Skip to content

Releases: privacysandbox/bidding-auction-servers

Release 2.2.0

29 Sep 13:41
Compare
Choose a tag to compare

Features

  • Add more buyer flags
  • add support for a dedicated non-tls healthcheck port
  • add utilization in cpu metric
  • allow granular GCP per-region machine config
  • change GCP sfe and bfe health checks to use grpc
  • simplify GCP SFE envoy config

Bug Fixes

  • Add Ad Retrieval flags for AWS
  • Disable use of secure_invoke for functional testing
  • Ensure the easy handle is copied
  • Fixes the metadata keys sent to bidding
  • Use the verbose level 1 for consented logs

Dependencies

  • deps: Upgrade build-system to 0.45.0

AWS enclave PCR0

  • auction_service_non_prod
    • {"PCR0":"a3399ce955eb133bbcd35db52629906d6e2b657176521398de5c3787ee3c3002790f69ec9460b3ec8462a1c09e5cfcf1"}
  • auction_service_prod
    • {"PCR0":"3dbdee5bb68ded92a81c08694a510247a69e6b9581da228aaa534cbd5e032e2fe8e229849a53c990a55d38ba46621b50"}
  • bidding_service_non_prod
    • {"PCR0":"6ec4311c36707ff2a384dd8da0fe60f77108790f13fe5932c0786f57590e3b7f7afbc6d13a851212418b952113c63a13"}
  • bidding_service_prod
    • {"PCR0":"55c40fbf91a54fff7ccacad561273d1ffe4ba30a49e0a11332e18b035872e9943a0bf8ed3395cd2e60cd5b45673fb521"}
  • buyer_frontend_service_non_prod
    • {"PCR0":"87805a9168d00e464ab2c875a4534cf99b82e5f6f4da9454fd089f2a75bc3330c622fce8d84c4789a97a7e8d655758e2"}
  • buyer_frontend_service_prod
    • {"PCR0":"2eb5d0fe5b209d29926a7c557c6f58e0a7b2675c14a23119c91fec1bd8ef457f215462f3199986e11e90d47fe4663347"}
  • seller_frontend_service_non_prod
    • {"PCR0":"c2d3994aee55f79509cd5b487bdaeb10573c846cf65b5155f60529cfe26f2a3e6f3c4f36497ca3ff39841a290b78b27c"}
  • seller_frontend_service_prod
    • {"PCR0":"3278df2dca41b138125140a81d44170869efddfb847866b3d1ac21267eb6f6d6da65a1e5be139d2c992d6b592355330c"}

Release 2.1.0

20 Sep 17:01
Compare
Choose a tag to compare

Features

  • add boundary for unsafe histogram metric
  • Add docker-based sut using data from fledge sandbox
  • Add HTTP async client for ads retrieval
  • Add MultiLogger as an unified logging interface
  • add noise attribute to metric
  • Add secure_invoke rpc invoker for rpc diff testing
  • Allow clients to pass in a PublicKeyFetcher into KeyFetcherFactory.
  • Allow services to override the code blob versions
  • Deserialize ads retrieval response
  • Log plaintext responses in B&A servers
  • Log plaintext ScoreAdsRawRequest in Auction
  • Remove require-ascii pre-commit check on changelog
  • Skip call to Auction Service and return chaff when no scoring signals present
  • Take auction type in account in GenerateBid
  • Upgrade to functionaltest-system 0.9.0

Bug Fixes

  • Add a missing header file
  • Fix a broken test in MultiLogger
  • Revert the change in builders and testing/functionaltest-system

AWS enclave PCR0

  • auction_service_non_prod
    • {"PCR0":"81fc2fd74be406cdfccb6234370926ba5b0709f96a3bd9dfe1c5daad18dd25808dbb31f9e69860664e2ac9c4238da620"}
  • auction_service_prod
    • {"PCR0":"2262c022354d03af9dd57c2a949a2e10af3a1c2b0588178f8ec61ad5bfbc3338269e7ef33f3f4afc18a387d7f82315c6"}
  • bidding_service_non_prod
    • {"PCR0":"36420cbfd19463dc1c7e271f4066d0839dce2fab3342660c3f871a339f45b7b49c7e36a32ce29c5ec9b051749148a32a"}
  • bidding_service_prod
    • {"PCR0":"960aaed462ee05216f5b5c88075e47113885914b075f79727ae34b1204480423b7ce5d06825a0c543f0a180067f956a0"}
  • buyer_frontend_service_non_prod
    • {"PCR0":"3bbc215b0ec84d49b5776538ef6778f229fe69d539df430f4628146557ef38bcfd6cf0a0c6dd6498978006b1479546c4"}
  • buyer_frontend_service_prod
    • {"PCR0":"4cf80a0c10eb63838a05a680a2592a1c4503689fe9779900b0564508dbdc60bf7f10c87a3d621cb67074d8bfbb8b6eef"}
  • seller_frontend_service_non_prod
    • {"PCR0":"56eefda541897e5d62faca6d7b3b6dae02f7f0a221c00d436d8a3046ec5ab6e814c9d781e83275718cb0ac3bfa9c0636"}
  • seller_frontend_service_prod
    • {"PCR0":"312942c09ceaeca748d34e9bbd955461cc4fd1e33f0b6d0e13c5e3b6433b2aec341b12655b60e8c5adcdc58a71b1fbe8"}

