This release focuses on security hardening and operational reliability. Core updates
introduce a regex length limit to reduce resource-exhaustion risk. Plugin updates
improve error consolidation (show_first), reduce misleading SOA warnings, add
Kubernetes API rate limiting, enhance metrics with plugin chain tracking, and fix
issues in azure and sign. This release also includes additional security fixes;
see the security advisory for details.
Brought to You By
cangming
pasteley
Raisa Kabir
Ross Golder
rusttech
Syed Azeez
Ville Vesilehto
Yong Tang
Noteworthy Changes
- core: Fix gosec G115 integer overflow warnings (#7799)
- core: Add regex length limit (#7802)
- plugin/azure: Fix slice init length (#6901)
- plugin/errors: Add optional
show_firstflag to consolidate directive (#7703) - plugin/file: Fix for misleading SOA parser warnings (#7774)
- plugin/kubernetes: Rate limits to api server (#7771)
- plugin/metrics: Implement plugin chain tracking (#7791)
- plugin/sign: Report parser err before missing SOA (#7775)