Changelog
New Features
- 99ab66b feat: publish build provenance attestations for every release artifact
- d07ef61 feat: run the container images as a non-root user
- 410cb37 feat: sign the release checksums keyless with cosign (#510)
- 4068bef feat: sign the release tags and verify the signature before releasing
Bug Fixes
- 15a6e99 fix: publish the collection outcome before notifying shutdown-on-error
- cf2823e fix: scale the clocks event reason counters in the nvml backend
Documentation
- bae921e docs: add security policy, governance, roadmap and best practices entry
- 4b6c96d docs: replace star history chart with updated sources
- 8558072 docs: rework the README badges and add a quick start
- 0897bf8 docs: rework the install guide around platforms
Dependency Updates
- 7cb6000 chore(deps): update dependency golang/go to v1.26.6 (#487)
- 9594b90 chore(deps): update dependency golang/go to v1.27.1 (#500)
- b8e301a chore(deps): update dependency golangci/golangci-lint to v2.13.2 (#489)
- efbe614 chore(deps): update dependency goreleaser/goreleaser to v2.18.0
- a172db5 chore(deps): update dependency grafana/dashboard-linter to v0.3.0
- 53d1fb9 chore(deps): update dependency helm/helm to v4
- d0ee088 chore(deps): update dependency mvdan/sh to v3.14.0
- 6d86cea chore(deps): update docker images
- a39142e chore(deps): update docker images
- 36c9b00 chore(deps): update docker images
- 0b8b058 chore(deps): update docker/setup-buildx-action action to v4.3.0
- 90c9093 chore(deps): update docker/setup-qemu-action action to v4.3.0
- e656cd8 chore(deps): update gcr.io/distroless/base-nossl-debian13:latest docker digest to e50761c
- 788ed17 chore(deps): update go packages
- 1c73f4c chore(deps): update golang docker tag to v1.27
- 63ab72b chore(deps): update golang:1.27-alpine docker digest to 26402d8
- 29033e2 chore(deps): update grafana/grafana docker tag to v13.2.1
- ffd59a9 chore(deps): update grafana/grafana-image-renderer docker tag to v5.12.1
- 7150408 chore(deps): update helm/kind-action action to v1.15.0
- ba2cb90 chore(deps): update module github.com/prometheus/exporter-toolkit to v0.19.0
- 788c3cd chore(deps): update module github.com/stretchr/testify to v1.12.0
- 77cecf6 chore(deps): update module github.com/stretchr/testify to v1.12.1
- 5cfa931 chore(deps): update node.js to v24.20.0
- 3048b34 chore(deps): update prom/alertmanager docker tag to v0.34.0
Build, CI & Chores
- 4afd50d chore: bump go to 1.27 and adopt its idioms
- ce3691a chore: close the build-tag blind spots in fmt and lint
- b72b12e chore: declare each tool version once and stop the corrupting fixer
- c53504a chore: harden the release pipeline and make the builds reproducible
- 53df71e chore: make the archives and packages reproducible across checkouts
- 53de781 chore: make the container images reproducible
- b40be4a chore: make the packaged Helm chart reproducible
- a3e0b0e chore: reject a version declaration the image and the workflows would read differently
- df126fe ci: check that the release artifacts are reproducible across two runners
- 700350f ci: rebuild every release on a second runner and compare it with the published files
- 0b64921 ci: run the release jobs in a protected environment
- 9fbd2d3 test: accept the exec-only deprecated fields on pre-590 drivers
- 3a1db3a test: add H200 captures for drivers 580 and 610