1.12.0-community

[jotak]

This is a milestone in the upstream project because it's our first release using our new secured pipeline, which includes SBOM generation, signed artifacts, provenance / sbom attestations, and release immutability. I'd like to thank @Helion55 for the help here, as well as @sherine-k and @scraly who inspired this work.

What's Changed

Non-breaking changes

• NETOBSERV-2768: Implement DUMP_EVENTS_ON_FAILURE env var by @Amoghrd in NETOBSERV-2768: Implement DUMP_EVENTS_ON_FAILURE env var #2799
• Update .ci-operator.yaml to golang 1.26 / openshift 5.0 by @memodi in Update .ci-operator.yaml to golang 1.26 / openshift 5.0 #2816
• NETOBSERV-2575: allow setting toleration for static plugin by @jotak in NETOBSERV-2575: allow setting toleration for static plugin #2793
• ok-to-test: Use sha when building artifact by @jotak in ok-to-test: Use sha when building artifact #2817
• NETOBSERV-2676: TLS Alert by @Amoghrd in NETOBSERV-2676: TLS Alert #2801
• Fix pprof broad exposition by @jotak in Fix pprof broad exposition #2821
• NETOBSERV-2390 Trimmed junit, linux util commands and e2etests labelling workflow by @memodi in NETOBSERV-2390 Trimmed junit, linux util commands and e2etests labelling workflow #2814
• security: use sha digests for github actions by @memodi in security: use sha digests for github actions #2815
• Enhance release workflow with SBOM and signing by @jotak in Enhance release workflow with SBOM and signing #2833
• Add httpd-tools for htpasswd by @memodi in Add httpd-tools for htpasswd #2835
• NETOBSERV-2675: flp-informers deployment and wiring by @leandroberetta in NETOBSERV-2675: flp-informers deployment and wiring #2650
• NETOBSERV-2817: Fixes for tests on OCP 4.14 by @Amoghrd in NETOBSERV-2817: Fixes for tests on OCP 4.14 #2840
• Add workflow security checks for "pwn request" vulnerabilities by @jotak in Add workflow security checks for "pwn request" vulnerabilities #2820
• NETOBSERV-2841: Refactor bundling for vendoring by @jotak in NETOBSERV-2841: Refactor bundling for vendoring #2822
• Fix agent env not overriding config by @jotak in Fix agent env not overriding config #2832

Dependencies

• Bump github.com/prometheus/common from 0.68.1 to 0.69.0 by @dependabot[bot] in Bump github.com/prometheus/common from 0.68.1 to 0.69.0 #2810
• Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /integration-tests/backend by @dependabot[bot] in Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /integration-tests/backend #2813
• Bump go.mongodb.org/mongo-driver from 1.17.3 to 1.17.7 in /integration-tests/backend by @dependabot[bot] in Bump go.mongodb.org/mongo-driver from 1.17.3 to 1.17.7 in /integration-tests/backend #2809
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in Bump docker/login-action from 4.1.0 to 4.2.0 #2828
• Bump actions/checkout from 6 to 7 by @dependabot[bot] in Bump actions/checkout from 6 to 7 #2826
• Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in Bump actions/setup-go from 6.4.0 to 6.5.0 #2825
• Bump golang.org/x/net from 0.49.0 to 0.55.0 in /integration-tests/backend by @dependabot[bot] in Bump golang.org/x/net from 0.49.0 to 0.55.0 in /integration-tests/backend #2837
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /integration-tests/backend by @dependabot[bot] in Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /integration-tests/backend #2841
• Bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.1 by @dependabot[bot] in Bump sigs.k8s.io/controller-runtime from 0.23.3 to 0.24.1 #2759
• Bump azure/setup-helm from 4.3.1 to 5.0.1 by @dependabot[bot] in Bump azure/setup-helm from 4.3.1 to 5.0.1 #2827
• Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 by @dependabot[bot] in Bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 #2829
• Bump codecov/codecov-action from 4.6.0 to 7.0.0 by @dependabot[bot] in Bump codecov/codecov-action from 4.6.0 to 7.0.0 #2824
• Bump github.com/onsi/gomega from 1.41.0 to 1.42.1 by @dependabot[bot] in Bump github.com/onsi/gomega from 1.41.0 to 1.42.1 #2844
• Bump github.com/operator-framework/api from 0.42.0 to 0.44.0 by @dependabot[bot] in Bump github.com/operator-framework/api from 0.42.0 to 0.44.0 #2830

