falcosecurity/falco 0.40.0

on GitHub

Packages	Download
rpm-x86_64
deb-x86_64
tgz-x86_64
tgz-static-x86_64
rpm-aarch64
deb-aarch64
tgz-aarch64

v0.40.0

Released on 2025-01-28

Breaking Changes ⚠️

• cleanup(userspac/falco)!: drop deprecated options. [#3361] - @FedeDP

Major Changes

• new(docker): streamline docker images [#3273] - @FedeDP
• new(build): reintroduce static build [#3428] - @LucaGuerra
• new(cmake,ci): added support for using jemalloc allocator instead of glibc one and use it by default for release artifacts [#3406] - @FedeDP
• new(userspace,cmake): honor new plugins exposed suggested output formats [#3388] - @FedeDP
• new(userspace/falco): allow entirely disabling plugin hostinfo support. [#3412] - @FedeDP
• new(ci): use zig compiler instead of relying on centos7. [#3307] - @FedeDP
• new(falco): add buffer_format_base64 option, deprecate -b [#3358] - @LucaGuerra
• new(falco): add base_syscalls.all option to falco.yaml, deprecate -A [#3352] - @LucaGuerra
• new(falco): add falco_libs.snaplen option, deprecate -S / --snaplen [#3362] - @LucaGuerra

Minor Changes

• update(cmake): bump falcoctl to v0.11.0 [#3467] - @alacuku
• chore(ci): add attestation for falco [#3216] - @cpanato
• chore(ci): build Falco in RelWithDebInfo, and upload Falco debug symbols as github artifacts [#3452] - @FedeDP
• update(build): DEB and RPM package requirements for dkms and kernel-devel are now suggestions [#3450] - @jthiltges

Bug Fixes

• fix(userspace/falco): fix container_engines.cri.sockets not loading from config file [#3453] - @zayaanmoez
• fix(docker): /usr/src/'*' no longer created if $HOST_PATH/usr/src didn't exist at startup [#3434] - @shane-lawrence
• fix(docker): add brotli to the Falco image [#3399] - @LucaGuerra
• fix(userspace/engine): explicitly disallow appending/modifying a rule with different sources [#3383] - @mstemm

Non user-facing changes

• chore(falco.yaml): remove comments about cri cli arguments [#3458] - @alacuku
• fix(ci): fixed reusable_build/publish_docker workflows. [#3459] - @FedeDP
• update(cmake): update libs and driver to latest master [#3455] - @github-actions[bot]
• chore(ci): bumped actions/upload-download-artifact. [#3454] - @FedeDP
• chore(docker): drop unused libelf dep from container images [#3451] - @leogr
• chore(docs): update plugins_hostinfo config file comment. [#3449] - @FedeDP
• new(build): add RelWithDebInfo target [#3440] - @shane-lawrence
• chore(deps): Bump submodules/falcosecurity-rules from 283a62f to abf6637 [#3448] - @dependabot[bot]
• update(ci): use 4cpu-16gb arm runners [#3447] - @LucaGuerra
• update(cmake): update libs and driver to latest master [#3439] - @github-actions[bot]
• chore: avoid deprecated funcs to calculate sha256 [#3442] - @federico-sysdig
• chore(ci): enable jemalloc in musl build. [#3436] - @FedeDP
• docs(falco.yaml): correct buffered_outputs description [#3427] - @leogr
• fix(userspace/falco): use correct filtercheck_field_info. [#3426] - @FedeDP
• update(cmake): update libs and driver to latest master [#3421] - @github-actions[bot]
• fix: update the url for the docs about the concurrent queue classes [#3415] - @Issif
• update(changelog): updated changelog for 0.39.2. [#3410] - @FedeDP
• update(cmake): update libs and driver to latest master [#3392] - @github-actions[bot]
• fix(cmake,docker): avoid cpp-httplib requiring brotli. [#3400] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from 407e997 to 283a62f [#3391] - @dependabot[bot]
• update(cmake): bump libs to latest master. [#3389] - @FedeDP
• update(cmake): update libs and driver to latest master [#3385] - @github-actions[bot]
• Make enable()/disable() virtual so they can be overridden [#3375] - @mstemm
• fix(ci): fixed shasum computation for bump-libs CI. [#3379] - @FedeDP
• chore(ci): use redhat advised method to check rpmsign success. [#3376] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from e38fb3f to 407e997 [#3374] - @dependabot[bot]
• Compile output clone [#3364] - @mstemm
• fix(ci): fixed bump-libs workflow syntax. [#3369] - @FedeDP
• new(ci): add a workflow to automatically bump libs on each monday. [#3360] - @FedeDP
• chore(deps): Bump submodules/falcosecurity-rules from b6ad373 to e38fb3f [#3365] - @dependabot[bot]
• cleanup(falco): reformat options::define [#3356] - @LucaGuerra

Statistics

Release Manager @FedeDP