Notable Changes
- 🛡️OPA rego v1 syntax is available in Gatekeeper ConstraintTemplates. Find out more about OPA rego v1 here.
- 📤Updated Pub/Sub mechanism to generalized export mechanism to enable additional backends such as disk to export violations.
Features
- feat: gator test --deny-only flag (#3809) (Steeve)
- feat: Update Rego driver to support rego.v1 (#3873)(Charlie Egan]
Bug Fixes
- adding a comment to clean up disk space in runner (CP: 3877) (#3878) #3878 (Jaydip Gabani)
- Add flag to enable/disable referential constraints (#3701) (David Lee)
- bumping frameworks to fix GO-2025-3372 (#3810) (Jaydip Gabani)
- fixing nil pointer error when converting VAPB from v1beta1 to v1 (#3754) (Jaydip Gabani)
- parse namespace from oldObject when processing a DELETE operation (#3837) (Clément Nussbaumer)
- replace plus character with underscore in version label (#3742) (Filippo Rossi)
Documentation
- Add connect to operations (#3785) (Martin Alexander)
- Use markdown emphasize-syntax in demo documentation (#3786) (Sascha)
- addressing deny-only gator flag nits (#3870) (Jaydip Gabani)
Chores
- Prepare v3.19.0 release (#3903) #3903 (github-actions[bot])
- Prepare v3.19.0-rc.1 release (#3879) #3879 (github-actions[bot])
- update curlimages/curl to v8.12.0 (#3817) (Thomas Berreis)
- adding FAQs for multi-engine (#3761) (Jaydip Gabani)
- adding annotation to generate VAPB right away once the waiting window is over to protect against clock skews (#3773) (Jaydip Gabani)
- adding warning for alpha flags (#3764) (Jaydip Gabani)
- bump @babel/helpers from 7.17.8 to 7.26.10 in /website (#3856) (dependabot[bot])
- bump @babel/runtime from 7.18.6 to 7.26.10 in /website (#3855) (dependabot[bot])
- bump @babel/runtime-corejs3 from 7.18.6 to 7.26.10 in /website (#3848) (dependabot[bot])
- bump distroless/static-debian12 from
3f2b64eto95ea148(#3866) (dependabot[bot]) - bump distroless/static-debian12 from
3f2b64eto95ea148in /test/externaldata/dummy-provider (#3865) (dependabot[bot]) - bump distroless/static-debian12 from
5c7e2b4to3f2b64ein /test/externaldata/dummy-provider (#3775) (dependabot[bot]) - bump distroless/static-debian12 from
f4a57e8to3f2b64e(#3774) (dependabot[bot]) - bump distroless/static-debian12 from
f4a57e8to5c7e2b4in /test/externaldata/dummy-provider (#3721) (dependabot[bot]) - bump frameworks and kube dep to 1.32.3 (#3873) (Jaydip Gabani)
- bump github.com/containerd/containerd from 1.7.25 to 1.7.27 (#3857) (dependabot[bot])
- bump github.com/golang/glog from 1.2.1 to 1.2.4 (#3802) (dependabot[bot])
- bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#3523) (dependabot[bot])
- bump github/codeql-action from 3.28.8 to 3.28.9 in the all group (#3813) (dependabot[bot])
- bump golang from 1.23-bookworm to 1.24-bookworm (#3821) (dependabot[bot])
- bump golang from 1.23-bookworm to 1.24-bookworm in /build/tooling (#3823) (dependabot[bot])
- bump golang from 1.23-bookworm to 1.24-bookworm in /test/externaldata/dummy-provider (#3824) (dependabot[bot])
- bump golang from 1.23-bookworm to 1.24-bookworm in /test/image (#3825) (dependabot[bot])
- bump golang from
2e83858to3149bc5(#3793) (dependabot[bot]) - bump golang from
2e83858to3149bc5in /test/externaldata/dummy-provider (#3794) (dependabot[bot]) - bump golang from
