v0.14.4-beta.2

What's Changed

• [v0.14] Bump github.com/cloudflare/circl to v1.6.3 by @thardeck in #4738

Full Changelog: v0.14.4-beta.1...v0.14.4-beta.2

v0.15.0-beta.4

Breaking Changes

• Migrate Fleet to Helm v4 (#4326)
• Imagescan, which has had a long life as an experimental feature, is now disabled by default. It can still be explicitly enabled; more information here on what this change means and how to keep the feature enabled. (#4692)

Future Deprecation notice

• Imagescan will be deprecated in a future release.

Notable Changes

Additions

CLI

• Add dump command to CLI (docs) (#4030)
• Add monitor (docs) and analyze (docs) commands for troubleshooting Fleet deployments (#4030)
• Add CLI command to display bundle diffs from status (TODO docs) (#4534)

Core Features

• The automated partitioning limit is now configurable, through autoPartitionThreshold (docs) (#3827)
• When specifying dependencies between bundles, custom states of dependencies are no supported in the dependsOn field through acceptedStates (docs) (#2552)
• GitRepoRestrictions now support restricting allowed target namespaces, with AllowedTargetNamespaceSelector (TODO docs) (#4300)
• Ignoring drift on deployed resources is now more flexible, as resources can be ignored by namespace only or by regex (docs) (#748)
• Fleet is now smarter about updates to replica counts of Deployments and StatefulSets (docs) (#4029)
• Proxy config is now available in the fleet-agent deployment (#4267)
• Any label can now be added to a local cluster when using Fleet standalone, using Helm value bootstrap.clusterLabels (#4096)

Bugfixes

HelmOps

• Fleet now supports Helm templates with lookup (#1851)
• Fetching a Helm chart referenced by the helm.chart field of fleet.yaml now supports custom CA bundles (#3646)
• Github Apps support is extended to Github Enterprise instances, and more generally to hosts other than github.com (#4554)
• The known-hosts config map can now receive additional known_hosts entries at Fleet installation time, through Helm value additionalKnownHosts (#4569)
• When fetching multiple charts for building bundles, when Helm auth cannot or should not be added for fetching one chart, it is no longer disabled for subsequent charts (#4336)
• Helm URL resolution has received improvements (#4400)
• The Fleet agent properly reports installed resources with forced drift correction using Helm v4 (#4452)

Resource Management

• Track UID of existing bundle deployment to prevent orphaning on failure (#4144)
• Fleet creates options secrets before bundle deployments (#4284)
• At bundle creation time, Fleet now detects overlaps between deleted and created bundles, and is able to mitigate accidental resource deletion (#3770)
• When fetching Helm charts, concurrent fetches of the same index.yaml file are now optimised (#4343)
• Use the defaultNs for valuesFrom contained in downstream resources (#4373)
• Make valuesFrom kind check case-insensitive (#4408)
• The controller deletes finalizers in content resources after upgrade (#4457)
• Take respective timestamps into account when comparing snapshots (#4546)
• Prevent nil pointer dereference on cluster import (#4491)
• Prevent race when bundles are created concurrently (#4487)

Automated copy of resources to downstream clusters (docs)

• Resources referenced as downstreamResources can now be copied to the local cluster (#4560)
• Fleet now monitors downstreamResources for changes, and is able to trigger new deployments when they change (docs) (#4530)
• This monitoring includes GitRepo secrets (#4574)
• Secrets referenced through downstreamResources have their types preserved when copied downstream (#3617)

Stability & Operations

• Add configurable concurrent bundle creation routines to fleet apply (#4233)
• Support cluster display name in clusterName selector (#4495)
• Adds a sharding filter when calculating Bundles from Cluster (#4282)
• GitRepos and HelmOps don't Requeue when adding finalizers (#4264)
• Clear Reason when Ready condition transitions from non-ready to ready (#4578)
• Use controlled Requeue for non-ready dependencies during deploy (#4469)
• Prevent false drift from Helm v4 null field rendering (#4655)
• Set Recreate deployment strategy when hostNetwork is enabled (#4432)
• Fix race when creating secrets and Kubernetes jobs (#4319)
• Individual resources requests/limits for fleet-controllers (#4516)
• Fixes race condition when BD secrets are transiently unavailable (#4707)
• Mark agentSchedulingCustomization nullable in CRD (#4731)
• Avoid uninstalling releases in PendingInstall status (#4600)

