v3.12.0

This stable release has no other functional changes from v3.12.0-rc.0.

Notable changes

• 📦 New AssignImage mutator #2429
• 📢 Emit events in the involved objects namespace #2360
• 🥳 Update to Open Policy Agent (OPA) v0.49.2 #2611
• 🚂 Added multi-engine support to allow integration with Kubernetes CEL ValidatingAdmissionPolicy in the future #2616
• 👏 Enable exempt namespace suffix with --exempt-namespace-suffix flag #2636

Features

• Allow writing logs to custom file (#2473) #2473 (Max Smythe)
• More verbose logging for audit (#2503) #2503 (Max Smythe)
• helm: Add a network policy for the controller manager (#2514) #2514 (Kyle Michel)
• enforce kind on admission review (#2512) #2512 (alex)
• add the errorlint check for golangci-lint (#2519) #2519 (Fish-pro)
• implement AssignImage mutator (#2429) #2429 (Davis Haba)
• introduce gci to unify the order of package import (#2545) #2545 (Fish-pro)
• add unconvert check for golang-lint (#2554) #2554 (Fish-pro)
• Emit events in the involved objects namespace (#2360) #2360 (Craig Trought)
• add support for exempt namespace suffix (#2636) #2636 (Janusz Marcinkiewicz)

Bug Fixes

• cutpath for ../ paths (#2498) #2498 (alex)
• when docker build in arm or other not amd64 env. (#2492) #2492 (yanggang)
• high-risk vulnerabilities caused by low version of kubebuilder and yq (#2505) #2505 (fsl)
• syntax errors in the document (#2520) #2520 (Fish-pro)
• updating url in doc config (#2549) #2549 (Jaydipkumar Arvindbhai Gabani)
• add --operation=mutation-controller flag (#2542) #2542 (Davis Haba)
• add vendor manifests back (#2558) #2558 (Sertaç Özercan)
• add missing namespace to static Helm templates (#2593) #2593 (Devon Crouse)
• handle empty spec for modifyset (#2585) #2585 (alex)
• piping input in gator (#2589) #2589 (alex)
• generate mock name for expanded resources (#2529) #2529 (Davis Haba)
• Allow to change WebhookConfiguration name and change preInstall crd image (#2563) #2563 (Jiri Tyr)
• support source field in Constraints (#2552) #2552 (Davis Haba)
• helm: switch to curl as ENTRYPOINT for probeWebhook (#2632) #2632 (thomasmckay)
• index readiness trackers by GK (not GVK) (#2635) #2635 (Davis Haba)

Documentation

• generate 3.11 docs (#2501) #2501 (Sertaç Özercan)
• fix syntax errors (#2513) #2513 (Nico Wang)
• Fix typo in website docs (#2528) #2528 (triangularcover)
• fix example code snippet for docs (#2539) #2539 (triangularcover)
• fix expansion yaml example (#2551) #2551 (Sertaç Özercan)
• update k8s.gcr.io to registry.k8s.io (#2588) #2588 (Rita Zhang)
• Add background information on mutation (#2387) #2387 (Max Smythe)
• Add mutation background to 3.11 (#2590) #2590 (Max Smythe)
• helm: Fix helm chart documentation for setting audit and webhook selectors and affinity (#2617) #2617 (Max Falk)

Code Refactoring

• use Go 1.18 buildinfo (#2541) #2541 (Sertaç Özercan)

Tests

• add some audit tests (#2489) #2489 (Sertaç Özercan)

Continuous Integration

• Releasing benchmarks and benchmarking PR (#2432) #2432 (Jaydipkumar Arvindbhai Gabani)
• add license lint wf for cncf approved licenses (#2461) #2461 (alex)
• remove kubebuilder dependency (#2524) #2524 (Sertaç Özercan)
• helm: remove unused kustomize step when upgrading (#2564) #2564 (Sertaç Özercan)
• pin golang image to unblock ci (#2573) #2573 (Sertaç Özercan)
• move k8s.gcr.io to registry.k8s.io (#2572) #2572 (Sertaç Özercan)
• remove k8s 1.23 from matrix (#2609) #2609 (Sertaç Özercan)
• bump ci to golang 1.20 (#2597) #2597 (Sertaç Özercan)
• generate sbom and provenance (#2540) #2540 (Sertaç Özercan)