2e83858to3149bc5in /test/image (#3791) (dependabot[bot]) - bump golang from
3149bc5to441f59f(#3812) (dependabot[bot]) - bump golang from
3149bc5to441f59fin /build/tooling (#3811) (dependabot[bot]) - bump golang from
3149bc5to441f59fin /test/externaldata/dummy-provider (#3815) (dependabot[bot]) - bump golang from
3149bc5to441f59fin /test/image (#3814) (dependabot[bot]) - bump golang from
3f3b9datoef30001(#3727) (dependabot[bot]) - bump golang from
3f3b9datoef30001in /build/tooling (#3726) (dependabot[bot]) - bump golang from
3f3b9datoef30001in /test/externaldata/dummy-provider (#3730) (dependabot[bot]) - bump golang from
6260304tob970e6din /build/tooling (#3834) (dependabot[bot]) - bump golang from
6260304tob970e6din /test/image (#3835) (dependabot[bot]) - bump golang from
b970e6dtod7d795d(#3844) (dependabot[bot]) - bump golang from
b970e6dtod7d795din /build/tooling (#3841) (dependabot[bot]) - bump golang from
b970e6dtod7d795din /test/externaldata/dummy-provider (#3843) (dependabot[bot]) - bump golang from
b970e6dtod7d795din /test/image (#3852) (dependabot[bot]) - bump golang from
d7d795dtofa1a01d(#3867) (dependabot[bot]) - bump golang from
d7d795dtofa1a01din /build/tooling (#3869) (dependabot[bot]) - bump golang from
d7d795dtofa1a01din /test/externaldata/dummy-provider (#3864) (dependabot[bot]) - bump golang from
d7d795dtofa1a01din /test/image (#3863) (dependabot[bot]) - bump golang from
ef30001to2e83858in /test/image (#3758) (dependabot[bot]) - bump golang from
ef30001to3149bc5in /build/tooling (#3805) (dependabot[bot]) - bump google.golang.org/protobuf from 1.36.3 to 1.36.5 (#3816) (dependabot[bot])
- bump http-proxy-middleware from 2.0.6 to 2.0.7 in /website (#3662) (dependabot[bot])
- bump kubectl from v1.31.2 to v1.32.0 (#3747) (dependabot[bot])
- bump kubectl from v1.32.0 to v1.32.1 (#3792) (dependabot[bot])
- bump kubectl from v1.32.1 to v1.32.2 (#3820) (dependabot[bot])
- bump prismjs from 1.28.0 to 1.30.0 in /website (#3845) (dependabot[bot])
- bump serialize-javascript from 6.0.0 to 6.0.2 in /website (#3819) (dependabot[bot])
- bump the all group across 1 directory with 5 updates (#3871) (dependabot[bot])
- bump the all group across 1 directory with 7 updates (#3796) (dependabot[bot])
- bump the all group with 2 updates (#3804) (dependabot[bot])
- bump the all group with 2 updates (#3826) (dependabot[bot])
- bump the all group with 2 updates (#3853) (dependabot[bot])
- bump the all group with 3 updates (#3801) (dependabot[bot])
- bump the all group with 3 updates (#3842) (dependabot[bot])
- bump the all group with 4 updates (#3833) (dependabot[bot])
- bump the all group with 6 updates (#3830) (dependabot[bot])
- bump the k8s group across 1 directory with 6 updates (#3790) (dependabot[bot])
- bump the k8s group with 5 updates (#3822) (dependabot[bot])
- bumping cert controller (#3874) (Jaydip Gabani)
- bumping frameworks/constraints to 9e57a57 (#3783) (Steeve)
- bumping net, crypto dep (#3766) (Jaydip Gabani)
- removing finalizers and controllerswitch (#3779) (Jaydip Gabani)
- removing unused function (#3838) (Jaydip Gabani)
- update opa v1 with v0 rego compat (#3798) (Sertaç Özercan)
- updating pubsub system (#3646) (Jaydip Gabani)
- allow changing the name of container in audit and controlle manager (#3759) (Huang Huang)