K

Kyverno

K
Kyverno Security v1.19.1

v1.19.1

What's Changed fix: bump Go 1.26.6 and x/net to resolve CVE-2026-39821 by @Manoj-Kumar-Selvaraj in #17230 fix: update Go to address CVE-2026-56853 by @Sashang-debug in #17232 Fix missing autogen webhook expansion for NamespacedValidatingPolicy (Cherry-pick #17262) by @kyverno-pr-updater[bot] in #17273 fix: apply HTTP blocklist to apiCall.service executor (cherry-pick #17234) by @realshuting in #17…

K
Kyverno Security v1.19.0

v1.19.0

What's Changed fix: limit intermediate certs to mitigate CVE-2026-32280 by @atharrva01 in #15858 ci: fix cosign releaser step by @lucchmielowski in #15932 chore(deps): bump github.com/rs/zerolog from 1.35.0 to 1.35.1 by @dependabot[bot] in #15917 Feat/cli apply cross resource by @SargamPuram in #15846 automate stale PR updates by @JimBugwadia in #15942 fix: revert 15880 - support httpAllowList and…

K
Kyverno Security v1.18.2

v1.18.2

What's Changed fix: restart dynamic watchers in background reporting on 410 (Cherry-pick #16028) by @kyverno-bot in #16030 fix: do not abort required validation on non-matching images (Cherry-pick #16208) by @kyverno-bot in #16218 fix(cli): allow multiple CRDs in to be in the --crd-path file (Cherry-pick #16161) by @kyverno-bot in #16215 fix(gpol,mpol): enforce namespace boundary in generator.appl…

K
Kyverno Security v1.18.1

v1.18.1

What's Changed fix: support cluster-scoped resource generation in GeneratingPolicy (Cherry-pick #16018) by @kyverno-bot in #16031 fix: pass AdmissionRequest to updaterequests for mutate existing policy (Cherry-pick #16050) by @kyverno-bot in #16072 Release v1.18.1-rc.1 by @realshuting in #16096 release v1.18.1-rc.2 by @realshuting in #16106 chore: release v1.18.1 by @realshuting in #16126 Full Cha…