v1.51.0

Possible Breaking Changes

• #1524 ratchets permissions on files written by opm by including only user (o600) permissions to align with security best practices. This impacts opm migrate output (for example).

What's Changed

• Bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by @dependabot in #1545
• Bump google.golang.org/grpc from 1.68.1 to 1.69.4 by @dependabot in #1546
• Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.1.0 to 2.2.0 by @dependabot in #1544
• fix bingo-upgrade target by @perdasilva in #1547
• Bump github.com/docker/cli from 27.4.1+incompatible to 27.5.0+incompatible by @dependabot in #1543
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.34 to 0.4.36 by @dependabot in #1548
• Bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #1550
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.36 to 0.4.37 by @dependabot in #1551
• Bump github.com/containers/image/v5 from 5.33.0 to 5.33.1 by @dependabot in #1549
• Bump github.com/distribution/distribution/v3 from 3.0.0-rc.1 to 3.0.0-rc.2 by @dependabot in #1542
• Bump k8s.io/api from 0.32.0 to 0.32.1 by @dependabot in #1552
• Bump github.com/containers/common from 0.61.0 to 0.61.1 by @dependabot in #1553
• Bump k8s.io/apimachinery from 0.32.0 to 0.32.1 by @dependabot in #1555
• Bump k8s.io/apiextensions-apiserver from 0.32.0 to 0.32.1 by @dependabot in #1554
• Bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.20.0 by @dependabot in #1556
• Bump github.com/docker/cli from 27.5.0+incompatible to 27.5.1+incompatible by @dependabot in #1558
• Bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.20.1 by @dependabot in #1559
• Bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @dependabot in #1560
• Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in #1562
• Bump github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.18.2 by @dependabot in #1563
• Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in #1565
• Bump github.com/containers/image/v5 from 5.33.1 to 5.34.0 by @dependabot in #1567
• Bump github.com/containers/common from 0.61.1 to 0.62.0 by @dependabot in #1566
• Bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in #1569
• Bump golang.org/x/mod from 0.22.0 to 0.23.0 by @dependabot in #1570
• Bump go.etcd.io/bbolt from 1.3.11 to 1.4.0 by @dependabot in #1573
• Bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot in #1568
• Bump golang.org/x/text from 0.21.0 to 0.22.0 by @dependabot in #1571
• Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #1574
• enable linting and bingo management of the lint tool by @grokspawn in #1524
• Bump github.com/containerd/errdefs from 0.3.0 to 1.0.0 by @dependabot in #1579
• Bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot in #1578
• 🌱 exponential retry on name resolution to registries by @grokspawn in #1576
• Bump github.com/distribution/distribution/v3 from 3.0.0-rc.2 to 3.0.0-rc.3 by @dependabot in #1580
• 🌱 synch dockerfiles with grpc-health-probe version in go.mod by @grokspawn in #1577
• Bump k8s.io/apiextensions-apiserver from 0.32.1 to 0.32.2 by @dependabot in #1584
• Bump sigs.k8s.io/controller-runtime from 0.20.1 to 0.20.2 by @dependabot in #1585
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #1586
• Bump github.com/docker/cli from 27.5.1+incompatible to 28.0.0+incompatible by @dependabot in #1589
• Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #1590

