release: on-prem 2026-07-15-001

.github/workflows/smoke-test-services.yml

@@ -104,6 +104,7 @@ jobs:
           echo "Creating MongoDB backup..."
           docker compose -f docker-compose.full.yml exec -T mongodb mongodump \
             -u "$MONGODB_USERNAME" -p "$MONGODB_PASSWORD" --authenticationDatabase admin \
+            --db "$MONGODB_DATABASE" \
             --archive=/data/db/backup.archive
           docker compose -f docker-compose.full.yml cp mongodb:/data/db/backup.archive ./mongodb-backup.archive
           echo "✅ Backup created"

docs/backup-restore.md

@@ -67,6 +67,7 @@ docker compose exec mongodb mongodump \
   -u "$MONGODB_USERNAME" \
   -p "$MONGODB_PASSWORD" \
   --authenticationDatabase admin \
+  --db "$MONGODB_DATABASE" \
   --archive=/data/db/backup.archive
 
 # Copy backup out of container

on-prem/.env.example

@@ -53,7 +53,7 @@ GITLAB_STATE_SECRET=
 
 # Currents application images
 DC_CURRENTS_IMAGE_REPOSITORY=513558712013.dkr.ecr.us-east-1.amazonaws.com/currents/on-prem/
-DC_CURRENTS_IMAGE_TAG=2026-01-26-001
+DC_CURRENTS_IMAGE_TAG=2026-07-15-001
 
 # Application URLs
 APP_BASE_URL=http://localhost:4000

on-prem/CHANGELOG.md

@@ -6,6 +6,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2026-07-15-001] - 2026-07-15
+
+### Compose File Changes
+- Added SSO volume mount to compose templates (requires `./scripts/generate-compose.sh` if using custom templates)
+
+### New Environment Variables
+- `SSO_SAML_IDP_METADATA_FILE`, `SSO_SAML_ISSUER` — required to enable SAML SSO
+- `SSO_SAML_PROVIDER_ID`, `SSO_SAML_DEFAULT_ROLE`, `SSO_SAML_AUTHN_REQUESTS_SIGNED`, `SSO_SAML_SP_CERT_FILE`, `SSO_SAML_SP_KEY_FILE` — optional SAML SSO configuration
+- `DC_SSO_VOLUME` — SAML SSO files directory (IdP metadata + optional SP PEMs)
+
+### Added
+- SAML SSO support — delegate sign-in to your SAML 2.0 identity provider (Okta, Entra ID, etc.)
+- GitHub Container Registry (GHCR) as an alternative image source for customer accounts without AWS IAM access
+- Version discrepancy check in `check-env.sh` — warns when `DC_CURRENTS_IMAGE_TAG` does not match `on-prem/VERSION`
+
 ## [2026-01-26-001] - 2026-01-26
 
 ### Added

on-prem/VERSION

@@ -1 +1 @@
-2026-01-26-001
+2026-07-15-001

on-prem/docker-compose.cache.yml

@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: cache - Cache (redis)
 #
 # Generated by: ./scripts/generate-compose.sh

on-prem/docker-compose.database.yml

@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: database - Database services (redis, mongodb, clickhouse)
 #
 # Generated by: ./scripts/generate-compose.sh

on-prem/docker-compose.full.yml

@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: full - All services (redis, mongodb, clickhouse, rustfs)
 #
 # Generated by: ./scripts/generate-compose.sh