Release 2.0.0

13 Sep 22:35
Compare
Choose a tag to compare

⚠ BREAKING CHANGES

  • Change generate_bid_code_version from int to string in API

Features

  • Add C++ code coverage support
  • Add PUT support in HTTP client
  • Add SetContext() in ConsentedDebuggingLogger
  • Change secure_invoke output to be easily parsable by automated scripts
  • Log plaintext GenerateBidsRawRequest in Bidding
  • override metric's default public partition
  • PAS support for BFE
  • turn on external load balancer logging by default

Bug Fixes

  • [logging] Check for log fields in the response json from reporting scripts
  • [logging] VLOG the logs, errors and warnings exported from Roma for reporting.
  • [reporting] Add ad_cost and interest_group_name inputs to the reportWin function input
  • Add copyright line in license block
  • Add missing adCost to buyer's browser signals in the code wrapper
  • Allow ScoreAd to return a number
  • Check rapidjson property presence before access
  • Fix invalidCode error when buyer's script is not a correct expression
  • Fixes a comment in proto
  • revert documentation update until the build_and_test_all_in_docker script is updated
  • safe metric should not LogUnsafe
  • Set the log context in BFE
  • Updates the client types comments

cleanup

  • Change generate_bid_code_version from int to string in API

AWS enclave PCR0

  • auction_service_non_prod
    • {"PCR0":"7f06d0c99f5c5c49c392daa9c0542ce549431497b34b9ec5295cdf15be53fa07cb7abae86790b073aef3fc9ac93548db"}
  • auction_service_prod
    • {"PCR0":"a6cbed0c9e478971dcc240aa0b57b1f94129679809ffbd97d21ceb9e91fa4af3c20f57aec4ca2ecf42954dc4787693a4"}
  • bidding_service_non_prod
    • {"PCR0":"beea695c4f0fee295f4c065f907cdd3cec00cdd85597ebcb80f868b986dec911ae97e5c4d65d730c4b2f6f6779a9a232"}
  • bidding_service_prod
    • {"PCR0":"42868ac1eb101dfb5269dea015905ee04cb81af0b2fcafc8877f9861885bb3f4bd21a3b997473e65f50a134587edd7cd"}
  • buyer_frontend_service_non_prod
    • {"PCR0":"e4260b5ee472d4aa3a74672f52093f634850e8489695d059a4e42161987d8d741ff3ad11d4afa3b1e08f9787a94aba48"}
  • buyer_frontend_service_prod
    • {"PCR0":"3b8835c793eef04bd3ce6d901dc3b88d5969b4c18721178caccc8600835da7bcdcdebd8febd6b13d616941d007e88f86"}
  • seller_frontend_service_non_prod
    • {"PCR0":"47610082fe0c66dd53a1ee5c2f030dadfbe519c78ff502fcc212af6c1cc5a34beef097ac00a37a62604601e43ad91814"}
  • seller_frontend_service_prod
    • {"PCR0":"7d78b442b5ed300c89a7f389bee1c2c27ca49edc8f64e68d1eefc635f2e96414a8c817f65465e40781db43bf19a1f4cf"}

Release 1.2.0

01 Sep 21:32
Compare
Choose a tag to compare

Features

  • Add code blob flags for bidding/auction
  • Log plaintext GetBidsRawRequest in BFE
  • PAS support in SFE
  • Propagate consented debug config from BFE to Bidding
  • Propagate consented debug config from SFE to BFE & Auction