Full Changelog: v1.50.0...v1.51.0

v1.50.0

What's Changed

• Bumps go/net to v0.33.0 by @bentito in #1522
• Bump github.com/containers/image/v5 from 5.32.2 to 5.33.0 by @dependabot in #1493
• 🐛 Upgrade github.com/joelanford/ignore from v0.1.0 to v0.1.1 by @camilamacedo86 in #1527
• Bump github.com/containerd/containerd from 1.7.23 to 1.7.25 by @dependabot in #1528
• Upgrade controller-runtime from v0.19.3 to v0.19.4 by @camilamacedo86 in #1530
• 🌱 Bump Go v1.23.0 by @perdasilva in #1431
• Revert go bump and redo by @perdasilva in #1531
• k8s deps from v0.31.3 to v0.32.0 by @camilamacedo86 in #1529
• Upgrade kind from v0.25.0 to v0.26.0 by @camilamacedo86 in #1532
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.9.0 to 6.11.2 by @dependabot in #1535
• Bump google.golang.org/protobuf from 1.35.2 to 1.36.2 by @dependabot in #1537
• Bump github.com/docker/cli from 27.3.1+incompatible to 27.4.1+incompatible by @dependabot in #1539
• Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.2 by @dependabot in #1536
• Upgrade github.com/containers/common v0.60.4 => v0.61.0 by @camilamacedo86 in #1534
• Upgrade github.com/operator-framework/api from v0.27.0 to v0.29 by @camilamacedo86 in #1540

Full Changelog: v1.49.0...v1.50.0

v1.49.0

Breaking Changes

• (semi-breaking change) This release removes the last vestiges of kube-rbac-proxy from mocks and tests. By now, most projects and users have received notification to move from this image, so we don't actually expect this to be a breaking change, but it does mark the complete removal of this image from our project.

What's Changed

• Bump k8s.io/apiextensions-apiserver from 0.31.1 to 0.31.2 by @dependabot in #1474
• Bump github.com/onsi/gomega from 1.34.2 to 1.35.0 by @dependabot in #1481
• Bump sigs.k8s.io/controller-runtime from 0.19.0 to 0.19.1 by @dependabot in #1478
• Bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 by @dependabot in #1480
• Bump github.com/onsi/gomega from 1.35.0 to 1.35.1 by @dependabot in #1483
• Bump golang.org/x/sys from 0.26.0 to 0.27.0 by @dependabot in #1484
• Bump github.com/distribution/distribution/v3 from 3.0.0-beta.1 to 3.0.0-rc.1 by @dependabot in #1487
• Bump golang.org/x/sync from 0.8.0 to 0.9.0 by @dependabot in #1486
• Bump golang.org/x/mod from 0.21.0 to 0.22.0 by @dependabot in #1490
• Bump golang.org/x/net from 0.30.0 to 0.31.0 by @dependabot in #1488
• Bump sigs.k8s.io/kind from 0.24.0 to 0.25.0 by @dependabot in #1492
• Bump google.golang.org/grpc from 1.67.1 to 1.68.0 by @dependabot in #1485
• Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #1494
• Bump golang.org/x/mod from 0.21.0 to 0.22.0 by @dependabot in #1495
• Bump codecov/codecov-action from 4 to 5 by @dependabot in #1497
• Bump golang.org/x/net from 0.30.0 to 0.31.0 by @dependabot in #1496
• Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 by @dependabot in #1499
• Bump k8s.io/api from 0.31.2 to 0.31.3 by @dependabot in #1500
• Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 by @dependabot in #1501
• Bump github.com/onsi/gomega from 1.35.1 to 1.36.0 by @dependabot in #1503
• Bump k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3 by @dependabot in #1504
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1506
• Bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 by @dependabot in #1507
• Bump golang.org/x/sync from 0.9.0 to 0.10.0 by @dependabot in #1510
• Bump golang.org/x/text from 0.20.0 to 0.21.0 by @dependabot in #1509
• Bump golang.org/x/sys from 0.27.0 to 0.28.0 by @dependabot in #1508
• Bump golang.org/x/net from 0.31.0 to 0.32.0 by @dependabot in #1511
• Bump google.golang.org/grpc from 1.68.0 to 1.68.1 by @dependabot in #1512
• 🌱 remove reference of kube-rbac-proxy from mocks and tests by @camilamacedo86 in #1518
• Bump github.com/onsi/gomega from 1.36.0 to 1.36.1 by @dependabot in #1515
• provide an optional base image flag for generated dockerfiles from alpha bundle build commands by @grokspawn in #1519

