v1.130.4

Changelog

• 58bf3a7 chore(deps): upgrade Go from 1.26.1 to 1.26.3 (#5907)
• ab197b5 chore(deps): upgrade github.com/replicatedhq/troubleshoot to v0.128.1 (#5908)

v1.130.3

Changelog

• c3393e8 chore(deps): fix npm package vulnerabilities in web and e2e/playwright (#5905)
• 7d9c6cb Update KOTS image dependency tags (#5906)
• 8c319b1 chore(deps): bump mshick/add-pr-comment from 2 to 3 (#5838)
• 1993c7f chore(deps): bump dorny/paths-filter from 3 to 4 (#5835)
• 7aeded0 chore(deps): bump azure/setup-helm from 4 to 5 (#5837)
• 6fb080d chore(deps): bump hashicorp/setup-terraform from 3 to 4 (#5836)
• c95634f chore(deps): bump chainguard-images/actions (#5898)
• 3923648 chore(deps): bump actions/github-script from 8 to 9 (#5901)
• 3196a5d chore(deps): bump chainguard-dev/actions (#5899)
• 24d3abe chore(deps): bump chainguard-images/actions (#5900)
• e0cc12d Update KOTS image dependency tags (#5904)
• 995910b Update KOTS image dependency tags (#5902)
• 09c36a2 chore(deps): bump github.com/go-git/go-git/v5 (#5903)
• d2f07eb build-test: bump hardcoded k8s versions from 1.30 to 1.33 (#5896)
• 2760f02 chore(deps): bump the npm_and_yarn group across 2 directories with 3 updates (#5897)
• 640917a chore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.3 (#5834)
• e7b7d70 Update KOTS image dependency tags (#5895)
• 19dffda chore(deps): unpin rqlite (#5894)
• 73f4543 chore(deps): bump chainguard-images/actions (#5883)
• 5916b82 chore(deps): bump chainguard-dev/actions (#5884)
• ec46b47 chore(deps): bump chainguard-images/actions (#5885)
• 1347d56 Update KOTS image dependency tags (#5893)
• 66d95d6 chore(deps): bump github.com/docker/cli (#5891)
• b9e11f9 chore(web): remove unused dependencies and config files (#5892)
• f78338c chore(deps): unpin deps, patch cves (#5890)
• 8e5dc33 chore(deps): bump postcss (#5877)
• 8ca38de Update KOTS image dependency tags (#5887)
• 0dbb9d5 chore(deps): bump replicatedhq/replicated-actions (#5886)

v1.130.2

Changelog

• 0b57afb revert: downgrade rqlite to 9.4.5 (#5882)
• 5a94b07 fix(ci): copy minio from proxy registry instead of building with apko (#5879)
• 99ccd9e fix: honor helm dependency alias when injecting replicated values (#5878)
• b5a9dfa fix: prevent deploying updates when current required version is failed to be deployed (#5790)
• 826bc99 fix: resolve dependabot security alerts (#5866)

v1.130.1

Changelog

• 79fe6d6 chore(ci): fix regression tests (#5872)
• 27c9151 chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates (#5870)
• 0034a83 fix: upgrade hashicorp/terraform to 1.14.9 to resolve aws-cli pyexpat crash (#5868)
• 6465e3d chore(deps): bump the go_modules group across 1 directory with 2 updates (#5869)
• 32fd289 revert: remove cve0 s3cmd/py3 version pins now that packaging bugs are fixed (#5864)
• e3b8aae test: eliminate network calls from localImageName tests (#5867)
• 5a95f39 Revert "fix: auto-save uncommitted implementation work (gt-pvx safety net)"
• 3e7d02c Revert "fix: resolve dependabot security alerts (ko-mcb)"
• 2ea5887 fix: auto-save uncommitted implementation work (gt-pvx safety net)
• de9d966 fix: resolve dependabot security alerts (ko-mcb)
• e643e7c Add icu-data-full as build time dependnecy for kotsadm (#5865)
• ac419a4 chore(deps): bump follow-redirects (#5857)
• e5bc246 fix: address Dependabot security vulnerabilities (#5856)
• eff7d6f chore(deps): bump chainguard-images/actions (#5851)
• b93f8e3 chore(deps): bump chainguard-images/actions (#5849)
• 8a6cfff chore(deps): bump github.com/go-jose/go-jose/v4 (#5847)
• d1aaa34 chore(deps): bump lodash (#5846)
• 8237812 chore: update golang to 1.26.1 to address CVEs (#5844)

