v0.16.9

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.9

Feature

• Schedule-builder: Added markdown help on top of each file when updating them. (#3583, @saschagrunert) [SIG Release]

Bug or Regression

• Fixed monthly patch output for schedule-builder. (#3578, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.16.8

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.8

Feature

• Build Go 1.22.2 and 1.21.9 (#3549, @cpanato) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.21.9 (#3561, @cpanato) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.22.2 (#3555, @cpanato) [SIG Release]
• Bump distroless iptables to use go1.22.2 and go1.21.9 (#3554, @cpanato) [SIG Release]
• Mark GitHub release as latest if no newer releases were found (#3559, @embik) [SIG Release]
• Schedule-builder: do not add release name for upcoming releases because it can be inferred by the target date. (#3570, @saschagrunert) [SIG Release]

Bug or Regression

• Fixed crash in schedule-builder if next field is not set in schedule.yaml. (#3551, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• github.com/goark/go-cvss: v1.6.7 → v1.6.6
• golang.org/x/crypto: v0.21.0 → v0.22.0
• golang.org/x/net: v0.23.0 → v0.24.0
• golang.org/x/oauth2: v0.18.0 → v0.19.0
• golang.org/x/sys: v0.18.0 → v0.19.0
• golang.org/x/term: v0.18.0 → v0.19.0
• sigs.k8s.io/mdtoc: v1.2.2 → v1.3.0
• sigs.k8s.io/release-utils: v0.8.0 → v0.8.1

Removed

Nothing has changed.

v0.16.7

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.7

Feature

• Added --version/-v flag to schedule-builder (#3548, @saschagrunert) [SIG Release]
• Added -e/--eol-config-path support to schedule-builder (#3550, @saschagrunert) [SIG Release]
• Added upcoming releases to schedule builder model. (#3547, @saschagrunert) [SIG Release]

Bug or Regression

• Fixed crash in schedule-builder if next field is not set in schedule.yaml. (#3551, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.16.6

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.6

Feature

• Add bom and attestation to release jobs (#3536, @cpanato) [SIG Release]
• Add publish-release to be part of the release job (#3533, @cpanato) [SIG Release]
• Added --update flag to schedule-builder to update the patch release schedule.yaml. (#3544, @saschagrunert) [SIG Release]
• Added schedule-builder shorthands as well as update the documentation for the flags. (#3543, @saschagrunert) [SIG Release]
• Added version subcommand to release-notes tool. (#3478, @saschagrunert) [SIG Release]
• Added support for in-memory cloudbuild.yaml jobs when submitting them using krel. (#3472, @saschagrunert) [SIG Release]
• Added upcoming releases to schedule builder model. (#3547, @saschagrunert) [SIG Release]
• Build Go 1.22.1 and 1.21.8 (#3488, @cpanato) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.22.1 and 1.21.8 (#3495, @cpanato) [SIG Release]
• Bump distroless iptables to use go1.22.1 and go1.21.8 (#3489, @cpanato) [SIG Release]
• Rebuild debian-base and tag bookworm-v1.0.2 (#3522, @cpanato) [SIG Release]
• Release schedule-builder binaries. (#3542, @saschagrunert) [SIG Release]
• Remove kubeadm's dependencies for kubelet and kubectl for kubeadm versions >= 1.30.0 (#3481, @neolit123) [SIG Release]
• Set custom org and repo for FF cloudbuild job (#3505, @cpanato) [SIG Release]
• Track the original PR body when creating release notes maps. Those will be used to compare the actual PR body against them and warn in case of any differences. (#3538, @saschagrunert) [SIG Release]
• Upgrade to go1.22 (#3514, @cpanato) [SIG Release]

Bug or Regression

• Do not exclude mapped notes if they got modified to contain the release-note-none label. (#3509, @saschagrunert) [SIG Release]
• Fixed runtime panic in release-notes when the --maps-from value is smaller than 5 characters (#3508, @saschagrunert) [SIG Release]
• Fixed schedule-builder to match the current format from k/website. (#3541, @saschagrunert) [SIG Release]

Other (Cleanup or Flake)

• Allow api.securityscorecards.dev for dependency review job (#3531, @cpanato) [SIG Release]
• Split release job in two to avoid have token excess permissions in prs (#3528, @cpanato) [SIG Release]
• Update set-cap image to use debian-base bookworm-v1.0.2 (#3525, @cpanato) [SIG Release]
• Update sigs.k8s.io/bom to v0.6.0 and drop build for linux/s390x and windows/386 (#3530, @cpanato) [SIG Release]

