Release v6.3.0-rc.1

What's Changed

• feat: upgrade Keycloak to recent release and deprovision operator by @merll in #2078
• chore: set versions to main by @merll in #2127
• fix: pre-upgrade script, username, and installation order for Keycloak by @merll in #2128
• chore(deps): update dependencies, replace ts-node with tsx, add new eslint file by @CasLubbers in #2125
• fix: include ingress-nginx apps in values by @CasLubbers in #2132
• feat: upgrade Gitea to recent release by @merll in #2085
• chore(deps): bump actions/checkout from 3 to 4 by @dependabot[bot] in #2122
• chore: add code owners by @j-zimnowoda in #2141
• chore: update the displayed versions by @j-zimnowoda in #2152
• fix: quote sensitive values in Helm templates by @ferruhcihan in #2150
• feat: compatibility k8s version v1.33 by @CasLubbers in #2107
• chore: Helmfile v1 compatibility [TOOLS][MINOR] by @merll in #2136
• fix: set default k8s version 1.32 by @CasLubbers in #2156
• fix: small fixes in go templates by @Ani1357 in #2157
• fix: added v1.33 to the supportedK8sVersions.json file by @Ani1357 in #2159
• fix: annotate Gitea volume by @merll in #2158
• ci: install Cloud Firewall Controller for LKE cluster by @merll in #2137
• fix: team grafana password by @j-zimnowoda in #2168
• feat: replace clusterrole for secrets with namespaced role and removed ingress update clusterrole by @CasLubbers in #2163
• chore(chart-deps): update ingress-nginx to version 4.11.6 by @svcAPLBot in #2165
• feat: add apl-operator by @CasLubbers in #2151
• fix: actually check for difference between files by @ElderMatt in #2164
• ci: read gitea-credentials from cluster by @j-zimnowoda in #2171
• chore: upgrade Istio and deprovision operator by @merll in #2155
• ci: restart dev apl-operator after main branch update by @merll in #2178
• fix: restore istiod configuration by @j-zimnowoda in #2177
• chore: v4.6.0 changelog and package*.json update [ci skip] by @Ani1357 in #2182
• ci: remove pre-commit hook by @j-zimnowoda in #2186
• fix: adjust Gitea backup service account by @merll in #2187
• chore: Upgrade Keycloak to latest release by @merll in #2174
• chore: Upgrade CloudnativePG Operator by @merll in #2183
• chore(chart-deps): upgrade argocd to v3.0.3 by @Ani1357 in #2175
• fix: only run coverage report on changes in src by @CasLubbers in #2202
• fix: use single-instance cache for Gitea by @merll in #2208
• chore: added .editorconfig by @merll in #2209
• fix: sealed secrets sample file by @ferruhcihan in #2201
• feat: add post-install cleanup job by @CasLubbers in #2207
• chore: follow db default version of platform by @merll in #2197
• feat: upgrade k8s/client-node and node 22 by @CasLubbers in #2204
• fix: incompatibility between helm and helm-secrets by @CasLubbers in #2215
• fix: set default k8s version to 1.33 for gh workflows by @CasLubbers in #2220
• chore: Upgrade to Istio 1.26.1 by @merll in #2210
• fix: APL-851 knative service url rendering by @Ani1357 in #2214
• fix: barman compatibility with non-aws object storage by @merll in #2221
• feat: add ensure git ops directories to apply-as-apps by @CasLubbers in #2211
• fix: status code evaluation from k8s client by @merll in #2225
• chore(chart-deps): Upgrade Kiali Operator by @merll in #2176
• fix: update apply state by @CasLubbers in #2231
• chore(chart-deps): upgrade Knative Operator to 1.18.1 by @merll in #2181
• feat: APL-672 adding ORCS support by @Ani1357 in #2203
• fix: knative-operator templating by @Ani1357 in #2236
• chore(chart-deps): update harbor to version 1.17.1 by @svcAPLBot in #2190
• fix: create initial credential secret before the message shows up by @ElderMatt in #2226
• fix: removed apl docs links from apps by @dennisvankekem in #2245
• fix: prerelease versions in upgrade check by @merll in #2246
• fix: perform cleanup after installation within job by @merll in #2235
• fix: prerelease versions in upgrade check by @Ani1357 in #2248
• fix: add default values to apl-operator by @CasLubbers in #2251
• fix: suppress output during cleanup of ClusterRoleBinding by @CasLubbers in #2252
• feat: optimize the order of deploying manifests during the initial installation by @CasLubbers in #2250
• test: add useORCS to test fixtures by @ferruhcihan in #2256
• fix: tekton-triggers-webhook image by @Ani1357 in #2258
• fix: update helmfile template version in migration script for apl-operator by @CasLubbers in #2261
• fix: handle error when retrieving git log for empty repository by @CasLubbers in #2257
• feat: add argocd prometheus rules by @j-zimnowoda in #2262
• feat: detect and restart pods with old istio-proxy version by @CasLubbers in #2232
• feat: implement restart functionality for otomi-api deployment by @CasLubbers in #2272
• ci: enhance dependabot configuration for auto-approval and grouping… by @CasLubbers in #2271
• chore(deps): bump the npm-dependencies group with 18 updates by @dependabot[bot] in #2277
• fix: skip runtime upgrades during intial install and pre-release on same patch by @merll in #2278
• fix: create gitea-db-secret before database exists by @CasLubbers in #2279
• fix: update istio proxy image tag for ORCS by @j-zimnowoda in #2281
• fix: restart otomiApi deploy after 4.7.0 upgrade by @CasLubbers in #2280
• ci: update apps.yaml with charts by @merll in #2270
• fix: always deploy tekton and apl related namespaces by @j-zimnowoda in #2284
• ci: oauth2-proxy chart source by @merll in #2285
• chore: post release changelog v4.7.0 by @ferruhcihan in #2289
• feat: add support for deleting Tekton-managed pods and enhance Istio … by @CasLubbers in #2287
• feat: apl-operator clean error messages by @CasLubbers in #2290
• feat: set custom repository and use selectors on argocd applications by @merll in #2286
• fix: specify branch in git pull to ensure correct updates from origin by @CasLubbers in #2301
• ci: workflow_dispatch with useORCS set to true by @j-zimnowoda in #2300
• fix: enhance commit and push operations with quiet mode and error han… by @CasLubbers in #2304
• chore: update readme image by @ferruhcihan in #2302
• fix: upgrade oauth2 proxy to 7.12.18 and fix session interruption by @merll in #2288
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2293
• chore(deps): bump ncipollo/release-action from 1.16.0 to 1.18.0 in the github-actions-dependencies group by @dependabot[bot] in #2294
• chore(deps): bump dotenv from 16.5.0 to 17.0.0 by @dependabot[bot] in #2296
• chore(deps): bump @apidevtools/json-schema-ref-parser from 13.0.1 to 14.0.2 by @dependabot[bot] in #2295
• fix: reattempt on first installation failure by @merll in #2310
• fix: typo for kyverno prometheus label by @CasLubbers in #2309
• feat: nickname as username for gitea by @ElderMatt in #2303
• ci: pin commit hash in ArgoCD target revision by @merll in #2307
• refactor: remove deprecated otomi-pipelines references by @CasLubbers in #2312
• chore(deps): bump the npm-dependencies group with 12 updates by @dependabot[bot] in #2318
• chore: upgrade kube-prometheus-stack by @merll in #2313
• fix: set database connections to 32 for Gitea, Harbor and KC by @CasLubbers in #2311
• feat: updating tekton registry by @Ani1357 in #2339
• chore(deps): bump jest and @types/jest by @dependabot[bot] in #2297
• feat: adding KnativeServing CR ORCS support by @Ani1357 in #2260
• ci: add CloudFirewall rule for prometheus-node-exporter by @merll in #2324
• fix: remove version tag of Keycloak by @merll in #2319
• chore(deps): bump the npm-dependencies group with 9 updates by @dependabot[bot] in #2343
• chore: update helm version to 3.18.4 by @ferruhcihan in #2338
• fix: velero linode plugin image by @merll in #2345
• feat: add Prometheus monitoring configuration for database resources by @CasLubbers in #2317
• fix: update home url for the apl chart by @unn in #2347
• fix: migrate CloudnativePG backup to plugin for improved resource control by @merll in #2299
• feat: add kubeflow pipelines to core by @srodenhuis in #2198
• feat: load prometheus rules for cnpg by @j-zimnowoda in #2353
• revert: adding KnativeServing CR ORCS support (#2260)" by @j-zimnowoda in #2352
• feat: skip apl-operator application in development mode by @CasLubbers in #2340
• chore: reset versions to main by @merll in #2363
• chore(deps): update apl-tools version in dockerfile by @ferruhcihan in #2367
• feat: remove invalid logic regarding namespace creation by @j-zimnowoda in #2362
• feat: adding knative ORCS support by @Ani1357 in #2357
• feat: enabling ORCS by default by @Ani1357 in #2337
• chore(chart-deps): update sealed-secrets to version 2.17.3 by @svcAPLBot in #2234
• chore: upgrade metrics-server to 0.8.0 by @merll in #2361
• feat: knativeserving cr upgrade by @Ani1357 in #2368
• ci: adding ORCS support to the apl installer job and dev github action by @Ani1357 in #2379
• fix: net-istio-webhook image override by @Ani1357 in #2382
• feat: reverting ORCS migration for upgraded clusters by @Ani1357 in #2381
• feat: making linode provider an ORCS dependency by @Ani1357 in #2380
• feat: adding harbor ORCS support by @Ani1357 in #2385
• feat: adding ORCS support for tekton tasks by @Ani1357 in #2387
• fix: rendering keycloak release by @j-zimnowoda in #2390
• feat: default platform storage class by @ferruhcihan in #2376
• feat: ignoring metadata.generation for ValidatingWebhookConfiguration… by @Ani1357 in #2395
• feat: add ORCS monitoring by @CasLubbers in #2308
• fix: prometheus-operator storageclass by @Ani1357 in #2410
• feat: removed unused policy-reports dashboards and whitelisted registries by @Ani1357 in #2409
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2369
• feat: add chart-deps label to newly created pull requests by @CasLubbers in #2412
• chore: release version updates by @Ani1357 in #2413
• chore(chart-deps): update policy-reporter to version 3.3.2 by @svcAPLBot in #2408
