v1.2.0

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.2.0
Digest: sha256:b5040d14a20b4e890956d5f47b78445dac6c871eb5799586d9011c48ce71c198
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.2.0

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:b5040d14a20b4e890956d5f47b78445dac6c871eb5799586d9011c48ce71c198 --owner GoogleCloudPlatform

What's Changed

• Opt-in strict configuration readiness by @glenmessenger in #33
• Release prep: 1.2.0 changelog cut, README version bump by @glenmessenger in #34

Full Changelog: v1.1.0...v1.2.0

v1.2.0-rc.1

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.2.0-rc.1
Digest: sha256:cfea8ddf437f4aecf954883ec82b061e9f99276bb90c9e5393cfb10543e59009
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.2.0-rc.1

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:cfea8ddf437f4aecf954883ec82b061e9f99276bb90c9e5393cfb10543e59009 --owner GoogleCloudPlatform

What's Changed

• Opt-in strict configuration readiness by @glenmessenger in #33
• Release prep: 1.2.0 changelog cut, README version bump by @glenmessenger in #34

Full Changelog: v1.1.0...v1.2.0-rc.1

v1.1.0

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.1.0
Digest: sha256:15d02e9b9c76dfd34d87385cd5da597503e74896e4b52846865c5e46ed8e5b39
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.1.0

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:15d02e9b9c76dfd34d87385cd5da597503e74896e4b52846865c5e46ed8e5b39 --owner GoogleCloudPlatform

What's Changed

• README: install from published release artifacts (hold for v1.0.0) by @glenmessenger in #17
• README refresh post-v1.0.0; move detailed roadmap to docs/roadmap.md by @glenmessenger in #19
• README: drop Cloud Shell path, move source builds to a dedicated doc by @glenmessenger in #20
• Release checklist: coordinate releases with downstream consumers by @glenmessenger in #21
• Roadmap: scope v1.1 as the verification release by @glenmessenger in #22
• README: document uninstall semantics by @glenmessenger in #23
• Gate readiness on informer cache sync; wire chart probes by @glenmessenger in #24
• Correct attestation claims; merge docs before tagging by @glenmessenger in #25
• Document CRD upgrade semantics; distinguish retained objects from orphans by @glenmessenger in #26
• Read sink Secrets via direct API reader; narrow Role to get by @glenmessenger in #27
• Chart: expose AIBOMControllerConfig as public values; measured resource defaults by @glenmessenger in #28
• Document data visibility, sensitivity, and retention; renumber roadmap by @glenmessenger in #29
• Bound reconcile lifetime and GCS retry attempts by @glenmessenger in #30
• Persist failure status, signal status-write failures, fix truncation reason by @glenmessenger in #31
• Release prep: 1.1.0 changelog cut, README version bump by @glenmessenger in #32

Full Changelog: v1.0.0...v1.1.0

v1.1.0-rc.1

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.1.0-rc.1
Digest: sha256:14ca8f1c40c0887dbdca3cebada8535d1bdd537262f6f7f199051499e96988bf
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.1.0-rc.1

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:14ca8f1c40c0887dbdca3cebada8535d1bdd537262f6f7f199051499e96988bf --owner GoogleCloudPlatform

What's Changed

• README: install from published release artifacts (hold for v1.0.0) by @glenmessenger in #17
• README refresh post-v1.0.0; move detailed roadmap to docs/roadmap.md by @glenmessenger in #19
• README: drop Cloud Shell path, move source builds to a dedicated doc by @glenmessenger in #20
• Release checklist: coordinate releases with downstream consumers by @glenmessenger in #21
• Roadmap: scope v1.1 as the verification release by @glenmessenger in #22
• README: document uninstall semantics by @glenmessenger in #23
• Gate readiness on informer cache sync; wire chart probes by @glenmessenger in #24
• Correct attestation claims; merge docs before tagging by @glenmessenger in #25
• Document CRD upgrade semantics; distinguish retained objects from orphans by @glenmessenger in #26
• Read sink Secrets via direct API reader; narrow Role to get by @glenmessenger in #27
• Chart: expose AIBOMControllerConfig as public values; measured resource defaults by @glenmessenger in #28
• Document data visibility, sensitivity, and retention; renumber roadmap by @glenmessenger in #29
• Bound reconcile lifetime and GCS retry attempts by @glenmessenger in #30
• Persist failure status, signal status-write failures, fix truncation reason by @glenmessenger in #31
• Release prep: 1.1.0 changelog cut, README version bump by @glenmessenger in #32

