Features

• Add tee-container-log-redirect option in terraform
• Create logging library for inference consented logs
• Forward per request consented debugging config to roma callback
• Support CPU isolation in the inference sidecar

Bug Fixes

• [IsolateBuyerAndSellerCodeExecution] Add a new code wrapper with only scoreAd and reportResult
• clean up log verbosity 3

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"c6b8dec8320436b3c2dbc501c30f5639f76fdb1592a197b8b4386e7f71dbc2bc929d74dd7ed2d3e3dff62bb169b7d1fc"}
• auction_service_prod
  • {"PCR0":"12891948854f4127c3d0b0dad8868d165b78cd29d1e633a3d4536236d0f0d654636f7a46f473bb474293894108b73b83"}
• bidding_service_non_prod
  • {"PCR0":"c99a0d0fb6ec06192d413ee123377f13bf323c5d5d00695b0094fd01c053650e27d5e38caebcfa83d4c75330e3e95f6c"}
• bidding_service_prod
  • {"PCR0":"815582a3cc16e6be195d4de619893e0b884d7211b0d149246e792c15fee5e01e6bd9e0e6a7ed4135396177756c8d1f02"}
• buyer_frontend_service_non_prod
  • {"PCR0":"04515a4de24244b48669b8ed5ba28b5fb7ad71132650f3da05644f3ad266fdc502b0dfce9af553c84e0a36fdc1936d3a"}
• buyer_frontend_service_prod
  • {"PCR0":"364c5a53d19787886800edc1531f620f18a6323a23ced77d2edbf2ae42f3f5575a7492e26ae06288ca1f3f208611c0bd"}
• seller_frontend_service_non_prod
  • {"PCR0":"c3fe05a04b0b804ca071aaa8e2bc90780c9dfd8a8ab41ba75720b8bb516f8314ee3cbf0cf859088b295e5e9caf0af43a"}
• seller_frontend_service_prod
  • {"PCR0":"db9e65e8b9d13784cdc3e10f847e47acdc1c5629bfc65d0e4fa1be3b36a9bcb511dcd6ee617d4929e6c2f1adc19d686b"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:7d1fe37cf6e5a5c77b02c86b1d72ed76a6fa74844fcf266ac93f35e8487dead9
• auction_service_prod
  • sha256:69ee79548fac8b54d7978807b427e7b5a999747d91d79ea911cf3a6f71facbf0
• bidding_service_non_prod
  • sha256:ebe36830b3cea897b5453f927defe76fc1af6897b587a722f14a9002ba3b6204
• bidding_service_prod
  • sha256:f4f29cefcab0e37bc4f6241eac2ea5d88bc60edd07f9bf016f86757c48dbe163
• buyer_frontend_service_non_prod
  • sha256:6b469806a40f648d12fab44e641ab1993f3f82852f6915b8c0bd7f5d35fe118f
• buyer_frontend_service_prod
  • sha256:5a33ecdfc5ead27e747f5f345bc463ce416056fff2a220173d23932acf6ad4a4
• seller_frontend_service_non_prod
  • sha256:994e76fd7971e49efc01210575b9ff77d6dcc00d9705722ad4778d82377bc83a
• seller_frontend_service_prod
  • sha256:c41c80c8ef347df2e7d8786b8cb265d51941e6809164c8bafde4fbc9cc3a0874

Features

• Add the CPU affinity lib for inference

Bug Fixes

• Cap debug reporting URL
• Fix the recency value passed to generateBid and scoreAds
• make aws-image-tag optional
• remove unitOverride in gcp seller dashboard terraform
• replace ABSL_LOG with PS_LOG in reactors
• update empty device signals to be an object, not string