• feat: add deprecated labels for Jaeger, Falco, Httpbin and Kiali apps by @ferruhcihan in #2421
• feat: adding aplCharts version support by @Ani1357 in #2401
• fix: smoke tests should fail on template rendering failure by @ElderMatt in #2426
• feat: enable prometheus by default by @ferruhcihan in #2425
• feat: added ORCS support for external-dns by @Ani1357 in #2386
• feat: cleanup /tmp/otomi directory before applying apps by @CasLubbers in #2422
• fix: replace fs-extra with fs by @CasLubbers in #2427
• ci: always set PR to draft, mention pending version update by @merll in #2439
• fix: deploying apl by @CasLubbers in #2442
• fix: disabling immediate cnpg backups by @Ani1357 in #2443
• feat: add network policies chart by @CasLubbers in #2434
• chore: remove project schema by @ferruhcihan in #2441
• chore(chart-deps): update cert-manager to version v1.18.2 by @svcAPLBot in #2305
• feat: adding ORCS support for kubeflow by @Ani1357 in #2420
• chore(chart-deps): update istiod to version 1.26.3 by @svcAPLBot in #2398
• fix: handle merge conflicts in apl-operator by @CasLubbers in #2452
• fix: push apl-charts repository with tag by @ferruhcihan in #2455
• feat: optionally use cnpg backup plugin by @merll in #2451
• chore: update version for runtime upgrade by @merll in #2463
• chore(chart-deps): update policy-reporter to version 3.4.0 by @svcAPLBot in #2462
• chore: upgrade Gitea by @merll in #2454
• chore(deps): bump the npm-dependencies group across 1 directory with 12 updates by @dependabot[bot] in #2444
• chore(chart-deps): update trivy-operator to version 0.30.0 by @svcAPLBot in #2433
• chore(chart-deps): update kyverno to version 3.5.0 by @svcAPLBot in #2404
• chore(deps): bump ignore-walk from 7.0.0 to 8.0.0 by @dependabot[bot] in #2415
• chore: release version updates by @Ani1357 in #2424
• feat: add support for Linode Kubernetes Engine tier configuration by @CasLubbers in #2464
• chore(chart-deps): update argo-cd to version 8.3.0 by @svcAPLBot in #2458
• chore(chart-deps): update keycloak to version 24.9.0 by @svcAPLBot in #2417
• fix: re-creation of team files by @ferruhcihan in #2466
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2468
• chore(deps): bump amannn/action-semantic-pull-request from 5 to 6 by @dependabot[bot] in #2467
• chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in #2469
• ci: fix variable name in upgrade script by @merll in #2471
• chore(chart-deps): update harbor to version 1.17.2 by @svcAPLBot in #2428
• ci: fix apps side effect by @merll in #2480
• ci: fix post-upgrade function by @merll in #2482
• chore(chart-deps): update policy-reporter to version 3.4.2 by @svcAPLBot in #2479
• chore(deps): bump ncipollo/release-action from 1.18.0 to 1.19.0 in the github-actions-dependencies group by @dependabot[bot] in #2488
• chore(deps): bump the npm-dependencies group with 4 updates by @dependabot[bot] in #2487
• feat: add install and remove it from apply by @CasLubbers in #2470
• chore: release version updates by @Ani1357 in #2486
• feat: add network policies for otomi-api by @CasLubbers in #2490
• feat: add Wiz setup and configuration for Linode Kubernetes Integration by @CasLubbers in #2465
• fix: unambiguously refer to ArgoCD apps by @merll in #2493
• feat: add .editorconfig to values repository by @merll in #2492
• fix: do setup wiz after checkout by @CasLubbers in #2504
• chore(chart-deps): update sealed-secrets to version 2.17.4 by @svcAPLBot in #2476
• chore(chart-deps): update ingress-nginx to version 4.13.1 by @svcAPLBot in #2453
• chore(chart-deps): update external-dns to version 8.9.2 by @svcAPLBot in #2327
• chore(chart-deps): update tekton-pipeline to version 1.3.1 by @svcAPLBot in #2477
• chore(chart-deps): update gitea to version 12.2.0 by @svcAPLBot in #2473
• fix: update apl-operator before other upgrades by @merll in #2500
• chore(chart-deps): update kyverno to version 3.5.1 by @svcAPLBot in #2483
• chore(chart-deps): update kube-prometheus-stack to version 75.18.1 by @svcAPLBot in #2435
• fix(job): remove default value for useORCS in job.yaml by @CasLubbers in #2513
• chore(chart-deps): update cloudnative-pg to version 0.26.0 by @svcAPLBot in #2456
• feat: migrate gitea dependencies from bitnami by @Ani1357 in #2527
• feat: use native metrics-server chart by @CasLubbers in #2514
• fix: kubeflow-pipelines compatability with MinIO by @CasLubbers in #2528
• fix: metrics-server image reference for orcs by @merll in #2537
• chore: v4.10.1 post release updates by @Ani1357 in #2533
• feat: use keycloakx chart instead of bitnami by @ElderMatt in #2521
• chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #2508
• chore(deps): bump ncipollo/release-action from 1.19.0 to 1.20.0 in the github-actions-dependencies group by @dependabot[bot] in #2507
• chore(deps): bump the npm-dependencies group across 1 directory with 17 updates by @dependabot[bot] in #2540
• ci: PR autoupdate to use GH API and pass on errors by @merll in #2551
• chore: v4.11.0 post release updates by @Ani1357 in #2542
• fix: skip check on operator app sync by @merll in #2553
• feat: add databases and knowledgebases to gitops directories by @CasLubbers in #2547
• feat: add kserve to core by @srodenhuis in #2549
• fix: versions.yaml to main by @CasLubbers in #2562
• fix: orcs image reference for tekton-pipelines by @merll in #2563
• feat: adding k8s v1.34 support by @Ani1357 in #2564
• fix: aiEnabled default false and ensure aiGitOpsDirs by @CasLubbers in #2566
• fix: storage configuration for pipeline output artifacts by @merll in #2567
• fix: update ingress in pre-upgrade to avoid upgrade deadlock by @merll in #2552
• fix: team namespace not being created by @ElderMatt in #2561
• ci: fix integration tests with ORCS by @merll in #2569
• chore(chart-deps): update argo-cd to version 8.5.8 by @svcAPLBot in #2557
• chore(chart-deps): update ingress-nginx to version 4.13.3 by @svcAPLBot in #2558
• chore(chart-deps): update sealed-secrets to version 2.17.7 by @svcAPLBot in #2526
• feat: use native minio helm chart instead of bitnami by @ElderMatt in #2541
• fix: check template output for apply by @ElderMatt in #2585
• ci: move commit ref to variable to force quoting by @merll in #2583
• ci: fixes for chart autoupdater and chart index by @merll in #2588
• ci: fix chart download dir and semver check by @merll in #2593
• chore(chart-deps): update cert-manager to version v1.19.0 by @svcAPLBot in #2577
• fix: installation reattempts and race condition with operator by @merll in #2571
• fix: include region in KFP endpoint by @merll in #2599
• feat: upgrade oauth2-proxy chart and move away from bitnami redis dependency by @Ani1357 in #2582
• fix: removing .github dir from apl-charts by @Ani1357 in #2605
• fix: tekton-tasks git-clone basic auth by @ferruhcihan in #2606
• fix: knative local gateway label selector by @j-zimnowoda in #2607
• feat: using Thanos image from quay registry instead of bitnami by @Ani1357 in #2568
• feat: updated external-dns chart to use official chart by @Ani1357 in #2560
• ci: using k8s v1.34 by default by @Ani1357 in #2616
• fix: team-ns builds docker.yaml by @ferruhcihan in #2617
• feat: update rabbitmq bitnami chart to legacy by @ElderMatt in #2604
• ci: do not deploy httpbin by @j-zimnowoda in #2622
• ci: add cnpg barman plugin chart by @merll in #2623
• ci: adjust chart versions by @merll in #2624
• fix: only update deployment state on completion by @merll in #2618
• ci: align chart index version with used chart by @merll in #2629
• feat: update PostgreSQL to new base images by @merll in #2609
• fix: deploy namespaces during upgrade by @merll in #2626
• chore(deps): bump @commitlint/cli from 19.8.1 to 20.0.0 by @dependabot[bot] in #2556
• chore(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in #2611
• chore(chart-deps): update cert-manager to version v1.19.1 by @svcAPLBot in #2602
• chore(chart-deps): update cloudnative-pg to version 0.26.1 by @svcAPLBot in #2620
• chore: update base image and binaries by @merll in #2634
• feat: default disable egress policies for enterprise clusters by @Ani1357 in #2619
• fix: embed all required changes in tty image by @merll in #2639
• fix: launch bash on tty startup by @merll in #2640
• chore: use latest patch and clear apt cache by @merll in #2641
• chore(chart-deps): update harbor to version 1.18.0 by @svcAPLBot in #2534
• chore(chart-deps): update loki-distributed to version 0.80.5 by @svcAPLBot in #2120
• chore(chart-deps): update promtail to version 6.17.0 by @svcAPLBot in #2194
• chore(chart-deps): update Istio to version 1.27.3 by @merll in #2633
• chore: post release v4.12.0 by @Ani1357 in #2646
• chore(deps): bump the npm-dependencies group with 20 updates by @dependabot[bot] in #2630
• chore: update Core base image by @merll in #2636
• fix: PostgreSQL image upgrade considered for 4.12 release by @merll in #2652
• feat: add Linode Cloud Firewall Controller by @merll in #2643
• fix: quote string to avoid conversion in Loki config by @merll in #2654
• feat: remove httpbin by @CasLubbers in #2647
• chore(chart-deps): update argo-cd to version 8.6.4 by @svcAPLBot in #2608
• chore(chart-deps): update kube-prometheus-stack to version 79.0.1 by @svcAPLBot in #2650
• chore(chart-deps): update oauth2-proxy to version 8.3.2 by @svcAPLBot in #2648
• chore(chart-deps): update kiali-operator to version 2.17.0 by @svcAPLBot in #2591
• feat: check if endpointslice is available for oauth2proxy by @CasLubbers in #2631
• chore(chart-deps): update keycloakx to version 7.1.4 by @svcAPLBot in #2573
• feat: using coredns for lke-e clusters by @Ani1357 in #2635
• chore(chart-deps): update loki-distributed to version 0.80.6 by @svcAPLBot in #2655
• chore(chart-deps): update promtail to version 6.17.1 by @svcAPLBot in #2657
