Additional query filters, parallel queries and changelog query added

- region_name, tenant and tag properties added to the query filter
- device_site, device_region and device_tags properties added to the version output
- use_changelog option added
- parallel_queries option added
- initial_lookback parameter added
- golang version updated to 1.25.7

Author: businessbean

CHANGELOG.md

@@ -1,6 +1,14 @@
-
 # Changelog
 
+## 0.2.0
+
+* `region_name`, `tenant` and `tag` properties added to the query filter
+* `device_site`, `device_region` and `device_tags` properties added to the version output
+* `use_changelog` option added to use the NetBox changelog. See the documentation for details and performance considerations
+* `parallel_queries` option added to speed up the check process by running multiple queries in parallel
+* golang version updated to `1.25.7`
+
+
 ## 0.1.0
 
 * official netbox library used

README.md

@@ -6,8 +6,8 @@ A concourse resource to trigger from netbox
 This resource is built using a Dockerfile that uses a multi-stage build process. The first stage builds the Go application, and the second stage creates a minimal container image using distroless. The following optional build arguments are available:
 
 - `BUILDER_NAME`: The name of the Go builder image (default: `golang`)
-- `BUILDER_VERSION`: The version of the Go builder image (default: `1.24.4-bookworm`)
-- `BASE_NAME`: The base image for the final container (default: `gcr.io/distroless/static-debian12`)
+- `BUILDER_VERSION`: The version of the Go builder image (default: `1.25.0-bookworm`)
+- `BASE_NAME`: The base image for the final container (default: `gcr.io/distroless/static-debian13`)
 - `BASE_VERSION`: The version of the base image (default: `latest`) (`nonroot` is not possible because Concourse [requires root permissions to run the resource](https://github.com/concourse/concourse/issues/403))
 
 The following build arguments are mandatory:
@@ -32,7 +32,50 @@ This resource is designed to be used in a Concourse CI pipeline. It can be confi
 
 ### Configuration
 
-The `source.url` parameter is mandatory. All fields in the `source.filter` section and the `source.token` are optional. Fields with brackets `[]` can contain multiple values. `source.filter.device_name` and `source.filter.interface_name` are using a `case-insensitive contains` filter. The `source.filter.get_config_context` parameter can be set to `true` to include the device's config context in the output. Because of the current limitation in the go-netbox library the config context is gathered with every query, but only included in the output if this parameter is set to `true`.
+#### Source Parameters
+
+| Parameter | Default | Description |
+|-----------|---------|-------------|
+| `url` | *(none)* | The URL of the NetBox instance (mandatory) |
+| `token` | *(none)* | The API token for authentication |
+| `parallel_queries` | `1` | Number of parallel queries to NetBox. Can speed up the check process, but be careful not to overload your NetBox instance |
+| `use_changelog` | `false` | Use the NetBox changelog to determine which devices have interface changes. More efficient than querying all devices, but it may miss changes without a changelog entry |
+| `initial_lookback` | *(epoch 0)* | Initial lookback timeframe for the first check (when no version exists) using Go duration format (e.g., `168h` for 7 days, `720h30m` for 30 days 30 minutes, `8760h` for 1 year). Supports: `h` (hours), `m` (minutes), `s` (seconds), and combinations like `1h30m45s`. If not specified, defaults to Unix epoch (1970-01-01) returning all matching objects |
+
+> **Warning:** When `use_changelog` is enabled with filters like `tenant`, `site_name`, or `region_name`, performance may be significantly slower than the classic query. The changelog API fetches all change events globally and filters afterward, while the classic query applies filters directly at the API level. Use `use_changelog: false` (default) for better performance when filtering by tenant or other device attributes.
+
+#### Filter Parameters
+
+All filter parameters are optional and can be used in combination to narrow down the devices and interfaces that trigger the resource. If no filters are provided, all devices and their interfaces will be considered.
+
+| Parameter | Default | Description |
+|-----------|---------|-------------|
+| `filter.site_name` | `[]` | Filter devices by site name(s) |
+| `filter.region_name` | `[]` | Filter devices by region name(s) |
+| `filter.tenant` | `[]` | Filter devices by tenant slug(s) (e.g., `my-tenant`) |
+| `filter.tag` | `[]` | Filter devices by tag slug(s) |
+| `filter.role` | `[]` | Filter devices by role slug(s) |
+| `filter.device_id` | `[]` | Filter devices by device ID(s) |
+| `filter.device_name` | `[]` | Filter devices by name (case-insensitive contains) |
+| `filter.device_type` | `[]` | Filter devices by device type(s) |
+| `filter.device_status` | `[]` | Filter devices by status (e.g., `active`, `planned`) |
+| `filter.get_config_context` | `false` | Include the device's config context in the output |
+
+#### Server Interface Filter Parameters
+
+Additional filters can be applied to the server interfaces of the devices. These filters will be applied after filtering the devices, so they will only affect the interfaces of the already filtered devices.
+
+| Parameter | Default | Description |
+|-----------|---------|-------------|
+| `filter.server_interface.interface_id` | `[]` | Filter interfaces by interface ID(s) |
+| `filter.server_interface.interface_name` | `[]` | Filter interfaces by name (case-insensitive contains) |
+| `filter.server_interface.enabled` | *(none)* | Filter interfaces by enabled state |
+| `filter.server_interface.mgmt_only` | *(none)* | Filter interfaces by management-only flag |
+| `filter.server_interface.connected` | *(none)* | Filter interfaces by connected state |
+| `filter.server_interface.cabled` | *(none)* | Filter interfaces by cabled state |
+| `filter.server_interface.type` | `[]` | Filter interfaces by type(s) (e.g., `virtual`, `1000base-t`) |
+
+#### Example Configuration
 
