v0.4.0

[rikatz]

Major themes

• Various improvements on the installation process and on manifest generation process
• Hardening of the operator security
• API hardening

What's Changed

• fix(olm): gitignore generated bundle output to fix catalog release by @aslakknutsen in fix(olm): gitignore generated bundle output to fix catalog release #189
• fix(olm): render bundle with openshift.enabled and remove required CRDs by @aslakknutsen in fix(olm): render bundle with openshift.enabled and remove required CRDs #190
• feat(olm): embed Coraza 40×40 icon in CSV template by @aslakknutsen in feat(olm): embed Coraza 40×40 icon in CSV template #192
• feat(makefile): unify image registry/org under IMAGE_REGISTRY variable by @aslakknutsen in feat(makefile): unify image registry/org under IMAGE_REGISTRY variable #193
• Add comprehensive integration test suite with parallel execution support by @ctartici in Add comprehensive integration test suite with parallel execution support #194
• deps(deps): bump golang from c7e98cc to 595c784 by @dependabot[bot] in deps(deps): bump golang from c7e98cc to 595c784 #204
• deps(deps): bump the all-updates group across 1 directory with 3 updates by @dependabot[bot] in deps(deps): bump the all-updates group across 1 directory with 3 updates #203
• ci(deps): bump the actions-updates group with 2 updates by @dependabot[bot] in ci(deps): bump the actions-updates group with 2 updates #202
• Add kube-api-linter by @shaneutt in Add kube-api-linter #196
• add podman support for operator deployment by @ctartici in add podman support for operator deployment #207
• test: fix race condition while reading logs by @alexsnaps in test: fix race condition while reading logs #211
• change default operator image name by @ctartici in change default operator image name #212
• Unsupported RuleSet Validation by @shaneutt in Unsupported RuleSet Validation #213
• deps(deps): bump the all-updates group across 2 directories with 2 updates by @dependabot[bot] in deps(deps): bump the all-updates group across 2 directories with 2 updates #216
• ci(deps): bump the actions-updates group with 2 updates by @dependabot[bot] in ci(deps): bump the actions-updates group with 2 updates #217
• fix(helm): omit Istio revision by default; set per install path by @aslakknutsen in fix(helm): omit Istio revision by default; set per install path #218
• serialize gateway creation and use existing Istio revision by @ctartici in serialize gateway creation and use existing Istio revision #219
• deps(deps): bump github.com/antchfx/xpath from 1.3.3 to 1.3.6 in /test/conformance by @dependabot[bot] in deps(deps): bump github.com/antchfx/xpath from 1.3.3 to 1.3.6 in /test/conformance #225
• ci(deps): bump the actions-updates group with 3 updates by @dependabot[bot] in ci(deps): bump the actions-updates group with 3 updates #227
• Harden github actions by @rikatz in Harden github actions #235
• fix(wasmplugin): Missing Image Pull Secret Support by @ArthurVardevanyan in fix(wasmplugin): Missing Image Pull Secret Support #232
• fix codeql scan by @rikatz in fix codeql scan #241
• chore: update to golang 1.26.1 by @aslakknutsen in chore: update to golang 1.26.1 #263
• Share claude skills across the repo by @rikatz in Share claude skills across the repo #264
• modernize code with gofix by @rikatz in modernize code with gofix #265
• test(ftw): stupidly large retries by @alexsnaps in test(ftw): stupidly large retries #239
• deps(deps): bump the all-updates group across 2 directories with 2 updates by @dependabot[bot] in deps(deps): bump the all-updates group across 2 directories with 2 updates #226
• ci(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions-updates group by @dependabot[bot] in ci(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions-updates group #268
• feat(engine): optional wasm image with operator default by @aslakknutsen in feat(engine): optional wasm image with operator default #224
• Add automated OperatorHub submission pipeline by @aslakknutsen in Add automated OperatorHub submission pipeline #199
• Improve security on operator by @rikatz in Improve security on operator  #244
• Fix nil-pointer crashes and stderr routing from adversarial QA by @rikatz in Fix nil-pointer crashes and stderr routing from adversarial QA #271
• fix(manager): default Zap to production logging; chart exposes dev mode by @aslakknutsen in fix(manager): default Zap to production logging; chart exposes dev mode #272
• Override instead of ignore FTW violations by @rikatz in Override instead of ignore FTW violations #270
• feat(bundle): populate CSV alm-examples from config/samples by @aslakknutsen in feat(bundle): populate CSV alm-examples from config/samples #221
• feat(make): add OCI image labels for operator, bundle, catalog by @aslakknutsen in feat(make): add OCI image labels for operator, bundle, catalog #223
• feat: improve logging signal-to-noise for condition transitions and API errors by @aslakknutsen in feat: improve logging signal-to-noise for condition transitions and API errors #273
• fix(ruleset): replace regex error sanitization with fs.PathError detection by @aslakknutsen in fix(ruleset): replace regex error sanitization with fs.PathError detection #278
• Configure API linter and fix findings by @rikatz in Configure API linter and fix findings #280
• deps(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in deps(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 #276
• chore: cleanup and fixes by @shaneutt in chore: cleanup and fixes #274
• ci: publish Helm chart repository via chart-releaser on release tags by @aslakknutsen in ci: publish Helm chart repository via chart-releaser on release tags #200
• fix request body integration test by @rikatz in fix request body integration test #283
• Implement authentication on cache server by @rikatz in Implement authentication on cache server #240
• fix(helm): pin explicit production logging defaults by @aslakknutsen in fix(helm): pin explicit production logging defaults #281
• feat: exclude WASM-unsupported rules from kubectl-coraza generate by default by @aslakknutsen in feat: exclude WASM-unsupported rules from kubectl-coraza generate by default #282
• feat(cache): add RED Prometheus metrics for ruleset cache HTTP server by @aslakknutsen in feat(cache): add RED Prometheus metrics for ruleset cache HTTP server #279
• chore: small cleanup items by @shaneutt in chore: small cleanup items #285
• ci(deps): bump the actions-updates group with 5 updates by @dependabot[bot] in ci(deps): bump the actions-updates group with 5 updates #288
• deps(deps): bump golang from 1.26.1 to 1.26.2 by @dependabot[bot] in deps(deps): bump golang from 1.26.1 to 1.26.2 #289
• deps(deps): bump github.com/corazawaf/coraza/v3 from 3.6.0 to 3.7.0 in the all-updates group across 1 directory by @dependabot[bot] in deps(deps): bump github.com/corazawaf/coraza/v3 from 3.6.0 to 3.7.0 in the all-updates group across 1 directory #287
• Add initial docs generation for CKO by @rikatz in Add initial docs generation for CKO #290
• deps(deps): bump the all-updates group in /docs with 2 updates by @dependabot[bot] in deps(deps): bump the all-updates group in /docs with 2 updates #294
• feat: add metrics containerPort and ServiceMonitor relabeling passthrough by @Copilot in feat: add metrics containerPort and ServiceMonitor relabeling passthrough #291
• fix: remove unused webhook server configuration by @aslakknutsen in fix: remove unused webhook server configuration #296
• Publish docs and helm to github pages by @rikatz in Publish docs and helm to github pages #293
• bump pages actions for the right version by @rikatz in bump pages actions for the right version #297
• generate empty worktree for CR by @rikatz in generate empty worktree for CR #298

Full Changelog: v0.3.0...v0.4.0

---

This discussion was created from the release v0.4.0.