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.4.1 by @svcAPLBot in #2592
• feat: upgrade yargs, uuid and node 24 by @CasLubbers in #2653
• fix: retry local charts repo read by @merll in #2667
• chore(chart-deps): update opentelemetry-operator to version 0.98.0 by @svcAPLBot in #2615
• ci: group PRs for some charts by @merll in #2676
• feat: add collect traces command by @CasLubbers in #2645
• ci: fix static otel crd during chart upgrades by @merll in #2681
• chore(chart-deps): update policy-reporter to version 3.5.0 by @svcAPLBot in #2520
• chore(deps): bump the npm-dependencies group across 1 directory with 13 updates by @dependabot[bot] in #2680
• chore(chart-deps): update kyverno to version 3.5.2 by @svcAPLBot in #2535
• chore(chart-deps): update kiali-operator to version 2.18.0 by @svcAPLBot in #2669
• chore: add recommended vscode pkg by @j-zimnowoda in #2384
• chore(deps): bump @commitlint/config-conventional from 19.8.1 to 20.0.0 by @dependabot[bot] in #2664
• fix: force apply essential manifests on upgrade by @merll in #2682
• chore(chart-deps): update gitea to version 12.4.0 by @svcAPLBot in #2572
• fix: service names in otel crds by @merll in #2690
• fix: updated external-dns deploymentStrategy by @Ani1357 in #2666
• chore(chart-deps): update sealed-secrets to version 2.17.9 by @svcAPLBot in #2694
• ci: add update for multiple apps provided by chart by @merll in #2713
• chore(chart-deps): update oauth2-proxy to version 8.3.3 by @svcAPLBot in #2699
• feat: update default tests/fixtures cluster settings by @ferruhcihan in #2706
• feat: removing kiali by @Ani1357 in #2683
• feat: skip runtime upgrades on initial install by @j-zimnowoda in #2715
• feat: fix team tekton-dashboard by @Ani1357 in #2597
• feat: remove presync and postsync helmfile hooks by @j-zimnowoda in #2712
• feat: removing kured by @Ani1357 in #2695
• chore(chart-deps): update trivy-operator to version 0.31.0 by @svcAPLBot in #2546
• chore(chart-deps): update kube-prometheus-stack to version 79.5.0 by @svcAPLBot in #2716
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.4.2 by @svcAPLBot in #2697
• feat: removing falco by @Ani1357 in #2705
• feat: fetch pending pods correctly by @CasLubbers in #2707
• fix: kfp workflow image by @srodenhuis in #2719
• chore(deps): bump the npm-dependencies group with 2 updates by @dependabot[bot] in #2702
• chore(deps): bump @jest/types from 29.6.3 to 30.2.0 by @dependabot[bot] in #2704
• chore(deps): bump semantic-release from 24.2.9 to 25.0.2 by @dependabot[bot] in #2703
• test: pull from dockerhub by @j-zimnowoda in #2714
• chore(chart-deps): update ingress-nginx to version 4.14.0 by @svcAPLBot in #2668
• feat: upgrade argocd image updater and leverage argocd application sources by @j-zimnowoda in #2642
• chore(chart-deps): update otel-operator to version 0.99.0 by @svcAPLBot in #2693
• chore(chart-deps): update oauth2-proxy to version 8.5.0 by @svcAPLBot in #2725
• chore(chart-deps): update otel-operator to version 0.99.1 by @svcAPLBot in #2728
• chore: remove drone and e2e by @merll in #2717
• feat: cleanup httpbin argocd app after upgrade by @Ani1357 in #2720
• chore(chart-deps): update argocd to version 9.1.3 by @merll in #2722
• feat: remove velero by @ferruhcihan in #2721
• chore(deps): bump linode/apl-tools from v2.10.4 to v2.10.5 in the docker-dependencies group by @dependabot[bot] in #2727
• fix: maintenance by @ferruhcihan in #2726
• chore(chart-deps): update kserve to version v0.16.0 by @svcAPLBot in #2686
• feat: replace install job by apl-operator by @CasLubbers in #2501
• chore: correct product name by @j-zimnowoda in #2737
• docs: updated getting started section and links to documentation by @wildmanonline in #2530
• fix: do not perform runtimeUpgrades if deployingVersion and version are the same by @j-zimnowoda in #2742
• ci: support lke enterprise by @j-zimnowoda in #2752
• feat: delete jaeger by @ElderMatt in #2732
• fix: skip initial values after install and isolate bootstrap errors by @merll in #2753
• chore(chart-deps): update argocd to version 9.1.4 by @svcAPLBot in #2745
• fix: helm operation in progress by @ElderMatt in #2708
• fix: added ArgoCD diff exclusions for creationTimestamp by @merll in #2756
• fix: get console version in gotmpl by @CasLubbers in #2759
• fix: handle upgrade from previous versions by @merll in #2760
• chore: upgrade ArgoCD Image Updater and migrate to upstream chart by @merll in #2734
• feat: deprecate tempo by @ElderMatt in #2740
• docs: adjust product name by @j-zimnowoda in #2738
• chore(chart-deps): update kube-prometheus-stack to version 79.9.0 by @svcAPLBot in #2761
• chore(chart-deps): update argocd to version 9.1.5 by @svcAPLBot in #2763
• chore(chart-deps): update oauth2-proxy to version 8.5.1 by @svcAPLBot in #2735
• chore(chart-deps): update prometheus-msteams to version 1.3.5 by @svcAPLBot in #2762
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.5.0 by @svcAPLBot in #2744
• chore(chart-deps): update policy-reporter to version 3.7.0 by @svcAPLBot in #2746
• chore(chart-deps): update tekton-pipelines to version 1.6.1 by @svcAPLBot in #2688
• chore(deps): bump glob from 11.0.3 to 13.0.0 by @dependabot[bot] in #2749
• chore(deps): bump @eslint/compat from 1.4.1 to 2.0.0 by @dependabot[bot] in #2750
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #2751
• chore(deps): bump the npm-dependencies group across 1 directory with 13 updates by @dependabot[bot] in #2764
• feat: make platform db connection pooling configurable by @merll in #2730
• chore: deprecate thanos by @ElderMatt in #2739
• fix: core tag in api deployment by @merll in #2767
• chore: clean up old Istio Operator chart by @merll in #2662
• ci: update log gathering command for APL operator by @ElderMatt in #2771
• ci: do not install wiz-sensor by @j-zimnowoda in #2772
• chore: upgrade binaries of base image by @merll in #2774
• chore: upgrade Gitea to 1.25.2 by @merll in #2758
• chore(deps): bump linode/apl-tools from v2.10.5 to v2.10.6 in the docker-dependencies group by @dependabot[bot] in #2780
• fix: disabling tekton-pipeline redundant ns creation by @Ani1357 in #2781
• feat: updated helloworld image to point to linode org by @ElderMatt in #2783
• chore(chart-deps): update keycloak to version 7.1.5 by @svcAPLBot in #2754
• chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in #2779
• chore(chart-deps): update cert-manager to version v1.19.2 by @svcAPLBot in #2786
• chore(chart-deps): update ingress-nginx to version 4.14.1 by @svcAPLBot in #2776
• fix: replace hanging kubectl delete command with api call by @CasLubbers in #2785
• fix: only add label for teamresources by @CasLubbers in #2792
• fix: update tekton-pipeline ns labels by @Ani1357 in #2793
• chore: update base image in Dockerfile and workflow by @merll in #2775
• fix: use file selector for avoiding parallel processing by @merll in #2797
• chore: update schema-ref-parser and add it to the transformIgnorePatterns by @CasLubbers in #2789
• fix: set adminUsername to x-secret by @CasLubbers in #2804
• fix: check for migration on every operator cycle by @merll in #2807
• fix: use the values managed file only if workload imageUpdateStrategy is set by @j-zimnowoda in #2806
• chore(chart-deps): update harbor to version 1.18.1 by @svcAPLBot in #2788
• chore(deps): bump the npm-dependencies group with 3 updates by @dependabot[bot] in #2798
• fix: duplicate credentials warning in Argocd by @CasLubbers in #2796
• fix: adding tekton-pipeline labels to match chart-created ns by @Ani1357 in #2801
• revert: encrypt adminUsername (#2804) by @CasLubbers in #2813
• feat: add jwt verification for api by @CasLubbers in #2800
• fix: upgrade script to scale down argocd applicatioset controller by @j-zimnowoda in #2814
• ci: added repository_dispatch trigger by @merll in #2831
• ci: syntax and use workflow_dispatch instead by @merll in #2832
• chore(chart-deps): update argocd to version 9.2.4 by @svcAPLBot in #2827
• feat: deploy secrets as secretRef in chart values by @ElderMatt in #2805
• chore(chart-deps): update cloudnative-pg to version 0.27.0 by @svcAPLBot in #2787
• chore(chart-deps): update istio to version 1.28.2 by @svcAPLBot in #2818
• fix: render list with unique set of source repositories in argocd project by @j-zimnowoda in #2833
• fix: do not install wiz admission controler as it is part of wiz-kube… by @j-zimnowoda in #2838
• chore(chart-deps): update kube-prometheus-stack to version 80.13.3 by @merll in #2843
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.7.0 by @svcAPLBot in #2835
• chore(chart-deps): update prometheus-msteams to version 1.3.6 by @svcAPLBot in #2819
• chore(chart-deps): update external-dns to version 1.20.0 by @svcAPLBot in #2828
• chore(chart-deps): update kube-prometheus-stack to version 80.14.1 by @svcAPLBot in #2845
• feat: replace Promtail with OpenTelemetry collector by @merll in #2784
• chore(chart-deps): update kube-prometheus-stack to version 80.14.3 by @svcAPLBot in #2848
• chore(chart-deps): update argocd to version 9.3.4 by @svcAPLBot in #2847
• chore(deps): bump the npm-dependencies group across 1 directory with 9 updates by @dependabot[bot] in #2837
• chore(chart-deps): update sealed-secrets to version 2.18.0 by @svcAPLBot in #2812
• chore(chart-deps): update kube-prometheus-stack to version 80.14.4 by @svcAPLBot in #2849
• ci: add copilot instructions by @j-zimnowoda in #2846
• chore(chart-deps): update oauth2-proxy to version 10.0.0 by @merll in #2842
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2850
• chore: post release changelog v4.13.0 by @Ani1357 in #2853
• revert: helm chart name by @Ani1357 in #2856
• chore(chart-deps): update oauth2-proxy to version 10.1.0 by @svcAPLBot in #2855
• fix: Harbor DB backup object storage secret refs by @merll in #2857
