RuntimeEnforcer v0.10.1

• docs automation (#917)
• feat(ci): notify helm-charts repo when the chart version changes (#918)
• chore: helm chart 0.1.12 release (#916)
• docs: update release template (#915)

RuntimeEnforcer v0.10.0

• contributing (#908)
• chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.0 in /.github/actions/container-build (#910)
• chore(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0 in /.github/actions/container-build (#912)
• chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 in /.github/actions/container-build (#911)
• chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.0 in /.github/actions/merge-multiarch (#913)
• chore(deps): update golang.org/x/mod (#909)
• kubewarden cleanups (#905)
• chore(deps-dev): bump the commitlint group with 2 updates (#907)
• zizmor fixes (#906)
• chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 (#903)
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.0 to 0.25.1 in the kubernetes group (#904)
• chore(deps): bump updatecli/updatecli-action from 3.6.0 to 3.7.0 (#902)
• fix: update names (#901)
• fix: crd docs Makefile generated filename mismatch (#900)
• deps(otel): update otel-collector-contrib to 0.161.0 (#899)
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 (#897)
• chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#896)
• chore: update issue template (#893)
• chore(helm): drop the in-repo chart-releaser (#890)
• chore(deps): bump sigs.k8s.io/controller-runtime from 0.24.1 to 0.25.0 in the kubernetes group (#892)
• chore: sync codecov.yaml (#891)
• chore: Configure Renovate - autoclosed (#870)
• chore: introduce release drafter (#883)
• chore(deps): bump github.com/containerd/nri from 0.12.2 to 0.12.3 (#888)
• fix: sync codecov token with other projs (#887)
• chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (#884)
• chore(deps): bump golang.org/x/time from 0.15.0 to 0.16.0 (#885)
• chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 (#886)
• fix(updatecli): use app_id instead of GITHUB tokens (#882)
• chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 in /.github/actions/container-build (#880)
• fix: codecov config to comply with kubewarden (#875)
• chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#879)
• fix: redirect project to kubewarden one (#878)
• fix: remove crd category (#877)
• chore(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 (#872)
• chore: rename module, imports, CRD and API groups to kubewarden (#873)
• chore(deps): bump the kubernetes group with 3 updates (#867)
• deps(otel): update otel-collector-contrib to 0.160.0 (#866)
• deps(go): update Go to 1.27.1 version (#855)
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.21.0 to 0.22.0 (#859)
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.45.0 to 1.46.0 (#858)
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.45.0 to 1.46.0 (#861)
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.21.0 to 0.22.0 (#857)
• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#860)
• chore(ci): bump govulncheck from v1.1.4 to v1.7.0 (#852)
• chore(deps): bump k8s.io/kubectl from 0.36.3 to 0.36.4 (#851)
• chore(deps): bump the kubernetes group with 4 updates (#849)
• chore: update pre-commit-config.yaml (#848)
• chore: helm chart 0.1.11 release (#846)

