gma1k/podtrace v0.14.5 on GitHub

What's Changed

fix: clamp gRPC status and bound the error_code metric label by @gma1k in #414
fix: cap tracked traces and spans-per-trace to bound the trace map by @gma1k in #418
fix: confine kubelet-derived cgroup walk roots to the cgroup base by @gma1k in #419
fix: restore systemd cgroup walk and stop stale h2/h3 record bytes by @gma1k in #420
fix: clear all side maps on the cgroup-prefilter early-out by @gma1k in #421
fix: surface kernel event drops in agent metrics and status by @gma1k in #422
fix: guard exporter egress against SSRF, cleartext, and redirects by @gma1k in #423
fix: bound CR names stamped into label values to 63 chars by @gma1k in #424
fix: harden setup scripts/CI and tracer lifecycle races by @gma1k in #425
fix: rescope Trivy to vuln/secret and fix code-scanning findings by @gma1k in #426
fix: honor human bool env values and range-check float config by @gma1k in #428
fix: close PII redaction gaps and CSV formula injection by @gma1k in #429
fix: harden BPF attribution, bounds, and telemetry integrity by @gma1k in #430
fix: close operator tenancy gaps and bound session/map lifecycles by @gma1k in #431
fix: correct BPF L7 parser desyncs and wire the gRPC port knob by @gma1k in #432

docs: reconcile CRD inventory in STABILITY.md (four to six) by @olamilekan000 in #415

Full Changelog: v0.14.4...v0.14.5