• chore(deps): bump globals from 16.5.0 to 17.0.0 by @dependabot[bot] in #2852
• ci: update codeowners by @j-zimnowoda in #2859
• chore(chart-deps): update keycloak to version 7.1.6 by @svcAPLBot in #2840
• fix: team workload ineffectively deleted by @ferruhcihan in #2867
• feat: remove tempo app by @j-zimnowoda in #2870
• feat: optimize helm chart values for the argocd sync by @j-zimnowoda in #2863
• chore(chart-deps): update oauth2-proxy to version 10.1.1 by @svcAPLBot in #2866
• chore(chart-deps): update argocd to version 9.3.6 by @svcAPLBot in #2871
• chore(chart-deps): update keycloak to version 7.1.7 by @svcAPLBot in #2858
• chore(chart-deps): update argocd to version 9.3.7 by @svcAPLBot in #2878
• fix: sortUserArraysByName by @j-zimnowoda in #2875
• fix: replace kubectl with k8s client library for argocd apps by @CasLubbers in #2881
• fix: serviceMonitor in Loki values by @merll in #2877
• ci: attach output comparison to automated PRs by @merll in #2880
• ci: condition syntax by @merll in #2887
• ci: missing commit message in event by @merll in #2888
• ci: added PR ref during checkout by @merll in #2889
• ci: fix output evaluation by @merll in #2890
• ci: fix output variable name by @merll in #2891
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.7.1 by @svcAPLBot in #2884
• revert: added PR ref during checkout (#2889) by @merll in #2892
• fix: no active cluster error in local dev environment by @ferruhcihan in #2885
• chore(chart-deps): update gitea to version 12.5.0 by @svcAPLBot in #2865
• chore(chart-deps): update policy-reporter to version 3.7.1 by @svcAPLBot in #2830
• chore(chart-deps): update loki to version 6.51.0 by @svcAPLBot in #2860
• ci: improve readability of chart diff output by @merll in #2894
• chore(chart-deps): update istio to version 1.28.3 by @svcAPLBot in #2854
• chore(chart-deps): update ingress-nginx to version 4.14.2 by @svcAPLBot in #2873
• ci: ensure exact match on helm chart name by @merll in #2895
• feat: run traces command every 5 minutes for 30 minutes by @CasLubbers in #2876
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2868
• fix: set correct version for apl-nodejs-helloworld by @CasLubbers in #2897
• feat: custom kubernetes manifest in the values repo by @merll in #2893
• chore(chart-deps): update harbor to version 1.18.2 by @svcAPLBot in #2872
• feat: adding k8s v1.35 support by @CasLubbers in #2862
• fix: support Loki without object storage by @merll in #2882
• feat: remove thanos by @CasLubbers in #2899
• chore(chart-deps): update cert-manager to version v1.19.3 by @svcAPLBot in #2905
• feat: remove Minio by @CasLubbers in #2903
• chore(chart-deps): update ingress-nginx to version 4.14.3 by @svcAPLBot in #2906
• chore(chart-deps): update oauth2-proxy to version 10.1.2 by @svcAPLBot in #2898
• ci: compare using separate working copies by @merll in #2909
• ci: compose compare pr comment as file by @merll in #2910
• feat: byo catalog by @ferruhcihan in #2901
• chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.4.0 by @svcAPLBot in #2826
• chore(deps): bump helmfile/helmfile-action from 2.1.1 to 2.2.0 in the github-actions-dependencies group by @dependabot[bot] in #2902
• chore(chart-deps): update kube-prometheus-stack to version 81.5.0 by @merll in #2911
• ci: reduce noise of comparison script by @merll in #2915
• chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.5.0 by @svcAPLBot in #2912
• fix: harbor storage credentials by @merll in #2918
• ci: run compare script once PR is ready by @merll in #2922
• chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in #2900
• chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in #2928
• chore(chart-deps): update loki to version 6.52.0 by @svcAPLBot in #2921
• chore(chart-deps): update cloudnative-pg to version 0.27.1 by @svcAPLBot in #2920
• chore(chart-deps): update otel-operator to version 0.105.0 by @svcAPLBot in #2883
• fix: compare timestamps when re-encrypting by @CasLubbers in #2926
• chore(chart-deps): update kube-prometheus-stack to version 81.5.2 by @svcAPLBot in #2931
• fix: adjust exporter name by @merll in #2932
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.8.0 by @svcAPLBot in #2924
• fix: prevent access to internal apl service by @j-zimnowoda in #2933
• fix: reattempt password validity reset on any expiration error by @merll in #2927
• fix: update cert-manager values to use crds by @merll in #2913
• chore(chart-deps): update otel-operator to version 0.105.1 by @svcAPLBot in #2938
• chore(chart-deps): update kube-prometheus-stack to version 81.6.1 by @svcAPLBot in #2936
• chore(chart-deps): update loki to version 6.53.0 by @svcAPLBot in #2937
• fix: buildpacks using ORCS by @Ani1357 in #2935
• chore(chart-deps): update kube-prometheus-stack to version 81.6.2 by @svcAPLBot in #2940
• feat: BYO Git by @CasLubbers in #2914
• fix: rename catalog url to repositoryUrl by @ferruhcihan in #2946
• chore(chart-deps): update kube-prometheus-stack to version 81.6.3 by @svcAPLBot in #2943
• feat: set keycloak login url to otomi realm by @CasLubbers in #2945
• chore(chart-deps): update keycloak to version 7.1.8 by @svcAPLBot in #2939
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2951
• chore(chart-deps): update policy-reporter to version 3.7.2 by @svcAPLBot in #2950
• fix: change pattern for catalog repositoryUrl by @ElderMatt in #2953
• chore(chart-deps): update kube-prometheus-stack to version 81.6.9 by @svcAPLBot in #2948
• fix: dont add error to apl-installation-status cm by @CasLubbers in #2942
• fix: update git-credentials secret name to gitea-credentials in team-ns by @CasLubbers in #2961
• fix: add extraArgs to disable secure metrics in otel-operator by @CasLubbers in #2959
• fix: remove otomi.git required in values-schema by @CasLubbers in #2963
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in #2967
• chore(deps): bump helmfile/helmfile-action from 2.2.0 to 2.3.0 in the github-actions-dependencies group by @dependabot[bot] in #2972
• chore(deps): bump @types/tar from 6.1.13 to 7.0.87 by @dependabot[bot] in #2968
• chore(chart-deps): update argocd to version 9.4.4 by @svcAPLBot in #2966
• chore: post release v4.14.0 by @ferruhcihan in #2980
• chore: v4.14.0 changelog update by @Ani1357 in #2981
• chore(chart-deps): update trivy-operator to version 0.32.0 by @svcAPLBot in #2941
• chore(chart-deps): update sealed-secrets to version 2.18.1 by @svcAPLBot in #2944
• fix: replace non working datasouces in dashboards by @CasLubbers in #2979
• fix: trivy dashboard by @CasLubbers in #2973
• chore(chart-deps): update oauth2-proxy to version 10.1.4 by @svcAPLBot in #2955
• fix: escape single quotes in template string generation by @CasLubbers in #2957
• feat: support subdirectories for byo catalogs by @ElderMatt in #2985
• ci: fix extra dependencies not merged correctly with same version by @merll in #2986
• chore(chart-deps): update istio to version 1.29.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/2954
• chore(chart-deps): update cert-manager to version v1.19.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/2983
• chore(chart-deps): update cloud-firewall to version 0.2.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/2987
• chore(chart-deps): update argocd to version 9.4.5 by @svcAPLBot in https://github.com/linode/apl-core/pull/2990
• feat: add revcovery mode by @j-zimnowoda in https://github.com/linode/apl-core/pull/2974
• feat: support recursive paths for GitOps manifests by @ferruhcihan in https://github.com/linode/apl-core/pull/2999
• feat: shallow clone in argo repo server by @Ani1357 in https://github.com/linode/apl-core/pull/2977
• chore(chart-deps): update argocd to version 9.4.6 by @svcAPLBot in https://github.com/linode/apl-core/pull/2992
• fix: update sealed secret path for charts repo migration by @ferruhcihan in https://github.com/linode/apl-core/pull/3006
• chore(deps): bump the npm-dependencies group with 8 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/2994
• chore(deps): bump @types/supertest from 6.0.3 to 7.2.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/2995
• chore(deps): bump helmfile/helmfile-action from 2.3.0 to 2.3.1 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/2998
• chore(chart-deps): update argocd to version 9.4.7 by @svcAPLBot in https://github.com/linode/apl-core/pull/3007
• feat: added apl-operator livenessProbe by @Ani1357 in https://github.com/linode/apl-core/pull/3000
• fix: add gitea username to env by @CasLubbers in https://github.com/linode/apl-core/pull/3008
• fix: hardcoded main branch in operator by @CasLubbers in https://github.com/linode/apl-core/pull/3009
• feat: added LB annotations to preserve IP prior to the Gateway API upgrade by @Ani1357 in https://github.com/linode/apl-core/pull/2975
• chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3016
• chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3021
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3019
• fix: do not track resources created by TriggerTemplate by @j-zimnowoda in https://github.com/linode/apl-core/pull/3024
• chore(chart-deps): update argocd to version 9.4.9 by @svcAPLBot in https://github.com/linode/apl-core/pull/3025
• chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3023
• fix: argocd grafana dashboard by @j-zimnowoda in https://github.com/linode/apl-core/pull/3011
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3020
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3022
• chore(chart-deps): update policy-reporter to version 3.7.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3013
• feat: add Gateway API CRDs and essential chart by @merll in https://github.com/linode/apl-core/pull/3030
• chore(chart-deps): update keycloak to version 7.1.9 by @svcAPLBot in https://github.com/linode/apl-core/pull/3027
