v4.8.3

Changelog

• b9ff5be803956d0316b0a92658838506de3738fb: Load Test Optimizations (#6797) (@lizardruss)
• 66d54c0bb4b0251311e8b02ee16a1bcc53df45c1: [4.8] Update DefaultVClusterVersion to 0.33.3 (@deniseschannon)
• 317d8498dbc5de9fe1ba760e72f1c0a88ac1388e: [release-4.8] chore(deps): bump embedded kubernetes to v1.36.6 for emudhra ca compromise (#8993) (@loft-bot)
• 6d06da90327bfab419c7518987e1099d26e40af5: [release-4.8] ci(release): dispatch platform-released to vmetal-docs (#7038) (#7102) (@loft-bot)
• b068ec2ce59896aacddd64ddd6c24f50ed1d0e79: [release-4.8] ci(release): emit platform-released dispatch to vcluster-docs (#6830) (#6836) (@loft-bot)
• e35e9aba4aaaf55b667c1490e013803a4f381bc6: [release-4.8] ci(release): harden the linear sync workflow (#8678) (#8730) (@loft-bot)
• d9e8e5f3b2289f717ea3d372199cc94fb772c7b0: [release-4.8] ci(release): run linear sync from a reusable workflow (#8668) (#8672) (@loft-bot)
• b42253854248074e814bfcf4ed9eb8c21a3e20d5: [release-4.8] ci: convert release pipeline to dispatcher (#7829) (#8419) (@sydorovdmytro)
• 40c388e503a43abadc9127de24c3c0e7abdad2a2: [release-4.8] fix(agent): delete only a namespace the instance owns (#9126) (#9147) (@loft-bot)
• 6f92bb51ed0522a31c33d2a498e8dabbbd10b78e: [release-4.8] fix(apiserver): honor dry-run delete for sharedsecret, ownedaccesskey, oidcclient (#7044) (#7095) (@loft-bot)
• adba7d7fc756f2081d91c4f352a0503e757b32b0: [release-4.8] fix(apiserver): honor dry-run for oidcclient/ownedaccesskey/sharedsecret create+update (#7090) (#7116) (@loft-bot)
• 945eef3ec712dffec549056d0313ca329d3dd2d7: [release-4.8] fix(apiserver): honor dry-run for sharedsecret create and status subresource writes (#7060) (#7099) (@loft-bot)
• 43d253bc2a0d25ee0bd8e3ee655a1ecb51131a44: [release-4.8] fix(projectsecret): sync shared secrets only into project secrets in existing project namespaces (#9010) (#9098) (@loft-bot)
• 0d3a27e248f7277b94e4a3fdb1614801cdbb11fe: bump vCluster version to 0.33.4 (#7204) (@mfranczy)
• e7af1509f504b6e372c4b9e035f2091ae5dbfbf5: chore(chart): bump loft chart audit sidecar image to alpine 3.24 (#8917) (@loft-bot)
• d3de79f2cf095a5a724f2ed7234e316ff341c2b7: chore(deps): bump Go to 1.26.10 and update Alpine to include eMudhra CA compromise fixes (#8782) (#8929) (@loft-bot)
• d72ba65b1e4e129771bbc68bd8b59995a95c7c87: chore(deps): bump kine to v0.14.15.vcluster.0 (@kaihulme)
• c5f87c3f1a7f6d361bfe0622f40d02aaa6d84bff: chore(deps): update module github.com/docker/cli to v29 [security] (#7863) (@renovate[bot])
• 8f3b600060c94244e64879521d243acf79b9efd1: chore(deps): update module go.mongodb.org/mongo-driver to v1.17.7 [security] (#7860) (@renovate[bot])
• 26080579575e7a66cee1dc8682f481d6eb1df31b: chore: replace tech-leads with staff-engs in codeowners (#7786) (@janekbaraniewski)
• db867c3051d4f3e629d9c6812eeab4723ac47d41: ci(conflict-check): use the shared conflict-check workflow (#8952) (@vcauesantos)
• 265ea913f76fb0eb252ead8fa95730a1ea5d52e7: ci(licenses): migrate go-licenses report workflow to composite action (#7954) (@vcauesantos)
• c622dd68ef7c777dbc4185f6ef70be473776101b: ci(release): call the release notifier at v3, which accepts base_branch (#8752) (@sydorovdmytro)
• 899d53b75991b88a250cda88a9da32d5783591ce: ci(release): let goreleaser generate the changelog (#8677) (#8681) (@loft-bot)
• 72a73f3b1e589bcefa6f7903a7b5de4969626c71: ci(release): take the source branch from cut-release instead of guessing it (#8465) (#8747) (@loft-bot)
• 1670bb85f05f8124c640531eb8e679622a650456: ci: install helm-unittest v1.2.1 for helm 4 (#9141) (#9169) (@loft-bot)
• 3ef26a88bea09391ae4c0dcf55664f9e66cc8891: ci: point free-disk-space at its new owner lumbroso-commons (#9362) (@cbron)
• 553dc99aef232422c1762408c1c83d8f8cbcd9ad: ci: remove dev-vcluster slack notifications (#7748) (@sydorovdmytro)
• a7914b402dbe7847fae04a9a93f178d564ec73a7: fix(apiserver): remove unused controller-runtime client import in sharedsecret (#7106) (#7134) (@loft-bot)
• 62d851d97f8081f1e2a4a4ada1f1aa3384e3e73a: fix(ci): goreleaser args and cosign bump (#6854) (#9376) (@loft-bot)
• 346c4eaa4524f1c869e36be12e52b388406f1dcc: fix(ci): narrow sync-api goprivate to unblock release pipeline (#6910) (#6913) (@loft-bot)
• 006705bd2f87c061eb9947048313091842f49756: fix(ci): skip the mirror release step on sync push runs (#8833) (#8853) (@loft-bot)
• 7e89d426c1a90ca6d1bd3b1e975babcc20e1a067: fix(ci): stop devspace plugin sync from blocking releases (#8655) (#8660) (@loft-bot)
• 04f10a0196b6ce3b1da44948cc59ff55eeed6520: fix(deps): update dependency js-cookie to v3.0.7 [security] (#7407) (@renovate[bot])
• d154ffa55bdfd963f77231347b6d920f01188145: fix(proxy): stop client-go transport-cache leak on v0.35 (ENGPLAT-802) (#7475) (#7494) (@loft-bot)
• cee942689959358847543c2fc670d4fc75af409d: fix(release): make goreleaser retry asset upload on 422 already_exists (#6855) (#6858) (@loft-bot)
• 05c763cf09e38d6eb367fef6168a1855d85d23f5: fix(spaceinstance): only space import may set the is-imported annotation (#9113) (#9194) (@seanschneeweiss)
• 4889340d643f06f86dad4342f78fa89c698fd5d7: fix(ui): respect native snapshots.auto config in AutomaticSnapshotsStatus (ENGCP-366) (@pascalbreuninger)
• ee141ec8c1af2c21ff590211995db3de14332ec6: fix: Default to provider type on empty os-image-type prop (@PRTTMPRPHT)
• 67a27930b40b96f0e342dde880d80cfe720ef75d: fix: Fix display of primary quotas for 4.8 fallback page (@PRTTMPRPHT)
• 021a9982f71c85c07b399cd556809ee2d3870b7a: fix: pipe deadlock command exceeds more than 64kb (#6941) (#6969) (@loft-bot)
• 6c3e6401dcdde4866fab7aa73ee3fe278b10b7ad: fix: resolve codeowners backport conflict for release-4.8 (@janekbaraniewski)