mogenius/renovate-operator 6.0.0 on GitHub

6.0.0 (2026-08-14)

auth: authorization is on by default when authentication is activated. If you're running the operator in an environment where authorization isn't needed but you still want to use authentication, e. G.: in your homelab, you can disable it by setting authorization.enabled = false (or AUTHORIZATION_ENABLED='false' env var) to rely soley on authentication
ui: A RenovateJob with no access configuration is now hidden from everyone once UI authentication is enabled, where before it was visible to every authenticated user. Installs without an auth provider are unaffected. GitHub OAuth installs using groups must set auth.github.orgGroups=true. See the migration guide at docs/migration/migration-v5-to-v6.md for more info.
The deprecated job identifiers are now removed. The renovate-operator actively migrated them since quite a few versions so you shouldn't be affected but we still marked it as breaking change.
security: RenovateJobs may no longer declare hostPath volumes, privileged containers or allowPrivilegeEscalation. The API server rejects them, and existing objects using them become unapplyable. The rest of the added policy engine is purely optional and disabled by default. Look at the migration guide docs/migration/migration-v5-to-v6.md for further explanations.

auth: add authorization master switch (35e7bdd)
github-app: promote native github integration from beta to stable (be77ce5)
operator: support inline and configmap-based renovate config (2d3df52)
replace persistent debug with single push debug (225d516), closes #561
security: add optional policy engine to harden renovate runs (1f0caf2)
ui: add access model for reader, admins, and anonymous access (09b9e6e), closes #380
ui: pin toolbar and search to the top (#572) (9e894f1)

auth: match the OIDC group filter case-insensitively (58d8f92)
deacviate all trigger buttons if job hasnt been accepted by policy (4d40c07)
deps: update aws-sdk-go-v2 monorepo (4966344)
deps: update go module directive to v1.26.6 (1107806)
deps: update golang docker tag to v1.26.6 (f52ac7c)
deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.107.1 (ad4c84b)
deps: update opentelemetry to v1.45.0 (f497c81)
deps: update opentelemetry-go-contrib monorepo (68cf1d2)
metrics: do not count approval pending PRs towards metrics (863191c), closes #584
parser: do not add branches where no pr has been created yet (a319bbe), closes #584
ui: adapt the height of various objects to be more compact and coherent (8b25b93), closes #559
ui: add autoscroll and skip to top/bottom buttons in logs (dafc88f)