• chore(chart-deps): update istio to version 1.29.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3033
• chore(chart-deps): update argocd to version 9.4.10 by @svcAPLBot in https://github.com/linode/apl-core/pull/3031
• chore(chart-deps): update loki to version 6.54.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3034
• chore(chart-deps): update knative-operator to version v1.21.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/2991
• fix: setting branch in argocd app by @CasLubbers in https://github.com/linode/apl-core/pull/3029
• chore(chart-deps): update sealed-secrets to version 2.18.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/2988
• chore(chart-deps): update tekton-pipelines to version 1.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/2989
• feat: set default 1.35 for deploying apl by @CasLubbers in https://github.com/linode/apl-core/pull/3039
• feat: set gitops targetrevision to gitops branch by @ElderMatt in https://github.com/linode/apl-core/pull/3041
• fix: apl-gitea-operator load env by @CasLubbers in https://github.com/linode/apl-core/pull/3042
• chore(chart-deps): update loki to version 6.55.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3037
• fix(git-repository): improve pull error handling with reset and retry logic by @CasLubbers in https://github.com/linode/apl-core/pull/3036
• feat: knativeserving runtime upgrade script by @Ani1357 in https://github.com/linode/apl-core/pull/3038
• chore(chart-deps): update sealed-secrets to version 2.18.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3045
• fix: configurable gitops branch for argocd-image-updater by @j-zimnowoda in https://github.com/linode/apl-core/pull/3049
• fix: run pre- and post-upgrade consistently by @merll in https://github.com/linode/apl-core/pull/3043
• feat: removing app files on deletion migration by @Ani1357 in https://github.com/linode/apl-core/pull/3028
• fix: add upper bound for runtime upgrade by @ferruhcihan in https://github.com/linode/apl-core/pull/3057
• chore: bump rc version by @j-zimnowoda in https://github.com/linode/apl-core/pull/3053
• chore: update kyverno to 3.7.1 (1.17.1) by @CasLubbers in https://github.com/linode/apl-core/pull/3010
• chore(chart-deps): update trivy-operator to version 0.32.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3048
• feat: support kubernetes gateway api by @merll in https://github.com/linode/apl-core/pull/2965
• fix: do not use helmfile --reuse-values flag by @j-zimnowoda in https://github.com/linode/apl-core/pull/3067
• chore(chart-deps): update harbor to version 1.18.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3063
• chore(chart-deps): update argocd to version 9.4.15 by @svcAPLBot in https://github.com/linode/apl-core/pull/3062
• chore(deps): bump ncipollo/release-action from 1.20.0 to 1.21.0 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3051
• chore(deps): bump the npm-dependencies group with 9 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3052
• chore(deps): bump the npm-dependencies group with 6 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3073
• feat: get aplCharts version from versions.yaml by @ferruhcihan in https://github.com/linode/apl-core/pull/3071
• fix: release gh action input by @Ani1357 in https://github.com/linode/apl-core/pull/3076
• chore(deps): bump helmfile/helmfile-action from 2.3.1 to 2.4.0 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3074
• chore: post release changelog v4.15.1 by @Ani1357 in https://github.com/linode/apl-core/pull/3089
• ci: release note generation by @Ani1357 in https://github.com/linode/apl-core/pull/3090
• chore(chart-deps): update argocd to version 9.4.17 by @svcAPLBot in https://github.com/linode/apl-core/pull/3086
• feat: use different hf arguments for initial install phase by @j-zimnowoda in https://github.com/linode/apl-core/pull/3095
• chore(deps): bump the npm-dependencies group with 5 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3091
• feat: make tekton optional by @ElderMatt in https://github.com/linode/apl-core/pull/3085
• fix: apps not using desired storageclass in linode by @ElderMatt in https://github.com/linode/apl-core/pull/3058
• fix: validate authorization header in oauth2-proxy apps by @merll in https://github.com/linode/apl-core/pull/3068
• fix: set correct loki url when no obj storage by @CasLubbers in https://github.com/linode/apl-core/pull/3098
• feat: request more memory and cpu for harbor registry by @j-zimnowoda in https://github.com/linode/apl-core/pull/3100
• fix: only deploy tekton tasks if tekton is enabled by @CasLubbers in https://github.com/linode/apl-core/pull/3102
• chore(chart-deps): update argocd-image-updater to version 1.1.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3080
• fix: remove gitea access to api by @CasLubbers in https://github.com/linode/apl-core/pull/3113
• chore(chart-deps): update otel-operator to version 0.109.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3078
• feat: ensure manifest folder in values repo by @ElderMatt in https://github.com/linode/apl-core/pull/3097
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3081
• chore(chart-deps): update cert-manager to version v1.20.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3087
• fix: manifest folder after upgrade by @ElderMatt in https://github.com/linode/apl-core/pull/3116
• chore(chart-deps): update oauth2-proxy to version 10.4.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3088
• chore(deps): bump helmfile/helmfile-action from 2.4.0 to 2.4.1 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3094
• chore(deps): bump the npm-dependencies group with 11 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3110
• chore(deps): bump cspell from 9.7.0 to 10.0.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3112
• chore(chart-deps): update argocd to version 9.5.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3117
• chore(chart-deps): update argocd-image-updater to version 1.1.5 by @svcAPLBot in https://github.com/linode/apl-core/pull/3118
• feat: pass accept header to oauth2-proxy by @merll in https://github.com/linode/apl-core/pull/3107
• chore(chart-deps): update kube-prometheus-stack to version 83.0.2 by @merll in https://github.com/linode/apl-core/pull/3115
• ci: print file paths for each yaml diff by @j-zimnowoda in https://github.com/linode/apl-core/pull/3083
• chore(chart-deps): update cloudnative-pg to version 0.28.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3104
• feat: add checksum for team config by @CasLubbers in https://github.com/linode/apl-core/pull/3119
• feat: making otomi.git.username optional by @Ani1357 in https://github.com/linode/apl-core/pull/3046
• fix: retry getting installation cm by @CasLubbers in https://github.com/linode/apl-core/pull/3101
• chore(chart-deps): update sealed-secrets to version 2.18.5 by @svcAPLBot in https://github.com/linode/apl-core/pull/3122
• ci: remove scheduled integration tests by @merll in https://github.com/linode/apl-core/pull/3124
• feat: recreating the knativeserving after upgrade by @Ani1357 in https://github.com/linode/apl-core/pull/3099
• fix: stop enabling auto sync by @ElderMatt in https://github.com/linode/apl-core/pull/3106
• chore(chart-deps): update kube-prometheus-stack to version 83.4.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3121
• feat: auto approve svcAPLBot PR's by @CasLubbers in https://github.com/linode/apl-core/pull/3128
• feat: add tini to remove zombie git processes by @CasLubbers in https://github.com/linode/apl-core/pull/3114
• chore(chart-deps): update otel-operator to version 0.109.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3126
• ci: add ACL and firewall rules in deploy action by @merll in https://github.com/linode/apl-core/pull/3123
• fix: self-update operator early to ensure consistency by @merll in https://github.com/linode/apl-core/pull/3108
• feat: auto approve svcAPLBot PR's by @CasLubbers in https://github.com/linode/apl-core/pull/3134
• chore(chart-deps): update istio to version 1.29.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3136
• chore(deps): bump helmfile/helmfile-action from 2.4.1 to 2.4.2 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3132
• chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3131
• fix: making the deleteFile function synchronous by @Ani1357 in https://github.com/linode/apl-core/pull/3129
• feat: generate redis secret for ArgoCD deployment by @ElderMatt in https://github.com/linode/apl-core/pull/3144
• feat: platform secrets as sealed secrets by @ferruhcihan in https://github.com/linode/apl-core/pull/2978
• fix: remove hardcoded command from apl-operator chart by @CasLubbers in https://github.com/linode/apl-core/pull/3138
• fix: versions by @ferruhcihan in https://github.com/linode/apl-core/pull/3148
• chore: remove unused tracing collector by @merll in https://github.com/linode/apl-core/pull/3127
• chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.6.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3140
• ci: add acl on cluster creation by @merll in https://github.com/linode/apl-core/pull/3139
• chore(chart-deps): update argocd to version 9.5.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3154
• fix: add missing migration function by @merll in https://github.com/linode/apl-core/pull/3160
• ci: check availability of Kubernetes API before attempting Helm install by @merll in https://github.com/linode/apl-core/pull/3151
• fix: remove auth from console endpoint by @merll in https://github.com/linode/apl-core/pull/3150
• ci: fix dev cluster update after merge by @merll in https://github.com/linode/apl-core/pull/3153
• chore(chart-deps): update oauth2-proxy to version 10.4.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3143