Notable Dependency Updates

• Replace gorilla/mux with net/http ServeMux (#4717)
• Update Go to v1.25.7 (#4607)
• Update go-git to v5.16.5 [security] (#4614)
• Update Kubernetes to v0.35.1 (#4633)
• Update Helm v4 to v4.1.1 (#4622)
• Update Wrangler v3 to v3.4.0 (#4650)
• Update Go crypto to v0.48.0 [security] (#4653)

New Contributors

• @webD97 made their first contribution in #4467
• @ncuralli made their first contribution in #4488
• @ftechmax made their first contribution in #4268
• @SebPlv made their first contribution in #4569

Full Changelog: v0.14.0...v0.15.0-beta.4

v0.14.4-beta.1

What's Changed

• Synchronise known-hosts for v14 by @rancherbot in #4691
• [v0.14] Add additionalKnownHosts configuration to values.yaml by @thardeck in #4706
• chore(deps): update rancherlabs/slsactl action to v0.1.19 (release/v0.14) by @renovate-rancher[bot] in #4715
• [v0.14] Avoid uninstalling releases in PendingInstall status (#4647) by @0xavi0 in #4725
• chore(deps): update dependency rancherlabs/slsactl to v0.1.20 (release/v0.14) by @renovate-rancher[bot] in #4735
• [v0.14] - Fixes race condition when BD secrets are transiently unavailable by @0xavi0 in #4726

Full Changelog: v0.14.3-rc.3...v0.14.4-beta.1

v0.15.0-beta.3

What's Changed

• chore(deps): update update kubernetes dependencies to v0.20.1 (main) by @renovate-rancher[bot] in #4674
• Upgrade CI to 1.35.0-k3s1 using etcd by @0xavi0 in #4670
• Simplify additionalKnownHosts template in known-hosts configmap and fix tests by @thardeck in #4686
• chore(deps): update github actions (main) by @renovate-rancher[bot] in #4684
• chore: update scm.yaml to add v14 release branch and remove v10 by @thardeck in #4689
• Fleet CLI dump command filter for resources by @p-se in #4641
• Bump Fleet version in installation documentation by @rancherbot in #4690
• Print consistent message when bundlediff finds no modifications by @thardeck in #4699
• Bump golangci lint to v2.10.1 and fix the newly reported issues by @thardeck in #4700
• Disable imagescan by default by @weyfonk in #4692
• Fix bundlediff --fleet-yaml for empty object patches by @thardeck in #4708

Full Changelog: v0.15.0-beta.2...v0.15.0-beta.3

v0.14.3

What's Changed

• Avoid using DeepCopy when copying Downstream Resources (#4560) by @0xavi0 in #4576
• Clear Reason when Ready condition transitions from non-ready to ready by @0xavi0 in #4580
• Aggregate concurrently fetching the same index.yaml by @aruiz14 in #4598
• Update dependency go to v1.24.13 by @renovate-rancher[bot] in #4608
• Update module github.com/go-git/go-git/v5 to v5.16.5 [security] by @renovate-rancher[bot] in #4616
• Update Kubernetes dependencies to v0.34.4 by @thardeck in #4634

Full Changelog: v0.14.2...v0.14.3

v0.13.8

What's Changed

• Update dependency go to v1.24.13 by @renovate-rancher[bot] in #4609
• Update module github.com/go-git/go-git/v5 to v5.16.5 [security] by @renovate-rancher[bot] in #4617
• Update Kubernetes dependencies to v0.33.8 by @thardeck in #4635

