Release v0.39.1-rc.1

Summary

This release candidate includes numerous dependency updates, infrastructure improvements, and bug fixes. Major highlights include upgraded Flux compatibility (2.7.2), enhanced CI/CD workflows with release automation and security improvements, and preparations for Helm chart OCI distribution with signing capabilities.

Changes

Features

• feat(tooling): add rc bump for release candidates (0.39.0-rc.2 -> 0.39.0-rc.3) (#5313)
• feat: Helm chart release synchronization (#5187)
• feat(helm): new value to opt-out from cluster-wide view access to secrets

Fixes

• fix(ui): replace deprecated innerRef prop with React.forwardRef (#5312)
• fix: ui-audit, weavetooling rename, ci run_release_jobs (#5314)
• fix: Update ImageUpdateAutomation to use .Changed instead of deprecated .Updated field (#5250)
• fix: Filter alerts on name (was type) (#4724)
• fix: display correct OCIRepository sources for HelmReleases in applications page (#5042)
• fix: add namespaces to helmchart (#4598)
• fix: correct automation branch (#4555)
• fix: clashing httptest ports (#4553)
• fix: correct image automation git repository for podinfo (#4538)
• fix: add ocirepositories to nsaccess rules
• fix: babel/parcel build warnings (#4436)
• fix: bump ts config target to ES2018 (#4437)
• fix: GetInstalledDashboard should support nil Chart (#4236)
• fix(deps): bump numerous dependencies including Flux APIs, MUI, React Router, Tanstack React Query, golang.org/x packages, controller-runtime, and many others

Other

• chore: Upgrade Flux to 2.7.2, 2.7.1, 2.7.0, 2.6.4, 2.6.3, 2.6.2, 2.6.1, 2.6.0, 2.5.1, 2.5.0
• chore: bump all use of Flux APIs to their latest version (#5241)
• chore: bump node from 24-bookworm to 25-bookworm (#5257)
• chore: fully enable the usetesting Go linter (#4968)
• chore: enable various Go linters (errchkjson, gofumpt, tenv, nolintlint, gci, gosec)
• chore: update references to deprecated Flux APIs
• chore: dev tools to exercise ui (#5251)
• chore: upgrade to react 18 and styled-components 6 (#4334)
• chore: migrate to yarn 4 (#4289)
• chore: upgrade docusaurus to v3 (#4270)
• chore(commitlint): set body-max-line-length to 3000 (#5315)
• chore(deps): bump numerous base images including golang, node, ubuntu, distroless/base
• ci: enforce Conventional Commits PRs
• ci: add Dependabot Go group for FluxCD deps (#5242)
• ci: add dependency review scanning to pull requests (#4930)
• ci: cancel PR workflows on new commits (#4918)
• ci: upgrade golangci-lint to v2 (#4967)
• ci: configure Dependabot for all relevant upgrades and grouping
• ci: enable Trivy vulnerability scanning (#4291)
• ci: keyless sign of release artifacts with Cosign (#4513)
• ci(release): push and sign OCI chart on Helm release (#4917)
• ci(release): introduce release-please (#4819)
• ci(release): build release when release-please release created (#4857)
• build(deps): bump numerous development and build dependencies
• build(deps-dev): bump various dev dependencies including TypeScript, ESLint, Babel, Parcel, Prettier, Jest
• test: refactor flaky auth test, replace http.Server with httptest.Server (#4512)
• test(ui): make footer snapshot test independent of npm module version (#4843)
• docs: various documentation updates and improvements
• refactor: migrate deprecated API calls and functions

Generated from commits since the previous release.