• chore(chart-deps): update cert-manager to version v1.20.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3135
• chore(chart-deps): update argocd to version 9.5.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3161
• ci: remove hasExternalDNS from values by @Ani1357 in https://github.com/linode/apl-core/pull/3158
• fix: do not attempt to re-install by @CasLubbers in https://github.com/linode/apl-core/pull/3170
• chore(chart-deps): update gitea to version 12.5.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3146
• fix: use XListenerSet for Istio compatibility by @merll in https://github.com/linode/apl-core/pull/3164
• ci: revert "remove hasExternalDNS from values" by @merll in https://github.com/linode/apl-core/pull/3176
• feat: remove tls passthrough by @merll in https://github.com/linode/apl-core/pull/3172
• feat: enable CNPG backup plugin by @merll in https://github.com/linode/apl-core/pull/3149
• ci: sanity check for schema versions by @merll in https://github.com/linode/apl-core/pull/3180
• chore(chart-deps): update argocd to version 9.5.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3179
• chore(chart-deps): update keycloak to version 7.1.11 by @svcAPLBot in https://github.com/linode/apl-core/pull/3174
• chore(deps): bump the npm-dependencies group with 3 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3165
• chore(deps): bump linode/apl-tools from v2.11.0 to v2.11.1 in the docker-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3169
• chore(deps): bump uuid from 13.0.0 to 14.0.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3167
• chore: swap order of migrations according to release by @merll in https://github.com/linode/apl-core/pull/3182
• feat: restart ArgoCD controller in case of unrecoverable error by @merll in https://github.com/linode/apl-core/pull/3178
• chore: update external secrets to 2.4.0 by @merll in https://github.com/linode/apl-core/pull/3187
• fix: cors filter syntax by @merll in https://github.com/linode/apl-core/pull/3189
• feat: add app label to http route by @j-zimnowoda in https://github.com/linode/apl-core/pull/3190
• chore(chart-deps): update argocd to version 9.5.7 by @svcAPLBot in https://github.com/linode/apl-core/pull/3188
• chore(chart-deps): update argocd to version 9.5.9 by @svcAPLBot in https://github.com/linode/apl-core/pull/3191
• chore(chart-deps): update kyverno to version 3.7.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3181
• chore(chart-deps): update policy-reporter to version 3.7.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3186
• chore(chart-deps): update external-secrets to version 2.4.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3192
• chore(chart-deps): update otel-operator to version 0.111.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3194
• feat: use smart git-http-server by @CasLubbers in https://github.com/linode/apl-core/pull/3103
• fix: do not remove .dec because they are not supported anymore by @j-zimnowoda in https://github.com/linode/apl-core/pull/3200
• test: fix by @j-zimnowoda in https://github.com/linode/apl-core/pull/3202
• fix: target namespace of grafana secrets by @merll in https://github.com/linode/apl-core/pull/3195
• chore(chart-deps): update kube-prometheus-stack to version 83.7.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3175
• docs: update link to documentation by @j-zimnowoda in https://github.com/linode/apl-core/pull/3208
• chore(chart-deps): update argocd to version 9.5.11 by @svcAPLBot in https://github.com/linode/apl-core/pull/3197
• feat: use default serviceentry resolution on wildcard by @merll in https://github.com/linode/apl-core/pull/3183
• chore: upgrade base images by @merll in https://github.com/linode/apl-core/pull/3216
• chore(deps): bump the npm-dependencies group across 1 directory with 9 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3201
• feat: refactor tekton-pipelines chart to support private registries by @Ani1357 in https://github.com/linode/apl-core/pull/3163
• chore(deps): bump helmfile/helmfile-action from 2.4.2 to 2.4.3 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3185
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.10.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3204
• chore(chart-deps): update argocd to version 9.5.12 by @svcAPLBot in https://github.com/linode/apl-core/pull/3209
• chore(chart-deps): update otel-operator to version 0.112.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3212
• chore: adjust version of tekton-pipeline chart by @merll in https://github.com/linode/apl-core/pull/3221
• fix: failed connection between grafana and alertmanager by @ferruhcihan in https://github.com/linode/apl-core/pull/3222
• fix: include monitoring crds in chart for handling upgrades reliably by @merll in https://github.com/linode/apl-core/pull/3219
• feat: update secrets management for alertmanager configuration by @ferruhcihan in https://github.com/linode/apl-core/pull/3207
• fix: enforce jwt pub key update to sidecars by @merll in https://github.com/linode/apl-core/pull/3217
• chore(chart-deps): update external-dns to version 1.21.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3196
• chore: upgrade base image of core to v2.11.2 by @merll in https://github.com/linode/apl-core/pull/3218
• chore(chart-deps): update kube-prometheus-stack to version 84.5.0 by @merll in https://github.com/linode/apl-core/pull/3220
• feat: increase lieveness probe failureThreshold for apl-operator by @j-zimnowoda in https://github.com/linode/apl-core/pull/3012
• chore(chart-deps): update argocd to version 9.5.13 by @svcAPLBot in https://github.com/linode/apl-core/pull/3223
• chore(chart-deps): update knative-operator to version v1.22.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3225
• fix: expand AppProject RBAC policy wildcards to explicit resource types by @j-zimnowoda in https://github.com/linode/apl-core/pull/3215
• fix: image hashes by @merll in https://github.com/linode/apl-core/pull/3226
• chore(deps): bump helmfile/helmfile-action from 2.4.3 to 2.4.4 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3232
• chore(chart-deps): update cloudnative-pg to version 0.28.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3233
• fix: add excludePaths to authpolicy-jwt for monitoring namespace by @ferruhcihan in https://github.com/linode/apl-core/pull/3236
• chore(chart-deps): update tekton-pipelines to version 1.12.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3224
• chore: kserve helm repository moved to new url by @merll in https://github.com/linode/apl-core/pull/3237
• chore(deps): bump ignore-walk from 8.0.0 to 9.0.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3231
• chore(deps): bump @commitlint/config-conventional from 20.5.3 to 21.0.0 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3230
• chore(deps): bump lint-staged from 16.4.0 to 17.0.4 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3229
• chore(deps): bump @commitlint/cli from 20.5.3 to 21.0.1 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3228
• chore(deps): bump the npm-dependencies group across 1 directory with 12 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3238
• ci: refresh tool cache by @merll in https://github.com/linode/apl-core/pull/3241
• chore: upgrade node environment of ci scripts by @merll in https://github.com/linode/apl-core/pull/3242
• ci: fix stale node cache and remove refresh workflow by @merll in https://github.com/linode/apl-core/pull/3243
• chore(chart-deps): update otel-operator to version 0.112.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3240
• chore(chart-deps): update cloudnative-pg to version 0.28.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3239
• fix: pvc migration for the gitea-gitea-valkey by @ferruhcihan in https://github.com/linode/apl-core/pull/3234
• ci: adjust name for kserve chart in index and script by @merll in https://github.com/linode/apl-core/pull/3245
• ci: do not install wiz without APL by @merll in https://github.com/linode/apl-core/pull/3244
• chore(chart-deps): update harbor to version 1.19.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3210
• chore: upgraded postgres images by @merll in https://github.com/linode/apl-core/pull/3235
• chore(deps): bump the npm-dependencies group with 4 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3256
• chore(chart-deps): update argocd to version 9.5.14 by @svcAPLBot in https://github.com/linode/apl-core/pull/3247
• chore(chart-deps): update otel-operator to version 0.113.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3250
• chore(deps): update kube prometheus stack to 85.2.0 by @merll in https://github.com/linode/apl-core/pull/3262
• chore: remove ingress-nginx and istio-ingress-gateway by @merll in https://github.com/linode/apl-core/pull/3246
• fix: missing admin team deployment by @merll in https://github.com/linode/apl-core/pull/3263
• fix: restore team admin services by @merll in https://github.com/linode/apl-core/pull/3264
• chore(deps): bump the npm-dependencies group with 6 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3276
• chore(chart-deps): update oauth2-proxy to version 10.6.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3273
• chore(chart-deps): update argocd to version 9.5.15 by @svcAPLBot in https://github.com/linode/apl-core/pull/3268
• chore(chart-deps): update kube-prometheus-stack to version 85.3.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3275
• chore(chart-deps): update kyverno to version 3.8.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3259
• fix: add excludePaths to authpolicy-jwt for monitoring team by @ferruhcihan in https://github.com/linode/apl-core/pull/3277
• fix: load raw values from tekton app values by @merll in https://github.com/linode/apl-core/pull/3261