Full Changelog: v1.0.0...v1.1.0-rc.1

v1.0.0

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.0.0
Digest: sha256:cb96bccc8dcd50fc4422324d8f7175d4a8bcede383c5f905127dbca92f3afc38
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.0.0

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:cb96bccc8dcd50fc4422324d8f7175d4a8bcede383c5f905127dbca92f3afc38 --owner GoogleCloudPlatform

What's Changed

• Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 in /terraform/test by @dependabot[bot] in #1
• Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /terraform/test by @dependabot[bot] in #2
• Remediate audit p1 by @glenmessenger in #6
• docs: update README with local Helm bootstrap, Cloud Build, and decod… by @glenmessenger in #7
• Add CODEOWNERS, issue templates, and PR template by @glenmessenger in #10
• build(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot[bot] in #3
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #5
• build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /terraform/test by @dependabot[bot] in #4
• build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 by @dependabot[bot] in #9
• build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in /terraform/test by @dependabot[bot] in #11
• Fix chart: manage AIBOMControllerConfig as release resource, add image digest support by @glenmessenger in #12
• Dedupe ClusterRole rules and narrow writes to controller-owned resources by @glenmessenger in #13
• Stamp controller version at build time via ldflags by @glenmessenger in #14
• Add versioning policy, changelog, compatibility matrix, release checklist by @glenmessenger in #15
• Release pipeline: signed multi-arch image, OCI chart, and SBOM to ghcr.io by @glenmessenger in #16
• Release prep: 1.0.0 changelog, chart attestation, prerelease handling by @glenmessenger in #18

New Contributors

• @dependabot[bot] made their first contribution in #1
• @glenmessenger made their first contribution in #6

Full Changelog: https://github.com/GoogleCloudPlatform/k8s-aibom/commits/v1.0.0

v1.0.0-rc.1

Image: ghcr.io/googlecloudplatform/k8s-aibom:v1.0.0-rc.1
Digest: sha256:9fd6f91c2b073d17b17f297103d582a32815d83fb9a503b4b57c08d2deab7fc7
Chart: oci://ghcr.io/googlecloudplatform/charts/k8s-aibom:1.0.0-rc.1

Verify: gh attestation verify oci://ghcr.io/googlecloudplatform/k8s-aibom@sha256:9fd6f91c2b073d17b17f297103d582a32815d83fb9a503b4b57c08d2deab7fc7 --owner GoogleCloudPlatform

What's Changed

• Bump github.com/ulikunitz/xz from 0.5.10 to 0.5.14 in /terraform/test by @dependabot[bot] in #1
• Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 in /terraform/test by @dependabot[bot] in #2
• Remediate audit p1 by @glenmessenger in #6
• docs: update README with local Helm bootstrap, Cloud Build, and decod… by @glenmessenger in #7
• Add CODEOWNERS, issue templates, and PR template by @glenmessenger in #10
• build(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot[bot] in #3
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #5
• build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /terraform/test by @dependabot[bot] in #4
• build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 by @dependabot[bot] in #9
• build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 in /terraform/test by @dependabot[bot] in #11
• Fix chart: manage AIBOMControllerConfig as release resource, add image digest support by @glenmessenger in #12
• Dedupe ClusterRole rules and narrow writes to controller-owned resources by @glenmessenger in #13
• Stamp controller version at build time via ldflags by @glenmessenger in #14
• Add versioning policy, changelog, compatibility matrix, release checklist by @glenmessenger in #15
• Release pipeline: signed multi-arch image, OCI chart, and SBOM to ghcr.io by @glenmessenger in #16
• Release prep: 1.0.0 changelog, chart attestation, prerelease handling by @glenmessenger in #18

New Contributors

• @dependabot[bot] made their first contribution in #1
• @glenmessenger made their first contribution in #6

Full Changelog: https://github.com/GoogleCloudPlatform/k8s-aibom/commits/v1.0.0-rc.1