What's Changed
- chore(backport release-1.12): docs: add searchable promotion step catalog by @akuitybot in #7584
- chore(backport release-1.12): fix(chart): link install notes to the CLI release matching the installed version by @akuitybot in #7586
- chore(deps): bump step-security/harden-runner from 2.22.0 to 2.22.1 by @dependabot[bot] in #7577
- chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #7575
- chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #7573
- chore(deps): bump library/node from 26.10.0 to 26.11.1 by @dependabot[bot] in #7572
- chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #7574
- chore(deps): bump the go-patch group across 1 directory with 19 updates by @dependabot[bot] in #7576
- chore(backport release-1.12): fix(promotion): harden oci-download and oci-push transport by @akuitybot in #7603
- chore(backport release-1.12): build: keep the Go symbol table in credential-helper and helm by @akuitybot in #7647
- chore(deps): bump the go-minor group across 1 directory with 6 updates by @dependabot[bot] in #7602
- chore(deps/api): bump the go-patch group across 1 directory with 3 updates by @dependabot[bot] in #7513
- chore(backport release-1.12): docs: correct the garbage collector docs to reflect actual schedule in chart by @akuitybot in #7539
- chore(backport release-1.12): docs: fix credential CLI commands in managing secrets guide by @akuitybot in #7653
- chore(backport release-1.12): feat(server): accept PBKDF2-HMAC-SHA256 admin password hashes by @akuitybot in #7654
- chore(backport release-1.12): fix: keep best-releases.json and the release support page current (#7406) by @krancour in #7609
- chore(backport release-1.12): docs: make the GitHub CLI the quickstart's default path for the fork and the token by @akuitybot in #7662
- chore(backport release-1.12): fix: bind kind and k3d port mappings to localhost by @akuitybot in #7661
- chore(backport release-1.12): feat(tar): add mtime option and always strip ownership by @akuitybot in #7657
- chore(backport release-1.12): feat(ui): default/sync warehouse with last promotion in stage node by @akuitybot in #7632
- chore(backport release-1.12): fix(ui): order the Freight timeline by discoveredAt by @akuitybot in #7680
- chore(deps): bump actions/setup-java from 6.0.1 to 6.1.0 by @dependabot[bot] in #7673
- chore(deps): bump step-security/harden-runner from 2.22.1 to 2.22.2 by @dependabot[bot] in #7672
- chore(deps): bump google.golang.org/api from 0.304.0 to 0.305.0 in the go-minor group by @dependabot[bot] in #7671
- chore(backport release-1.12): fix(controller): never requeue a Promotion with a non-positive interval by @akuitybot in #7681
- chore(backport release-1.12): fix(server): answer with HTTP statuses, not Connect codes, from REST handlers by @akuitybot in #7679
- chore(deps): bump the go-patch group across 1 directory with 4 updates by @dependabot[bot] in #7670
- chore(backport release-1.12): fix(git): stop leaking clone directories into the temp dir (#7548) by @krancour in #7683
- chore(backport release-1.12): fix(api): count soak time only in a Stage's upstream Stages by @akuitybot in #7686
- chore(backport release-1.12): fix(webhook): confirm Freight availability with the API server before refusing a Promotion by @akuitybot in #7684
- chore(backport release-1.12): fix(git): kill keyboxd, not just gpg-agent, before removing stale GnuPG sockets by @akuitybot in #7690
- chore(backport release-1.12): chore(deps): bump Go to 1.27.3 and fix high-severity CVEs (#7707) by @krancour in #7709
- chore(backport release-1.12): fix(api): reject unusable OIDC discovery responses so they are retried (#7623) by @krancour in #7689
- chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #7720
- chore(deps): bump library/node from 26.11.1 to 26.12.1 by @dependabot[bot] in #7715
- chore(deps): bump the go-patch group with 6 updates by @dependabot[bot] in #7732
- chore(deps): bump the go-minor group with 4 updates by @dependabot[bot] in #7733
- chore(backport release-1.12): fix(api): accept scalar claim values when mapping users to ServiceAccounts by @akuitybot in #7735
- chore(backport release-1.12): fix(controller): guard branch lock maps in git-push and github-push by @akuitybot in #7746
- chore(backport release-1.12): fix(controller): serialize all use of Kustomize's OpenAPI schema by @akuitybot in #7756
Full Changelog: v1.12.4...v1.12.5