Bug Fixes

  • [reporting] Change the order of cbor encoding for win reporting urls in the response.
  • [reporting] Populate win reporting urls for seller in top_level_seller_reporting_urls instead of component_seller_reporting_urls
  • [reporting] Remove unnecessary signalsForWinner in the response from reporting wrapper function
  • Disable enableSellerDebugUrlGeneration flag by default

AWS enclave PCR0

  • auction_service_non_prod
    • {"PCR0":"7f7587be4e922ed6d7a94ef384507061df4c35fdc280c393819ab0b9ed3f67f92c77cb9f9ba9ab21c33e057bd64aa3f9"}
  • auction_service_prod
    • {"PCR0":"d021c4fc3e21365e4f3bf485f65061a2864b75657e847d273a221aaf90b92a2c6587399c34e3d6d66c45dac6c3dca5d4"}
  • bidding_service_non_prod
    • {"PCR0":"391cd4655fcd3e8446e5043319571cf34d44ea431e4b6ec016eaac358e1dd39a5fcaed501bc82358157c24e36aaf5246"}
  • bidding_service_prod
    • {"PCR0":"f4b93966e35393e40cbde3279c2c8394db96e1bb645dca37f7c2e9af19784a9e5a2313faf7c581b4fb567c7a27d46d96"}
  • buyer_frontend_service_non_prod
    • {"PCR0":"bdc6abc6dfca33ca9695b3c75bcfd5bf6db78c861f6f47e08e0563c8f521c0d37e6d1d83fc2421ad3ac5ca1e68e50f8b"}
  • buyer_frontend_service_prod
    • {"PCR0":"336205036ae5f0b5fb03affebc335c3b50292faf384b1ad868ee881055590c8fb815531fbc6f64413c4f571c12f4b4c6"}
  • seller_frontend_service_non_prod
    • {"PCR0":"3b28a74b1752c60acacff37d306d56427ffc7e051d7e57bbc1c8d912219cc4cbba462655eab54bf0db28ab38ea0666fe"}
  • seller_frontend_service_prod
    • {"PCR0":"39137fa665c490f0db620936cce701a7fbf88ac882c1dbaf75fa9f6bdcdc78a7e9d09f8919c94a59fe08b257e1d30592"}

Release 1.1.0

25 Aug 23:33
Compare
Choose a tag to compare

Features

  • Add B&A App Install API
  • Add ConsentedDebuggingLogger to write logs via OTel
  • Add feature flag enabling/disabling PAS
  • Add IG origin to AuctionResult
  • add max surge to instance groups
  • Add owner field for PAS Ad with bid
  • Adds docker build option for local testing
  • Adds PAS buyer input to GetBids
  • Check debug token in ConsentedDebuggingLogger
  • Include IG owner in buyer input
  • Log decoded buyer inputs for consented debugging in SFE
  • make export interval configurable
  • make metric list configurable
  • OpenTelemetry logging can be disabled via TELEMETRY_CONFIG flag
  • Propagate Ad type from Auction => SFE
  • update GCP terraforms to apply updates to instances without
  • update LB policy to default to RATE instead of UTILIZATION
  • Upgrade to functionaltest-system 0.8.0
  • use private meter provider not shared with Otel api

Bug Fixes

  • Bump required tf to 1.2.3 to be compatible with replace_triggered_by
  • Change componentAds -> components
  • Correct GCP dashboards
  • Do not set runtime flags with empty strings
  • Fixes race condition in SFE reactor due to mutex lock
  • Log a message in case of server flag lookup failures
  • Removes callback execution from default_async_grpc_client to prevent double invocation
  • specify default cpu util before sending requests to other regions
  • update OTel demo documentation
  • Use bazel config to set instance and platform

