What's Changed

• update stable to v1.7.3 by @AryanBakliwal in #2638
• fix(ci): Fix CI to certify images on redhat by @AryanBakliwal in #2641
• Update aquasecurity/trivy-action action to v0.36.0 by @renovate[bot] in #2632
• Update actions/checkout action to v3.6.0 by @renovate[bot] in #2626
• Update module go.podman.io/podman/v6 to v6.0.0-20260603192226-3caa80eb73f3 by @renovate[bot] in #2629
• fix(operator): Make snitch UBI image non-root by @AryanBakliwal in #2647
• Revert "fix(operator): Make snitch UBI image non-root" by @AryanBakliwal in #2654
• feat(core): Improve policy matching for hostnames by @AryanBakliwal in #2640
• fix(core): use TaskExit type to unmarshal containerd exit events by @Athang69 in #2527
• feat(enforcer): Add tld & subdomain enforcement by @achrefbensaad in #2618
• fix(operator): Add NET_ADMIN to SCC by @AryanBakliwal in #2675
• Revert PR #2618 by @Aryan-sharma11 in #2680
• docs(getting-started): Update nodeSelector hostname label matching by @kanishksingh23 in #2678
• panic: send on closed channel by @Aryan-sharma11 in #2660
• Fix link to CODE_OF_CONDUCT.md in CONTRIBUTING.md by @VirajMandavkar in #2687
• feat: add grpc based healthcheck in liveness probe by @Aryan-sharma11 in #2670
• add DNS support and verifier for 6.17 by @Aryan-sharma11 in #2684
• Fix HIGH-severity containerd CVEs by @sagarkhandagre998 in #2702
• feat: add openEuler 24.03 LTS-SP3 to support matrix by @Athang69 in #2688
• chore(ci): integrate Renovate bot and pin dependencies to improve Scorecard score from 0/10 to 6/10 by @Athang69 in #2585
• fix(USB): increase socket buffer and handle panic by @AryanBakliwal in #2710
• fix(ci): correct expression syntax in workflow if conditions by @Athang69 in #2699
• chore(monitor): change iov check for RHEL and newer kernels in system monitor by @charankamal20 in #2583
• docs(docs): fix spelling and grammar in contributing, security and FAQ guides by @Rucha0901 in #2713
• Add token permissions to workflows for OpenSSF Scorecard compliance by @asmit27rai in #2677
• chore: update governance and maintainers documentation; add release p… by @achrefbensaad in #2719
• fix(feeder): rate-limit drop logs to prevent memory spikes by @AryanBakliwal in #2721
• Update ci-systemd-release.yml for provenance generation by @asmit27rai in #2664
• fix(core): Support Ubuntu 26.04 by @AryanBakliwal in #2682
• nominating two maintainers for KubeArmor by @achrefbensaad in #2725
• feat: Add quota handling via NPE by @Aryan-sharma11 in #2593
• fix(core): Fix kubearmor-init image build workflow by @AryanBakliwal in #2726
• Update CodeOwner by @achrefbensaad in #2729
• chore(helm): Update maintainers and annotations in sample policies by @charankamal20 in #2722
• fix(sysmon): revert iov changes system mon by @charankamal20 in #2734
• fix: NPE compilation on 4.18 by @Aryan-sharma11 in #2732
• chore(helm): prepare charts for v1.7.4 release by @Aryan-sharma11 in #2728

New Contributors

• @kanishksingh23 made their first contribution in #2678
• @VirajMandavkar made their first contribution in #2687
• @sagarkhandagre998 made their first contribution in #2702
• @Rucha0901 made their first contribution in #2713
• @asmit27rai made their first contribution in #2677

