v3.13.0

Feat

• Add servicemonitor resource template to helm chart #2175

Refactor

• Dropped deprecated dial/dualstack #2175

Ci

• Update go version for ci #2187

Docs

• Update multi-signature documentation #2169

Update

• Bump the gomod-packages group across 1 directory with 17 updates #2185
• Bump golang #2176
• Bump the gh-actions-packages group across 1 directory with 8 updates #2186

What's Changed

• docs: Update multi-signature documentation by @Starkteetje in #2169
• feat: add servicemonitor resource template to helm chart by @lmbaschiera in #2175
• update: bump the gh-actions-packages group across 1 directory with 8 updates by @dependabot[bot] in #2186
• update: bump golang from 1.26-alpine to 1.27-alpine in /build in the docker-packages group across 1 directory by @dependabot[bot] in #2176
• ci: Update Go version for CI by @Starkteetje in #2187
• update: bump the gomod-packages group across 1 directory with 17 updates by @dependabot[bot] in #2185
• build: Fix inconsistent version number update by @Starkteetje in #2188
• Develop by @Starkteetje in #2189

Full Changelog: v3.12.0...v3.13.0

v3.12.0

Sec

• Fix registry credential leak #2166
• Respect notary path constraints #2165
• Fix notary reference registry confusion #2164

Feat

• Allow setting hostnetwork for deployment #2158

Build

• Load image on local build #2157

Ci

• Mark deprecated sigstore tuf package as needed due to cosign dependency #2159

Test

• Update tests to new k8s versions #2159

Docs

• Update security.md #2166
• Add images to release checklist #2154
• Steer input from discussions to issues #2154

Update

• Bump the gh-actions-packages group across 1 directory with 5 updates #2161
• Bump the gomod-packages group across 1 directory with 10 updates #2163

What's Changed

• Docs improvements by @Starkteetje in #2154
• update: bump the gomod-packages group across 1 directory with 10 updates by @dependabot[bot] in #2163
• update: bump the gh-actions-packages group across 1 directory with 5 updates by @dependabot[bot] in #2161
• test: Update tests to new k8s versions by @Starkteetje in #2159
• build: Load image on local build by @Starkteetje in #2157
• feat: Allow setting hostNetwork for deployment by @Starkteetje in #2158
• sec: Fix Notary reference registry confusion by @Starkteetje in #2164
• sec: Respect notary path constraints by @Starkteetje in #2165
• sec: Fix registry credential leak by @Starkteetje in #2166

Full Changelog: v3.11.1...v3.12.0

v3.11.1

Sec

• Notary delegation fallback allowed stealthy fallback to targets #2151
• Count distinct trust roots for signature thresholds in cosign #2150, reported by @arpitjain099.

Fix

• Add timeouts to various http clients #2144

Build

• Remove hidden files from build context #2139

Ci

• Limit pr workflow to one concurrent run per branch #2143

Test

• Match go-containerregistry fix #2123

Update

• Bump the gomod-packages group across 1 directory with 6 updates #2148
• Bump the gh-actions-packages group across 1 directory with 7 updates #2149
• Bump the gomod-packages group across 1 directory with 15 updates #2123
• google.golang.org/grpc v1.82.1 #2153

What's Changed

• fix: Add timeouts to http clients by @Starkteetje in #2144
• ci: Limit PR workflow to one concurrent run per branch by @Starkteetje in #2143
• update: bump the gomod-packages group across 1 directory with 15 updates by @dependabot[bot] in #2123
• build: Remove hidden files from build context by @Starkteetje in #2139
• update: bump the gh-actions-packages group across 1 directory with 7 updates by @dependabot[bot] in #2149
• update: bump the gomod-packages group across 1 directory with 6 updates by @dependabot[bot] in #2148
• sec: count distinct trust roots for signature thresholds in cosign by @phbelitz in #2150, reported by @arpitjain099. Thank you for the coordinated disclosure.
• sec: Notary delegation fallback allowed stealthy fallback to targets by @Starkteetje in #2151
• update: google.golang.org/grpc v1.82.1 by @phbelitz in #2153
• Develop by @phbelitz in #2152

