3.0.0-alpha.1 (2026-09-22)
⚠ BREAKING CHANGES
- v3 restarts from a clean tree.
Features
- Add adunand v3 spec proposals (cd9ca80)
- add the v3 API types (3b2093f)
- Allow complex environment variables by using "toYaml" instead of walking the array of name:value pairs. (a5cb6fd)
- allow to restrict cluster-scoped resources (CISM, CRIS, CISA) to a (f502502)
- enforce exactly-one-selector per filter item (4edc9e6)
- mirroring: allow to configure a list of target platforms when mirroring images (890e0d3)
- route pods and images through spec.filter with precedence (210f003)
- routing: add discardAlternative field on (C)RIS upstreams (b29e356)
- support pod filtering based on global labels/annotations exclusions (a2e4082)
- support pod filtering based on labels/annotations for any kuik resource (8314dd4)
Bug Fixes
- add namespace templating to all namespaced resources (a1f6096)
- deps: bump Go dependencies to fix security vulnerabilities (88f6177)
- mirroring: handle deletion before compiling the filter (f88555a)
- mirroring: warn instead of fail on missing platform (0797f9a)
- monitoring: ignore CRs with invalid filters in the monitoring candidate scan (631abfe)
- registry: add opt-in digest-path check for stale tag caches (bad282d)
- registry: address review feedback on digest-path check (9506ef7)
- registry: do not retry rate-limited requests at the transport level (3cd8f4f)
- registry: harden digest-path status mapping (6063b11)
- reject image items in a (Cluster)ReplicatedImageSet spec.filter (00f4502)
- reject setting both spec.filter and the deprecated spec.imageFilter (9e135db)
- restore per-item length bounds on the unified filter fields (7c12bf2)
- routing: correct matched-CR counts in alternatives debug log (1a48287)
- routing: remove duplication loop of secret when using a CISM (029f889)
- routing: tolerate invalid CR image filters instead of failing pod admission (3812594)
Continuous Integration
- fail the release when a maintenance line escapes its version range (db2d839)