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"4191c21a8973401955f30c885aec3b55547dd493b9ceff41591b686edc8d3cc789638d3a53f9f43cba8da9aa40164797"}
• auction_service_prod
  • {"PCR0":"c827fe8e9a51b315da40bc318c275ecb850b2ca28f4d06e609573cec9e0368ba59bd024c88f0b0a199c38ed69e690fca"}
• bidding_service_non_prod
  • {"PCR0":"102cf0117cc5ed5e82f5fc9c22dcac805ab93bd6c6a96b6b8d33a8e4d25cb9065a92e0c599e40e7cb25992ac34f889a4"}
• bidding_service_prod
  • {"PCR0":"a1dd9b41377ba31c14e251529c885ab52761dba428ad47472c2b899ad52e30a558549263a70d204d79ed9c4757ed7cfc"}
• buyer_frontend_service_non_prod
  • {"PCR0":"5612a1af92f1e393bf6cd88de43063aabb5c75a05834fbbefba08553bd3fe726964b6fa673c3cc5d39abbaf74d5f9e09"}
• buyer_frontend_service_prod
  • {"PCR0":"d00d2845edffe63f5c35a391ff6416e770b30b867f13bb012e8de03e22e60178ca6dd8a4d12037eacfcc89158645dbeb"}
• seller_frontend_service_non_prod
  • {"PCR0":"4c72b681d663128ebc23e3153d0c1058143fb4247031461cd0e8fdcd686a5be81743c4325c72f8387a435ae13d08018d"}
• seller_frontend_service_prod
  • {"PCR0":"ccd3f0199a424d3dbcb240b65a3f184a8f407189bd96fde4e0fd21ba2cdf5defec8ce05dd97f5034e5dc4058a2498719"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:545ac097cd27067e730737c6d7d408dec8429fa6824d8a1024d6adb98de538a2
• auction_service_prod
  • sha256:1c50ee50620dc2654c4e8ba0fc4c790575849dc23b0044a19a143bc3f1ab5ff1
• bidding_service_non_prod
  • sha256:d7f1101df85d2aeb4c013b49ab1ddff478798c38fa12c7091eec8dd4767d189e
• bidding_service_prod
  • sha256:cd7a07bbcb79f7cf51678922ada5574ee454187bb229cd50ef21c05119191569
• buyer_frontend_service_non_prod
  • sha256:b1ca76216d8bfd0e7748cba72e9574f1b5fd9fde17eedd5a6ccfb99248b6d70f
• buyer_frontend_service_prod
  • sha256:4a9cb247b0a9b0eea07baf346ca5150bae2f94715807d895521290ae100cc6e6
• seller_frontend_service_non_prod
  • sha256:d793d8f472dade0dadb10c821dbf17178e9ec3facd1c168fcee20aa40ce9eaae
• seller_frontend_service_prod
  • sha256:4bda63706bfd60df071a73f5ed1aecf4910f4782446be4c44da4e886ee27a7e6

Features

• [Debug Reporting] Enable debug reporting by default
• [DebugReporting] Add a log to get the libcurl queue time
• add ability to tag AMIs
• Add markdown-link-check to pre-commit
• add support for AWS CodeBuild
• add support for GCP Cloud Build
• API Updates for Bid Currency Support for Top-Level Seller in Server-Orchestrated Multi-Seller Auctions
• Enable TCMalloc for all B&A servers
• support sending Nitro Enclave logs to AWS CloudWatch for debugging

Bug Fixes

• [Temp] Adds buyer bid to top level auctions for Chrome < v125
• Adjust ps_vlog pre-commit hook to avoid recursing symlinks
• clean up log verbosity 2
• deps: Upgrade clang-format to v18
• deps: Upgrade pre-commit hooks
• Ensure that the debug url length is capped

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"09dd139f317ee647e1124c582173c1ed85c5ce99b619e329503a5b32d5c2ae91cd6d72ca396218cb8a6f3b19885a6642"}
• auction_service_prod
  • {"PCR0":"e08e382c553051907c45dcbba990ab9f94a80cd6c9191c2a1eb6dd7ce7a1233077d9898e7acb684b59355b944a44b270"}
• bidding_service_non_prod
  • {"PCR0":"bdfc15281dc0746024127a1cf4073e3c8058a50610c3636f280843f2d1bd6484438161ed8f9ee54cc189c0b08b33b657"}
• bidding_service_prod
  • {"PCR0":"1a38b923d1c5f58ca976f40a4d930f30f01d53387966d84ad9d745d9dd484d59663143d689f1f8fe52d81bde50cb99b2"}
• buyer_frontend_service_non_prod
  • {"PCR0":"3982a837120d02416f5f951d7b767668397fbcfd02545286eac6aa2463e76c785f81f417869583520a5f7f42af9f413e"}
• buyer_frontend_service_prod
  • {"PCR0":"ad885d16769af8042ad234c72dee1b20037e2c05a052a00d8956cca97be888ff06b995b02b2c3f22f383f291d96f9989"}
• seller_frontend_service_non_prod
  • {"PCR0":"6aff2f19becdcd938fda096816027e1e08f76ea4d6192ea635304ea9ed671f1c781501a0121acf2102e3f29dee289c17"}
• seller_frontend_service_prod
  • {"PCR0":"c8af50e8308d5fc891f18d80d93f5a3d874a5caf9611f3dba98f63a36f65fb89ddc297fba7ef6690c3da428acc4962ad"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:27fc3aa1531fd25d50caea36625c95e6d7172e0f512d1c38b0dd8193b8d5e34f
• auction_service_prod
  • sha256:c5ac6fafd203d7ef5693da3ec51cf781cee41f2ad6f9d9b127be9075112acbc9
• bidding_service_non_prod
  • sha256:5dd928b4303c0fef8516837f1158994eecc52ad23cfc7a28ea6a16147fbc8fc9
• bidding_service_prod
  • sha256:2c12e0c8e97d39325e85ff41356ff7ddf66cc3380bc3c03111b23312f94af373
• buyer_frontend_service_non_prod
  • sha256:5915392a8384a4c6d79222ae3e60eb4e58961805f39df95a5afa60452e1b7501
• buyer_frontend_service_prod
  • sha256:813074a7e39178f2749e5cc69fb8f030ca34b306d24572fbc5bc52354b4d5c01
• seller_frontend_service_non_prod
  • sha256:1ae3b4e5e9f6f7c99a7686b22ea2c3687a6e295d6a6e8d1e33a5d3ef22c8c4f3
• seller_frontend_service_prod
  • sha256:a561c6d8fbf3e12ac2933136fbe81f48d2ba85ee8777737e974847e4dad861c9