RuntimeEnforcer v0.9.0

What's Changed

• chore: helm chart 0.1.10 release by @github-actions[bot] in #798
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 in /.github/actions/attestation by @dependabot[bot] in #799
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 in /.github/actions/container-build by @dependabot[bot] in #800
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 in /.github/actions/merge-multiarch by @dependabot[bot] in #801
• refactor: add the mode to the kubectl plugin proposal promote command by @andreagit97 in #802
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 in /.github/actions/container-build by @dependabot[bot] in #806
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 in /.github/actions/attestation by @dependabot[bot] in #804
• deps(otel): update otel-collector-contrib to 0.158.0 by @github-actions[bot] in #803
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #805
• chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #809
• refactor: return nil in case of deleted policy during updates by @andreagit97 in #807
• refactor: add a CEL filter for proposal validating webhook by @kyledong-suse in #808
• chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by @dependabot[bot] in #810
• chore(deps): bump go.opentelemetry.io/otel/metric from 1.44.0 to 1.45.0 by @dependabot[bot] in #819
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.44.0 to 1.45.0 by @dependabot[bot] in #818
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.44.0 to 1.45.0 by @dependabot[bot] in #813
• feat(api): track when nodes entered their current policy status by @dottorblaster in #823
• deps(go): update Go to 1.26.6 version by @github-actions[bot] in #824
• chore: update pre-commit-config.yaml by @github-actions[bot] in #826
• chore(deps): bump updatecli/updatecli-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #825
• refactor(helm): always deploy ValidatingAdmissionPolicy by @kyledong-suse in #827
• deps(otel): update otel-collector-contrib to 0.159.0 by @github-actions[bot] in #828
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 by @dependabot[bot] in #831
• chore(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 by @dependabot[bot] in #829
• chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #830
• feat(api): track per-record occurrences and first-observed timestamp by @dottorblaster in #832
• fix: build after otel/log v0.21.0 breaking change by @dottorblaster in #834
• chore: update pre-commit-config.yaml by @github-actions[bot] in #836
• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #839
• chore: update pre-commit-config.yaml by @github-actions[bot] in #841
• chore(deps): bump updatecli/updatecli-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #838
• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in /.github/actions/container-build by @dependabot[bot] in #840
• chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #842
• chore(deps): bump github.com/containerd/nri from 0.12.1 to 0.12.2 by @dependabot[bot] in #844
• chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 by @dependabot[bot] in #843
• deps(go): update Go to 1.27.0 version by @github-actions[bot] in #835