Full Changelog: 1.11.5-community...1.12.0-community

Related components

eBPF Agent

What's Changed

Non-breaking changes

• Update .ci-operator.yaml to golang 1.26 / openshift 5.0 by @memodi in Update .ci-operator.yaml to golang 1.26 / openshift 5.0 netobserv-ebpf-agent#997
• Fix pprof broad exposition by @jotak in Fix pprof broad exposition netobserv-ebpf-agent#996
• bump fedora by @jotak in bump fedora netobserv-ebpf-agent#999
• Minor security hardening, improve upstream releases by @jotak in Minor security hardening, improve upstream releases netobserv-ebpf-agent#998
• test(bench): add benchmark harness for flow hot paths by @awprice in test(bench): add benchmark harness for flow hot paths netobserv-ebpf-agent#1009

Dependencies

• Bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot[bot] in Bump golang.org/x/net from 0.52.0 to 0.55.0 netobserv-ebpf-agent#1005
• Bump ubi9/ubi-minimal from 9.8-1781496742 to 1782797355 by @dependabot[bot] in Bump ubi9/ubi-minimal from 9.8-1781496742 to 1782797355 netobserv-ebpf-agent#1004
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in Bump golang.org/x/crypto from 0.51.0 to 0.52.0 netobserv-ebpf-agent#1008
• Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in Bump google.golang.org/grpc from 1.81.1 to 1.82.0 netobserv-ebpf-agent#1003
• Bump github.com/cilium/ebpf from 0.21.0 to 0.22.0 by @dependabot[bot] in Bump github.com/cilium/ebpf from 0.21.0 to 0.22.0 netobserv-ebpf-agent#1001
• Bump ubi9/ubi-minimal from 1782797355 to 1784092978 by @dependabot[bot] in Bump ubi9/ubi-minimal from 1782797355 to 1784092978 netobserv-ebpf-agent#1014
• Bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in Bump golang.org/x/sys from 0.46.0 to 0.47.0 netobserv-ebpf-agent#1011
• Bump github.com/gopacket/gopacket from 1.6.1 to 1.7.0 by @dependabot[bot] in Bump github.com/gopacket/gopacket from 1.6.1 to 1.7.0 netobserv-ebpf-agent#1013
• Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in Bump google.golang.org/grpc from 1.82.0 to 1.82.1 netobserv-ebpf-agent#1012
• Bump github.com/netobserv/flowlogs-pipeline from 1.11.4-community.0.20260521155724-7ee2fbbc7651 to 1.11.5-community by @dependabot[bot] in Bump github.com/netobserv/flowlogs-pipeline from 1.11.4-community.0.20260521155724-7ee2fbbc7651 to 1.11.5-community netobserv-ebpf-agent#995

Full Changelog: netobserv/netobserv-ebpf-agent@v1.11.5-community...v1.12.0-community

Flowlogs-Pipeline

What's Changed

Breaking changes 🛠

• Fix pprof broad exposition by @jotak in Fix pprof broad exposition flowlogs-pipeline#1286

Non-breaking changes

• Fix S3 access key secret not being redacted in logs by @jotak in Fix S3 access key secret not being redacted in logs flowlogs-pipeline#1285
• Update .ci-operator.yaml to golang 1.26 / openshift 5.0 by @memodi in Update .ci-operator.yaml to golang 1.26 / openshift 5.0 flowlogs-pipeline#1287
• Enhance release workflow with SBOM and signing by @Helion55 in Enhance release workflow with SBOM and signing flowlogs-pipeline#1227
• Minor security hardening by @jotak in Minor security hardening flowlogs-pipeline#1289
• NETOBSERV-2675: Centralized K8s informers to reduce API load by @leandroberetta in NETOBSERV-2675: Centralized K8s informers to reduce API load  flowlogs-pipeline#1221