Alert: Please do not upgrade to this version if you're expecting to receive traffic from Chrome v124 and earlier versions.

This release depends on changes in Chrome v125 and is not backwards compatible with Chrome v124. Chrome v125 is not yet released in Stable and is expected to release on May 14, 2024 (https://chromereleases.googleblog.com/2024/04/chrome-beta-for-desktop-update_17.html).

Features

• Ignore unknown fields in the generateBid response
• Add buyer_reporting_id to SelectAdResponse
• Add support for buyerReportingId in reportWin()
• Set buyer_reporting_id in ScoreAdsRequest
• Set buyerReportingId in AdWithBid
• Add API changes in GenerateBidRespose and ScoreAdsRequest to support BuyerReportingId
• Add API and schema changes for buyerReportingId and buyerAndSellerReportingId
• Add runtime check for correct inference backend version
• Adds debug info to secure invoke response
• Adds implementation of GetComponentAuctionCiphertexts API
• Adds optional flag to configure cloud platforms for component sellers
• allow AWS Session Manager instance connection
• enable bucket fetching for score ad
• Enables and adds tests for GetComponentAuctionsCiphertexts API
• Enables Top Level Auctions feature
• Implement Support for Bid Currency in Reporting
• Set Seller Rejection Reason on AdWithBid for Mismatch with Expected Buyer Currency
• Set Seller Rejection Reasons on AdScore for currency-related rejectons
• Support inference runtime configurations
• Support Interest Group Origin in InterestGroup and AuctionResponse
• Top Level auction does not accept multiple results from same seller
• upload aws/gcp hashes as artifacts on release

Bug Fixes

• Correct check condition in inference main
• Increase the gRPC recv message limit for the inference sidecar
• Pass complete ad object to scoreAd
• Remove redundant clang-tidy repo, move config to .clang-tidy
• RPC is finished properly in top level auction with reporting
• Temporarily add bazel_clang_tidy repo

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"ce8882c991fefd532255df149d824d33a0448ac6ec64e74b4dd9762e57ab0247db534ef3cc26cb858b055201db84cdc7"}
• auction_service_prod
  • {"PCR0":"f93daf638c639fdd876d1bb3d36658fbd809f255f23a27ab085889bcbef34a61532edd429db5f1306ac805952a61b013"}
• bidding_service_non_prod
  • {"PCR0":"9969969ba2d715dd90c0c07c5748bc958e354fe667ff98635e90f169c037f460d053b73e1ed3056b45bcfb1ae3178534"}
• bidding_service_prod
  • {"PCR0":"eb45ea0aa945c500c7d8dc1aa1fef98c1e90b93cd6649e3c6d2bc2768191942d9d1f0f1795d3262a07a00c4a61cec33e"}
• buyer_frontend_service_non_prod
  • {"PCR0":"5ad5f4f0a21efe0c6c957074d3912a9a6a662e2547a4ad41c0361a7457cf6236c42a9c7a510bf75727bd4946e71f4a10"}
• buyer_frontend_service_prod
  • {"PCR0":"f5a95af5f848d653c744251d49f189f7df52fcf6d26cc7bd9700553b5dd57c81e3b8f8bad47b4419d34761ad07dc58b4"}
• seller_frontend_service_non_prod
  • {"PCR0":"719ab719bbccd9e9643869e5eeed9e25c917addfa54207341ece6a48d2fbf1680bde645f892f45d71e3e473b39945c7d"}
• seller_frontend_service_prod
  • {"PCR0":"6b6bf14e93e1422783bdd0fc299bed56294c0bdba3bfdc67224bc4b353cbfd52e7936a5380c8aa72df04995a92f0eed8"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:121d916eee7a23ab6eee5af6be004bbe5a80c01012814807e73c6c385987ab3f
• auction_service_prod
  • sha256:b074557974e0b94e553ae62eba873400d538c06276e8090406a1195398def472
• bidding_service_non_prod
  • sha256:b965ac7f1de0f5f7cc6932678cfb5bb7e4f22bb4ba9b550af1c61e328db48874
• bidding_service_prod
  • sha256:4d4684e5d03b542a039f965ef3aaa616cacd2575cedb32b3c9bf3ecc4ae72a17
• buyer_frontend_service_non_prod
  • sha256:cf7a61c3dd0d35061b1394f9ea80f69205492333e3ea04bd3f8d635b733d4b3b
• buyer_frontend_service_prod
  • sha256:603587e805dc6f540eae329f222e254d0e7c8da789d5d83a4bc276ff4ff3ba98
• seller_frontend_service_non_prod
  • sha256:093f67d98049a7ce381722d58f947b198849a7140a0b992133ca3da5a073c55a
• seller_frontend_service_prod
  • sha256:21b4d83532adf05281a9c50d6a4ee660c1e88220056e6dcb3662bcdb5f7dca20