Dependencies

  • deps: Upgrade build-system to 0.43.0

AWS enclave PCR0

  • auction_service_non_prod
    • {"PCR0":"b259eb54959e3daebd99c85b62816d25ff0e8cf8a3b83f8f5eadf7cd1838e320252c41aeb5e8d1dcdde5ba53d960ff30"}
  • auction_service_prod
    • {"PCR0":"9e95b390cbc0572225c3b5f364042be744a762741ce5b2f36fae0d2107dc9f31596a3b8b713cb1cc7eea17a79567f891"}
  • bidding_service_non_prod
    • {"PCR0":"663929fe1787e0209f40b2ddd75fd4ed7c3534daa995d82c80bcc03898997a4a01d4248ae4908b2dd717cff33ea285dc"}
  • bidding_service_prod
    • {"PCR0":"30a40a4787960e284de39a5f79320f9bcb97a6c9721ef29a305807feb307cf971cdf7166b248a401afb1071cdcfba8e5"}
  • buyer_frontend_service_non_prod
    • {"PCR0":"31acb83858e7215854a68a94ed047d4112d8b4e7faa09e2b7fb270e2505f107803e67e71b882b478a5bdf1d34e4a5b61"}
  • buyer_frontend_service_prod
    • {"PCR0":"d1c392e7c222f1433403925f4ffea110d0575f744b3fe0d20c211a2a6bfa015c1a27e110252016ddc7c7eb146d5fd8c4"}
  • seller_frontend_service_non_prod
    • {"PCR0":"f5a0240902051a5012603ad9d902bd87f56f9e4d415e0b18569b483b6dde48c0767d8cb1803ec357362828dbf65e362f"}
  • seller_frontend_service_prod
    • {"PCR0":"ad94698949f4b0e9a6b986dcdd0ce755cbe2f485d94639b853435aaab4933cfaabdb25d37967121f64d0d641f5128e2f"}

Release 1.0.0

11 Aug 18:11
Compare
Choose a tag to compare

⚠ BREAKING CHANGES

  • if your generateBid() returns ad component render urls in a field named "adComponentRender". You will have to update this to return these in a field named "adComponents".
    Changed name in the API. Updated in reactors. Added a unit test.

Features

  • Adds Readme for running B&A servers locally
  • Enable CBOR encode/decode for ConsentedDebugConfig
  • implement dp aggregated histogram metric
  • include local server start scripts
  • periodic bucket fetching using BlobStorageClient

Bug Fixes

  • Correct paths to terraform modules in AWS demo.tf files
  • Improve clarity of aws vs gcp cases
  • Improve flag error handling
  • include required dep for bucket code fetcher
  • Remove enable_buyer_code_wrapper flag.
  • Remove enable_seller_code_wrapper flag.
  • Remove enableSellerCodeWrapper flag from aws and demo configs
  • remove unnecessary flags in terraform configs
  • Set cbuild flag --seccomp-unconfined

cleanup

  • Change AdWithBid.ad_component_render to .ad_components to align with OnDevice generateBid() spec

Documentation

  • Update terraform comments to communicate requirement for env name <= 3 characters

AWS enclave PCR0

  • auction_service_non_prod
    {"PCR0":"bbc62130646201577dc680ec3046671527e9c7f647d3e75d08ad495119de3e783cec0871116534ed30b074e8dd535c47"}
  • auction_service_prod
    {"PCR0":"f35158f6b4aa6f207f0c5985c6f425cd8c08e8a3d194e5985077ac9eda5926c7e017d5d4480a9c5cacb6169b4725a553"}
  • bidding_service_non_prod
    {"PCR0":"c689d24beab2c0e25565aeacd484c6fd5562d8ce7d3cf136e4434f26af863613b88d9b7a5869423172b7a9b633b715f9"}
  • bidding_service_prod
    {"PCR0":"4f46ec2639caf0ff4546ab6ea33c5ffe698443944d30f6496c6c440eb6f595963bcf53f46dc7f8022a716508c8e78658"}
  • buyer_frontend_service_non_prod
    {"PCR0":"aee43a3657a892edaed4501d05b56155cbafe6d6777c544c78c7e0221b7806fc30044d9c8d7e0a6a083d3adf8532b6a7"}
  • buyer_frontend_service_prod
    {"PCR0":"a7d6b3a564131e51898f97ab58b540d0dbec188d5e64db6bd1d714c303c36cc191163d6212e050b28bacb25ac1f8441a"}
  • seller_frontend_service_non_prod
    {"PCR0":"0c4a8f47168f65ba4c18aba3897b7bd854c08905ffedf8c06ea8be0bdd12e7db20903df5374c5579deec6848dbcc296b"}
  • seller_frontend_service_prod
    {"PCR0":"71b2c01e9036cffda8ec9fd4cadd63a0b1e94062dcfe0c1cb2540f3299c5dbe2d315127a43585e69489cf6e10de341e3"}