Full Changelog: v3.11.0...v3.11.1

v3.11.0

Feat

• Allow overriding and disabling serviceaccount creation #2127

Fix

• Match registry host case-insensitively in policy rules #2137

Ci

• Reduce action definitions through yaml anchors #2121

Docs

• Fix multiarch release script #2106

Update

• Bump the gh-actions-packages group across 1 directory with 9 updates #2136
• Bump the gh-actions-packages group across 1 directory with 2 updates #2126
• Bump the gh-actions-packages group across 1 directory with 10 updates #2120
• Update transitive dependencies #2104

What's Changed

• update: Update transitive dependencies by @Starkteetje in #2105
• docs: Fix multiarch release script by @Starkteetje in #2106
• update: bump the gh-actions-packages group across 1 directory with 10 updates by @dependabot[bot] in #2120
• update: bump the gh-actions-packages group across 1 directory with 2 updates by @dependabot[bot] in #2126
• feat: allow overriding and disabling serviceaccount creation by @Starkteetje in #2127
• ci: Reduce action definitions through YAML anchors by @Starkteetje in #2121
• update: bump the gh-actions-packages group across 1 directory with 9 updates by @dependabot[bot] in #2136
• fix: match registry host case-insensitively in policy rules by @Starkteetje in #2137

Full Changelog: v3.10.0...v3.11.0

v3.10.0

Feat

• Allow updates to resources marked for deletion #2073

Build

• Update commands to match helm v4 #2054

Ci

• Retry build on cache miss #2103
• Enable cache again #2097
• Update tested k8s versions #2056
• Update helm to v4 #2054

Docs

• Updated signing instructions for multi arch #2049
• Update nv1/nv2 mentions following notation support #2082
• Document advanced considerations/information #2073
• Update metrics docs to reflect go instead of python #2075
• Remove mention of python in security.md #2074
• Remove reference to old dockerfile #2055
• Fix link to testing documentation #2055
• Update helm commands to match v4 #2054

Update

• Bump the gomod-packages group across 1 directory with 5 updates #2099
• Bump the gh-actions-packages group across 1 directory with 2 updates
• Bump the gomod-packages group across 1 directory with 13 updates
• Bump the gh-actions-packages group across 1 directory with 7 updates
• Bump the gomod-packages group across 1 directory with 8 updates
• Bump golang in /build in the docker-packages group
• Bump the gh-actions-packages group across 1 directory with 10 updates
• Update theupdateframework/go-tuf/v2@v2.4.1 funkypenguin#21
• Update transitive dependencies #2105

What's Changed

• update: update theupdateframework/go-tuf/v2@v2.4.1 by @phbelitz in #2048
• Develop by @phbelitz in #2047
• Update to Helm v4 by @Starkteetje in #2054
• Docs: fix references to old tests folder by @Starkteetje in #2055
• ci: Update tested k8s versions by @Starkteetje in #2056
• docs: Remove mention of Python in SECURITY.md by @Starkteetje in #2074
• docs: Update metrics docs to reflect Go instead of Python by @Starkteetje in #2075
• feat: Allow updates to resources marked for deletion by @Starkteetje in #2073
• update: bump the gh-actions-packages group across 1 directory with 10 updates by @dependabot[bot] in #2076
• update: bump golang from 1.25-alpine to 1.26-alpine in /build in the docker-packages group by @dependabot[bot] in #2057
• update: bump the gomod-packages group across 1 directory with 8 updates by @dependabot[bot] in #2077
• docs: Update nv1/nv2 mentions following notation support by @Starkteetje in #2082
• update: bump the gh-actions-packages group across 1 directory with 7 updates by @dependabot[bot] in #2096
• update: bump the gomod-packages group across 1 directory with 13 updates by @dependabot[bot] in #2093
• update: bump the gh-actions-packages group across 1 directory with 2 updates by @dependabot[bot] in #2102
• update: bump the gomod-packages group across 1 directory with 5 updates by @dependabot[bot] in #2099
• ci: enable cache again by @phbelitz in #2097
• docs: updated signing instructions for multi arch by @phbelitz in #2049
• ci: retry build on cache miss by @phbelitz in #2103