Features

• Add Bid Currency to PAS bidMetadata for scoreAd()
• Add blob fetch library
• Adds API for generating ciphertexts for server component auctions
• Adds proto mapping functions for top level auction reactor
• Adds reactor for handling top level auction in SFE
• Adds utility for re-encrypting ciphertexts from device
• Adds validator functions for top level auction reactor
• Build version dynamically for telemetry
• Check Bid Currency on Protected App Signals AdWithBids
• create SellerCodeFetchManager for auction service UDF fetching logic
• Enable cpp_no_warn mode by default
• Enable ML inference in B&A
• Implements server component auctions feature in SFE
• Implements support for server component auctions in secure invoke
• Implements top level auction feature in auction service
• Implements top level auctions support in secure invoke

Bug Fixes

• Add get_workspace_status script to github repo
• Create extra function to only add zone attribute to gcp deployment
• Delete Right AdWithBids for Currency Mismatch in SFE
• Do not check trailing space for patch files
• improve graceful shutdown of bidding server
• Simplify V8Dispatcher::LoadSync, switch to absl::Notification
• Update data plane library dependency
• update generate bid to receive empty json object when no device signals are present

Dependencies

• deps: Upgrade build-system to 0.57.0

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"37ca0bccd68c7dd879b2fff802a4b8d3981216730324984678ecdac1bfa4da7d1bcd93be94b688a95838da1edb49bfba"}
• auction_service_prod
  • {"PCR0":"80a7acd22d1772245ff6bdb6f9535268c71719b9eec02c8092fc3e20b91de0a13a4869cc19c4fd0047e659d6d7e45766"}
• bidding_service_non_prod
  • {"PCR0":"f26b49ac8abe2683a6a81013789c6420ca432f8323faa01797d9338a9d5558e1c6a5c00599e12cc590a5733256558075"}
• bidding_service_prod
  • {"PCR0":"9973125ef7bb5be149389c4b39cfaf9dff434d6300acd16012ad63510aeac1fd35bf9f4b38202f3827f8fc85672a9416"}
• buyer_frontend_service_non_prod
  • {"PCR0":"9dbbcd9891df541127bb64488f313231eb63b958d1b4469c2f47605625a06d6553aef0e419afce89713366f3db1102bf"}
• buyer_frontend_service_prod
  • {"PCR0":"d6875f1281e2552c6ab5d9c02ea88fefaeb1334715a4d64f321811ed9739d4b4d12070ef131dc952c93df99d09c1bfa1"}
• seller_frontend_service_non_prod
  • {"PCR0":"bc7a39e3e655a11e350b8a242e1492e4a41734af71780ba3518c76c898f5eff58a24331e3c39172d229268456707accc"}
• seller_frontend_service_prod
  • {"PCR0":"42c36e7eb4c1e3de8b2c4b521cc33ca324d71573ccae2730699d5d3aebb40533d352d7cff59b3f39aaa47c436e544638"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:87155c4770075bb6b494deaacf3c6c8b70c41b7c9e3f8d89d1629ad5335c0c8e
• auction_service_prod
  • sha256:e113f71a4f2bcbfe9d4dddcea6b4f50cd85a69876272651d4b30982ffe26671a
• bidding_service_non_prod
  • sha256:fc0416b8bdebc06399c0bf87adc7168a9033b2ec0963882bc4af3ed4f2cf727a
• bidding_service_prod
  • sha256:bdd95d8c859e4e001f1f061ffe6896a7bbda8b9405df6463991f217c68e006e2
• buyer_frontend_service_non_prod
  • sha256:36205cf241f06945f82a7241a36dd17a876e3537fe48f956575ce9d97aba33b0
• buyer_frontend_service_prod
  • sha256:b6453944864ac31bf848b85b49a5da26f6f656e229a460e718d2f3342e083243
• seller_frontend_service_non_prod
  • sha256:ea6d068e3dcde6e4bdff73a5c5e6417554cd71b57d0e4c1b5b03c4de0bd34498
• seller_frontend_service_prod
  • sha256:9406f887f29cb1f5a52944d782da5f0752365e8acad5a4ffe00e926ff0545190

