Highlights
New managed-by label
ADC will now add a managed-by label to the resources it manages, with a fixed value of adc.
This will help ecosystem projects use this label to alert users that the resources are controlled by GitOps and should not be modified manually.
If you wish to use a similar label within your organization, I recommend using a namespace-based notation such as example.com/managed-by, or you can disable this built-in label using the --no-managed-by-label flag.
No infrastructure vulnerabilities
ADC updates its dependency tree before each release to ensure that it does not contain any known dependency vulnerabilities at the time of release. This includes ADC itself and the container images it publishes.
Starting with version 0.29.0, we have switched to distroless container images to eliminate vulnerabilities in the base image, reducing the number of identifiable vulnerabilities in the base image to zero.
However, distroless images have some limitations: they no longer provide a built-in shell or package manager, so docker exec will no longer be available. If you need an image with a shell, you will need to build it yourself and take responsibility for its security.
What's Changed
- chore(deps): update dependency js-yaml to v5.2.1 by @renovate[bot] in #512
- chore(deps): update docker/login-action action to v4.4.0 by @renovate[bot] in #515
- chore(deps): update pnpm to v11.10.0 by @renovate[bot] in #517
- ci: remove dependbot by @bzp2010 in #521
- test(api7): fix password policy more then 12 chars by @bzp2010 in #522
- chore(deps): update dependency prettier to v3.9.4 by @renovate[bot] in #513
- chore(deps): update vitest monorepo to v4.1.10 by @renovate[bot] in #523
- docs: add ADC user documentation by @bzp2010 in #524
- feat(core): inject managed by label by @bzp2010 in #533
- chore(deps): update docker/github-builder action to v1.13.0 by @renovate[bot] in #526
- chore: upgrade toolchain and dependencies by @bzp2010 in #536
- feat(docker): reduce base image vulnerabilities by @bzp2010 in #540
- feat(server): support custom tls config per endpoint by @bzp2010 in #552
- feat(core): align schema and backend health check config by @bzp2010 in #557
- feat: bump to 0.29.0 by @bzp2010 in #558
Full Changelog: v0.28.0...v0.29.0
