What's Changed
- Restrict cross-namespace
kubeConfigSecretreferences to Secrets labeledfleet.cattle.io/kubeconfig-referenceable-fromby @thardeck in #5971 - Bind
ClusterRegistrationClientIDto its registration token by @thardeck in #5948 - Allow Helm
valuesFilesto reference files within the repository checkout root (#5842) by @thardeck in #5867 - Warn when
helmRepoURLRegexstrips credentials from a non-matching chart URL (#5793) by @thardeck in #5821 - Add Helm chart image HIP-0015 annotations by @thardeck in #5854
- Update Go to
v1.26.10(CVE-2026-111943) byrenovatein #5986 - Update
golang.org/x/nettov0.60.0,golang.org/x/cryptotov0.57.0,golang.org/x/modtov0.41.0,golang.org/x/synctov0.23.0,golang.org/x/systov0.48.0,golang.org/x/termtov0.46.0, andgolang.org/x/texttov0.42.0(CVE-2026-78659, CVE-2026-78660, CVE-2026-78669, CVE-2026-78663, CVE-2026-97032) byrenovatein #5919 - Update Kubernetes dependencies to
v1.34.12(k8s.io/*modules atv0.34.12) byrenovatein #5891 - Update module
github.com/containerd/containerdtov1.7.36(GHSA-pg57-6jwg-q645) byrenovatein #5838
Full Changelog: v0.14.11...v0.14.12