Dependencies

Added

• github.com/MakeNowJust/heredoc/v2: v2.0.1
• github.com/glebarez/go-sqlite: v1.22.0
• github.com/kballard/go-shellquote: 95032a8
• github.com/klauspost/cpuid/v2: v2.2.3
• github.com/knqyf263/go-rpmdb: 067d98b
• github.com/remyoudompheng/bigfft: 24d4a6f
• lukechampine.com/uint128: v1.3.0
• modernc.org/cc/v3: v3.41.0
• modernc.org/ccgo/v3: v3.16.15
• modernc.org/httpfs: v1.0.6
• modernc.org/libc: v1.37.6
• modernc.org/mathutil: v1.6.0
• modernc.org/memory: v1.7.2
• modernc.org/opt: v0.1.3
• modernc.org/sqlite: v1.28.0
• modernc.org/strutil: v1.2.0
• modernc.org/tcl: v1.15.2
• modernc.org/token: v1.1.0
• modernc.org/z: v1.7.3

Changed

• github.com/ProtonMail/go-crypto: afb1ddc → v1.0.0
• github.com/docker/docker: v24.0.7+incompatible → v24.0.9+incompatible
• github.com/gliderlabs/ssh: v0.3.5 → v0.3.7
• github.com/go-git/go-git/v5: v5.11.0 → v5.12.0
• github.com/go-jose/go-jose/v3: v3.0.1 → v3.0.3
• github.com/goark/errs: v1.1.0 → v1.3.2
• github.com/goark/go-cvss: v1.6.6 → v1.6.7
• github.com/golang/protobuf: v1.5.3 → v1.5.4
• github.com/gomarkdown/markdown: 3b9f472 → 4d01890
• github.com/google/go-containerregistry: v0.19.0 → v0.19.1
• github.com/package-url/packageurl-go: d704593 → v0.1.2
• github.com/saschagrunert/go-modiff: v1.3.4 → v1.3.5
• github.com/sergi/go-diff: v1.3.1 → 5b0b94c
• github.com/shirou/gopsutil/v3: v3.24.1 → v3.24.3
• github.com/skeema/knownhosts: v1.2.1 → v1.2.2
• github.com/stretchr/objx: v0.5.1 → v0.5.2
• github.com/stretchr/testify: v1.8.4 → v1.9.0
• github.com/yuin/goldmark: v1.7.0 → v1.7.1
• github.com/yusufpapurcu/wmi: v1.2.3 → v1.2.4
• gitlab.alpinelinux.org/alpine/go: v0.7.0 → v0.8.0
• golang.org/x/crypto: v0.19.0 → v0.21.0
• golang.org/x/net: v0.21.0 → v0.23.0
• golang.org/x/oauth2: v0.17.0 → v0.18.0
• golang.org/x/sys: v0.17.0 → v0.18.0
• golang.org/x/term: v0.17.0 → v0.18.0
• google.golang.org/protobuf: v1.31.0 → v1.33.0
• gopkg.in/go-jose/go-jose.v2: v2.6.1 → v2.6.3
• k8s.io/apimachinery: v0.29.2 → v0.29.3
• mvdan.cc/sh/v3: v3.5.1 → v3.7.0
• sigs.k8s.io/bom: 1ebaa9c → v0.6.0
• sigs.k8s.io/mdtoc: v1.1.0 → v1.2.2
• sigs.k8s.io/release-utils: v0.7.7 → v0.8.0

Removed

• github.com/MakeNowJust/heredoc: v1.0.0
• golang.org/dl: 82a15e2

v0.16.5

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket: https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.5

