v1.7.4

What's Changed

• update stable to v1.7.3 by @AryanBakliwal in #2638
• fix(ci): Fix CI to certify images on redhat by @AryanBakliwal in #2641
• Update aquasecurity/trivy-action action to v0.36.0 by @renovate[bot] in #2632
• Update actions/checkout action to v3.6.0 by @renovate[bot] in #2626
• Update module go.podman.io/podman/v6 to v6.0.0-20260603192226-3caa80eb73f3 by @renovate[bot] in #2629
• fix(operator): Make snitch UBI image non-root by @AryanBakliwal in #2647
• Revert "fix(operator): Make snitch UBI image non-root" by @AryanBakliwal in #2654
• feat(core): Improve policy matching for hostnames by @AryanBakliwal in #2640
• fix(core): use TaskExit type to unmarshal containerd exit events by @Athang69 in #2527
• feat(enforcer): Add tld & subdomain enforcement by @achrefbensaad in #2618
• fix(operator): Add NET_ADMIN to SCC by @AryanBakliwal in #2675
• Revert PR #2618 by @Aryan-sharma11 in #2680
• docs(getting-started): Update nodeSelector hostname label matching by @kanishksingh23 in #2678
• panic: send on closed channel by @Aryan-sharma11 in #2660
• Fix link to CODE_OF_CONDUCT.md in CONTRIBUTING.md by @VirajMandavkar in #2687
• feat: add grpc based healthcheck in liveness probe by @Aryan-sharma11 in #2670
• add DNS support and verifier for 6.17 by @Aryan-sharma11 in #2684
• Fix HIGH-severity containerd CVEs by @sagarkhandagre998 in #2702
• feat: add openEuler 24.03 LTS-SP3 to support matrix by @Athang69 in #2688
• chore(ci): integrate Renovate bot and pin dependencies to improve Scorecard score from 0/10 to 6/10 by @Athang69 in #2585
• fix(USB): increase socket buffer and handle panic by @AryanBakliwal in #2710
• fix(ci): correct expression syntax in workflow if conditions by @Athang69 in #2699
• chore(monitor): change iov check for RHEL and newer kernels in system monitor by @charankamal20 in #2583
• docs(docs): fix spelling and grammar in contributing, security and FAQ guides by @Rucha0901 in #2713
• Add token permissions to workflows for OpenSSF Scorecard compliance by @asmit27rai in #2677
• chore: update governance and maintainers documentation; add release p… by @achrefbensaad in #2719
• fix(feeder): rate-limit drop logs to prevent memory spikes by @AryanBakliwal in #2721
• Update ci-systemd-release.yml for provenance generation by @asmit27rai in #2664
• fix(core): Support Ubuntu 26.04 by @AryanBakliwal in #2682
• nominating two maintainers for KubeArmor by @achrefbensaad in #2725
• feat: Add quota handling via NPE by @Aryan-sharma11 in #2593
• fix(core): Fix kubearmor-init image build workflow by @AryanBakliwal in #2726
• Update CodeOwner by @achrefbensaad in #2729
• chore(helm): Update maintainers and annotations in sample policies by @charankamal20 in #2722
• fix(sysmon): revert iov changes system mon by @charankamal20 in #2734
• fix: NPE compilation on 4.18 by @Aryan-sharma11 in #2732
• chore(helm): prepare charts for v1.7.4 release by @Aryan-sharma11 in #2728

New Contributors

• @kanishksingh23 made their first contribution in #2678
• @VirajMandavkar made their first contribution in #2687
• @sagarkhandagre998 made their first contribution in #2702
• @Rucha0901 made their first contribution in #2713
• @asmit27rai made their first contribution in #2677

Full Changelog: v1.7.3...v1.7.4