v1.33.0-rc3

• deps(policy-fetcher): Consume oci-client 0.16.1 (#1551)
• docs: Update CRDs generated docs (#1549)
• docs(chart): Mark .Values.installPolicyReportCRDs as deprecated (#1536)
• test(policy-evaluator,policy-server): Fix flaky tests (#1522)
• refactor(test): Pass proxy config in Sources instead of env vars (#1518)
• ci: Add coverage for rust code (#1497)
• ci: add automated spelling check to CI (#1492)
• CI: Add CI step to check kwctl doc build (#1481)
• CI: Restore cross-platform cargo checks for kwctl (#1484)
• ci: add Cargo.toml version check to release workflow (#1482)
• ci(open-release-pr): Obtain desired version from workflow dispatch (#1455)

⚠️ Breaking changes

• chore!: Don't install wgpolicyk8s reports by default (#1548)
• chore(policy-evaluator)!: removes deprecated "kubernetes" wapc bindind. (#1519)
• feat!: Switch chart default to openreports (#1510)

🚀 Features

• feat(controller): flag to allow policies in kubewarden namespace (#1513)
  

• feat(kwctl,policy-server): Support reading proxies config from sources.yaml (#1516)
• feat(kwctl,policy-server): Honor proxy configuration for context aware calls (#1515)
• feat!: Switch chart default to openreports (#1510)
• feat: audit-scanner deletes old wgpolicyk8s reports when migrating to openreports (#1512)
• feat(kwctl,policy-server): Honour proxy env vars (#1487)
• feat(policy-evaluator): support field masks when querying k8s (#1503)
• feat(ci): update rust toolchain updatecli script. (#1508)
• feat: Version the format of policy-server cert Secrets via annot (#1501)
• feat(policy-server): add support for custom Sigstore trust roots. (#1485)

🐛 Bug Fixes

• fix(policy-server): initialize crypto provider. (#1556)
• fix(charts): allow evaluations in controller namespace. (#1542)
• fix(policy-server): Fix race condition on policy rehydration (#1529)
• fix(e2e-test): fix premature abort in wait.For on transient errors (#1523)
• fix(deps): update go dependencies to v0.35.2 (#1525)
• fix(deps): update go dependencies (#1489)
• fix: correct PEM header for ECDSA private keys (#1498)
• fix(deps): update rust dependencies (#1490)
• fix(deps): lock file maintenance rust dependencies (#1464)
• fix(deps): update go dependencies to v1.40.0 (#1463)

🧰 Maintenance

• build: v1.33.0-rc3 release (#1553)
• chore(deps): update aws-lc-sys (#1555)
• build: v1.33.0-rc2 release (#1546)
• chore!: Don't install wgpolicyk8s reports by default (#1548)
• chore: rename allowInsideKubewardenNamespace spec field. (#1544)
• build(deps): lock file maintenance (#1507)
• build: v1.33.0-rc1 release (#1531)
• chore(deps): update rust dependencies (#1505)
• fix(deps): update go dependencies to v0.35.2 (#1525)
• chore(deps): update github actions (#1526)
• chore(policy-evaluator)!: removes deprecated "kubernetes" wapc bindind. (#1519)
• chore(deps): update wasmtime (#1514)
• chore(deps): update github actions (#1504)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.146.1 (#1506)
• chore: refactor documentation and remove files (#1502)
• chore(deps): Update go to 1.26 (#1491)
• fix(deps): update go dependencies (#1489)
• chore(deps): Update Helm chart dependencies (#1496)
• build(deps): lock file maintenance (#1494)
• fix(deps): update rust dependencies (#1490)
• chore(ci): migrate kwctl sigstore e2e tests to monorepo CI (#1475)
• chore: remove .github directories from crates (#1473)
• chore: Add all GH issue templates from org (#1472)
• fix(deps): lock file maintenance rust dependencies (#1464)
• chore: Add GH issue template for release (#1471)
• fix(deps): update go dependencies to v1.40.0 (#1463)