v0.6.9 2022-08-24

• Added latency metric, which Tracks the time spent waiting on outbound client URLs to respond. #312
• Dependency update, note vulnerabilities
  • github.com/hashicorp/consul/api v1.13.1 // indirect
    Wasn't able to find much info about this one besides the following dep vulns
    • golang.org/x/net
      • https://nvd.nist.gov/vuln/detail/CVE-2021-33194
      • https://nvd.nist.gov/vuln/detail/CVE-2021-31525
      • https://nvd.nist.gov/vuln/detail/CVE-2021-44716
  • Introduces new vuln https://www.mend.io/vulnerability-database/CVE-2022-29526
  • guardrails says github.com/gorilla/websocket v1.5.0 has a high vulnerability but no vulnerabilities have been filed
• JWT Migration #331
  • updated to use clortho Resolver & Refresher
  • updated to use clortho metrics & logging
• Update ancla client initialization
• Update Config
  • Use uber/zap for clortho logging
  • Use xmidt-org/sallust for the zap config unmarshalling
  • Update auth config for clortho
  • Update ancla config