Chores

• modify all error contrast judgments by errors (#2491) #2491 (Fish-pro)
• bump actions/checkout from 3.2.0 to 3.3.0 (#2499) #2499 (dependabot[bot])
• bump peaceiris/actions-gh-pages from 3.9.0 to 3.9.1 (#2500) #2500 (dependabot[bot])
• bump github/codeql-action from 2.1.37 to 2.1.38 (#2517) #2517 (dependabot[bot])
• bump peaceiris/actions-gh-pages from 3.9.1 to 3.9.2 (#2521) #2521 (dependabot[bot])
• bump github/codeql-action from 2.1.38 to 2.1.39 (#2525) #2525 (dependabot[bot])
• update docs (#2526) #2526 (Shawn Warren)
• bump k8s.io/client-go from 0.24.9 to 0.24.10 (#2533) #2533 (dependabot[bot])
• Upgrade to k8s v0.26.1 and controller-runtime fork (#2530) #2530 (Max Smythe)
• bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2536) #2536 (dependabot[bot])
• bump ua-parser-js from 0.7.31 to 0.7.33 in /website (#2535) #2535 (dependabot[bot])
• bump github/codeql-action from 2.1.39 to 2.2.1 (#2543) #2543 (dependabot[bot])
• bump @docusaurus/core from 2.1.0 to 2.3.0 in /website (#2547) #2547 (dependabot[bot])
• bump @docusaurus/preset-classic from 2.1.0 to 2.3.0 in /website (#2546) #2546 (dependabot[bot])
• the linter structcheck varcheck and deadcode are deprecated (since v1.49.0) (#2550) #2550 (Fish-pro)
• modify the typecheck as prompted (#2553) #2553 (Fish-pro)
• bump github/codeql-action from 2.2.1 to 2.2.4 (#2581) #2581 (dependabot[bot])
• bump @docusaurus/core from 2.3.0 to 2.3.1 in /website (#2566) #2566 (dependabot[bot])
• bump http-cache-semantics from 4.1.0 to 4.1.1 in /website (#2565) #2565 (dependabot[bot])
• bump @docusaurus/preset-classic from 2.3.0 to 2.3.1 in /website (#2567) #2567 (dependabot[bot])
• bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.4 (#2568) #2568 (dependabot[bot])
• clean up repeated package import (#2579) #2579 (Fish-pro)
• bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#2586) #2586 (dependabot[bot])
• bump golang.org/x/net from 0.4.0 to 0.7.0 (#2594) #2594 (dependabot[bot])
• bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#2604) #2604 (dependabot[bot])
• bump dns-packet from 5.3.1 to 5.4.0 in /website (#2610) #2610 (dependabot[bot])
• bump github/codeql-action from 2.2.4 to 2.2.5 (#2603) #2603 (dependabot[bot])
• update frameworks to 89ae90 (#2611) #2611 (Sertaç Özercan)
• bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 (#2615) #2615 (dependabot[bot])
• Upgrade CF for multi-engine (#2616) #2616 (Max Smythe)
• bump github/codeql-action from 2.2.5 to 2.2.6 (#2619) #2619 (dependabot[bot])
• bump @sideway/formula from 3.0.0 to 3.0.1 in /website (#2621) #2621 (dependabot[bot])
• bump github.com/onsi/gomega from 1.27.2 to 1.27.4 (#2623) #2623 (dependabot[bot])
• bump kubectl (#2624) #2624 (Rita Zhang)
• bump go.uber.org/automaxprocs from 1.5.1 to 1.5.2 (#2627) #2627 (dependabot[bot])
• bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 (#2630) #2630 (dependabot[bot])
• bump actions/setup-go from 3 to 4 (#2625) #2625 (dependabot[bot])
• bump github/codeql-action from 2.2.6 to 2.2.8 (#2637) #2637 (dependabot[bot])
• Prepare v3.12.0-rc.0 release (#2647) #2647 (github-actions[bot])

New Contributors

• @congiv made their first contribution in #2389
• @Fish-pro made their first contribution in #2483
• @yanggangtony made their first contribution in #2492
• @fengshunli made their first contribution in #2505
• @wangzihao05 made their first contribution in #2513
• @krmichelos made their first contribution in #2514
• @triangularcover made their first contribution in #2528
• @swarren83 made their first contribution in #2526
• @devoncrouse made their first contribution in #2593
• @ctrought made their first contribution in #2360
• @gmdfalk made their first contribution in #2617
• @VirrageS made their first contribution in #2636

Full Changelog: v3.11.0...v3.12.0