• fix: update ESO refresh interval for harbor and keycloak operators by @ferruhcihan in https://github.com/linode/apl-core/pull/3260
• chore: remove promtail by @merll in https://github.com/linode/apl-core/pull/3266
• feat: remove server related code and tools sidecar dependencies by @ferruhcihan in https://github.com/linode/apl-core/pull/3265
• fix: update Grype to more recent image for fixing db updates by @merll in https://github.com/linode/apl-core/pull/3280
• chore: remove migration code prior to 5.0 release by @merll in https://github.com/linode/apl-core/pull/3267
• ci: added job filter to avoid pending jobs by @merll in https://github.com/linode/apl-core/pull/3152
• feat: add apiToken handling to external-dns-raw template by @vaheed in https://github.com/linode/apl-core/pull/2917
• feat: clean up pvc after pipelinerun by @merll in https://github.com/linode/apl-core/pull/3281
• chore(chart-deps): update kube-prometheus-stack to version 85.4.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3284
• fix: remove domain field with overly restrictive validation by @merll in https://github.com/linode/apl-core/pull/3282
• fix: setting namespace in team-admin services by @merll in https://github.com/linode/apl-core/pull/3286
• ci: optimize docker cache usage by @j-zimnowoda in https://github.com/linode/apl-core/pull/3289
• feat: preliminary setup for Istio ambient mesh by @merll in https://github.com/linode/apl-core/pull/3251
• chore(chart-deps): update harbor to version 1.19.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3283
• chore: use mirror for git-server images by @merll in https://github.com/linode/apl-core/pull/3291
• chore(chart-deps): update argocd to version 9.5.16 by @svcAPLBot in https://github.com/linode/apl-core/pull/3287
• feat: add httproute for git server by @merll in https://github.com/linode/apl-core/pull/3293
• feat: enhance git credential handling for apl-operator by @ferruhcihan in https://github.com/linode/apl-core/pull/3292
• chore: activate pulling eso image from mirror by @merll in https://github.com/linode/apl-core/pull/3214
• ci: remove unused properties by @j-zimnowoda in https://github.com/linode/apl-core/pull/3298
• feat: add support for Kubernetes v1.36 by @merll in https://github.com/linode/apl-core/pull/3301
• feat: team secret management with sealed secrets by @ferruhcihan in https://github.com/linode/apl-core/pull/3285
• chore: support mirror for tekton-piplines images by @merll in https://github.com/linode/apl-core/pull/3290
• chore(chart-deps): update argocd to version 9.5.17 by @svcAPLBot in https://github.com/linode/apl-core/pull/3294
• chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3305
• fix: rendering Loki password for team by @j-zimnowoda in https://github.com/linode/apl-core/pull/3299
• chore(chart-deps): update gitea to version 12.6.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3254
• ci: add dummy gh workflows by @j-zimnowoda in https://github.com/linode/apl-core/pull/3310
• feat: update disaster recovery flow for passwords by @ferruhcihan in https://github.com/linode/apl-core/pull/3296
• fix: error handling in helm cleanup by @merll in https://github.com/linode/apl-core/pull/3311
• chore(chart-deps): update external-secrets to version 2.5.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3253
• chore(chart-deps): update argocd to version 9.5.19 by @svcAPLBot in https://github.com/linode/apl-core/pull/3315
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.11.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3317
• chore(chart-deps): update sealed-secrets to version 2.18.6 by @svcAPLBot in https://github.com/linode/apl-core/pull/3270
• fix: skip validation on additional values by @merll in https://github.com/linode/apl-core/pull/3320
• fix: enhance condition for restart of argocd controller by @merll in https://github.com/linode/apl-core/pull/3313
• ci: upgrade helmfile action to solve installation issues by @merll in https://github.com/linode/apl-core/pull/3326
• chore(deps): bump the npm-dependencies group with 2 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3324
• fix: create argocd redis secret as needed by @merll in https://github.com/linode/apl-core/pull/3314
• chore(chart-deps): update argocd to version 9.5.20 by @svcAPLBot in https://github.com/linode/apl-core/pull/3321
• refactor: move team prometheus values to gotmpl values file by @j-zimnowoda in https://github.com/linode/apl-core/pull/3319
• fix: Loki volume access without object storage by @merll in https://github.com/linode/apl-core/pull/3328
• fix: prefer internal repo url on gitops applications in dev mode by @merll in https://github.com/linode/apl-core/pull/3329
• fix: replace team names for avoiding variable name issues by @merll in https://github.com/linode/apl-core/pull/3330
• chore: post release changelog 5.1.0 by @merll in https://github.com/linode/apl-core/pull/3323
• chore(chart-deps): update argocd to version 9.5.21 by @svcAPLBot in https://github.com/linode/apl-core/pull/3335
• chore(chart-deps): update cloudnative-pg to version 0.28.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3331
• fix: added authorization policies per team to per-team deployed apps by @merll in https://github.com/linode/apl-core/pull/3325
• ci: add supported lkee versions by @j-zimnowoda in https://github.com/linode/apl-core/pull/3344
• ci: bump minor version by @j-zimnowoda in https://github.com/linode/apl-core/pull/3343
• chore: add peer entries inserted by npm install by @merll in https://github.com/linode/apl-core/pull/3338
• chore: ADR about authentication and podLabel usage by @j-zimnowoda in https://github.com/linode/apl-core/pull/3342
• fix: prometheus exporter scrape targets by @merll in https://github.com/linode/apl-core/pull/3340
• chore(chart-deps): update kserve to version v0.18.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3248
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.12.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3346
• fix: gitea credentials independent from git credentials by @j-zimnowoda in https://github.com/linode/apl-core/pull/3341
• chore(deps): bump the npm-dependencies group with 10 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3348
• fix: remove sealedsecrets link by @merll in https://github.com/linode/apl-core/pull/3349
• chore(chart-deps): update kube-prometheus-stack to version 86.2.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3350
• chore(chart-deps): Update Loki to 17.1.6 (community chart) by @merll in https://github.com/linode/apl-core/pull/3304
• chore(chart-deps): update loki to version 17.4.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3351
• chore(chart-deps): update keycloak to version 7.2.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3278
• chore(chart-deps): update metrics-server to version 3.13.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3336
• chore(chart-deps): update otel-operator to version 0.115.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3337
• chore(chart-deps): update loki to version 17.4.4 by @svcAPLBot in https://github.com/linode/apl-core/pull/3353
• fix: do not overwrite Dockerfile entrypoint by @j-zimnowoda in https://github.com/linode/apl-core/pull/3360
• feat: set user and group ids that are matching security context [TOOLS][MAJOR] by @j-zimnowoda in https://github.com/linode/apl-core/pull/3357
• ci: prevent RCE in GH actions by @j-zimnowoda in https://github.com/linode/apl-core/pull/3300
• chore: tools version by @j-zimnowoda in https://github.com/linode/apl-core/pull/3361
• chore(chart-deps): update loki to version 17.4.9 by @svcAPLBot in https://github.com/linode/apl-core/pull/3369
• chore(chart-deps): update kube-prometheus-stack to version 86.3.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3368
• feat: generate team loki password by @j-zimnowoda in https://github.com/linode/apl-core/pull/3363
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.13.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3365
• chore(chart-deps): update loki to version 17.4.10 by @svcAPLBot in https://github.com/linode/apl-core/pull/3376
• fix: remove obsolete configuration from team values by @merll in https://github.com/linode/apl-core/pull/3378
• fix: added additional defaults for template by @merll in https://github.com/linode/apl-core/pull/3379
• chore(chart-deps): update loki to version 17.4.11 by @svcAPLBot in https://github.com/linode/apl-core/pull/3380
• chore(chart-deps): update otel-operator to version 0.117.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3381
• fix: consolidate git credential management by @merll in https://github.com/linode/apl-core/pull/3358
• feat: insert defaults into initial secret by @merll in https://github.com/linode/apl-core/pull/3384
• feat: add git clone cmd by @j-zimnowoda in https://github.com/linode/apl-core/pull/3392
• ci: apl chart image repository overwrite by @j-zimnowoda in https://github.com/linode/apl-core/pull/3394
• fix: push on initial install and encode credentials by @merll in https://github.com/linode/apl-core/pull/3395
• docs: add ADR about the manifests directory by @j-zimnowoda in https://github.com/linode/apl-core/pull/3383
• ci: add new lke version by @j-zimnowoda in https://github.com/linode/apl-core/pull/3393
• chore: remove unused variables from chart by @merll in https://github.com/linode/apl-core/pull/3385
• feat: configurable intervals and timouts by @j-zimnowoda in https://github.com/linode/apl-core/pull/3359
• fix: templating values for multi-tenant grafana by @j-zimnowoda in https://github.com/linode/apl-core/pull/3404
• feat: disable automatic sealing key renewal by @j-zimnowoda in https://github.com/linode/apl-core/pull/3403
• chore: adr about platform secrets by @j-zimnowoda in https://github.com/linode/apl-core/pull/3410