Feature

• Adapt krel/ff to run with other repositories that are not only k/k (#3445, @cpanato) [SIG Release]
• Add config for go1.20 for distroless-iptables (#3312, @cpanato) [SIG Release]
• Add configs for 1.30 with go1.22 for k8s-cloudbuilder (#3439, @cpanato) [SIG Release]
• Added support for in-memory cloudbuild.yaml jobs when submitting them using krel. (#3472, @saschagrunert) [SIG Release]
• Build Go 1.21.5 and 1.20.12 images (#3388, @jeremyrickard) [SIG Release]
• Build Go 1.21.6 and 1.20.12 images (#3413, @cpanato) [SIG Release]
• Build Go 1.21.7 and 1.20.14 images (#3452, @cpanato) [SIG Release]
• Build Go 1.22 (1.22.0) images
  • update ko and goreleaser (#3454, @cpanato) [SIG Release]
• Build distroless-iptables using go1.22 (#3457, @cpanato) [SIG Release]
• Build distroless-iptables with go1.22rc2 (#3440, @cpanato) [SIG Release]
• Build go images with 1.21.7 for old release branches and drop go1.20 images build (#3461, @cpanato) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.20.12 (#3394, @xmudrii) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.21.5 (#3390, @xmudrii) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.21.6 and 1.20.13 (#3415, @cpanato) [SIG Release]
• Build k8s-ci-builder and k8s-cloud-bulider with Go 1.22.0 (#3463, @cpanato) [SIG Release]
• Build k8s-cloud-builder with Go 1.21.7 (#3464, @cpanato) [SIG Release]
• Bump release-sdk and go-github (#3377, @cpanato) [SIG Release]
• The release-notes utility will now have subcommands to support more functionality
  • The original functionality of release-notes has now been moved to the release-notes generate subcommand. This is the default subcommand to avoid breaking compatibility.
  • We now have a new release-notes check subcommand to verify if PRs have a valid release note
    (#3406, @puerco) [SIG Release]
• Golang: Build 1.22rc1 images (#3421, @cpanato) [SIG Release]
• Golang: Build 1.22rc2 images (#3433, @cpanato) [SIG Release]
• Rebuild debian-base and tag bookworm-v1.0.1 (#3435, @cpanato) [SIG Release]
• Update distroless iptables to use go1.21.6 and go1.20.13 (#3414, @cpanato) [SIG Release]
• Update distroless iptables to use go1.21.7 and go1.20.14 (#3456, @cpanato) [SIG Release]
• Update distroless-iptables to use go 1.21.5 (#3389, @xmudrii) [SIG Release]
• Update release-sdk to v0.11.0 and go-github v58 (#3434, @cpanato) [SIG Release]

Bug or Regression

• Breaking change: fast marker (latest-fast.txt) is now stored inside the fast folder instead of the gcsRoot folder(ci) (#3405, @upodroid) [SIG Release]
• Change default value of --repo-path flag from release-note generate to use /- (#3458, @DannyBrito) [SIG Release]
• Changed krel history to still produce output when unfinished jobs are running. (#3384, @saschagrunert) [SIG Release]
• Fixed wrong amount of logger steps for krel obs. (#3378, @saschagrunert) [SIG Release]

Other (Cleanup or Flake)

• Update Google Cloud artifact registry for the k8s images (#3446, @cpanato) [SIG Release]
• Update cosign image to use v2.2.2 release (#3393, @cpanato) [SIG Release]
• Update setcap base image to bookworm-v1.0.1 (#3453, @cpanato) [SIG Release]