Full Changelog: v1.48.0...v1.49.0

v1.48.0

What's Changed

• Bump github.com/golang-migrate/migrate/v4 from 4.17.1 to 4.18.1 by @dependabot in #1443
• Bump github.com/docker/cli from 27.2.0+incompatible to 27.2.1+incompatible by @dependabot in #1446
• Bump google.golang.org/grpc from 1.66.0 to 1.66.1 by @dependabot in #1445
• Bump github.com/containerd/containerd from 1.7.21 to 1.7.22 by @dependabot in #1444
• set default goal since bingo disrupts it by @grokspawn in #1447
• Bump google.golang.org/grpc from 1.66.1 to 1.66.2 by @dependabot in #1449
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.8.1 to 6.9.0 by @dependabot in #1450
• template/*: allow passing custom bundle renderer by @joelanford in #1423
• Bump k8s.io/apiextensions-apiserver from 0.31.0 to 0.31.1 by @dependabot in #1453
• explicitly handle SIGINT and SIGTERM by @joelanford in #1448
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.32 to 0.4.34 by @dependabot in #1455
• Bump github.com/docker/cli from 27.2.1+incompatible to 27.3.0+incompatible by @dependabot in #1456
• Bump github.com/docker/cli from 27.3.0+incompatible to 27.3.1+incompatible by @dependabot in #1457
• Bump google.golang.org/grpc from 1.66.2 to 1.67.0 by @dependabot in #1458
• Bump github.com/containers/common from 0.60.2 to 0.60.3 by @dependabot in #1459
• Bump google.golang.org/grpc from 1.67.0 to 1.67.1 by @dependabot in #1461
• Bump github.com/containers/common from 0.60.3 to 0.60.4 by @dependabot in #1462
• Bump golang.org/x/sys from 0.25.0 to 0.26.0 by @dependabot in #1464
• Bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #1463
• Bump golang.org/x/text from 0.18.0 to 0.19.0 by @dependabot in #1465
• Bump google.golang.org/protobuf from 1.34.2 to 1.35.1 by @dependabot in #1468
• Bump github.com/mattn/go-sqlite3 from 1.14.23 to 1.14.24 by @dependabot in #1469
• Fix upstream-builder image build by @varad-ahirwadkar in #1467
• Address goreleaser deprecations by @perdasilva in #1472
• Addresses more goreleaser deprecated flags by @perdasilva in #1473

New Contributors

• @varad-ahirwadkar made their first contribution in #1467

Full Changelog: v1.47.0...v1.48.0

v1.47.0

What's Changed

• Update k8s dependencies to v0.31.0 by @Neo2308 in #1418
• model: validate unique bundle versions by @joelanford in #1417
• Bump github.com/containers/common from 0.60.1 to 0.60.2 by @dependabot in #1419
• Bump go.etcd.io/bbolt from 1.3.10 to 1.3.11 by @dependabot in #1422
• Bump github.com/containerd/containerd from 1.7.20 to 1.7.21 by @dependabot in #1426
• Bump github.com/docker/cli from 27.1.2+incompatible to 27.2.0+incompatible by @dependabot in #1427
• Bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.2 by @dependabot in #1429
• Update grpc-health-probe to v0.4.28 in Dockerfiles by @rh-tcloud in #1425
• 🌱 bump alpine build images to 1.23 by @perdasilva in #1430
• 🌱 Update bingo + tools by @perdasilva in #1433
• 🌱 Bump ghcr.io/grpc-ecosystem/grpc-health-probe docker tag to v0.4.29 by @perdasilva in #1432
• use dependabot for dockerfiles by @grokspawn in #1434
• Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 by @dependabot in #1435
• Bump google.golang.org/grpc from 1.65.0 to 1.66.0 by @dependabot in #1436
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.31 to 0.4.32 by @dependabot in #1428
• pkg/cache: configurable backend preference by @joelanford in #1424
• Bump golang.org/x/text from 0.17.0 to 0.18.0 by @dependabot in #1438
• Bump golang.org/x/mod from 0.20.0 to 0.21.0 by @dependabot in #1439
• Bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23 by @dependabot in #1441
• Bump golang.org/x/sys from 0.24.0 to 0.25.0 by @dependabot in #1440
• Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1442

