Skip to content

v6.0.0

Latest
Latest

Choose a tag to compare

View all tags
@mogenius-release-bot mogenius-release-bot released this 14 Aug 12:18
6.0.0
1b0fb83

6.0.0 (2026-08-14)

⚠ BREAKING CHANGES

  • auth: authorization is on by default when authentication is activated. If you're running the operator in an environment where authorization isn't needed but you still want to use authentication, e. G.: in your homelab, you can disable it by setting authorization.enabled = false (or AUTHORIZATION_ENABLED='false' env var) to rely soley on authentication
  • ui: A RenovateJob with no access configuration is now hidden from everyone once UI authentication is enabled, where before it was visible to every authenticated user. Installs without an auth provider are unaffected. GitHub OAuth installs using groups must set auth.github.orgGroups=true. See the migration guide at docs/migration/migration-v5-to-v6.md for more info.
  • The deprecated job identifiers are now removed. The renovate-operator actively migrated them since quite a few versions so you shouldn't be affected but we still marked it as breaking change.
  • security: RenovateJobs may no longer declare hostPath volumes, privileged containers or allowPrivilegeEscalation. The API server rejects them, and existing objects using them become unapplyable. The rest of the added policy engine is purely optional and disabled by default. Look at the migration guide docs/migration/migration-v5-to-v6.md for further explanations.

Features

  • auth: add authorization master switch (35e7bdd)
  • github-app: promote native github integration from beta to stable (be77ce5)
  • operator: support inline and configmap-based renovate config (2d3df52)
  • replace persistent debug with single push debug (225d516), closes #561
  • security: add optional policy engine to harden renovate runs (1f0caf2)
  • ui: add access model for reader, admins, and anonymous access (09b9e6e), closes #380
  • ui: pin toolbar and search to the top (#572) (9e894f1)

Bug Fixes

  • auth: match the OIDC group filter case-insensitively (58d8f92)
  • deacviate all trigger buttons if job hasnt been accepted by policy (4d40c07)
  • deps: update aws-sdk-go-v2 monorepo (4966344)
  • deps: update go module directive to v1.26.6 (1107806)
  • deps: update golang docker tag to v1.26.6 (f52ac7c)
  • deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.107.1 (ad4c84b)
  • deps: update opentelemetry to v1.45.0 (f497c81)
  • deps: update opentelemetry-go-contrib monorepo (68cf1d2)
  • metrics: do not count approval pending PRs towards metrics (863191c), closes #584
  • parser: do not add branches where no pr has been created yet (a319bbe), closes #584
  • ui: adapt the height of various objects to be more compact and coherent (8b25b93), closes #559
  • ui: add autoscroll and skip to top/bottom buttons in logs (dafc88f)

Code Refactoring

Assets 2
Loading