GitOrigin-RevId: bd8aa6e9b509fe59deaa156fc41a1de7a29351a2

Release 0.10.0

04 Aug 01:38
Compare
Choose a tag to compare

Features

  • [reporting] Add helper function for cbor encoding and decoding of Win Reporting Urls
  • [reporting] Execute reportWin script and return the urls in the response.
  • [reporting] Fix reportWin function execution.
  • add AWS enclave PCR0 in release notes
  • Add bazel configs for roma legacy vs sandboxed
  • Add OSSF Scorecard badge to top-level README
  • Add OSSF Scorecard GitHub workflow
  • Add the server flags to support user consented debugging
  • change autoscale cpu utilization measure to GCP suggested default (60%)
  • clarify default lb policy within an instance group is ROUND_ROBIN
  • Enable logging in the OTel collector
  • Encrypt GetBidsRequest for benchmarking
  • Flag protect the opentelemetry based logging
  • move observable system metric to server definition
  • Upgrade data-plane-shared-libraries for Opentelemetry logs API

Bug Fixes

  • Encode Ad Component Render URLs when sending request to Seller Key-Value Server
  • Fixes few ASAN issues
  • Minimal CBOR encoding for uint/float
  • Order the keys in the response
  • Remove unwanted seller_origin flag from start_auction script
  • Rename the opentelemetry endpoint flag
  • secure_invoke respects --insecure flag for BFE

API: Features

  • api: Add the fields to support adtech-consented debugging

Dependencies

  • deps: Upgrade build-system to v0.39.0
  • deps: Upgrade build-system to v0.41.0
  • deps: upgrade opentelemetry-cpp to 1.9.1 for B&A servers

Documentation

  • update release README instructions
  • Update secure_invoke README with new instructions for running.

AWS enclave PCR0

  • auction_service_prod
    • {"PCR0":"bb02243c2d00500dd366f70e957dfe744bdd6d32aecc13fa78f8b445a215804b60e6a58f096a93f861fc59f62a5f14e7"}
  • bidding_service_prod
    • {"PCR0":"394d96ff0062be997196b70e11aee3e596f52a218b082c751a76c5fef621b2e8113e24d13f829430d611a6adf3bab68c"}
  • buyer_frontend_service_prod
    • {"PCR0":"fc3bf8d6ea708188774e5859c371e6e4f999d6af2b24c1d06a6e28ef64137c78ebdc2756215dec9431c12d9a78135ad8"}
  • seller_frontend_service_prod
    • {"PCR0":"0fffedd3b0cc2a4d3ce132407d000ebc0580eba9d9949a9a6ed47c3bdbc375a8fa512db7585c72760fde8f49c3ab2a1d"}

Release 0.9.0

21 Jul 16:21
Compare
Choose a tag to compare

Features

  • [reporting] Add helper function to build the dispatch request for
  • add buyerReportWinJsUrls to terraform files and enable_report_win_url_generation to BuyerCodeFetchConfig
  • add cpu memory metric for debugging
  • add GCP metric dashboard
  • add method to accumulate metric values before logging
  • changing PeriodicCodeFetcher to add wasm support and runtime config support
  • load and append wasm string to the JS code wrapper
  • support different instance types per service in GCP
  • Upgrade build-system to release-0.31.0

Bug Fixes

  • Add seller_code_fetch_config and buyer_code_fetch_config to server start scripts
  • CPU monitoring is not limited to a specific environment
  • Define container image log variables once
  • Don't end select ad request prematurely
  • patch google dp library to replace logging with absl
  • Update and read the buyer_bids_ with lock

Dependencies

  • deps: Upgrade build-system to v0.33.0

Release 0.8.0

13 Jul 16:28
Compare
Choose a tag to compare

Features

  • add FetchUrls utility to MultiCurlHttpFetcher
  • enable counter metrics with dp aggregation
  • update multi-region.tf to use prod js urls and test mode true
  • use //:non_prod_build to configure build

Bug Fixes

  • Adjust all/small test configs
  • Adjust sanitizer configs
  • Correct example BFE hostname
  • Correct license block
  • Ensure --gcp-image flags are specified for gcp
  • Ensure --instance flag is specified
  • fix missing telemetry flag and readme
  • Improve build_and_test_all_in_docker usage text

Release 0.7.0

30 Jun 19:04
Compare
Choose a tag to compare

Features

  • [AWS] add example terraform directory with README
  • [GCP] add example terraform directory with README
  • Add bazel build flag --announce_rc
  • add build_flavor for AWS packaging
  • add build_flavor for packaging
  • include coordinator and attestation support for GCP
  • Upgrade build-system to release-0.30.1

Bug Fixes

  • Adjust SFE DCHECKs
  • bidding_service_test
  • Change PeriodicCodeFetcher to use std::string instead of absl::string_view in the parameters
  • refactor the test to share initialization
  • remove unnecessary flags
  • TEE<>TEE fix
  • temporarily eliminate requirement to have device signals to generate bids

Bug: 280576012