Version 0.15.1

Changelog

• Bump enrich to 3.6.1 (#371)

Version 0.15.0

Replacing Elasticsearch with Opensearch

Until this version, Snowplow data was loaded to Elasticsearch 6.x in the Mini. However, a licensing change in Elasticsearch prevented us from upgrading it to more recent versions. To make sure we stay up to date with important security fixes, we've decided to replace Elasticsearch with Opensearch. Also, Kibana is replaced with Opensearch Dashboards.

Opensearch is a fork of open source Elasticsearch 7.10. Therefore this change shouldn't affect Mini users much. To minimize the impact further, we've tried to make as minimal a change as possible. In Mini, you can still access Opensearch with the /elasticsearch endpoint and Opensearch Dashboards with the /kibana endpoint.

The only breaking change this migration would bring is the removal of mapping types. Since this change was made in Elasticsearch 7.x, it is part of Opensearch too. For Mini users, it means that you don't have to provide a mapping type in your search queries anymore when accessing your data in good or bad indices. For example, good events count can be found using the following endpoint in previous versions: /elasticsearch/good/good/_count. Starting with 0.15.0, it can be found using this endpoint: /elasticsearch/good/_count.

Changelog

• Replace Elasticsearch with Opensearch (#367)
• Bump postgres to 15.1 (#369)
• Bump collector to 2.8.2 (#369)
• Bump enrich to 3.6.0 (#369)
• Bump Iglu Server to 0.8.7 (#369)
• Change versions in the Packerfile according to the Git tag (#370)

Version 0.14.2

We are pleased to announce version 0.14.2 of Snowplow Mini

Mini is now running Enrich 3.2.5

Mini now has Enrich 3.2.5 running inside of it. You'll be especially interested in this update if you are configuring Custom API Enrichments with an API that checks the Accept header, or a Mailgun webhook. More details are in this release announcement for Enrich 3.2.5.

Even if don't need the latest version of Enrich 3.2.5 on your Mini, it is still a good idea to upgrade to 0.14.2 to ensure that you get the latest security updates and fixes.

Version bumps and fixes

Bump collector to 2.7.0 (#360)
Bump Elasticsearch Loader to 1.0.7 (#361)
Fix links on overview page (#359)
Update how gpg key is loaded when installing Caddy (#364)
Fix synced folder failing on Windows due to lack in NFS support (#365)

Version 0.14.1

A patch release that bumps the AWS source AMI to a later version, and runs the distroless flavour of the collector docker image.

Changelog

• Run distroless version of collector docker image (#354)
• Dynamically choose most recent source_ami (#353)

Version 0.14.0

This release has improved security features, such as adding CSP headers and redirecting from http to https. It adds swagger UIs for the control plane and for Iglu Server, for more convenient management of the services. And it bumps several Snowplow applications to newer versions.

Changelog

• Bump collector to 2.6.0 (#350)
• Redirect http to https on authenticated services (#346)
• Bump postgres to 14.2 (#345)
• Bump Enrich to 3.0.2 (#344)
• Replace control-plane ui with swagger ui (#343)
• Remove wait-for-postgres in docker-compose (#342)
• Fix Iglu Server's swagger ui (#340)
• Bump Iglu Server to 0.8.4 (#341)
• Add swagger ui (#337)
• Use Content-Security-Policy headers (#338)
• Use project's go binary in CI (#352)

0.13.7

What's Changed

• Release/0.13.7 by @oguzhanunlu in #348

Full Changelog: 0.13.6/gcp/xxlarge...0.13.7/gcp/xxlarge

0.13.6

• Bump collector to 2.5.0 (#333)
• Bump Elastic stack to 6.8.22 (#334)
• Upgrade policykit-1 to latest available (#335)
• Fix /metrics endpoint (#331)

0.13.5

Bump stream collector to 2.4.5 (#329)

0.13.4

Fix JAVA_OPTS environment variable in the local docker-compose (#326)
Bump elasticsearch loader to 1.0.4 (#325)
Bump stream enrich to 2.0.5 (#324)
Bump stream collector to 2.4.4 (#323)
Change implementations of zxcvbn (#328)

0.13.3

This patch release upgrades stream-collector, enrich and elasticsearch-loader to latest versions, in which the log4j security vulnerability has been addressed.