Features

• create BuyerCodeFetchManager to handle buyer udf fetching logic
• enable consented debugging in AWS deployment
• integrate buyer code fetch management
• Output raw metric for consented request

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"b4a0127ebf615e257ee574166a17ee61f5f269697ef9c5fbfebca6d39e717d2ab5d85878c5e9562e9b321610be638595"}
• auction_service_prod
  • {"PCR0":"87a04c5a6780dbcfe2e61dcbe123af8ae98a9c9a9092249d0b265efc7d094c55113cf011eb746a3aceac2a41e4958227"}
• bidding_service_non_prod
  • {"PCR0":"63657c159f4928ed2fa17042835d77ae6436dce28f7bbb9af335fa722aa7a88dedd78becf1ecd1c17abdd8885e47527f"}
• bidding_service_prod
  • {"PCR0":"d7eb804d33f8a233c510594321abd2eccc37fa6314acfc9bfc32b13ae9f7ff0988699359f74c5cb1eb60e933c29d50de"}
• buyer_frontend_service_non_prod
  • {"PCR0":"34c36d82326c377d3baf73e03c443a36f18ddb16391dc12d65788e84c62d659656efe9ab3df79d5b8284d095148cd621"}
• buyer_frontend_service_prod
  • {"PCR0":"363ed6c58dec6753bd61c606d2f544fbf463117cc7c1da9869aeeff45c96a5053d851a2b154e5c5e05749a6d62cfb6dc"}
• seller_frontend_service_non_prod
  • {"PCR0":"94123c42e37c61ab86f4099572b0257b7c6bbd82e3fd367f9f53c01d7425377b1ec8a78820cc4e58423e443ca794571d"}
• seller_frontend_service_prod
  • {"PCR0":"9f6eca0761c0b4b361b46d566166968960748b602b2532e17434310e1e4b8b0b938ba1e01d2b730b2dd4b4989aa22cbc"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:c158e1a01e8d7b081d01199a6cd74ea18e1e127b4e68d5e6156e94b43fe01ca7
• auction_service_prod
  • sha256:e35db72a854d8aa21ebc78013e07a932a6bb456ea8de26f95cbc69e09cb4fbdb
• bidding_service_non_prod
  • sha256:99073db78f8073c658469ab69a3904ba2cc1ef1eabfe56562a884f7cc00250ec
• bidding_service_prod
  • sha256:0850bd8241db058705dd50f1262e7b08537ec1bee5d5c53131ba927f51227f64
• buyer_frontend_service_non_prod
  • sha256:f1b6b5d6e7508cf9889d56ab0128dd0a2ba97be48840a5d6a69b7169d27a85ac
• buyer_frontend_service_prod
  • sha256:8e08228d61c7825aca3ab69cc430e7e2d028d2b13b88586751edd2b8111cae3c
• seller_frontend_service_non_prod
  • sha256:41ac32932f105f06f9c0222f6568cc88ceae413baf1d6f0e89812673cb895354
• seller_frontend_service_prod
  • sha256:31beb31aac10dda7c8afea356cf0ba67dcdcf55f7d9a76a1c8783aa7d8beb19e

Bug Fixes

• update kv service hash after repo name change

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"f61a693aa63b3d4601d908940ccb1ab6fcd991995dbecbf4efd269fa5fc654bb305f75b969899c3e2e03d5edf6eaa83f"}
• auction_service_prod
  • {"PCR0":"baf7d55f0af19bdba222f4dc814cd7fbd3bea7eda075e1d13f97a75cbf184711d2fbc179507b8c3323e197ac01c0eac0"}
• bidding_service_non_prod
  • {"PCR0":"5b60f889890033625f7921cdf62c997001e57ae3e97e3fd8d1eb71fe4ba9e08874cf59ab1d5462a4016b3acd0f7d5158"}
• bidding_service_prod
  • {"PCR0":"2d74cdc065aba7c26897c760142f2e8f7bc29b123696743ac4819e33da79054b3f8e859376182d0d9875d106d2b361f3"}
• buyer_frontend_service_non_prod
  • {"PCR0":"462dc0a09aa5805073e485cf6f6b092b4692b5f4cbba22ac39c7fce0659bd60beb545a76a52b3d123192cca665e59208"}
• buyer_frontend_service_prod
  • {"PCR0":"45087403d66eaf412c6cd73b39db84dce86218c9bd6e4bd8ce6bc9d08dce5e4bfe1427a1a85396496c074b9f9a11fcd6"}
• seller_frontend_service_non_prod
  • {"PCR0":"622e6bcba346498389f4ab00e01ee1ddfd06384bacaba3227bcb301c60d7fcfbaa8c84bacc0e5663ee08a3713a79e02e"}
• seller_frontend_service_prod
  • {"PCR0":"6b368fcf35c20915d33bb0cd99f0af135e15dfd48ad294f3e2ec0885d0a961fd05676547e9d3f60679192f37624b9125"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:8049fba22bee79e84064040effd41aaa6ae265c7cf2232ce2d8b1768ef9e5494
• auction_service_prod
  • sha256:c8fb17a292a7068cb081cd618b528e46bf7894a919df198df98fecfbfb34d097
• bidding_service_non_prod
  • sha256:323c71dd3e77328b7ca33469922b44e1ab8def5bfbcf61c7c1c65989a0115380
• bidding_service_prod
  • sha256:22b7f7c60a7c6a43cd12a56561558526d98d9d6138d4475364d85323d4ea7275
• buyer_frontend_service_non_prod
  • sha256:d999c3c2cbb3b05e206e9ad484d2e2afe9b71f498b8b63cb0a7645ce7b910ed0
• buyer_frontend_service_prod
  • sha256:9c0bf9649b81ea1b512811f714139da1ad9f006ec3771e7a7015707eccb6c541
• seller_frontend_service_non_prod
  • sha256:959159ed03d093f5f7d0724a726005dec3cedc0046e4305e7ffa2980e99b8438
• seller_frontend_service_prod
  • sha256:a7deeb10fa2b0004e2fbb224df99c90b3c490782546216de49673254386b8e7f

