Security

• Sep 15, 2026 Security starboard-exporter v1.2.16

  Fixed

  • (deps) Update module github.com/buraksezer/consistent to v1.1.0 in #619 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.15...v1.2.16

• Sep 8, 2026 Security kyverno-policies v0.28.0

  Changed

  • Updated kyverno-policies to upstream version v1.19.0.
• Sep 7, 2026 Security kyverno-policies v0.27.1

  Changed

  • Allow additional properties for vendored upstream chart values so upstream keys are not rejected by the generated schema.

  Fixed

  • Take the app.kubernetes.io/version label from the chart app version instead of the chart version. Flux adds build metadata to the chart version, which pushed the label past the 63 byte limit and made the install fail. The app version carries the same value without that metadata.
• Sep 7, 2026 Security falco-app v0.13.0

  Added

  • Route Falco security events to the Giant Swarm Security Grafana organization. Operational data still goes to the default tenant.
  • Enable metrics scraping for Falcosidekick and k8s-metacollector.
  • Send Falco events to Falcosidekick by default.

  Changed

  • Enabled json_output for Falco so security events land in Loki as structured JSON.
  • Allow additional properties for vendored upstream chart values so upstream keys are not rejected by the generated schema.
  • Updated falco to upstream version v0.44.1.
  • Updated charts to upstream version falco-9.1.0.

  Fixed

  • Take the app.kubernetes.io/version label from the chart app version instead of the chart version, as described in the Helm chart best practices. The chart version carries build metadata that pushed the label past the 63 byte limit and made the install fail.
• Sep 4, 2026 Security external-secrets v2.10.0

  Changed

  • Updating to the v2.10.0 version.
• Sep 3, 2026 Security starboard-exporter v1.2.15

  Fixed

  • (nancy) Remediate nancy findings in #623 by @heraldbot[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.14...v1.2.15

• Sep 3, 2026 Security starboard-exporter v1.2.14

  Changed

  • Align files according to platform standards in #622 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.13...v1.2.14

• Sep 3, 2026 Security starboard-exporter v1.2.13

  Fixed

  • (nancy) Remediate nancy findings in #620 by @heraldbot[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.12...v1.2.13

• Sep 3, 2026 Security starboard-exporter v1.2.12

  Fixed

  • (nancy) Ignore CVE-2022-3248 in github.com/openshift/api in #621 by @fhielpos

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.11...v1.2.12

• Sep 3, 2026 Security dex-app v3.0.0

  Changed

  • Breaking: Default oidc.responseTypes to ["code"] only, disabling the insecure OAuth2 implicit flow by default. Any client relying on the implicit or hybrid flow without setting oidc.responseTypes explicitly will stop working. Set oidc.responseTypes explicitly to ["code", "token", "id_token"] to keep them.
  • CI: bump architect orb from 9.4.1 to 10.1.2.

• Newer entries
• Older entries