Release v1.3.0

What's Changed

Breaking Changes 🔔

• Upgrade go version to 1.25 and fix CVE-2026-33814 by @karthikeyan-balakrishnan1 in #53
• Remove kube proxy by @sunya-ch in #46
• Remove Experimental Mode from default spyre cluster policy by @AdityaGhatikar in #59
• Add dra-driver flag by @sunya-ch in #73

Features 🎉

• feat: mount metric path only when enabled by @sunya-ch in #24
• feat: add tls cert for device plugin and health checker by @AdityaGhatikar in #40

Fixes 🛠

• fix: add SPYRE_METRIC_EXPORT to device plugin by @sunya-ch in #25
• fix: e2E Test Failures with Health Checker Enabled by @AdityaGhatikar in #52
• fix: e2e test error for scheduler repo by @tmishina in #76

Operations ♻️

• ci: enable Sonar Qube by @trent-s in #51
• ci: add e2e label for prop-deps by @sunya-ch in #47
• ci: add install operator script and uninstall target by @sunya-ch in #78
• ci: support multi repo by @sunya-ch in #66
• ci: separate fbc-docker-build to allow replacement before build + bug fixes on e2e by @sunya-ch in #67
• ci: add dev image build by @sunya-ch in #38
• ci: ignore cert-manager, ginkgo, and ubi-micro from dependabot by @sunya-ch in #79
• ci: multi-arch build catalog and bundle by @sunya-ch in #94

Other Changes

• chore: remove metrics path option for pod info in e2e by @sunya-ch in #27
• chore(deps): Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 by @dependabot[bot] in #28
• chore(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0 by @dependabot[bot] in #33
• chore(deps): Bump github.com/onsi/gomega from 1.39.1 to 1.40.0 by @dependabot[bot] in #35
• fix: handle workflow_dispatch correctly by @trent-s in #57
• chore: fix multi-arch build call by @sunya-ch in #65
• chore: remove arch from bundle build by @sunya-ch in #72
• fix: dependabot sonarqube scan needs ORGID by @trent-s in #69
• fix: Fixed sonar cube issue by @karthikeyan-balakrishnan1 in #63
• chore: raise fixes for CVE by @ChandrikaHarish in #75
• fix: handle coverage testing failures gracefully by @trent-s in #74
• chore(deps): Bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.43.0 by @dependabot[bot] in #71
• chore(deps): Bump github.com/onsi/gomega from 1.40.0 to 1.41.0 by @dependabot[bot] in #61
• chore(deps): Bump google.golang.org/grpc from 1.72.1 to 1.79.3 by @dependabot[bot] in #70
• fix: dra-driver-spyre deployment and test by @sunya-ch in #77
• Update GOTOOLCHAIN and GOPROXY for consistent Go versioning and vulnerability mitigation by @tmishina in #82
• test: add dra-driver e2e test by @sunya-ch in #83
• Add vunlerability assessment doc of Go 1.25.9 for release 1.3.0 by @tmishina in #85
• chore: clean up previous release artifacts by @sunya-ch in #91
• fix: failing e2e test on dra-driver after metrics exporter test by @sunya-ch in #93
• chore: Added security.md file by @karthikeyan-balakrishnan1 in #95
• chore: add dra-driver in release artifact by @sunya-ch in #99
• Change supported OpenShift version (4.18 to 4.22) by @tmishina in #98

New Contributors

• @sunya-ch made their first contribution in #24
• @dependabot[bot] made their first contribution in #28
• @AdityaGhatikar made their first contribution in #40
• @trent-s made their first contribution in #51
• @karthikeyan-balakrishnan1 made their first contribution in #53
• @tmishina made their first contribution in #76
• @ChandrikaHarish made their first contribution in #75

Full Changelog: https://github.com/ibm-aiu/spyre-operator/commits/v1.3.0