Features

• Add a metric attribute for instance region
• Add bid rejection reasons for bid currency
• Add bid_currency to CBOR Auction Response
• Add binary HTTP Utils
• add component_reporting_urls to SelectAdResponse
• Add KV client for TEE retrieval
• Add pylint to pre-commit
• Add TF flags for PAS KV/retrieval service
• Adds API support for server component auctions
• Adds HPKE encryption utility for server component auction
• Adds OHTTP Encryption utils for sharing with top level auction reactor
• Adds proto field to support top level auction
• Adds util for resolving AuctionScope with SelectAdRequest
• Check bid currency on AdWithBids against buyer currency in SFE
• Disable/enable core dumps based on build flavour
• Enable prettier pre-commit hook for JavaScript
• Enable prettier pre-commit hook for JSON
• Instantiate KV GRPC Client in bidding
• Integrate bidding with KV service
• Oblivious HTTP Utils
• PAS contextual ads API changes
• Pass Contextual PAS Ads from SFE -> BFE
• Relay contextual PAS Ads from BFE -> Bidding
• Support Bid Currency in the ScoreAdsReactor
• update gcp collector to use internal proxy network load
• Use GRPC client for ad retrieval
• Validate currencies in the auction config

Bug Fixes

• Avoid race conditions when turning PyTorch models into eval mode
• correct branching condition in register model request
• Correct git submodule links
• Fix debug statements to include result status
• Fix flaky reporting_helper_test
• resolve inference sidecar path for unit test
• update kv service hash after repo name change

Documentation

• Fix minor typos in load testing doc

Dependencies

• deps: Downgrade build-system to v0.52.0
• deps: Upgrade build-system to 0.53.0
• deps: Upgrade build-system to 0.55.1
• deps: Upgrade build-system to 0.56.0
• deps: Upgrade functionaltest-system to v0.12.0

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"e581be255807b2b1b46702aa2eff524536adabf792a7d36e4e52fdd863d39b55753f4d6aeb5d13414fc044aea5364471"}
• auction_service_prod
  • {"PCR0":"6d54d691be9a3d9af951af3806a3c6b9c3d07960310189a4e6b59cfe2b6c187b404e26005cd11941eca4d032c45de5f1"}
• bidding_service_non_prod
  • {"PCR0":"ad2b9b4df81f3072e8a0694966e966864b83ca7296db1f032714ba2bb5b622ba451567048bf72536cc5af6f68b4e827c"}
• bidding_service_prod
  • {"PCR0":"f33605145f34b2281324470f067023d68f0756cb677b8fad2e9807696d11f40beb776d704bd8984283a9b9637b40afbc"}
• buyer_frontend_service_non_prod
  • {"PCR0":"6ac4077952c428da217bd818d107bd2e9d4108d301677bfe811fc0b899c44789716eae94a94448aad14f8cac56bcbba4"}
• buyer_frontend_service_prod
  • {"PCR0":"2b0d30ae0608516b5dd100698be59262897c1b9015c7223df8697c8e0d3ac45069c8bfd3151fa5a8c3b2561bac20411f"}
• seller_frontend_service_non_prod
  • {"PCR0":"990e7117851c45a9de66e338bbfe1bc24359db9e6f86d1562321c658f22732b5dbe6ade70063e158dc85fa64eaaffc3e"}
• seller_frontend_service_prod
  • {"PCR0":"b6d44486434ae64d9172a0b7649ec639640076b1ba68b102a28cda518c23ac06c618014b6e1dd6d9307d4399ef0cd7b5"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:f761bd1aa0ce98b908eaff315d49abf76eecd0872ba676567aa4c0734d4d2b1c
• auction_service_prod
  • sha256:ca72d5f405c656065c2d9df539352e91a2b122c9a925e9554378de255c5ad997
• bidding_service_non_prod
  • sha256:9298e995d4ea810bf959d17bae9852deb3089851a835c062cffc4cae26ac44d7
• bidding_service_prod
  • sha256:7f4b5bf8f826d096db58fc3e1f64cbab8fd6f31e5406a82a98a9c4df83531556
• buyer_frontend_service_non_prod
  • sha256:7a30bf002ab05810928cf10120f9ae76a797dcd65fbdb4148d28d7d635915de5
• buyer_frontend_service_prod
  • sha256:56129b6950e287845e53a65bfe34557eeb8d640daaefad576580042b46b4684c
• seller_frontend_service_non_prod
  • sha256:de74b0a3af4b0292a5fa28fb873bdfd88a97099b4dfe95eb0392af7e68aed92f
• seller_frontend_service_prod
  • sha256:80a5dfdd90c0bc237111b62e12b709dc91d3a6bf3a2d0a103ce6fab1caf7300d