Full Changelog: v0.13.7...v0.13.8

v0.12.12

What's Changed

• Update dependency go to v1.24.13 by @renovate-rancher[bot] in #4610
• Update module github.com/go-git/go-git/v5 to v5.16.5 [security] by @renovate-rancher[bot] in #4618
• Update Kubernetes dependencies to v0.33.8 by @thardeck in #4636

Full Changelog: v0.12.11...v0.12.12

v0.15.0-beta.2

What's Changed

• chore(deps): update kubernetes dependencies (main) by @renovate-rancher[bot] in #4649
• chore(deps): update rancherlabs/slsactl action to v0.1.18 (main) by @renovate-rancher[bot] in #4665
• chore(deps): update crate-ci/typos action to v1.43.1 (main) by @renovate-rancher[bot] in #4666
• Prevent false drift from Helm v4 null field rendering by @thardeck in #4664
• Revert "Use GitHub app tokens in release scripts" by @thardeck in #4669

Full Changelog: v0.15.0-beta.1...v0.15.0-beta.2

v0.15.0-beta.1

What's Changed

• Downgrade k3s image from v1.35.0-k3s1 to v1.34.1-k3s1 by @thardeck in #4642
• chore(deps): update actions/cache action to v5.0.3 (main) by @renovate-rancher[bot] in #4643
• chore(deps): update rancherlabs/slsactl action to v0.1.17 (main) by @renovate-rancher[bot] in #4631
• chore(deps): update dependency rancherlabs/slsactl to v0.1.18 (main) by @renovate-rancher[bot] in #4644
• chore(deps): update module github.com/rancher/wrangler/v3 to v3.4.0 (main) by @renovate-rancher[bot] in #4650
• Individual resources requests/limits for fleet-controllers by @p-se in #4568
• Normalise replica counts of Deployments and StatefulSets by @weyfonk in #4593
• add proxy config to fleet-agent deployment by @ftechmax in #4268
• Implement AllowedTargetNamespaceSelector for GitRepoRestriction by @thardeck in #4562
• chore(deps): update module golang.org/x/crypto to v0.48.0 (main) by @renovate-rancher[bot] in #4653
• chore(deps): update module github.com/chartmuseum/helm-push to v0.11.1 (main) by @renovate-rancher[bot] in #4652
• Add bundlediff --fleet-yaml for GitOps drift acceptance by @thardeck in #4606
• [helm] Allow to add custom known_hosts to the configmap by @SebPlv in #4569
• chore(deps): update dependency rancherlabs/slsactl to v0.1.19 (main) by @renovate-rancher[bot] in #4656
• Remove redundant JsonPointers from bundlediff cli by @thardeck in #4657

New Contributors

• @ftechmax made their first contribution in #4268
• @SebPlv made their first contribution in #4569

Full Changelog: v0.15.0-alpha.10...v0.15.0-beta.1

v0.15.0-alpha.10

What's Changed

• chore(deps): update dependency go to v1.25.7 (main) by @renovate-rancher[bot] in #4607
• Remove platform-specific tags by @thardeck in #4611
• chore(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1 (main) by @renovate-rancher[bot] in #4596
• chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 [security] (main) by @renovate-rancher[bot] in #4614
• chore(deps): update module github.com/rancher/wrangler/v3 to v3.3.2-rc.2 (main) by @renovate-rancher[bot] in #4621
• chore(deps): update module helm.sh/helm/v4 to v4.1.1 (main) by @renovate-rancher[bot] in #4622
• Extend Github Apps support to ghe.com instances by @weyfonk in #4603
• chore(deps): update github actions (main) by @renovate-rancher[bot] in #4625
• Fix Install action config for correctDrift force in Helm v4 by @thardeck in #4624
• Avoid uninstalling releases in PendingInstall status by @0xavi0 in #4600
• build: update Kubernetes dependencies to v0.35.1 by @thardeck in #4633
• chore(deps): update module github.com/rancher/wrangler/v3 to v3.3.2 (main) by @renovate-rancher[bot] in #4638
• fleet dump CLI: Internal pagination when fetching resources by @p-se in #4588

Full Changelog: v0.15.0-alpha.9...v0.15.0-alpha.10