Full Changelog: v0.8.0...v0.9.0

runtime-enforcer-chart-0.1.11

SUSE Security Runtime Enforcer helm chart

RuntimeEnforcer v0.8.0

What's Changed

• chore: helm chart 0.1.9 release by @github-actions[bot] in #704
• docs: Update runtime enforcer release checklist by @andreagit97 in #707
• chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #708
• fix: adjust mutating admission webhook attempt count by @holyspectral in #709
• chore(deps): bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in #710
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 by @dependabot[bot] in #712
• chore(deps): bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #713
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #711
• chore(deps): bump github.com/onsi/gomega from 1.42.0 to 1.42.1 by @dependabot[bot] in #715
• test(e2e): replace E2E_SKIP_DEPENDENCIES with declarative E2E_DEPENDENCIES by @dottorblaster in #714
• feat: add violation IDs and identify violations by @dottorblaster in #716
• chore(deps): bump github.com/cilium/ebpf from 0.21.0 to 0.22.0 by @dependabot[bot] in #720
• refactor: cleanup WPP reconciler by @andreagit97 in #721
• refactor: rename policy labels by @andreagit97 in #722
• refactor: use t.Output() method in test logger by @andreagit97 in #723
• feat(api): add clearance of allowlisted violations by @dottorblaster in #717
• deps(otel): update otel-collector-contrib to 0.156.0 by @github-actions[bot] in #724
• chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 in /.github/actions/container-build by @dependabot[bot] in #729
• chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 in /.github/actions/container-build by @dependabot[bot] in #728
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #727
• deps(go): update Go to 1.26.5 version by @github-actions[bot] in #726
• feat: acknowledge violations via policy annotations by @holyspectral in #719
• refactor(controller): pass WorkloadPolicyStatusSyncConfig directly to SetupControllers by @dottorblaster in #730
• refactor: rework WP status management [1/n] by @andreagit97 in #731
• chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #735
• chore(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 in /.github/actions/container-build by @dependabot[bot] in #742
• chore(deps): bump docker/login-action from 4.2.0 to 4.3.0 in /.github/actions/container-build by @dependabot[bot] in #741
• refactor: rework WP status management [2/n] by @andreagit97 in #732
• chore(deps): bump docker/login-action from 4.2.0 to 4.3.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #740
• chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 in /.github/actions/container-build by @dependabot[bot] in #739
• refactor: rework WP status management [3/n] by @andreagit97 in #743
• chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #738
• chore(deps): bump docker/login-action from 4.2.0 to 4.3.0 in /.github/actions/attestation by @dependabot[bot] in #736
• chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #737
• chore(deps): bump docker/login-action from 4.3.0 to 4.4.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #747
• chore(deps): bump docker/login-action from 4.3.0 to 4.4.0 in /.github/actions/container-build by @dependabot[bot] in #748
• test(helm): cover otel configuration by @holyspectral in #733
• chore(deps): bump docker/login-action from 4.3.0 to 4.4.0 in /.github/actions/attestation by @dependabot[bot] in #746
• refactor: rework WP status management [4/n] by @andreagit97 in #745
• refactor: rework WP status management [5/n] by @andreagit97 in #749
• feat: show violationCount and activeViolationCount in kubectl get by @holyspectral in #750
• feat: add go benchmarks for NRI callbacks by @kyledong-suse in #718
• fix: prevent eBPF cgroup tracker map exhaustion in NRI benchmarks by @dottorblaster in #753
• feat(kubectl-plugin): add policy ack subcommand by @kyledong-suse in #734
• chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.0 to 6.4.1 by @dependabot[bot] in #752
• refactor: package name and couple of helper functions by @kyledong-suse in #754
• chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.1 to 6.4.2 by @dependabot[bot] in #755
• refactor(ci): only fail NRI benchmarks when slower than baseline by @kyledong-suse in #756
• chore(deps): bump updatecli/updatecli-action from 3.3.0 to 3.4.0 by @dependabot[bot] in #761
• docs: use security.rancher.io/promote where needed by @andreagit97 in #763
• chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @dependabot[bot] in #767
• chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #768
• chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #769
• refactor: raise NRI RemoveContainer benchmark baseline by @kyledong-suse in #771
• deps(otel): update otel-collector-contrib to 0.157.0 by @github-actions[bot] in #770
• feat(metrics): export runtime_enforcer_active_violations gauge by @kyledong-suse in #757
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #772
• refactor: remove a custom helper by @andreagit97 in #773
• refactor: format interval on stdout by @andreagit97 in #774
• build(deps): bump golang.org/x/text to v0.39.0 by @dottorblaster in #777
• chore(deps): bump github.com/google/cel-go from 0.26.0 to 0.29.0 by @dependabot[bot] in #778
• chore(deps): bump github.com/containerd/nri from 0.12.0 to 0.12.1 by @dependabot[bot] in #776
• chore(deps): bump github.com/go-logr/logr from 1.4.3 to 1.4.4 by @dependabot[bot] in #780
• chore: remove stale docs, point to the new one by @dottorblaster in #782
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.0 in /.github/actions/container-build by @dependabot[bot] in #790
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #786
• chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 by @dependabot[bot] in #784
• chore(deps): bump docker/login-acti...