New Contributors

• @rh-tcloud made their first contribution in #1425

Full Changelog: v1.46.0...v1.47.0

v1.46.0

Potential Breaking Changes

• #1384 changed the behavior of opm when outputting bundle metadata in FBC form. This impacts the migrate, render commands, as well as catalog template expansion. By default, these commands will generate olm.bundle.object properties from the CRD, CSV. (Previous releases would utilize a more lightweight olm.csv.metadata property and this is a mindful reversion of that policy in order to avoid inadvertent impacts to publication pipelines which are not equipped to handle the newer bundle metadata format.) Users may still produce the new format through use of the --migration-level or --migrate options for individual commands. Please see usage information for details.

What's Changed

• Bump k8s.io/client-go from 0.30.2 to 0.30.3 by @dependabot in #1377
• bump github.com/distribution/distribution/v3 from 3.0.0-alpha.1 to 3.0.0-beta.1 by @grokspawn in #1380
• Bump k8s.io/apiextensions-apiserver from 0.30.2 to 0.30.3 by @dependabot in #1379
• Bump github.com/containerd/containerd from 1.7.19 to 1.7.20 by @dependabot in #1382
• Bump github.com/docker/cli from 27.0.3+incompatible to 27.1.0+incompatible by @dependabot in #1383
• Bump github.com/docker/cli from 27.1.0+incompatible to 27.1.1+incompatible by @dependabot in #1385
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.29 to 0.4.30 by @dependabot in #1374
• Bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 by @dependabot in #1388
• Bump github.com/containers/common from 0.59.2 to 0.60.0 by @dependabot in #1389
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.4.0 to 1.5.1 by @dependabot in #1390
• Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 by @dependabot in #1391
• add bingo for managing tool deps by @joelanford in #1329
• Revert "add bingo for managing tool deps (#1329)" by @perdasilva in #1393
• Bump golang.org/x/sys from 0.22.0 to 0.23.0 by @dependabot in #1396
• Bump golang.org/x/mod from 0.19.0 to 0.20.0 by @dependabot in #1397
• Bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1398
• add bingo for managing tool deps by @perdasilva in #1394
• Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.0 by @dependabot in #1400
• Bump golang.org/x/sys from 0.23.0 to 0.24.0 by @dependabot in #1401
• Bump github.com/containers/image/v5 from 5.32.0 to 5.32.1 by @dependabot in #1402
• Bump github.com/containers/common from 0.60.0 to 0.60.1 by @dependabot in #1403
• Bump sigs.k8s.io/controller-runtime from 0.18.4 to 0.18.5 by @dependabot in #1404
• Bump github.com/docker/cli from 27.1.1+incompatible to 27.1.2+incompatible by @dependabot in #1407
• Bump k8s.io/client-go from 0.30.3 to 0.31.0 by @dependabot in #1406
• server_test.go: wait to run tests until listeners have started by @joelanford in #1411
• add optional schema migrations; default to olm.bundle.object instead of olm.csv.metadata by @grokspawn in #1384
• remove 'automatically generated' strings from repo by @joelanford in #1412
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.30 to 0.4.31 by @dependabot in #1414
• Bump sigs.k8s.io/kind from 0.23.0 to 0.24.0 by @dependabot in #1413