Full Changelog: v1.7.3...v1.7.4

What's Changed

• add DNS support and verifier for 6.17 by @Aryan-sharma11 in #2684
• Fix HIGH-severity containerd CVEs by @sagarkhandagre998 in #2702
• feat: add openEuler 24.03 LTS-SP3 to support matrix by @Athang69 in #2688
• chore(ci): integrate Renovate bot and pin dependencies to improve Scorecard score from 0/10 to 6/10 by @Athang69 in #2585
• fix(USB): increase socket buffer and handle panic by @AryanBakliwal in #2710
• fix(ci): correct expression syntax in workflow if conditions by @Athang69 in #2699
• chore(monitor): change iov check for RHEL and newer kernels in system monitor by @charankamal20 in #2583
• docs(docs): fix spelling and grammar in contributing, security and FAQ guides by @Rucha0901 in #2713
• Add token permissions to workflows for OpenSSF Scorecard compliance by @asmit27rai in #2677
• chore: update governance and maintainers documentation; add release p… by @achrefbensaad in #2719
• fix(feeder): rate-limit drop logs to prevent memory spikes by @AryanBakliwal in #2721
• Update ci-systemd-release.yml for provenance generation by @asmit27rai in #2664
• fix(core): Support Ubuntu 26.04 by @AryanBakliwal in #2682
• nominating two maintainers for KubeArmor by @achrefbensaad in #2725
• feat: Add quota handling via NPE by @Aryan-sharma11 in #2593
• fix(core): Fix kubearmor-init image build workflow by @AryanBakliwal in #2726

New Contributors

• @sagarkhandagre998 made their first contribution in #2702
• @Rucha0901 made their first contribution in #2713
• @asmit27rai made their first contribution in #2677

Full Changelog: v1.7.4-rc2...v1.7.4-rc3

What's Changed

• Revert "fix(operator): Make snitch UBI image non-root" by @AryanBakliwal in #2654
• feat(core): Improve policy matching for hostnames by @AryanBakliwal in #2640
• fix(core): use TaskExit type to unmarshal containerd exit events by @Athang69 in #2527
• feat(enforcer): Add tld & subdomain enforcement by @achrefbensaad in #2618
• fix(operator): Add NET_ADMIN to SCC by @AryanBakliwal in #2675
• Revert PR #2618 by @Aryan-sharma11 in #2680
• docs(getting-started): Update nodeSelector hostname label matching by @kanishksingh23 in #2678
• panic: send on closed channel by @Aryan-sharma11 in #2660
• Fix link to CODE_OF_CONDUCT.md in CONTRIBUTING.md by @VirajMandavkar in #2687
• feat: add grpc based healthcheck in liveness probe by @Aryan-sharma11 in #2670

New Contributors

• @kanishksingh23 made their first contribution in #2678
• @VirajMandavkar made their first contribution in #2687

Full Changelog: v1.7.4-rc1...v1.7.4-rc2

Changelog

• 05e69f7 Merge pull request #2647 from AryanBakliwal/make-snitch-ubi-nonroot
• d3047f4 upgrade go to fix go-vuln
• 0a1b056 fix(operator): Make snitch UBI image non-root
• d1ccc70 Update module go.podman.io/podman/v6 to v6.0.0-20260603192226-3caa80eb73f3 (#2629)
• 1573aa0 Update actions/checkout action to v3.6.0 (#2626)
• 7d17521 Update aquasecurity/trivy-action action to v0.36.0 (#2632)
• 7aaccda Merge pull request #2641 from AryanBakliwal/fix-ci-marketplace-release-openshift
• 51b7aaf fix(ci): Fix CI to certify images on redhat
• 8f10f9d Merge pull request #2638 from AryanBakliwal/update-stable-to-1.7.3
• 7d6d22e update stable to v1.7.3

Changelog

• 8b0c375 update stable to v1.7.2 (#2637)
• 94a1838 Merge pull request #2598 from AryanBakliwal/fix-crd-watch-timeout
• a408505 Use k8s informers to watch host and network policies
• 4833e47 Merge pull request #2633 from AryanBakliwal/ubuntu18-clang12-system_monitor-load
• da4cb33 fix(monitor): system monitor verifier error on ubuntu18 with clang12
• d1e7b37 Merge pull request #2605 from Athang69/fix/ci-test-systemd-install-protoc
• 40afaf9 fix(ci): install protoc binary in ci-test-systemd workflow

