Security

• Sep 16, 2026 Security starboard-exporter v1.2.17

  Fixed

  • (deps) Update module github.com/kubescape/storage to v0.0.337 in #601 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.16...v1.2.17

• Sep 15, 2026 Security rbac-operator v1.2.0

  Added

  • RBAC: Grant the automation ServiceAccounts of all organization namespaces (org-<organization>) read-only access to cluster-scoped resources looked up at Helm render time by the cluster-* (release-*) charts. For this, a cluster-app-chart-lookups ClusterRole is created, plus a per-organization ClusterRoleBinding of the same name suffixed with the namespace.
• Sep 15, 2026 Security starboard-exporter v1.2.16

  Fixed

  • (deps) Update module github.com/buraksezer/consistent to v1.1.0 in #619 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.15...v1.2.16

• Sep 8, 2026 Security kyverno-policies v0.28.0

  Changed

  • Updated kyverno-policies to upstream version v1.19.0.
• Sep 7, 2026 Security kyverno-policies v0.27.1

  Changed

  • Allow additional properties for vendored upstream chart values so upstream keys are not rejected by the generated schema.

  Fixed

  • Take the app.kubernetes.io/version label from the chart app version instead of the chart version. Flux adds build metadata to the chart version, which pushed the label past the 63 byte limit and made the install fail. The app version carries the same value without that metadata.
• Sep 7, 2026 Security falco-app v0.13.0

  Added

  • Route Falco security events to the Giant Swarm Security Grafana organization. Operational data still goes to the default tenant.
  • Enable metrics scraping for Falcosidekick and k8s-metacollector.
  • Send Falco events to Falcosidekick by default.

  Changed

  • Enabled json_output for Falco so security events land in Loki as structured JSON.
  • Allow additional properties for vendored upstream chart values so upstream keys are not rejected by the generated schema.
  • Updated falco to upstream version v0.44.1.
  • Updated charts to upstream version falco-9.1.0.

  Fixed

  • Take the app.kubernetes.io/version label from the chart app version instead of the chart version, as described in the Helm chart best practices. The chart version carries build metadata that pushed the label past the 63 byte limit and made the install fail.
• Sep 4, 2026 Security external-secrets v2.10.0

  Changed

  • Updating to the v2.10.0 version.
• Sep 3, 2026 Security starboard-exporter v1.2.15

  Fixed

  • (nancy) Remediate nancy findings in #623 by @heraldbot[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.14...v1.2.15

• Sep 3, 2026 Security starboard-exporter v1.2.14

  Changed

  • Align files according to platform standards in #622 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.13...v1.2.14

• Sep 3, 2026 Security starboard-exporter v1.2.13

  Fixed

  • (nancy) Remediate nancy findings in #620 by @heraldbot[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.12...v1.2.13

• Older entries