Security

• Aug 5, 2026 Security trivy-app v0.17.0

  Changed

  • Updated trivy to upstream version v0.72.0.
• Aug 5, 2026 Security external-secrets v2.8.0

  Changed

  • Updating to the v2.8.0 version.
• Aug 4, 2026 Security starboard-exporter v1.1.8

  Changed

  • Align files according to platform standards in #604 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.7...v1.1.8

• Jul 28, 2026 Security rbac-operator v1.1.0

  Added

  • RBAC: Grant the automation ServiceAccounts of all organization namespaces (org-<organization>) full access to Kyverno PolicyExceptions in the namespaces they are managed in. For this, a write-policy-exceptions Role granting all verbs on policyexceptions.kyverno.io resources, plus a RoleBinding of the same name, are created in each of the kube-system, giantswarm and policy-exceptions namespaces. Every organization’s automation ServiceAccount is aggregated into the subjects of these RoleBindings, and removed again once its organization namespace is deleted. Namespaces which do not exist on the management cluster are skipped.

  Changed

  • Go: Update dependencies.
• Jul 27, 2026 Security starboard-exporter v1.1.7

  Changed

  • Align files according to platform standards in #602 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.6...v1.1.7

• Jul 24, 2026 Security kyverno-policies v0.26.1

  Added

  • Allow overriding the failurePolicy of the restrict-external-ips supplemental policy.
• Jul 22, 2026 Security starboard-exporter v1.1.6

  Fixed

  • (deps) Update module github.com/go-logr/logr to v1.4.4 in #597 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.5...v1.1.6

• Jul 22, 2026 Security starboard-exporter v1.1.5

  Changed

  • Allow for running semantic-pull-request on merge group in #598 by @fhielpos

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.4...v1.1.5

• Jul 22, 2026 Security rbac-operator v1.0.0

  Added

  • Create a per-organization ClusterRoleBinding granting the org’s automation ServiceAccount the kamaji-datastore-manager ClusterRole, so cluster apps using Kamaji can manage their kamaji.clastix.io/datastores CR. The referenced ClusterRole is provisioned by the global Kamaji app.
  • RBAC: Create patch-charts Role for automation ServiceAccounts.

  Changed

  • Go: Update dependencies.
• Jul 21, 2026 Security cert-manager-app v4.1.1

  Changed

  • Upgrade docker-kubectl image to support arm64 architecture

• Newer entries
• Older entries