 This is an example of how to configure the resource in a Concourse pipeline:
 
@@ -52,9 +95,14 @@ resources:
     check_every: 15m
     source:
       url: "https://netbox.example.local"
-      token: "your-api-token"
+      token: "your-api-token",
+      parallel_queries: 1,
+      use_changelog: false,
+      initial_lookback: "168h30m",
       filter:
         site_name: ["site 1"]
+        region_name: ["region 1"]
+        tenant: ["my-tenant"]
         tag: ["tag1"]
         role: ["server"]
         device_id: [123]

go.mod

@@ -1,5 +1,5 @@
 module github.com/sapcc/concourse-netbox-resource
 
-go 1.25.4
+go 1.25.7
 
 require github.com/netbox-community/go-netbox/v4 v4.2.2-3

internal/app/check.go

@@ -21,10 +21,15 @@ The output will be a JSON array of objects with their latest versions.
 {
   "source": {
     "url": "https://netbox.example.local",
-    "token": "your-api-token"
+    "token": "your-api-token",
+		"parallel_queries": 4,
+    "use_changelog": true,
+		"initial_lookback": "168h30m"
 		},
 		"filter": {
 			"site_name": ["My Site"],
+			"region_name": ["My Region"],
+			"tenant": ["My Tenant"],
 			"tag": ["my-tag"],
 			"role": ["server"],
 			"device_id": [123],

internal/concourse/types.go

@@ -15,9 +15,12 @@ type Output struct {
 }
 
 type Source struct {
-	Url    string              `json:"url"`
-	Token  string              `json:"token,omitempty"`
-	Filter filter.NetboxObject `json:"filter,omitempty"`
+	Url             string              `json:"url"`
+	Token           string              `json:"token,omitempty"`
+	ParallelQueries int                 `json:"parallel_queries,omitempty"`
+	UseChangelog    *bool               `json:"use_changelog,omitempty"`
+	InitialLookback string              `json:"initial_lookback,omitempty"`
+	Filter          filter.NetboxObject `json:"filter,omitempty"`
 }
 
 type Version struct {
@@ -27,6 +30,9 @@ type Version struct {
 	DeviceId            string `json:"device_id,omitempty"`
 	DeviceName          string `json:"device_name"`
 	DeviceRole          string `json:"device_role"`
+	DeviceSite          string `json:"device_site"`
+	DeviceRegion        string `json:"device_region,omitempty"`
+	DeviceTags          string `json:"device_tags,omitempty"`
 	DeviceApiUrl        string `json:"device_api_url,omitempty"`
 	DeviceDisplayUrl    string `json:"device_display_url,omitempty"`
 	ConfigContext       string `json:"config_context,omitempty"`

internal/filter/netbox.go

@@ -2,6 +2,8 @@ package filter
 
 type NetboxObject struct {
 	SiteName         []string        `json:"site_name,omitempty"`
+	RegionName       []string        `json:"region_name,omitempty"`
+	Tenant           []string        `json:"tenant,omitempty"`
 	Tag              []string        `json:"tag,omitempty"`
 	Role             []string        `json:"role,omitempty"`
 	DeviceId         []int32         `json:"device_id,omitempty"`

internal/helper/tests.go

@@ -99,6 +99,8 @@ var (
 	DeviceDisplayUrl string = "http://netbox.example.local/dcim/devices"
 	DeviceRoleId     int32  = 8
 	DeviceRoleSlug   string = "server"
+	DeviceSiteId     int32  = 1
+	DeviceSiteSlug   string = "test-site"
 )
 
 func EnsureFolder(path string) error {