runtime-enforcer-chart-0.1.10

SUSE Security Runtime Enforcer helm chart

RuntimeEnforcer v0.7.0

What's Changed

• chore: helm chart 0.1.8 release by @github-actions[bot] in #631
• chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @dependabot[bot] in #633
• test(e2e): switch from Ubuntu to openSUSE BCI images by @dottorblaster in #611
• fix(ci): install linters before running pre-commit run by @holyspectral in #638
• chore(deps): bump the kubernetes group across 1 directory with 5 updates by @dependabot[bot] in #636
• chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 by @dependabot[bot] in #641
• refactor: pin bci-ci image and increase image pull timeout by @kyledong-suse in #645
• deps(otel): update otel-collector-contrib to 0.152.1 by @github-actions[bot] in #639
• chore(deps): bump k8s.io/cli-runtime from 0.36.0 to 0.36.1 by @dependabot[bot] in #635
• chore(deps): bump k8s.io/kubectl from 0.36.0 to 0.36.1 by @dependabot[bot] in #634
• chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in #646
• build(deps): bump golang.org/x/net to 0.55.0 by @dottorblaster in #650
• chore: update pre-commit-config.yaml by @github-actions[bot] in #651
• chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 by @dependabot[bot] in #649
• chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0 by @dependabot[bot] in #648
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 by @dependabot[bot] in #647
• chore(deps): bump updatecli/updatecli-action from 3.1.3 to 3.2.0 by @dependabot[bot] in #644
• test: detect excessive error logs by @kyledong-suse in #624
• deps(otel): update otel-collector-contrib to 0.153.0 by @github-actions[bot] in #652
• chore(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 in /.github/actions/container-build by @dependabot[bot] in #653
• chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 in /.github/actions/attestation by @dependabot[bot] in #657
• chore(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 in /.github/actions/container-build by @dependabot[bot] in #659
• chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #656
• chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 in /.github/actions/container-build by @dependabot[bot] in #654
• chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 in /.github/actions/container-build by @dependabot[bot] in #658
• chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #655
• chore: export policy mode by @holyspectral in #660
• chore: do not publish helm chart as the latest release by @holyspectral in #662
• deps(go): update Go to 1.26.4 version by @github-actions[bot] in #664
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.19.0 to 0.20.0 by @dependabot[bot] in #668
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.19.0 to 0.20.0 by @dependabot[bot] in #669
• chore(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 in /.github/actions/container-build by @dependabot[bot] in #670
• chore: rename ubuntu identifiers to opensuse across tests and docs by @dottorblaster in #665
• fix: switch to v6.12.92 for bpfvalidator checks since v6.12.78 gives 404 by @dottorblaster in #673
• chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #675
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #674
• deps(otel): update otel-collector-contrib to 0.154.0 by @github-actions[bot] in #676
• chore(deps): bump updatecli/updatecli-action from 3.2.0 to 3.3.0 by @dependabot[bot] in #677
• chore(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 by @dependabot[bot] in #679
• chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #681
• docs: add troubleshooting guide for WorkloadPolicy status failures by @dottorblaster in #680
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 by @dependabot[bot] in #683
• chore: update pre-commit-config.yaml by @github-actions[bot] in #684
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 by @dependabot[bot] in #689
• chore(deps): bump k8s.io/kubectl from 0.36.1 to 0.36.2 by @dependabot[bot] in #687
• chore(deps): bump github.com/onsi/gomega from 1.41.0 to 1.42.0 by @dependabot[bot] in #688
• chore(deps): bump k8s.io/code-generator from 0.36.1 to 0.36.2 in the kubernetes group across 1 directory by @dependabot[bot] in #690
• test: add new e2e test cases for kubectl plugin by @venkateshjayagopal in #671
• docs(rfc): violation liveness and resolution tracking by @dottorblaster in #678
• feat(agent): strip WorkloadPolicy inside of cache by @flavio in #691
• chore(build): set helm.sh/resource-policy via kubebuilder marker by @dottorblaster in #692
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #699
• deps(otel): update otel-collector-contrib to 0.155.0 by @github-actions[bot] in #700
• feat(helm): allow name and fullname overrides by @flavio in #701
• feat(helm): make imagePullSecrets more user friendly by @flavio in #702

