639
• Update hashicorp/google-beta requirement from ~> 4.52.0 to ~> 4.54.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/637
• Update azurerm requirement from ~> 3.42.0 to ~> 3.45.0 in /azure by @dependabot in https://github.com/OWASP/wrongsecrets/pull/635
• build(deps): bump cyclonedx-core-java from 7.3.1 to 7.3.2 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/662
• build(deps): bump checkstyle from 10.7.0 to 10.8.0 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/657
• build(deps): bump erzz/codeclimate-standalone from 0.0.4 to 0.0.5 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/671
• build(deps): bump minimatch from 6.1.6 to 7.3.0 in /js by @dependabot in https://github.com/OWASP/wrongsecrets/pull/658
• build(deps): bump aws.sdk.version from 2.20.12 to 2.20.14 by @dependabot in https://github.com/OWASP/wrongsecrets/pull/661
• build(deps): update hashicorp/google requirement from ~> 4.54.0 to ~> 4.55.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/660
• build(deps): update hashicorp/google-beta requirement from ~> 4.54.0 to ~> 4.55.0 in /gcp by @dependabot in https://github.com/OWASP/wrongsecrets/pull/659

New Contributors

• @puneeth072003 made their first contribution in https://github.com/OWASP/wrongsecrets/pull/653

Special thanks to

Special thanks to @madhuakula , @bendehaan , @puneeth072003, @MarcinNowak-codes, and @commjoen for making this release a reality!

Full Changelog: https://github.com/OWASP/wrongsecrets/compare/1.5.14...1.6.0