Changelog

• 1962084 fix init ubi container build issue (#2631)
• 0b9bc0d Merge pull request #2623 from rksharma95/fix-init-x86-64-v3-incompatibility
• 88a4c63 upgrade go dependencies
• 45ec26b bump podman package to fix vulnerability
• 7b46148 update kubearmor dockerfile to remove 3.23 pkg updates
• 343ffda fix init container compatibility on x86-64-v3 not supported cpu arch
• 03fd7dc Merge pull request #2619 from rksharma95/fix-controller-toleration-update
• f691f4c fix controller toleration update
• 6789b83 Merge pull request #2552 from kubearmor/renovate/jquery-3.x
• 279a5e6 Update dependency jquery to v3.7.1
• d139952 Merge pull request #2582 from charankamal20/bugfix/gke-allowlist-version
• b990ae2 bugfix: add gkeAllowlistVersion flag
• 065b4ca Merge pull request #2560 from Vasudev2401/migrate-current-changes-20260423
• b5d4f0a fix: correct spelling mistakes across the project

Changelog

• d23e0dd Merge pull request #2602 from rksharma95/fix-controller-operator-ubi-release
• 96ca623 fix controller and operator ubi image release
• 29578f2 Merge pull request #2596 from rksharma95/fix-ubi-x86-64-v3-compatibility
• dab31ae update workflows and use separate workflows for ubi images
• 86a22b3 build operator, controller and snitch ubi image separately
• 7ee4747 build kubearmor and kubearmor-init images separately
• bcfdb95 Merge pull request #2591 from Athang69/main
• f348850 fix(build): bump all go.mod files to go 1.26.3
• e2b6827 fix(build): bump all go.mod files to go 1.26.0 for consistency
• 1598dd4 fix: update Go dependencies to resolve known security vulnerabilities
• 13ca85a fix: update dependencies to resolve security vulnerabilities

Changelog

• 4817c38 Merge pull request #2561 from Aryan-sharma11/dns-enforcement
• 7ab1553 add dns network test
• 8a9c401 fix allow policy bugs
• 5f4949b Allow rule for dns
• c5331a7 add audit support
• 536a827 add DNS enforcement

Changelog

• 30474cd Merge pull request #2581 from charankamal20/bugfix/liveness-probe-not-working
• ea50f58 Bugfix: make liveness probe configurable by environment
• 55fd158 Merge pull request #2572 from rksharma95/fix-bpflsm-verifier-issue
• 9802c66 fix bpflsm enforcer verifier issue
• d571f27 ci: fix workflow path filters (#2562)
• 335f0fe ci: upgrade checkout action to v4 (#2563)
• b9fc223 fix: increase livenessProbe timeout and failure threshold for kubearmor (#2565)
• 8032c37 Merge pull request #2176 from rksharma95/gke-autopilot-deployment
• 1cd9599 add gke installation guide
• 090850c add gke autopilot deployment
• 3c03452 Update Helm Chart To v1.6.18 (#2555)
• 63c94d6 update stable (#2554)

Changelog

• 7e2d50a Merge pull request #2487 from AryanBakliwal/improve-cri-sock-detection
• df19b2b feat(operator): improve CRI socket detection
• 751ed7e Merge pull request #2501 from rksharma95/feat-pts-rule
• ec502a2 bump controller-gen version
• e4cb9e9 add nil pointer checks
• b4d6fa7 add tests
• ef1d707 update deprecated
• 4734dfc bump controller-gen version
• c904f9e add audit rule support
• c0286fb add support for pts rule
• db2181e Merge pull request #2512 from AryanBakliwal/update-deps
• 06b7d05 fix go vuln
• 75e7e63 update docker file base images
• 5de5683 fix breaking changes and snyk tests
• ed5873a update deps
• 31e644d update deps
• 8bc2514 chore(deps): upgrade github.com/cilium/cilium dependency