Security

• Nov 4, 2026 Security kyverno-app v0.26.0

  Added

  • Allow in-cluster ingress to the Policy Reporter MCP server’s port (policy-reporter.mcp.port, default 9090) in the allow-kyverno-policy-reporter-talk-to-apiserver CiliumNetworkPolicy when policy-reporter.mcp.enabled is true, so muster and teleport-kube-agent can reach it.
  • Added ciliumNetworkPolicy.imageVerificationEgress, enabled by default, which allows the Kyverno admission and reports controllers to reach the Giant Swarm container registry and Sigstore for image signature verification. Customers can add their own registries to the fqdns list.

  Changed

  • set size limits for emptyDir volumes
  • Updated policy-reporter to upstream version v3.11.2.
  • Updated kyverno to upstream version v1.19.2.
  • Raise policy-reporter-ui memory limit to 64Mi to stop OOM kills at startup.
  • Cap the policy-reporter-ui and kyverno-plugin VPAs at 64Mi memory.

  Fixed

  • Point the policy-reporter-ui and kyverno-plugin VPAs at their actual Deployments.
• Nov 3, 2026 Security cert-manager-app v4.1.3

  Fixed

  • Use server-side apply in the cert-manager-giantswarm-clusterissuer hook Job, so its memory no longer grows with the number of CRDs in the cluster and it stops being OOMKilled on clusters with many CRDs.
• Nov 3, 2026 Security dex-app v3.4.24

  Changed

  • Align files according to platform standards in #551 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/dex-app/compare/v3.4.23...v3.4.24

• Nov 3, 2026 Security starboard-exporter v1.2.42

  Changed

  • Align files according to platform standards in #669 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.41...v1.2.42

• Nov 3, 2026 Security kyverno-policies v0.28.18

  Changed

  • Align files according to platform standards in #496 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/kyverno-policies/compare/v0.28.17...v0.28.18

• Nov 3, 2026 Security external-secrets v2.14.0

  Changed

  • Updating to the v2.14.0 version.

  Fixed

  • Make the upstream helm unit tests pass against our chart: expect our unprefixed resource names, the Giant Swarm image and metrics Services, drop the cases for upstream image, securityContext and CRD settings our templates do not use, and pin the chart version in the snapshot suites so release PRs do not break them.
• Nov 2, 2026 Security dex-app v3.4.23

  Changed

  • Align files according to platform standards in #550 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/dex-app/compare/v3.4.22...v3.4.23

• Nov 2, 2026 Security kyverno-policies v0.28.17

  Changed

  • Align files according to platform standards in #495 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/kyverno-policies/compare/v0.28.16...v0.28.17

• Nov 2, 2026 Security starboard-exporter v1.2.41

  Changed

  • Align files according to platform standards in #668 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.40...v1.2.41

• Nov 2, 2026 Security starboard-exporter v1.2.40

  Fixed

  • (deps) Update module github.com/aquasecurity/trivy-operator to v0.36.1 in #611 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.39...v1.2.40

• Older entries