v4.7.3

Changelog

• 1b78a3591bace39a07d0aee5341403557e314916: Load Test Optimizations (#6797) (@lizardruss)
• 2e01a0b3c403e76e6f79ce2bb3a73f90c95e399c: [release-4.7] ci(release): emit platform-released dispatch to vcluster-docs (#6830) (#6835) (@loft-bot)
• a950944b4ea983d2b1a4370ce328566192b436a8: [release-4.7] ci(release): harden the linear sync workflow (#8678) (#8729) (@loft-bot)
• 578ad42e80edf0bb83fbd30158312654224d5eb2: [release-4.7] ci(release): run linear sync from a reusable workflow (#8668) (#8671) (@loft-bot)
• 633a24b3be39611cd4bf28c97432e17f14da337b: [release-4.7] ci: convert release pipeline to dispatcher (#7829) (#8420) (@sydorovdmytro)
• 2175a2abcf6ce264a1ba3d64a7030fb1975713c9: [release-4.7] ci: install helm-unittest v1.2.1 for helm 4 (#9141) (#9168) (@loft-bot)
• f445956a77d2c004b1444f7eae916e5b52c10531: [release-4.7] fix(agent): delete only a namespace the instance owns (#9126) (#9146) (@loft-bot)
• 686775fb62ea8856c06040360be79adcc0dae823: [release-4.7] fix(apiserver): honor dry-run delete for sharedsecret, ownedaccesskey, oidcclient (#7044) (#7094) (@loft-bot)
• 999aaaf5b92c221e1c0f28733dff612f42d338a0: [release-4.7] fix(apiserver): honor dry-run for oidcclient/ownedaccesskey/sharedsecret create+update (#7090) (#7115) (@loft-bot)
• 4a042ab6905b92174e361bf0601b368e6046f6a2: [release-4.7] fix(apiserver): honor dry-run for sharedsecret create and status subresource writes (#7060) (#7098) (@loft-bot)
• 0d10c8cfc8af2328552706a8c96ebc6343f4dacc: [release-4.7] fix(ci): narrow sync-api goprivate to unblock release pipeline (#6910) (#6912) (@loft-bot)
• dc2415118468729d644f563f57e072c2372965bb: [release-4.7] fix(projectsecret): sync shared secrets only into project secrets in existing project namespaces (#9010) (#9097) (@loft-bot)
• 9eff231a201e5a5726cecfa86de52bdb2a6164b0: bump vCluster version (#7203) (@mfranczy)
• 435a1a45d0bbf3a0fd838f21b93af98ab53ff5c9: chore(chart): bump loft chart audit sidecar image to alpine 3.24 (#8916) (@loft-bot)
• aafdbc30ddab6a895a798cbb7784972857cf7f2c: chore(deps): bump Go to 1.26.10 and update Alpine to include eMudhra CA compromise fixes (#8782) (#8928) (@loft-bot)
• eed40246dd2e352bdee20a846ecf1c0f516bf6cb: chore(deps): bump embedded kubernetes to v1.35.10 for emudhra ca compromise (@kaihulme)
• 6207ec791aa92b32d9493769383a1b44ec16499f: chore(deps): bump embedded kubernetes to v1.36.6 for emudhra ca compromise (@kaihulme)
• aec79c221b7c73f9de034a0637eb2e4a7bc810d3: chore(deps): bump kine to v0.14.15.vcluster.0 (#8948) (@kaihulme)
• 9422bd2ad8fa0d95c87860deb44791e29dc4c615: chore: replace tech-leads with staff-engs in codeowners (#7786) (@janekbaraniewski)
• 68d306af3d12ea6e9e9e0eaffed29091ac436554: ci(conflict-check): use the shared conflict-check workflow (#8951) (@vcauesantos)
• 8ffb52b04b975ce2f82de5bb6cbaca0c17c7e9fb: ci(licenses): migrate go-licenses report workflow to composite action (#7977) (@vcauesantos)
• 172589fb6d1f4a98d5c53d6151d1e0577cc9c73b: ci(release): call the release notifier at v3, which accepts base_branch (#8751) (@sydorovdmytro)
• f327c6b887370ea80926e3dc165b5dcb55c48fad: ci(release): let goreleaser generate the changelog (#8677) (#8680) (@loft-bot)
• 4aa592f6036b9b390af7cec1f9114f7e46b80071: ci(release): take the source branch from cut-release instead of guessing it (#8465) (#8746) (@loft-bot)
• 6e602285ba9b038eefd86e70338d616a3642fe0f: ci: point free-disk-space at its new owner lumbroso-commons (#9361) (@cbron)
• 766cd396b6b692bc53618a3708fcad7c08427313: ci: remove dev-vcluster slack notifications (#7747) (@sydorovdmytro)
• 51a9b720e87ddb2e8980ffe0d9ecd63c9ff51ddb: fix(apiserver): remove unused controller-runtime client import in sharedsecret (#7106) (#7133) (@loft-bot)
• a361dc183f552d2d70d77c4b575825c080280b3d: fix(ci): goreleaser args and cosign bump (#6854) (#9375) (@loft-bot)
• 7c784dca3bfa864f0d7a48aac5b3b7f1fb2f4eb5: fix(ci): skip the mirror release step on sync push runs (#8833) (#8852) (@loft-bot)
• 36cd5344830dac633aad00dbe8d64194123b765d: fix(ci): stop devspace plugin sync from blocking releases (#8655) (#8659) (@loft-bot)
• 561411b425a012ae31ae2170cfe747ee2657490b: fix(deps): update dependency dompurify to v3.4.11 [security] (#7469) (@renovate[bot])
• 430c1d3fb5cda47da8878eef083c7ec026943842: fix(deps): update dependency dompurify to v3.4.12 [security] (#7756) (@renovate[bot])
• 71d76cd26a5093190c5a663aa32472b8b26b5d49: fix(proxy): stop client-go transport-cache leak on v0.35 (ENGPLAT-802) (#7475) (@lizardruss)
• 2146c8562f3118cb720b84cc04e25a8a4c4fa964: fix(release): make goreleaser retry asset upload on 422 already_exists (#6855) (#6857) (@loft-bot)
• 92a085e5e9fbd8ea4a8cfeeb4963c7dcaa482616: fix(spaceinstance): only space import may set the is-imported annotation (#9113) (#9195) (@seanschneeweiss)
• 4979d223967eb9ab59ea256e49fb809bdfa18fe8: fix(ui): respect native snapshots.auto config in AutomaticSnapshotsStatus (ENGCP-366) (@pascalbreuninger)
• c69a9c48d4295c03914cf83acf4106a4e586f8c3: fix: pipe deadlock command exceeds more than 64kb (#6941) (#6968) (@loft-bot)
• fa1a0044aea3848d6582bf6c65db6ec30b5c291c: fix: resolve codeowners backport conflict for release-4.7 (@janekbaraniewski)