Full Changelog: v1.45.0...v1.46.0

v1.45.0

What's Changed

• Bump github.com/docker/cli from 27.0.2+incompatible to 27.0.3+incompatible by @dependabot in #1367
• Bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #1369
• Bump golang.org/x/sys from 0.21.0 to 0.22.0 by @dependabot in #1371
• Bump github.com/containerd/containerd from 1.7.18 to 1.7.19 by @dependabot in #1368
• Bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #1372
• Bump golang.org/x/mod from 0.18.0 to 0.19.0 by @dependabot in #1370
• serve: add logging of grpc requests by @joelanford in #1373
• Bump github.com/containers/common from 0.59.1 to 0.59.2 by @dependabot in #1375

Full Changelog: v1.44.0...v1.45.0

v1.44.0

Potential Breaking Changes

• provide required schema for basic template by @grokspawn in #1335 introduces a formal schema for the alpha basic catalog template. Please see the docs for the new schema and how to generate it from existing FBC.

What's Changed

• Bump sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3 by @dependabot in #1326
• Bump github.com/onsi/ginkgo/v2 from 2.18.0 to 2.19.0 by @dependabot in #1327
• Makefile: avoid ?= shell executions by @joelanford in #1328
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.3.0 to 1.4.0 by @dependabot in #1340
• Bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #1345
• Bump github.com/containerd/containerd from 1.7.17 to 1.7.18 by @dependabot in #1343
• Bump golang.org/x/text from 0.15.0 to 0.16.0 by @dependabot in #1341
• Bump github.com/containers/common from 0.59.0 to 0.59.1 by @dependabot in #1342
• Bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #1344
• Bump sigs.k8s.io/controller-runtime from 0.18.3 to 0.18.4 by @dependabot in #1346
• Bump github.com/docker/cli from 26.1.3+incompatible to 26.1.4+incompatible by @dependabot in #1348
• Bump golang.org/x/mod from 0.17.0 to 0.18.0 by @dependabot in #1347
• removing composite template by @grokspawn in #1339
• Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #1353
• Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.26 to 0.4.29 by @dependabot in #1352
• Bump k8s.io/apiextensions-apiserver from 0.30.1 to 0.30.2 by @dependabot in #1355
• Bump github.com/operator-framework/api from 0.25.0 to 0.26.0 by @dependabot in #1358
• Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #1359
• Fix codecov-action params by @m1kola in #1361
• Bump github.com/containers/image/v5 from 5.31.0 to 5.31.1 by @dependabot in #1363
• generate binary-less dockerfiles by @grokspawn in #1338
• Bump github.com/docker/cli from 26.1.4+incompatible to 27.0.1+incompatible by @dependabot in #1365
• Bump github.com/docker/cli from 27.0.1+incompatible to 27.0.2+incompatible by @dependabot in #1366
• provide required schema for basic template by @grokspawn in #1335

Full Changelog: v1.43.1...v1.44.0

v1.43.1

What's Changed

• build(deps): bump github.com/containers/common from 0.58.2 to 0.58.3 by @dependabot in #1318
• build(deps): bump github.com/docker/cli from 26.1.2+incompatible to 26.1.3+incompatible by @dependabot in #1319
• build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 by @dependabot in #1320
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.18.0 by @dependabot in #1322
• build(deps): bump github.com/containers/image/v5 from 5.30.1 to 5.31.0 by @dependabot in #1321
• 🌱 build(deps): bump github.com/operator-framework/api from v0.24.0 to v0.25.0 by @perdasilva in #1323
• Bump github.com/containers/common from 0.58.3 to 0.59.0 by @dependabot in #1324

Full Changelog: v1.43.0...v1.43.1

v1.43.0

What's Changed

• build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in #1315
• build(deps): bump k8s.io/apimachinery from 0.30.0 to 0.30.1 by @dependabot in #1314
• build(deps): bump sigs.k8s.io/kind from 0.22.0 to 0.23.0 by @dependabot in #1313
• build(deps): bump k8s.io/apiextensions-apiserver from 0.30.0 to 0.30.1 by @dependabot in #1312
• cache: fixup pogreb db permissions by @joelanford in #1317

Full Changelog: v1.42.0...v1.43.0