What's Changed
🐛 Bug Fixes
- Warn user when policy on Ingress needs custom resources enabling by @nginx-bot in #9510
- fix oidc policy leaking into non-referenced locations by @nginx-bot in #9620
- Implement policy support checks for Ingress resources by @pdabelf5 in #9792
🔨 Maintenance
- Update go proxy usage (#9518) by @AlexFenlon in #9531
- Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in the go_modu… by @vepatel in #9546
- Docker tag update bundle for release 5.4 by @javorszky in #9581
- Bundle renovate python dependencies for tests and scripts packages by @javorszky in #9582
- Bundled docker updates into release 5.4 by @javorszky in #9612
- Enhance linting workflow and renovate configuration for golangci-lint… by @pdabelf5 in #9681
- Fix container package check by replacing auto_remove with remove flag by @nginx-bot in #9696
- Version Bump for 5.4.2 by @nginx-bot in #9781
- fix compliance rules org link by @javorszky in #9801
📝 Documentation
- Release 5.4.2 by @AlexFenlon in #9782
⬆️ Dependencies
- Update quay.io/jetstack/cert-manager-controller Docker tag to v1.20.1 (release-5.4) by @renovate[bot] in #9493
- Update quay.io/jetstack/cert-manager-cainjector Docker tag to v1.20.1 (release-5.4) by @renovate[bot] in #9492
- Update quay.io/jetstack/cert-manager-webhook Docker tag to v1.20.1 (release-5.4) by @renovate[bot] in #9494
- Update pre-commit hook python-jsonschema/check-jsonschema to v0.37.2 (release-5.4) by @renovate[bot] in #9481, #9769
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi8 Docker digest to 8029153 (release-5.4) by @renovate[bot] in #9478, #9527, #9686, #9729, #9764
- Update aws-sdk-go-v2 monorepo (release-5.4) by @renovate[bot] in #9480
- Update ghcr.io/nginx/dependencies/nginx-ubi:ubi9 Docker digest to f523999 (release-5.4) by @renovate[bot] in #9479, #9528, #9603, #9730, #9765, #9784
- Update pre-commit hook rhysd/actionlint to v1.7.12 (release-5.4) by @renovate[bot] in #9514
- Update docker/dockerfile Docker tag to v1.23 (release-5.4) by @renovate[bot] in #9515
- Update opentelemetry-go monorepo to v1.43.0 (release-5.4) by @renovate[bot] in #9541
- Update redhat/ubi9 Docker tag to v9.7-1775575763 (release-5.4) by @renovate[bot] in #9566
- Update Go to v1.26.2, NGINX to 1.29.8, WAF to 5.12.1 by @AlexFenlon in #9583
- Update module golang.org/x/tools to v0.44.0 (release-5.4) by @renovate[bot] in #9596
- Update module golang.org/x/crypto to v0.50.0 (release-5.4) by @renovate[bot] in #9595
- Update module github.com/aws/aws-sdk-go-v2/config to v1.32.14 (release-5.4) by @renovate[bot] in #9538
- Update dependency preflight to v1.17.2 (release-5.4) by @renovate[bot] in #9617, #9688
- Update quay.io/keycloak/keycloak Docker tag to v26.6.1 (release-5.4) by @renovate[bot] in #9651
- Update golang:1.26-alpine Docker digest to f853308 (release-5.4) by @renovate[bot] in #9648
- Update module github.com/dlclark/regexp2 to v1.12.0 (release-5.4) by @renovate[bot] in #9670
- Update Kubernetes ecosystem (release-5.4) by @renovate[bot] in #9667
- Update AWS SDK v2 (release-5.4) by @renovate[bot] in #9666
- Update alpine:3.22 Docker digest to 310c62b (release-5.4) by @renovate[bot] in #9664
- Update nginx:1.29.8-alpine3.23 Docker digest to 5616878 (release-5.4) by @renovate[bot] in #9604
- Update Red Hat UBI images (release-5.4) by @renovate[bot] in #9665
- Update python:3.14-trixie Docker digest to 7095074 (release-5.4) by @renovate[bot] in #9562, #9706, #9731
- Update quay.io/skopeo/stable Docker tag to v1.22.2 (release-5.4) by @renovate[bot] in #9668
- Update Red Hat UBI images (release-5.4) by @renovate[bot] in #9687
- Update nginx:1.29.8 Docker digest to 6e23479 (release-5.4) by @renovate[bot] in #9705
- Update debian:12-slim Docker digest to f9c6a2f (release-5.4) by @renovate[bot] in #9704
- Update pre-commit hook DavidAnson/markdownlint-cli2 to v0.22.1 (release-5.4) by @renovate[bot] in #9708
- Update coredns/coredns Docker tag to v1.14.3 (release-5.4) by @renovate[bot] in #9707
- Update Red Hat UBI images (release-5.4) by @renovate[bot] in #9737
- Update AWS SDK v2 (release-5.4) by @renovate[bot] in #9755
- Update Red Hat UBI images (release-5.4) by @renovate[bot] in #9774
- Update golangci/golangci-lint Docker tag to v2.12.2 (release-5.4) by @renovate[bot] in #9763, #9796
- Update Kubernetes ecosystem 0.36 and REGEXP2 to v2.0.1 for release-5.4 by @AlexFenlon in #9786
- Update module sigs.k8s.io/controller-tools to v0.21.0 (release-5.4) by @renovate[bot] in #9710
- Update Red Hat UBI images (release-5.4) by @renovate[bot] in #9794
Other Changes
- Update NGINX Agent to v3.9 by @nginx-bot in #9639
- Bump github.com/jackc/pgx/v5 from 5.7.1 to 5.9.2 in the go_modules group across 1 directory by @nginx-bot in #9724
- Bump github.com/Azure/go-ntlmssp from 0.0.0-20221128193559-754e69321358 to 0.1.1 in the go_modules group across 1 directory by @nginx-bot in #9735
Full Changelog: v5.4.1...v5.4.2
Upgrade
- For NGINX, use the v5.4.2 images from our DockerHub, GitHub Container, Amazon ECR Public Gallery or Quay.io.
- For NGINX Plus, use the v5.4.2 images from the F5 Container registry or build your own image using the v5.4.2 source code.
- For Helm, use version 2.5.2 of the chart.
Resources
- Documentation -- https://docs.nginx.com/nginx-ingress-controller/
- Configuration examples -- https://github.com/nginx/kubernetes-ingress/tree/v5.4.2/examples
- Helm Chart -- https://github.com/nginx/kubernetes-ingress/tree/v5.4.2/charts/nginx-ingress
- Operator -- https://github.com/nginx/nginx-ingress-helm-operator