Features

• [reporting] Add set modifiedBid value in sellerReportingSignals for multi seller auctions
• Add metric for size of protected_ciphertext and auction_config
• add additional metrics to the AWS seller dashboard
• Add AWS perfgate benchmark
• Add aws s3 support to perf-test-helpers
• Add metric attribute for instance zone
• Add perfgate analyzer support
• Add Support for Buyer Experiment Group ID
• Add tf vars for otel collector template file and image uri
• API Changes for Bid Currency
• Builds AWS AMI with debug otel collector
• create AWS seller and buyer metric dashboards for monitoring
• load and make inference request with a PyTorch model
• Seller KV Experiment Group ID
• Test Bid Currency on AdWithBids returned from generateBid()

Bug Fixes

• ad metadata string is escaped to be valid json in browser
• Add run_all_tests bazel config
• Bazel builds should ignore the cost tool
• Consider all 2XX HTTP codes as success
• deps: Upgrade data-plane-shared-libraries to 44d1d64 2024-01-08
• Ensure that non-200 status codes become errors
• Fix build flag and copybara rule
• Fix custom quickstore input file bug
• Fix debug statements to include result status
• Fix flaky sandbox_executor_test
• Prevent Config from being copied into RomaService
• Removes a test breaking the build
• secure_invoke client stub lifetime prolonged to wait for call to end
• Temporarily revert changes to the SUT so that it passes

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"cfc41c1ea3910a07e498f90b4b08ef33681f44e49e828f39422012c1d5b173dcc4e08c58c216e704e35b803214fe45a3"}
• auction_service_prod
  • {"PCR0":"4aee9a9f2f45cf4938616bbf474ca7133bedfb6d836f653cc388245b69cbebbfe60dbba402707f8cbac70b9583e1234e"}
• bidding_service_non_prod
  • {"PCR0":"ad644ac7613f07b9f3f4fbdb3614802a3d0e4ad887d95708da0a3d5de21e4715c5eae6b75599b2d4b0df49e8d86e5fe2"}
• bidding_service_prod
  • {"PCR0":"038a22f9fd182e4a33ef991a9a2713760976c40ea41325bcf0490423353c73071de387800643c6bc4808cb9c5d5eab7e"}
• buyer_frontend_service_non_prod
  • {"PCR0":"71ac96cbce1390f4935c01da6db9e07d7212b92340c274e6d62602278f7f8b1709348e2f45ef78f24c01988388643b46"}
• buyer_frontend_service_prod
  • {"PCR0":"6e0aa1f362e02e655cc29a08cf9720247d4a7e05fbf085180ef1fcbf81e1de3c568e3a600a2faf9a8c3fcd66fda4b482"}
• seller_frontend_service_non_prod
  • {"PCR0":"eb6bbec2b09aa0a19d1176f0c0c0efcd5629696732606c0569d3913705f767d3f3862d3d39713ef22c6d275ce9f0a39f"}
• seller_frontend_service_prod
  • {"PCR0":"295dc9fbdc3a75f652c6e4aeba1baf23dc6b42b1ff59400a3d173449148066773b61018bbd28580f4fb7e58ea6959ac5"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:483f4edcb2aa578431a22e1a635b9d8fa92514099b6bd12427a23f495c255283
• auction_service_prod
  • sha256:d52c71359e4e6ea2db4c0397cf3c734bbd695dece36dced617b52f620826bbdc
• bidding_service_non_prod
  • sha256:7ad62249a50752fc90b48257ead9012c4d000d476327843298c8c37ebd3cd60c
• bidding_service_prod
  • sha256:769bac5598e8f6db0b7535c715bd5e85ab409deae754066793e2f1f0c52b4ed8
• buyer_frontend_service_non_prod
  • sha256:8ea7651001498b540e2af11fe7cefc60230826143d2156f101d9a8450a4f9c3d
• buyer_frontend_service_prod
  • sha256:d559ccc9dbddcb9546d3593e908b38f5d2a8e158fc99cd45d636d8135d462eae
• seller_frontend_service_non_prod
  • sha256:6aece3340f70f2f058879e5f1169dc34df4deb0d622a2eba74cbceb6844af0b2
• seller_frontend_service_prod
  • sha256:bbdf5391d4d815116f82799d9d0d1c7aeb9f28e3ed5c1712e5c60f59f8928426

