Add proxy auth support and status/metrics commands

CHANGES.md

@@ -1,13 +1,46 @@
 # Notable Changes
 
 > _Note_: Changes should be grouped by release and use these icons:
+>
 > - Added: ➕
 > - Changed: 🌌
 > - Deprecated: 👇
 > - Removed: ❌
 > - Fixed: 🐛
 > - Security: 🛡
 
+## Version 1.3.0
+
+- ➕ Add authenticated proxy support. Users can configure proxy credentials
+  via environment variables (CVDUPDATE_PROXY_URL, CVDUPDATE_PROXY_USER,
+  CVDUPDATE_PROXY_PASS) or via the config file using `cvd config set`.
+  Credentials are embedded in the proxy URL so that a Basic
+  `Proxy-Authorization` header is sent. Digest and NTLM proxy schemes are
+  not supported. Credentials are masked in logs and in `cvd config show`.
+  Feature courtesy of Nik Kale.
+
+  Closes #7, #9.
+
+  [GitHub Pull-Request](https://github.com/Cisco-Talos/cvdupdate/pull/81)
+
+- ➕ Add `cvd status` command for database health checks. The new command
+  reports the health and currency of downloaded databases, including
+  version comparisons, age status, and identification of stale or
+  missing databases. Supports JSON output for monitoring integration
+  and a --check flag for scripted health checks.
+  Feature courtesy of Nik Kale.
+
+  [GitHub Pull-Request](https://github.com/Cisco-Talos/cvdupdate/pull/81)
+
+- ➕ Add `cvd metrics` command for Prometheus monitoring integration. The
+  new command outputs database status as Prometheus-format metrics.
+  Supports one-shot output to stdout and a persistent HTTP server mode
+  for Prometheus scraping. Exposes per-database version, age, and status
+  metrics plus aggregate health metrics.
+  Feature courtesy of Nik Kale.
+
+  [GitHub Pull-Request](https://github.com/Cisco-Talos/cvdupdate/pull/81)
+
 ## Version 1.2.0
 
 - ➕ Support for downloading CVD and CDIFF digital signatures.
@@ -108,6 +141,7 @@
   `CVDUPDATE_NAMESERVER` environment variable as a comma separated list.
 
   E.g.:
+
   ```bash
   CVDUPDATE_NAMESERVER=1.1.1.1,8.8.8.8 cvd update
   ```
@@ -123,8 +157,8 @@
   Fix courtesy of Brent Clark.
 
 - - 🌌 CVD-Update will no longer remove extra files from the database directory
-  when you run `cvd clean dbs`. It will only remove those file managed by the
-  CVD-Update tool.
+    when you run `cvd clean dbs`. It will only remove those file managed by the
+    CVD-Update tool.
 
   This means that you can now store third-party extra signature databases in the
   CVD-Update database directory and CVD-Update will not delete them if you run
@@ -143,6 +177,7 @@
   Improvement courtesy of Bill Sanders.
 
 Special thanks to:
+
 - Bill Sanders
 - Brent Clark
 - Michael Callahan
@@ -213,7 +248,6 @@ Special thanks to:
 
 - ➕ Two ways to set a custom DNS nameserver.
   DNS queries are required to check the latest available database versions.
-
   1. Set the nameserver in the config. Eg:
 
      ```bash