• chore: adr about gateway api by @j-zimnowoda in https://github.com/linode/apl-core/pull/3407
• chore: remove outdated line from adr by @merll in https://github.com/linode/apl-core/pull/3413
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.15.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3409
• chore(chart-deps): update knative-operator to version v1.22.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3333
• chore(chart-deps): update external-secrets to version 2.6.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3322
• chore(chart-deps): update oauth2-proxy to version 10.7.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3327
• chore(chart-deps): update kserve to version v0.19.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3347
• chore(chart-deps): update cert-manager to version v1.20.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3390
• chore(chart-deps): update argocd to version 9.7.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3397
• chore(chart-deps): update istio to version 1.30.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3382
• chore(deps): bump helmfile/helmfile-action from 2.4.5 to 2.4.6 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3401
• chore(chart-deps): update external-secrets to version 2.7.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3415
• ci: print DNS record on record creation failure by @j-zimnowoda in https://github.com/linode/apl-core/pull/3416
• fix: gotmplating for image repository property by @j-zimnowoda in https://github.com/linode/apl-core/pull/3412
• fix: set gitea password during migration by @merll in https://github.com/linode/apl-core/pull/3426
• ci: support worktree by @j-zimnowoda in https://github.com/linode/apl-core/pull/3425
• fix: decrypt values after clone and remove secrets from defaults by @merll in https://github.com/linode/apl-core/pull/3427
• ci: add BYO_GIT checkbox to the Deploy APL action by @j-zimnowoda in https://github.com/linode/apl-core/pull/3436
• fix: universal fallback mechanism to read git credentials by @j-zimnowoda in https://github.com/linode/apl-core/pull/3438
• ci: add HA control plane flag by @j-zimnowoda in https://github.com/linode/apl-core/pull/3442
• fix: repo URL fallback mechanism by @j-zimnowoda in https://github.com/linode/apl-core/pull/3444
• ci: gh actions to release code by @j-zimnowoda in https://github.com/linode/apl-core/pull/3308
• ci: release action update by @j-zimnowoda in https://github.com/linode/apl-core/pull/3454
• docs: release procedure by @j-zimnowoda in https://github.com/linode/apl-core/pull/3455
• ci: improve the Deploy APL pipeline by @j-zimnowoda in https://github.com/linode/apl-core/pull/3457
• fix: default storageClasses by @j-zimnowoda in https://github.com/linode/apl-core/pull/3423
• chore(deps): bump the npm-dependencies group across 1 directory with 19 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3462
• ci: leverage GH caching by @j-zimnowoda in https://github.com/linode/apl-core/pull/3463
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3371
• chore(deps): bump helmfile/helmfile-action from 2.4.6 to 2.4.7 in the github-actions-dependencies group by @dependabot[bot] in https://github.com/linode/apl-core/pull/3440
• chore(deps): upgrade eslint major v10 by @CasLubbers in https://github.com/linode/apl-core/pull/3471
• ci: build on pr opened by @j-zimnowoda in https://github.com/linode/apl-core/pull/3475
• chore(deps): bump @babel/core from 7.29.7 to 8.0.1 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3374
• ci: fix image tag naming by @j-zimnowoda in https://github.com/linode/apl-core/pull/3477
• ci: distingush between ref-name and head-ref by @j-zimnowoda in https://github.com/linode/apl-core/pull/3480
• ci: normalize gh user name by @j-zimnowoda in https://github.com/linode/apl-core/pull/3484
• fix(schema): don't mark generator-backed x-secret fields as required by @aweingarten in https://github.com/linode/apl-core/pull/3465
• chore(chart-deps): update istio to version 1.30.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3447
• chore(chart-deps): update keycloak to version 7.2.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3430
• chore(deps): bump the npm-dependencies group with 4 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3485
• chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in https://github.com/linode/apl-core/pull/3488
• chore(chart-deps): update cert-manager to version v1.21.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3481
• chore(chart-deps): update cloudnative-pg to version 0.29.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3405
• fix: ensure that default storageClass is used by databases by @j-zimnowoda in https://github.com/linode/apl-core/pull/3494
• ci: move chart index file to charts/ by @j-zimnowoda in https://github.com/linode/apl-core/pull/3496
• ci: fix SealedSecrets helm repo url by @merll in https://github.com/linode/apl-core/pull/3513
• chore(chart-deps): update external-secrets to version 2.9.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3516
• chore(chart-deps): update sealed-secrets to version 2.19.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3514
• feat(chart): allow the platform namespaces to be created out-of-band by @aweingarten in https://github.com/linode/apl-core/pull/3468
• ci: split the deploy action into re-runnable jobs by @j-zimnowoda in https://github.com/linode/apl-core/pull/3521
• feat(platform-auth): add functions to manage platform auth pod restar… by @CasLubbers in https://github.com/linode/apl-core/pull/3491
• chore(deps): bump the npm-dependencies group with 7 updates by @dependabot[bot] in https://github.com/linode/apl-core/pull/3518
• chore(chart-deps): update otel-operator to version 0.120.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3519
• feat(operator): gate readiness on installation completion by @aweingarten in https://github.com/linode/apl-core/pull/3464
• chore: upgrade tools and tty binaries by @merll in https://github.com/linode/apl-core/pull/3525
• fix: helm plugin sources do not support verification by @merll in https://github.com/linode/apl-core/pull/3528
• chore(chart-deps): update kube-prometheus-stack to version 88.3.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3526
• chore(chart-deps): update loki to version 18.7.6 by @svcAPLBot in https://github.com/linode/apl-core/pull/3527
• chore(chart-deps): update prometheus-blackbox-exporter to version 11.17.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3520
• fix: helm image checksum by @merll in https://github.com/linode/apl-core/pull/3530
• chore: update base image version by @merll in https://github.com/linode/apl-core/pull/3529
• feat: configure shell image and support orcs by @merll in https://github.com/linode/apl-core/pull/3531
• chore(chart-deps): update policy-reporter to version 3.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3510
• chore(chart-deps): update loki to version 18.8.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3532
• chore(chart-deps): update kyverno to version 3.8.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3507
• fix(oauth2-proxy): poll keycloak over the backchannel in wait-for-keycloak by @aweingarten in https://github.com/linode/apl-core/pull/3467
• fix: wait for keycloak command by @CasLubbers in https://github.com/linode/apl-core/pull/3544
• feat: ensure server side apply to mitigate the last applied annotation overflow by @j-zimnowoda in https://github.com/linode/apl-core/pull/3452
• fix: mount cache folder as volume by @j-zimnowoda in https://github.com/linode/apl-core/pull/3548
• refactor(oidc): move issuer-specific values behind derived values by @CasLubbers in https://github.com/linode/apl-core/pull/3543
• docs: update release process by @j-zimnowoda in https://github.com/linode/apl-core/pull/3550
• chore(chart-deps): update loki to version 18.9.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3545
• fix: rendering the external-dns and cert-manager settings by @j-zimnowoda in https://github.com/linode/apl-core/pull/3549
• fix(argocd): prevent ESO from copying tracking-id annotation to argocd-secret by @CasLubbers in https://github.com/linode/apl-core/pull/3557
• chore(chart-deps): update harbor to version 1.19.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3504
• chore(chart-deps): update keycloak to version 7.2.3 by @svcAPLBot in https://github.com/linode/apl-core/pull/3553
• chore(chart-deps): update knative-operator to version v1.23.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3554
• chore(chart-deps): update kube-prometheus-stack to version 88.5.0 by @svcAPLBot in https://github.com/linode/apl-core/pull/3555
• fix: rendering external-dns secrets by @j-zimnowoda in https://github.com/linode/apl-core/pull/3559
• chore(chart-deps): update sealed-secrets to version 2.19.2 by @svcAPLBot in https://github.com/linode/apl-core/pull/3556
• chore(chart-deps): update loki to version 18.9.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3560
• chore(chart-deps): update cloudnative-pg-plugin-barman-cloud to version 0.7.1 by @svcAPLBot in https://github.com/linode/apl-core/pull/3501
• ci: adding new linode dns to apl deploy by @jverma-git in https://github.com/linode/apl-core/pull/3552
• feat: apl-addons by @j-zimnowoda in https://github.com/linode/apl-core/pull/3562

New Contributors

• @wildmanonline made their first contribution in #2530
• @vaheed made their first contribution in https://github.com/linode/apl-core/pull/2917
• @aweingarten made their first contribution in https://github.com/linode/apl-core/pull/3465
• @jverma-git made their first contribution in https://github.com/linode/apl-core/pull/3552

Full Changelog: v4.5.0...v6.3.0-rc.1