What's Changed
- fix(controller): allow Bidirectional mountPropagation on privileged containers. Fixes #3130 (cherry-pick #4789 for 1.10) by @argo-cd-cherry-pick-bot[bot] in #5028
- fix(dashboard)!: Rollouts dashboard should only bind local interface (by default) (cherry-pick #5088 for 1.10) by @argo-cd-cherry-pick-bot[bot] in #5098
Fixes GHSA-366v-5xmx-36vh (https://nvd.nist.gov/vuln/detail/cve-2026-82277)
If you are using a custom Helm chart or other way to expose the local Argo Rollouts dashboard you now NEED
the --address 0.0.0.0 option
Full Changelog: v1.10.0...v1.10.1