Security

• Jul 28, 2026 Security rbac-operator v1.1.0

  Added

  • RBAC: Grant the automation ServiceAccounts of all organization namespaces (org-<organization>) full access to Kyverno PolicyExceptions in the namespaces they are managed in. For this, a write-policy-exceptions Role granting all verbs on policyexceptions.kyverno.io resources, plus a RoleBinding of the same name, are created in each of the kube-system, giantswarm and policy-exceptions namespaces. Every organization’s automation ServiceAccount is aggregated into the subjects of these RoleBindings, and removed again once its organization namespace is deleted. Namespaces which do not exist on the management cluster are skipped.

  Changed

  • Go: Update dependencies.
• Jul 27, 2026 Security starboard-exporter v1.1.7

  Changed

  • Align files according to platform standards in #602 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.6...v1.1.7

• Jul 24, 2026 Security kyverno-policies v0.26.1

  Added

  • Allow overriding the failurePolicy of the restrict-external-ips supplemental policy.
• Jul 22, 2026 Security starboard-exporter v1.1.6

  Fixed

  • (deps) Update module github.com/go-logr/logr to v1.4.4 in #597 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.5...v1.1.6

• Jul 22, 2026 Security starboard-exporter v1.1.5

  Changed

  • Allow for running semantic-pull-request on merge group in #598 by @fhielpos

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.4...v1.1.5

• Jul 22, 2026 Security rbac-operator v1.0.0

  Added

  • Create a per-organization ClusterRoleBinding granting the org’s automation ServiceAccount the kamaji-datastore-manager ClusterRole, so cluster apps using Kamaji can manage their kamaji.clastix.io/datastores CR. The referenced ClusterRole is provisioned by the global Kamaji app.
  • RBAC: Create patch-charts Role for automation ServiceAccounts.

  Changed

  • Go: Update dependencies.
• Jul 21, 2026 Security cert-manager-app v4.1.1

  Changed

  • Upgrade docker-kubectl image to support arm64 architecture
• Jul 20, 2026 Security starboard-exporter v1.1.4

  Changed

  • Align files according to platform standards in #592 by @giantswarm-align-files[bot]
  • Align files according to platform standards in #594 by @giantswarm-align-files[bot]

  Fixed

  • (deps) Update module github.com/kubescape/storage to v0.0.297 in #595 by @renovate[bot]
  • (deps) Update module github.com/prometheus/client_golang to v1.24.0 in #596 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.3...v1.1.4

• Jul 14, 2026 Security dex-app v2.2.3

  Changed

  • CI: push the release image to gsoci only and mirror to Aliyun out-of-band via sync-china-registry, so a slow cross-Pacific Aliyun push can no longer time out and block the chart catalog publish.

  Fixed

  • Update dex to v2.43.2. Fixes forced re-login after ~8h for GitHub App-backed connectors (GitHub App user-to-server tokens expire after 8 hours); the connector now persists GitHub’s refresh token and renews the upstream user access token on refresh. Cherry-pick of upstream dexidp/dex#4845.
• Jul 8, 2026 Security starboard-exporter v1.1.3

  Fixed

  • (deps) Update module github.com/aquasecurity/trivy-operator to v0.32.0 in #589 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.2...v1.1.3

• Newer entries
• Older entries