⚠ BREAKING CHANGES

• turn on metric noise (a minimum of 5 QPS is recommended for noised metric)
• require consented token min length 6

Features

• Add metric attribute for B&A release version
• Add metric attribute for operator name
• Add perf-test-helpers library
• add sfe metric for request with win ad
• component auction: Adds test for component auction support in secure invoke
• dep: Update build-system to release-0.52.0
• Import perfgate exporter and uploader tars
• require consented token min length 6
• turn on metric noise (a minimum of 5 QPS is recommended for noised metric)
• Update perf environment to use custom Otel Collector
• Use hardcoded adtech code and kv mock from e2e-testing env in perf env

Bug Fixes

• Auction service parses adMetadata object
• Consider non-positive desirability ads as rejected
• Fixes broken test
• Log JS errors conditionally
• Make the error message compatible with deterministic CBOR
• minimize secure_invoke reliance on default arguments
• Remove rejected ads from consideration in scoring
• Update B&A to integrate RomaService Changes

AWS enclave PCR0

• auction_service_non_prod
  • {"PCR0":"10357ce44ac3facbd04a9d236f9f1811310aafb11b9f8a6c7c7f0f14f3291a177295a411184114041735421577265a43"}
• auction_service_prod
  • {"PCR0":"95464dc112b753ee7cbdd81ff4c82c77770b0aac1d1d96261be71e9e17a2314f052c77849b154e2018d83f6a5313b9c6"}
• bidding_service_non_prod
  • {"PCR0":"35e071d244bb357c774e9b403a3e36409d71328cf2b8c933e0f4cdebdddd4e891a6329c2700f5c68e9f606988e7b4faf"}
• bidding_service_prod
  • {"PCR0":"7b8690217a46ce47e0112c8c3c5768cfe29347509e9d6abf4653c008e159a028d916526b3aa46122f66465e5ad56488c"}
• buyer_frontend_service_non_prod
  • {"PCR0":"e6bdda1407da45637427550a91d37ab04d5f71553488fd6bf151d5c830f4c1b88260ad0ebefba0fe838851d69fabb5f3"}
• buyer_frontend_service_prod
  • {"PCR0":"be6ff69010e39d1f3a1ba8fc803cd3683592ece01e153da9d786c288348b2888f11adf22d4f47f56ad335f5aa7342668"}
• seller_frontend_service_non_prod
  • {"PCR0":"dc846d55a30e65fddb94c61c697eb918e350a2ac1d530a40f01bc09cf2794c307128fe9f1bef07373c191f2db55c4e2d"}
• seller_frontend_service_prod
  • {"PCR0":"06ea4a4ed789a719fd70c89a696bb8624415c3dd6b105c70d26f7262c1d83b879801eac45233cf820bd2046770fc7500"}

GCP enclave Image Digest

• auction_service_non_prod
  • sha256:be95e8ded02323e41a83b13a72988683096e9262f5ca3e485a7a98bd7bf3ebf5
• auction_service_prod
  • sha256:0f4b42fb75bc0e758bc1d865502546459f87c2684dd6f6a3043d8fbfb08bbc18
• bidding_service_non_prod
  • sha256:c26fb2a08b53bff14f2f32f69e114de3dedae580c59e9c10666899d4fffa3192
• bidding_service_prod
  • sha256:ae70f6afec041ff7de1c4e5d23bd1c1d7c92530a0f17007d5035f4fb47e392c1
• buyer_frontend_service_non_prod
  • sha256:e0354a0fee1742ea2aaf602c16e9373645d009746179072ed6765c365c1b441b
• buyer_frontend_service_prod
  • sha256:e11b2af6c862e5bbafe5317ba3411b95090958176f5fc36e588924a04fecb969
• seller_frontend_service_non_prod
  • sha256:a281c6bd443e950b8117944888ea11b7850a6ef9bf2fefc62c043a041908d34d
• seller_frontend_service_prod
  • sha256:7c3cdc839c75101095c26f5effda63339df31a8a2a26bbf1ba0d9dc45e5f9f59