Full Changelog: v0.6.0...v0.7.0

runtime-enforcer-chart-0.1.9

SUSE Security Runtime Enforcer helm chart

RuntimeEnforcer v0.6.0

What's Changed

• chore: pin commitlint version by @holyspectral in #493
• chore: update Helm chart version to 0.1.6 by @andreagit97 in #494
• chore: update github actions by @holyspectral in #489
• feat: cumulative violation count to WorkloadPolicy status by @kyledong-suse in #484
• chore: bump chart version again by @holyspectral in #508
• docs: list already existing documentation inside the README by @dottorblaster in #492
• chore(deps): bump docker/login-action from 3.6.0 to 4.0.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #497
• chore(deps): bump docker/login-action from 3.6.0 to 4.0.0 in /.github/actions/attestation by @dependabot[bot] in #498
• chore(deps): bump actions/download-artifact from 6.0.0 to 8.0.1 in /.github/actions/attestation by @dependabot[bot] in #499
• chore(deps): bump docker/metadata-action from 5.9.0 to 6.0.0 in /.github/actions/container-build by @dependabot[bot] in #500
• chore(deps): bump actions/download-artifact from 6.0.0 to 8.0.1 in /.github/actions/merge-multiarch by @dependabot[bot] in #502
• chore(deps): bump docker/setup-buildx-action from 3.11.1 to 4.0.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #501
• chore(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 in /.github/actions/attestation by @dependabot[bot] in #503
• chore(deps): bump docker/build-push-action from 6.18.0 to 7.0.0 in /.github/actions/container-build by @dependabot[bot] in #504
• chore(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 in /.github/actions/container-build by @dependabot[bot] in #506
• chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 in /.github/actions/container-build by @dependabot[bot] in #507
• chore(deps): bump docker/login-action from 3.6.0 to 4.0.0 in /.github/actions/container-build by @dependabot[bot] in #505
• deps(otel): update otel-collector-contrib to 0.149.0 by @github-actions[bot] in #512
• chore(deps): bump docker/setup-buildx-action from 3.11.1 to 4.0.0 in /.github/actions/container-build by @dependabot[bot] in #513
• refactor: add policy name to NRI logs by @andreagit97 in #515
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 in /.github/actions/attestation by @dependabot[bot] in #519
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 in /.github/actions/container-build by @dependabot[bot] in #520
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 in /.github/actions/merge-multiarch by @dependabot[bot] in #521
• ci: add govulncheck GHA by @flavio in #518
• feat: support configurable log level in controller by @holyspectral in #517
• chore: rename Active status to Ready for WorkloadPolicy by @dottorblaster in #522
• chore: update pre-commit-config.yaml by @github-actions[bot] in #524
• chore: update kubectl plugin version to v0.5.0 in README by @holyspectral in #523
• fix: first round of fixes for zizmor issues by @dottorblaster in #525
• deps(go): update Go to 1.26.2 version by @github-actions[bot] in #527
• ci: add checkout step to govulncheck action by @dottorblaster in #529
• docs(rfc): runtime enforcer versioning strategy by @kyledong-suse in #516
• fix: add debugger dockerfile to updatecli setup for go bumps by @dottorblaster in #528
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.18.0 to 0.19.0 by @dependabot[bot] in #531
• docs: extend kubectl plugin docs with cobra's doc generator by @kyledong-suse in #526
• chore: bump prerelease versions for prerelease by @holyspectral in #510
• chore: update govulncheck by @holyspectral in #530
• chore(deps): bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #533
• chore(deps): bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #532
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 in /.github/actions/container-build by @dependabot[bot] in #536
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 in /.github/actions/merge-multiarch by @dependabot[bot] in #537
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 in /.github/actions/attestation by @dependabot[bot] in #538
• fix: add validation for allow list items by @holyspectral in #539
• chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.18.0 to 0.19.0 by @dependabot[bot] in #540
• ci: fix zizmor issues for attestation action by @dottorblaster in #534
• ci: fix CI workflow's zizmor issues by @dottorblaster in #541
• ci: fix zizmor issues on merge-multiarch github action by @dottorblaster in #542
• deps(otel): update otel-collector-contrib to 0.150.1 by @github-actions[bot] in #544
• ci: fix bpf_test workflow permissions by @dottorblaster in #543
• ci: fix zizmor on bpfvalidator by @dottorblaster in #545
• ci: fix zizmor's finding in test-e2e workflow by @dottorblaster in #546
• chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in #551
• chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 in /.github/actions/container-build by @dependabot[bot] in #552
• fix: increase memory resource limit by @holyspectral in #554
• chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 by @dependabot[bot] in #556
• test: adjust test resource timeout by @holyspectral in #555
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #557
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in /.github/actions/attestation by @dependabot[bot] in #559
• chore(deps): bump updatecli/updatecli-action from 3.0.0 to 3.1.0 by @dependabot[bot] in #558
• feat(debugger): improve debugger logs by @andreagit97 in #553
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in /.github/actions/container-build by @dependabot[bot] in #560
• refactor: small improvements to logs and tests by @andreagit97 in #561
• chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #564
• chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #565
• feat: adding support for nodeSelector with runtime-enforcer debugger deployment by @venkateshjayagopal in #562
• ci: zizmor final round fixes for workflows and attestation action by @dottorblaster in #547
• refa...

runtime-enforcer-chart-0.1.8

SUSE Security Runtime Enforcer helm chart