Dependencies

Added

• cloud.google.com/go/dataproc/v2: v2.2.3
• cloud.google.com/go/profiler: v0.4.0
• github.com/AdaLogics/go-fuzz-headers: ced1acd
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v1.2.0
• github.com/DATA-DOG/go-sqlmock: v1.5.0
• github.com/DrJosh9000/zzglob: v0.0.17
• github.com/Khan/genqlient: v0.6.0
• github.com/Microsoft/hcsshim: v0.11.4
• github.com/alecthomas/kingpin/v2: v2.3.2
• github.com/alexflint/go-arg: v1.4.2
• github.com/alexflint/go-scalar: v1.0.0
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.11.76
• github.com/bufbuild/protocompile: v0.6.0
• github.com/buildkite/go-pipeline: v0.2.0
• github.com/cavaliergopher/cpio: v1.0.1
• github.com/cockroachdb/apd/v3: v3.2.1
• github.com/containerd/log: v0.1.0
• github.com/decred/dcrd/dcrec/secp256k1/v4: v4.2.0
• github.com/dustinkirkland/golang-petname: 6a283f1
• github.com/ebitengine/purego: v0.5.0-alpha.1
• github.com/go-kit/log: v0.2.1
• github.com/go-quicktest/qt: v1.100.0
• github.com/goccy/go-json: v0.10.2
• github.com/golang-jwt/jwt/v5: v5.0.0
• github.com/google/gnostic-models: c7be7c7
• github.com/google/go-github/v55: v55.0.0
• github.com/google/go-github/v58: v58.0.0
• github.com/gowebpki/jcs: v1.0.1
• github.com/jmoiron/sqlx: v1.3.5
• github.com/jpillora/backoff: v1.0.0
• github.com/lestrrat-go/blackmagic: v1.0.2
• github.com/lestrrat-go/httpcc: v1.0.1
• github.com/lestrrat-go/httprc: v1.0.4
• github.com/lestrrat-go/iter: v1.0.2
• github.com/lestrrat-go/jwx/v2: v2.0.16
• github.com/lestrrat-go/option: v1.0.1
• github.com/letsencrypt/borp: 6cc6ce5
• github.com/letsencrypt/validator/v10: a0c7dfc
• github.com/matttproud/golang_protobuf_extensions/v2: v2.0.0
• github.com/minio/highwayhash: v1.0.2
• github.com/nats-io/jwt/v2: v2.4.1
• github.com/nats-io/nats.go: v1.30.2
• github.com/nats-io/nkeys: v0.4.5
• github.com/nats-io/nuid: v1.0.1
• github.com/poy/onpar: v1.1.2
• github.com/sagikazarmark/locafero: v0.3.0
• github.com/sagikazarmark/slog-shim: v0.1.0
• github.com/segmentio/asm: v1.2.0
• github.com/sourcegraph/conc: v0.3.0
• github.com/tetratelabs/wazero: v1.0.2
• github.com/vektah/gqlparser/v2: v2.5.8
• github.com/xhit/go-str2duration/v2: v2.1.0
• gopkg.in/go-jose/go-jose.v2: v2.6.1

Changed

• chainguard.dev/go-grpc-kit: v0.16.0 → v0.17.1
• cloud.google.com/go/accessapproval: v1.6.0 → v1.7.4
• cloud.google.com/go/accesscontextmanager: v1.7.0 → v1.8.4
• cloud.google.com/go/aiplatform: v1.37.0 → v1.52.0
• cloud.google.com/go/analytics: v0.19.0 → v0.21.6
• cloud.google.com/go/apigateway: v1.5.0 → v1.6.4
• cloud.google.com/go/apigeeconnect: v1.5.0 → v1.6.4
• cloud.google.com/go/apigeeregistry: v0.6.0 → v0.8.2
• cloud.google.com/go/appengine: v1.7.1 → v1.8.4
• cloud.google.com/go/area120: v0.7.1 → v0.8.4
• cloud.google.com/go/artifactregistry: v1.13.0 → v1.14.6
• cloud.google.com/go/asset: v1.13.0 → v1.15.3
• cloud.google.com/go/assuredworkloads: v1.10.0 → v1.11.4
• cloud.google.com/go/automl: v1.12.0 → v1.13.4
• cloud.google.com/go/baremetalsolution: v0.5.0 → v1.2.3
• cloud.google.com/go/batch: v0.7.0 → v1.6.3
• cloud.google.com/go/beyondcorp: v0.5.0 → v1.0.3
• cloud.google.com/go/bigquery: v1.50.0 → v1.57.1
• cloud.google.com/go/billing: v1.13.0 → v1.17.4
• cloud.google.com/go/binaryauthorization: v1.5.0 → v1.7.3
• cloud.google.com/go/certificatemanager: v1.6.0 → v1.7.4
• cloud.google.com/go/channel: v1.12.0 → v1.17.3
• cloud.google.com/go/cloudbuild: v1.9.0 → v1.14.3
• cloud.google.com/go/clouddms: v1.5.0 → v1.7.3
• cloud.google.com/go/cloudtasks: v1.10.0 → v1.12.4
• cloud.google.com/go/compute: v1.20.1 → v1.23.3
• cloud.google.com/go/contactcenterinsights: v1.6.0 → v1.11.3
• cloud.google.com/go...

v0.16.4

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket: https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.4