Full Changelog: v3.9.1...v3.10.0

v3.9.1

Build

• Build multi-arch docker image for connaisseur #2027

Ci

• Disable multi-arch in ci #2027

Docs

• Updated releasing with multi arch #2041

Update

• Bump the gomod-packages group across 1 directory with 3 updates #2045
• Bump the gh-actions-packages group across 1 directory with 3 updates #2046
• Version bump and updated mails #2042
• Bump the gomod-packages group across 1 directory with 17 updates #2039
• Bump the gh-actions-packages group across 1 directory with 7 updates #2037
• Bump the gh-actions-packages group across 1 directory with 7 updates #2028
• update theupdateframework/go-tuf/v2@v2.4.1 #2048

What's Changed

• update: bump the gh-actions-packages group across 1 directory with 7 updates by @dependabot[bot] in #2028
• update: bump the gh-actions-packages group across 1 directory with 7 updates by @dependabot[bot] in #2037
• update: bump the gomod-packages group across 1 directory with 17 updates by @dependabot[bot] in #2039
• feat: build multi-arch docker image for connaisseur by @junydania in #2027
• Feat/multi arch by @phbelitz in #2040
• docs: updated releasing with multi arch by @phbelitz in #2041
• update: version bump and updated mails by @phbelitz in #2042
• update: bump the gh-actions-packages group across 1 directory with 3 updates by @dependabot[bot] in #2046
• update: bump the gomod-packages group across 1 directory with 3 updates by @dependabot[bot] in #2045

New Contributors

• @junydania made their first contribution in #2027

Full Changelog: v3.9.0...v3.9.1

v3.9.0

Feat

• Notation support #1885

Ci

• Update go version used in ci #1985
• Update helm installation routine funkypenguin#19

Docs

• Fix error showing trustroot as required in policy for cosign validator #2014

Update

• Version bump #2013
• Bump the gomod-packages group across 1 directory with 5 updates #2012
• Bump the gh-actions-packages group across 1 directory with 2 updates #2010
• Bump github/codeql-action #2007
• Bump github.com/redis/go-redis/v9 in the gomod-packages group #2006
• Bump the gomod-packages group with 2 updates #2003
• Bump the gh-actions-packages group across 1 directory with 4 updates #2005
• Bump the gh-actions-packages group across 1 directory with 6 updates #2000
• Bump the gomod-packages group across 1 directory with 4 updates
• Bump the gomod-packages group across 1 directory with 11 updates
• Bump the gh-actions-packages group across 1 directory with 5 updates #1985

What's Changed

• ci: Update Helm installation routine by @Starkteetje in #1992
• Develop by @Starkteetje in #1993
• update: bump the gh-actions-packages group across 1 directory with 5 updates by @dependabot[bot] in #1985
• update: bump the gomod-packages group across 1 directory with 11 updates by @dependabot[bot] in #1994
• update: bump the gomod-packages group across 1 directory with 4 updates by @dependabot[bot] in #2002
• update: bump the gh-actions-packages group across 1 directory with 6 updates by @dependabot[bot] in #2000
• update: bump the gh-actions-packages group across 1 directory with 4 updates by @dependabot[bot] in #2005
• update: bump the gomod-packages group with 2 updates by @dependabot[bot] in #2003
• update: bump github.com/redis/go-redis/v9 from 9.14.0 to 9.14.1 in the gomod-packages group by @dependabot[bot] in #2006
• update: bump github/codeql-action from 4.30.8 to 4.30.9 in the gh-actions-packages group across 1 directory by @dependabot[bot] in #2007
• wip: notation implementation by @phbelitz in #1885
• update: bump the gh-actions-packages group across 1 directory with 2 updates by @dependabot[bot] in #2010
• update: bump the gomod-packages group across 1 directory with 5 updates by @dependabot[bot] in #2012
• update: version bump by @phbelitz in #2013
• docs: Fix error showing trustRoot as required in policy for Cosign va… by @Starkteetje in #2014
• V3.9.0 by @phbelitz in #2015

Full Changelog: v3.8.5...v3.9.0