✨ Features / Enhancements
- Make auth-proxy query EventPolicies dynamically by @creydr - #8870
- Add probes to IntegrationSource & -Sink deployments by @creydr - #8867
- integrationsource/integrationsink AWS e2e tests by @simkam - #8849
- refactor: Replace Telepresence with ko --debug by @Arpit529Srivastava - #8869
- feat: Add auth-proxy sidecar and EventPolicy support to EventTransformer by @Arpit529Srivastava - #8883
- Add URI validation for EventType Source and Schema fields by @Kunal1522 - #8837
🔐 Security / TLS / Reliability
- make sinkbinding oidc-token volume mount readOnly by @maschmid - #8894
- consistent order for the combined trust bundle by @maschmid - #8899
- feat: use centralized TLS configuration from knative/pkg/tls by @Fedosin - #8901
- fix: use system.Namespace() instead of hardcoded namespace in broker TLS config by @Fedosin - #8905
- Update TLS import path to knative.dev/pkg/network/tls by @Fedosin - #8912
- Update default minimum TLS version to 1.3 by @Fedosin - #8916
📊 Metrics / Observability
- fix: Remove duplicate OTEL observability setup in imc-dispatcher by @creydr - #8885
- fix: Add
http.response.status_codeto mt-broker-ingress and imc-dispatcher metrics by @creydr - #8891 - Add namespace labels to source metrics by @creydr - #8892
- Fix ApiServerSource metrics port to 9092 by @creydr - #8895
- fix(eventing): suppress verbose OTEL logging in EventTransform by @khushiiagrawal - #8866
🌐 Networking / Sources / Scaling
- Increase poll timings for all ContainerSource tests by @creydr - #8862
- Fix source Ready condition to wait for zero unavailable replicas by @creydr - #8896
- Generate test certs dynamically by @creydr - #9009
- Wait in adapter for goroutines before returning in startFailFast by @creydr - #9030
- Remove unnecessary conversion webhook from RequestReply CRD by @creydr - #9039
⚙️ Performance / Stability / Testing
- Remove Kubernetes 1.33 from KinD e2e tests by @creydr - #8888
- Update dependencies and fix race conditions by @creydr - #8900
- Fix remaining race conditions in rekt tests by @creydr - #8902
- revert trustbundle propagation in sb lifecycle Do by @maschmid - #8985
- [e2e] relax skip_permissions assertions by @maschmid - #9014
- fix(adapter): start pprof server when profiling is enabled by @theakshaypant - #9008
- fix: restore
ARTIFACTS_TO_PUBLISHin release.sh to fix nightly releases by @creydr - #9040
🧪 CI / Build / Tooling
- hack: remove redundant 'set -e' alongside 'set -o errexit' by @Ankitsinghsisodya - #8994
- hack: fix unquoted variables in hack scripts to prevent word-splitting by @Ankitsinghsisodya - #9018
- hack: replace fragile awk pipeline with 'go env GOARCH' in install.sh by @Ankitsinghsisodya - #9000
- hack: remove redundant exit-code check after go run in install.sh by @Ankitsinghsisodya - #9002
- ci: upgrade actions/checkout from v2 to v6 in knative-downstream workflow by @Ankitsinghsisodya - #8988
- ci: add concurrency settings to cancel redundant workflow runs by @Ankitsinghsisodya - #9041
- ci: add explicit timeout-minutes to prevent resource exhaustion by @Ankitsinghsisodya - #9043
- ci: add top-level permissions for least-privilege security by @Ankitsinghsisodya - #9042
- Add dependabot config for GitHub Actions version updates by @Ankitsinghsisodya - #9033
🐛 Bug Fixes
- Fix source Ready condition to wait for zero unavailable replicas by @creydr - #8896
- fix: suppress verbose OTEL logging in EventTransform by @khushiiagrawal - #8866
- Drop third_party/VENDOR-LICENSE in favor of check only by @dsimansk - #9019
- Fix spelling mistakes in comments, docs, and error strings by @Ankitsinghsisodya - #9025
- Update http links to https by @Ankitsinghsisodya - #9028
- fix: use system.Namespace() instead of hardcoded namespace in broker TLS config by @Fedosin - #8905
📚 Docs / Cleanup
- Move GetLoggingConfig from cmd/broker to pkg/utils by @Ankitsinghsisodya - #9015