v0.8.0

Full Changelog

Changed

• Refactor of GitLab CI
• Updates maintenance year to 2019
• Removes Anchore.io links
• Removes BountySource links
• Upgrades add-on base image to 2.3.1
• Upgrades hassio-cli to v2.0.1
• Upgrades sqlite to 3.25.3-r0
• Configure Renovate (#30)
• Fixes spelling error in Dockerfile
• Upgrades MariaDB client to 10.2.19-r1
• Upgrades wget to 1.20.1-r0
• Upgrades YAMLlint to 1.14.0

Questions? Join our Discord server! https://discord.me/hassioaddons
Enjoying my add-ons? Consider supporting my work: https://patreon.com/frenck

v0.7.2

This version contains an important security fix, and it is strongly recommend for ALL installations to be upgraded to this version immediately.

Bypass of Authentication

The authentication against Home Assistant can be bypassed by an anonymous and unauthorized user. The issue has been mitigated in the latest release.

To be clear on the subject: This is an add-on issue and not an issue with the Home Assistant authentication itself.

Exact details of the vulnerability are not disclosed in order to give our users the time to upgrade.

Thanks to Lars Larsson (@larsla) for responsibly reporting this vulnerability.

Versions Affected

Affects all releases that support authentication against Home Assistant, add-on versions v0.7.0 and higher. Older releases are not affected.

Full Changelog

Changed

• Upgrades nginx to 1.14.2-r0
• Upgrades YAMLlint to 1.13.0
• Fixes authentication bypass vulnerability

v0.7.1

Full Changelog

Added the colordiff package (thanks for the suggestion @adonnolux) and added support for serial devices.

Changed

• Upgrades nginx to 1.14.1-r0
• Adds support for serial devices
• Adds info about HA auth to README.md (#25) (@PixelJonas)
• Upgrades openssl to 1.0.2p-r0
• Upgrades bind-tools to 9.12.3-r0
• Adds colordiff package

v0.7.0

Full Changelog

This release adds authentication 🔒 against Home Assistant.

From now on, you have to log in with the same username and password and you use to log on to the Home Assistant frontend. No need to provide credentials in the add-on configuration anymore (so, those can be removed).

Changed

• Changed past to paste (#23) (@dayofdoom)
• Adds HA Authentication (#24)
• Upgrades git to 2.18.1-r0
• Upgrades libxml2 to 2.9.8-r1
• Upgrades libxml2-utils to 2.9.8-r1
• Small improvements to HA authentication proxy
• Upgrades Cloud9 Core to c4d1c59

v0.6.0

Full Changelog

Changed

• Upgrades bind-tools to 9.12.2_p1-r0
• Upgrades ncurses to 6.1_p20180818-r1
• Upgrades nginx to 1.14.0-r1
• Upgrades openssh-client to 7.7_p1-r3
• Upgrades Hassio CLI to 1.4.0
• Upgrades base image to v2.3.0
• Adds Hassio API security role
• Upgrades g++ to 6.4.0-r9
• Upgrades OpenSSL to 1.0.2p-r0

v0.5.1

Full Changelog

Changed

• Upgrades base image to v2.1.2
• Upgrades Python to 2.7.15-r1
• Corrects typo in error message

v0.5.0

Full Changelog

Added

• Checks used password against HaveIBeenPwned
• Enforces the use of authentication

Fixed

• Fixes YAML error in GitLab CI build file

Changed

• Upgrades openssl to 1.0.2o-r2
• Enables SSL by default
• Upgrades zip to 3.0-r6
• Upgrades Cloud9 Core to e9490da
• Upgrades hadolint to latest
• Upgrades base image to v2.1.1
• Sets default Shell
• Updates README and links
• Pins yamllint to 1.11.1

v0.4.0

Full Changelog

Added

• Adds ZSH autosuggestions
• Adds ZSH Syntax Highlighting
• Set ZSH as the default shell in the IDE terminals

Changed

• Upgrades base image to v2.0.1
• Upgrades Cloud9 Core to d8917f3
• Updates MOTD to match the core SSH add-on
• Upgrades build-base to 0.5-r1
• Upgrades g++ to 6.4.0-r8
• Upgrades libxml2 to 2.9.8-r0
• Upgrades make to 4.2.1-r2
• Upgrades openssl-dev to 1.0.2o-r1
• Upgrades yarn to 1.7.0-r0
• Upgrades bind-tools to 9.12.1_p2-r0
• Upgrade mariadb-client to 10.2.15-r0
• Upgrades mosquitto-clients to 1.4.15-r3
• Upgrades ncurses to 6.1-r0
• Upgrades git to 2.18.0-r0
• Upgrades libxml2 to 2.9.8-r0
• Upgrades net-tools to 1.60_git20140218-r2
• Upgrades nginx to 1.14.0-r0
• Upgrades nmap to 7.70-r1
• Upgrades nodejs to 9.11.1-r2
• Upgrades openssh-client to 7.7_p1-r2
• Upgrades openssl to 1.0.2o-r1
• Upgrades py2-pip to 10.0.1-r0
• Upgrades Python to 2.7.15-r0
• Upgrades sqlite to 3.24.0-r0
• Upgrades sudo to 1.8.23-r2
• Upgrades tmux to 2.7-r0
• Upgrades zip to 3.0-r5
• Upgrades zsh to 5.5.1-r0

v0.3.0

Full Changelog

Added

• Adds back ARM support (#13)
• Adds the Go-based HassioCLI
• Adds zip
• Adds persistent storage of user and project settings
• Adds nmap v7.60-r2
• Adds pwgen 2.08-r0
• Adds sqlite v3.21.0-r1

Fixed

• Fixes typo in Dockerfile
• Fixes BUILD_ARCH location

Changed

• Moves build-env to latest
• Upgrades base image to v1.4.2
• Upgrades bind-tools to 9.11.3-r0
• Upgrades git to 2.15.2-r0
• Improved workspace settings

Removed

• Removes the old Bash-based HassioCLI

v0.2.0

Full Changelog

Added

• Adds .yamllint configuration
• Adds all architectures to add-on config
• Adds Probot configuration
• Pins down Cloud9 core version
• Adds initial add-on README template
• Adds Gitlab CI

Fixed

• Fixes Markdownlint warning in License
• Fixes hadolint warnings

Changed

• Replaces Changelog with GitHub releases
• Upgrades add-on base image to v1.4.1
• Updates README
• More efficient cloning of oh-my-zsh source
• Updates forum link for add-on
• Updates maintaince to 2018

Removed

• Removes CodeClimate
• Removes CircleCI
• Drops support for armhf and aarch64