Feature

• Build Go 1.21.4 and 1.20.11 images (#3348, @cpanato) [SIG Release]
• Default krel obs stage --wait to true (#3318, @saschagrunert) [SIG Release]
• Pin all cloudbuild jobs to use the latest krel release instead of master. (#3359, @saschagrunert) [SIG Release]
• The distroless-iptables image (and thus by extension, the official kube-proxy image)
  now contains the nftables binaries as well as the iptables binaries. (#3320, @danwinship) [SIG Release]
• Update cosign image to v2.2.1 (#3346, @cpanato) [SIG Release]
• Update distroless-iptables to use Go 1.21.3 (#3321, @cpanato) [SIG Release]
• Update distroless-iptables to use Go 1.21.4 (#3350, @cpanato) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.20.10 (#3322, @cpanato) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.20.11 and add missing for 1.21.4 (#3358, @cpanato) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.21.3 (#3319, @xmudrii) [SIG Release]
• You can now pass KubeBuildPlatforms field to the pkg/build Options type to enable builds for arm64 and other arches (#3324, @upodroid) [SIG Release]

Other (Cleanup or Flake)

• Group dependencies updates (#3340, @cpanato) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• github.com/cpuguy83/go-md2man/v2: v2.0.2 → v2.0.3
• github.com/docker/docker: v24.0.0+incompatible → v24.0.7+incompatible
• github.com/go-git/go-git-fixtures/v4: 0c11038 → 55a9409
• github.com/go-git/go-git/v5: v5.9.0 → v5.10.0
• github.com/google/go-cmp: v0.5.9 → v0.6.0
• github.com/google/uuid: v1.3.1 → v1.4.0
• github.com/mattn/go-isatty: v0.0.19 → v0.0.20
• github.com/shirou/gopsutil/v3: v3.23.9 → v3.23.10
• github.com/spf13/cobra: v1.7.0 → v1.8.0
• github.com/yuin/goldmark: v1.5.6 → v1.6.0
• golang.org/x/crypto: v0.14.0 → v0.15.0
• golang.org/x/net: v0.17.0 → v0.18.0
• golang.org/x/oauth2: v0.13.0 → v0.14.0
• golang.org/x/sys: v0.13.0 → v0.14.0
• golang.org/x/term: v0.13.0 → v0.14.0
• golang.org/x/text: v0.13.0 → v0.14.0
• google.golang.org/grpc: v1.56.1 → v1.56.3
• sigs.k8s.io/release-utils: v0.7.5 → v0.7.7
• sigs.k8s.io/yaml: v1.3.0 → v1.4.0

Removed

Nothing has changed.

v0.16.3

Please note that you can also download the artifacts for this release from our Google Cloud Bucket: https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.3

Changes by Kind

Feature

• Build Go 1.21.3 and 1.20.10 images (#3316, @cpanato) [SIG Release]
• Default krel obs stage --wait to true (#3318, @saschagrunert) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.21.2/1.20.9 (#3310, @cpanato) [SIG Release]

Bug or Regression

• Fixed bug to not wait for OBS build results if krel obs stage --wait=false. (#3315, @saschagrunert) [SIG Release]

Other (Cleanup or Flake)

• Removed kubepkg and rapture code parts. (#3313, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/net: v0.16.0 → v0.17.0
• sigs.k8s.io/release-utils: 1bf6b4c → v0.7.5

Removed

Nothing has changed.

v0.16.2

Please note that you can also download the artifacts for this release from our Google Cloud Bucket: https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.2

Changes by Kind

Feature

• Added --wait flag for krel obs stage to wait for OBS build results. (#3304, @saschagrunert) [SIG Release]
• Build Go 1.21.2 and 1.20.9 images (#3305, @cpanato) [SIG Release]
• Update distroless-iptables to use Go 1.21.2 (#3306, @cpanato) [SIG Release]

Bug or Regression

• Fixed binary archive duplicates. (#3302, @cpanato) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/crypto: v0.13.0 → v0.14.0
• golang.org/x/net: v0.15.0 → v0.16.0
• golang.org/x/oauth2: v0.12.0 → v0.13.0
• golang.org/x/sys: v0.12.0 → v0.13.0
• golang.org/x/term: v0.12.0 → v0.13.0

Removed

Nothing has changed.

v0.16.1

Please note that you can also download the artifacts for this release from our Google Cloud Bucket: https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.16.1

Changes by Kind

Bug or Regression

• Fixed binary archive duplicates. (#3302, @cpanato) [SIG Release]
• Fixed wrong binary path for release-notes tool. (#3301, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.16.0

Changes by Kind

Deprecation

• Deprecate --create-website-pr on krel release-notes as there is no need to update the repo with latest release notes. They are now fetched automatically from GCS. (#3277, @ashnehete) [SIG Release]