Dependencies

• Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.4-community to 1.11.5-community by @dependabot[bot] in Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.4-community to 1.11.5-community flowlogs-pipeline#1284
• Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in Bump google.golang.org/grpc from 1.81.1 to 1.82.0 flowlogs-pipeline#1292
• Bump github.com/minio/minio-go/v7 from 7.2.0 to 7.2.1 by @dependabot[bot] in Bump github.com/minio/minio-go/v7 from 7.2.0 to 7.2.1 flowlogs-pipeline#1291
• Bump github.com/prometheus/common from 0.68.1 to 0.69.0 by @dependabot[bot] in Bump github.com/prometheus/common from 0.68.1 to 0.69.0 flowlogs-pipeline#1283
• Bump ubi9/ubi-minimal from 9.8-1781496742 to 1782797355 in /contrib/docker by @dependabot[bot] in Bump ubi9/ubi-minimal from 9.8-1781496742 to 1782797355 in /contrib/docker flowlogs-pipeline#1293
• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in Bump golang.org/x/crypto from 0.51.0 to 0.52.0 flowlogs-pipeline#1294
• Bump github.com/prometheus/common from 0.69.0 to 0.70.0 by @dependabot[bot] in Bump github.com/prometheus/common from 0.69.0 to 0.70.0 flowlogs-pipeline#1295
• Bump ubi9/ubi-minimal from 1782797355 to 1784092978 in /contrib/docker by @dependabot[bot] in Bump ubi9/ubi-minimal from 1782797355 to 1784092978 in /contrib/docker flowlogs-pipeline#1296

New Contributors

• @Helion55 made their first contribution in Enhance release workflow with SBOM and signing flowlogs-pipeline#1227

Full Changelog: netobserv/flowlogs-pipeline@v1.11.5-community...v1.12.0-community

Web Console

What's Changed

Non-breaking changes

• Bump dynamic plugin sdk to 4.22.0 by @jpinsonneau in Bump dynamic plugin sdk to 4.22.0 netobserv-web-console#1567
• Update .ci-operator.yaml to golang 1.26 / openshift 5.0 by @memodi in Update .ci-operator.yaml to golang 1.26 / openshift 5.0 netobserv-web-console#1587
• NETOBSERV-1828: Refactor frontend and backend for loki/prometheus datasource by @memodi in NETOBSERV-1828: Refactor frontend and backend for loki/prometheus datasource netobserv-web-console#1581
• NETOBSERV-2762: Add pending alerts count into the top banner by @leandroberetta in NETOBSERV-2762: Add pending alerts count into the top banner netobserv-web-console#1546
• Minor security hardening, improve upstream releases by @jotak in Minor security hardening, improve upstream releases netobserv-web-console#1589

Dependencies

• Bump ubi9/ubi-minimal from 1781496842 to 1782797355 by @dependabot[bot] in Bump ubi9/ubi-minimal from 1781496842 to 1782797355 netobserv-web-console#1594
• Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.4-community.0.20260526070517-19644c4749ad to 1.11.5-community by @dependabot[bot] in Bump github.com/netobserv/netobserv-ebpf-agent from 1.11.4-community.0.20260526070517-19644c4749ad to 1.11.5-community netobserv-web-console#1584
• Bump undici from 7.24.7 to 7.28.0 in /web by @dependabot[bot] in Bump undici from 7.24.7 to 7.28.0 in /web netobserv-web-console#1582
• Bump github.com/prometheus/common from 0.68.1 to 0.70.0 by @dependabot[bot] in Bump github.com/prometheus/common from 0.68.1 to 0.70.0 netobserv-web-console#1599
• Bump ws from 8.20.0 to 8.21.1 in /web by @dependabot[bot] in Bump ws from 8.20.0 to 8.21.1 in /web netobserv-web-console#1600
• Bump systeminformation from 5.31.6 to 5.31.17 in /web by @dependabot[bot] in Bump systeminformation from 5.31.6 to 5.31.17 in /web netobserv-web-console#1601
• Bump websocket-driver from 0.7.4 to 0.7.5 in /web by @dependabot[bot] in Bump websocket-driver from 0.7.4 to 0.7.5 in /web netobserv-web-console#1602
• Bump qs, @cypress/request and express in /web by @dependabot[bot] in Bump qs, @cypress/request and express in /web netobserv-web-console#1604

Full Changelog: netobserv/netobserv-web-console@v1.11.5-community...v1.12.0-community

---

This discussion was created from the release 1.12.0-community.