Feature

• Add osc (OpenBuildService CLI) to k8s-cloud-builder image (#3084, @xmudrii) [SIG Release]
• Add configs for 1.29 and 1.28 for k8s-cloudbuilder and drop 1.24 (#3250, @cpanato) [SIG Release]
• Added CRI-O package to krel obs (#3229, @saschagrunert) [SIG Release]
• Added rpmlint to releng-ci image gcr.io/k8s-staging-releng/releng-ci:latest-go1.20-bookworm. (#3167, @saschagrunert) [SIG Release]
• Allow setting OBS_USERNAME for a specific krel obs user (#3273, @saschagrunert) [SIG Release]
• Allow string slices (architectures and packages) as krel obs arguments. (#3267, @saschagrunert) [SIG Release]
• Build Go 1.19.10 and Go 1.20.5 based images (#3105, @jeremyrickard) [SIG Release]
• Build Go 1.20.4 and 1.19.9 based images (#3029, @rayandas) [SIG Release]
• Build Go 1.20.6 based images and remove references to Go 1.19 (#3154, @xmudrii) [SIG Release]
• Build Go 1.20.7 images (#3189, @xmudrii) [SIG Release]
• Build Go 1.21.1 and 1.20.8 images (#3253, @cpanato) [SIG Release]
• Bump cosign image to v2.2.0 (#3241, @cpanato) [SIG Release]
• Bump k8s-cloud-builder and k8s-ci-builder to Go 1.19.10 (#3116, @jeremyrickard) [SIG Release]
• Bump k8s-cloud-builder and k8s-ci-builder to Go 1.19.9 (#3034, @xmudrii) [SIG Release]
• Bump k8s-cloud-builder and k8s-ci-builder to Go 1.20.5 (#3145, @cpanato) [SIG Release]
• Debian-iptables and distroless-iptables are now built with Go 1.20.5 (#3107, @jeremyrickard) [SIG Release]
• Golang: Build 1.21 images (#3212, @cpanato) [SIG Release]
• Golang: Build 1.21rc2 images (#3132, @cpanato) [SIG Release]
• Golang: Build 1.21rc3 images (#3155, @cpanato) [SIG Release]
• Golang: build 1.21rc4 images (#3190, @ameukam) [SIG Release]
• Implement OBS release workflow via krel obs release command (#3098, @xmudrii) [SIG Release]
• Implement OBS staging workflow via krel obs stage command (#3088, @xmudrii) [SIG Release]
• Kubernetes 1.28+ packages hosted on pkgs.k8s.io require kubernetes-cni 1.2.0 and cri-tools 1.28.0 (#3192, @xmudrii) [SIG Release]
• Make --workspace configurable in obs stage/release (#3271, @saschagrunert) [SIG Release]
• The SBOM format can now be controlled in publish release github and JSON is now the default. (#3020, @puerco) [SIG Release]
• Update distroless-iptables to use Go 1.20.6 (#3156, @xmudrii) [SIG Release]
• Update distroless-iptables to use Go 1.20.7 (#3197, @jeremyrickard) [SIG Release]
• Update distroless-iptables to use Go 1.21.1 (#3258, @cpanato) [SIG Release]
• Update go images for 1.29 and 1.28 release branches and drop 1.24 config (#3234, @cpanato) [SIG Release]
• Update k8s-cloud-builder to Go 1.20.6 (#3157, @xmudrii) [SIG Release]
• Update k8s-cloud-builder to Go 1.20.7 (#3199, @jeremyrickard) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.20.8 (#3259, @cpanato) [SIG Release]
• Update k8s-cloud-builder/k8s-ci-builder to Go 1.21.1 (#3257, @cpanato) [SIG Release]
• Update to set go1.20 in go.mod and upgrade golangci-lint (#3073, @cpanato) [SIG Release]
• Updated debian-iptables to switch to debian-bookworm. (#3136, @saschagrunert) [SIG Release]
• Updated kube-cross protobuf version to v23.4. (#3147, @saschagrunert) [SIG Release]
• Updated releng-ci image to use debian bookworm. (#3150, @saschagrunert) [SIG Release]
• Updated setcap image to use debian bookworm. (#3139, @saschagrunert) [SIG Release]
• Updated the kube-cross v1.28 image to use debian bookworm. (#3146, @saschagrunert) [SIG Release]
• Upgrade code to be compatible with cosign v2 (#3078, @cpanato) [SIG Release]
• Use debian 12 for go-runner 1.21 image. (#3233, @saschagrunert) [SIG Release]
• Using debian 12 (bookworm) for all images. (#3127, @saschagrunert) [SIG Release]
• krel obs specs command is refactored to better support OpenBuildService (OBS) workflow (#3079, @xmudrii) [SIG Release]

Bug or Regression

• EnvironmentFile is changed from /etc/sysconfig/kubelet to /etc/default/kubelet for kubeadm Debian packages published to pkgs.k8s.io (#3279, @xmudrii) [SIG Release]
• Fix version comparison in VerifyLatestUpdate (#3223, @xmudrii) [SIG Release]
• Fixed --template-dir for krel obs release (#3272, @saschagrunert) [SIG Release]
• Fixed grep usage in distroless-iptables, which is now on version v0.3.1. (#3237, @saschagrunert) [SIG Release]
• Removed arm architecture from kubepkg command. (#3106, @saschagrunert) [SIG Release]
• Removed workdir prefix from SHA*SUMS files. (#3227, @saschagrunert) [SIG Release]
• Replace PROJECT and PROJECT_TAG GCB substitutions with OBS_PROJECT and OBS_PROJECT_TAG (#3174, @xmudrii) [SIG Release]

Other (Cleanup or Flake)

• Add go boilerplate when running go generate (#3075, @cpanato) [SIG Release]
• Publishing-bot issue will now be created in kubernetes/sig-release instead of k8s-release-robot/sig-release (#3198, @akhilerm) [SIG Release]
• Remove "Kubernetes Source Code" artifact from being published on GitHub Releases (#2780, @xmudrii) [SIG Release]
• Removed debian-iptables image. (#3153, @saschagrunert) [SIG Release]
• Update k8s-ci-builder for go1.21 to use bullseye for 1.29 and default for next config keep on bookworm (#3251, @cpanato) [SIG Release]
• Update release-utils to 243952c
  • Replace - with ~ in package version for OBS packages to support prereleases (#3094, @xmudrii) [SIG Release]
• Upgrade osc binary in k8s-cloud-builder image. (#3278, @saschagrunert) [SIG Release]
• krel obs specs: use default --channel release, --output . and --template-dir cmd/krel/templates/latest. (#3231, @saschagrunert) [SIG Release]

Dependencies

Added

• chainguard.dev/go-grpc-kit: v0.16.0
• dario.cat/mergo: v1.0.0
• github.com/AdamKorcz/go-fuzz-headers-1: e936619
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.6.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.3.0
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys: v0.10.0
• github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal: v0.7.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys: v0.12.0
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v0.8.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.0.0
• github.com/DataDog/appsec-internal-go: v1.0.0
• github.com/DataDog/datadog-agent/pkg/obfuscate: v0.45.0-rc.1
• github.com/DataDog/datadog-agent/pkg/remoteconfig/state: v0.45.0-rc.1
• github.com/DataDog/datadog-go/v5: v5.3.0
• github.com/DataDog/go-libddwaf: v1.2.0
• github.com/DataDog/go-tuf: fork
• github.com/DataDog/sketches-go: v1.2.1
• github.com/alessio/shellescape: v1.4.1
• github.com/bazelbuild/bazelisk: v1.13.2
• github.com/bazelbuild/rules_go: v0.34.0
• github.com/beevik/ntp: v1.0.0
• github.com/blendle/zapdriver: v1.3.1
• github.com/brunoscheufler/aws-ecs-metadata-go: b6b31c6
• github.com/buildkite/agent/v3: v3.49.0
• github.com/buildkite/bintest/v3: v3.1.1
• github.com/buildkite/interpolate: 07f35b4
• github.com/buildkite/roko: v1.1.0
• github.com/buildkite/shellwords: c3f497d
• github.com/bytecodealliance/wasmtime-go/v3: v3.0.2
• github.com/denisbrodbeck/machineid: v1.0.1
• github.com/digitorus/pkcs7: 001c36b
• github.com/digitorus/timestamp: ef3b63b
• github.com/elazarl/goproxy: 2592e75
• github.com/gabriel-vasile/mimetype: v1.4.2
• github.com/go-chi/chi/v5: v5.0.8
• github.com/go-redis/redismock/v9: v9.0.3
• github.com/google/go-github/v53: [v53.2.0](https://github.com/google/go-github/v53/tree/v53....