v1.130.0

Changelog

• fc6e3a7 Another cosign fix (#5843)
• c86827a fix how cosign signs kots bundles (#5842)
• f2c2889 fix: pin axios to 1.13.5 to prevent upgrade to compromised 1.14.1 (#5841)
• 0d766e0 chore: comment out airgapped install test in regression workflow (#5840)
• 6227457 chore(deps): bump github.com/go-git/go-git/v5 (#5839)
• 176b930 Switch melange and apko files to use cve0 APK repo (#5826)
• d9ec012 chore(deps): bump handlebars (#5831)
• 8c6a5db fix: sort minio image tags numerically by revision number (#5830)
• a450921 chore(deps): bump GitHub Actions dependencies (#5825)
• 01d8821 Revert "fix: disable only-fixed in image scans to auto-close stale CVE alerts…" (#5829)
• ee64880 fix: disable only-fixed in image scans to auto-close stale CVE alerts (#5828)
• a8ca85b updated js-yaml to resolve vulnerability (#5827)
• 52f64bd Update KOTS image dependency tags (#5823)
• b7f0961 chore(deps): bump sigstore/cosign-installer from 3.10.1 to 4.0.0 (#5671)
• 378ddf9 chore(deps): bump peter-evans/create-pull-request from 7 to 8 (#5720)
• 224b4c1 chore(deps): bump chainguard-images/actions (#5801)
• 8485855 chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates (#5822)
• 0154cfd chore(deps): bump actions/upload-artifact (#5800)
• c1f7ac5 chore(deps): bump actions/upload-artifact from 6 to 7 (#5804)
• 02f6e6f Replace trivy with syft for license scanning (#5824)
• 5efaa8c chore(deps): bump google.golang.org/grpc (#5820)
• e7c5ae7 feat: append --server-side=false when helm --force or --force-replace flags are passed (#5821)
• 49d730b feat: migrate Helm rendering from v3 to v4 (#5819)
• 4ba284b Update KOTS image dependency tags (#5816)
• 72bba0e fix: add local artifact mirror image to distribute-artifacts command (#5812)
• 70b8aa5 Update KOTS image dependency tags (#5815)
• f8e279b push tag+sha images to the tag location with 'PreserveDigests:true' (#5813)
• bc77c43 chore(ci): upgrade replicated-actions for better cmx error visibility (#5811)
• 6f3a4af Update KOTS image dependency tags (#5814)
• 9625a14 chore(test): various e2e improvements (#5809)
• 1df4c7f chore(test): fix change channel race condition (#5795)
• 078ea3c chore(test): use up-to-date replicatedhq/replicated-actions action (#5808)
• 0146800 chore(test): fix e2e snapshot card not visible (#5807)
• 2463736 Update KOTS image dependency tags (#5806)
• 83bfeba chore(deps): bump github.com/bitnami-labs/sealed-secrets (#5793)
• f123cb7 chore(test): fix regression test failures (#5792)
• e4ff2ac Update README to link to docs instead of archived Sentry Pro example (#5791)
• 3bb11f9 chore(deps): bump github.com/cloudflare/circl (#5789)
• 0cbf35c allow redeploy failed required release with config change only (#5787)

v1.129.4

Changelog

• f8b4bc2 Automated KOTS Image Dependency Tag Update (#5788)
• d99ebc3 Bump Go to 1.25.7 and Helm to 3.20.0 to fix image CVEs (#5786)
• 867fa56 chore(deps): bump chainguard-images/actions (#5785)
• 25a04c6 chore(deps): bump chainguard-images/actions (#5783)
• b703ae2 Update KOTS image dependency tags (#5765)
• aedcf39 update to go get go.podman.io/storage@main to get fix for zstd compressed images without annotations (#5782)
• ea4e399 chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates (#5781)
• 05c0818 chore(deps): bump the go_modules group across 2 directories with 5 updates (#5780)
• 8edb371 Improve Cluster Association (#5774)
• 45175e0 fix(ci): regression test airgap velero image pull errors (#5776)
• 13ba698 fix: cache rqlite plugin in kotsadm-migrations container (#5775)
• 8588e3b fix: upgrade service panic in embedded cluster without REPLICATED_APP_ENDPOINT (#5770)
• 81e6f5f Fix EC v2 airgap app-only upgrade panic due to missing artifacts (#5769)
• 0db8e00 Update KOTS image dependency tags (#5764)
• af90bcb chore(deps): bump chainguard-images/actions (#5763)
• d1d6084 chore(deps): bump chainguard-images/actions (#5761)
• 543461a update a number of go dependencies (#5760)

v1.129.3

Changelog

• 6214eb6 Update KOTS image dependency tags (#5759)
• a3ad2b7 fix: required release can be skipped (#5757)
• 62621d8 Update glob and react-router (#5756)
• 8712b3f Update sigstore/fulcio to 1.8.5 (#5754)
• 7a4a5c8 fix(ci): strip v prefix when promoting kurl addon (#5755)
• 1da9f2c Update npm dependencies (#5753)

v1.129.2

Changelog

• b7cedb7 Free disk space for gorelease (#5752)
• 83fe392 Do not error on license data validation errors (#5751)
• 3e3091b Improve --skip-preflights flag description (#5750)
• aa94d8b Pin Helm version to v3 in apko (#5749)
• b882d3a Fix bug where nonce is incorrectly reused (#5747)
• ec9be37 Update KOTS image dependency tags (#5748)
• 66167bb fix: Add version-agnostic fingerprints to Grype SARIF output (#5746)
• dd3da4b Update KOTS image dependency tags (#5745)
• 82aa657 Update KOTS image dependency tags (#5744)
• 3495bdc Update KOTS image dependency tags (#5743)
• aa33392 Update KOTS image dependency tags (#5742)
• c91be0e Update KOTS image dependency tags (#5741)
• 28f4730 Bump kubernetes module (#5739)
• 612b3de Distribute artifacts on app-only upgrades (#5730)
• 4dcbf33 chore(deps): bump chainguard-images/actions (#5738)
• e138705 chore(deps): bump chainguard-images/actions (#5737)
• 26a9fce Update KOTS image dependency tags (#5736)
• 67f9a94 bump kots kinds (#5733)
• 6995723 Set to always run full cluster upgrade (#5729)
• b8b858e chore(deps): bump chainguard-images/actions (#5724)
• d525242 chore(deps): bump actions/download-artifact from 6 to 7 (#5719)
• 78c3fd5 chore(deps): bump actions/upload-artifact from 5 to 6 (#5717)
• 40eb331 chore(deps): bump actions/download-artifact (#5722)
• bfb91f7 chore(deps): bump actions/upload-artifact (#5723)
• 70172c6 chore(deps): bump actions/upload-artifact (#5725)
• e7c43e5 chore(deps): bump actions/upload-artifact in /.github/actions/kots-e2e (#5726)
• 3ed58c5 chore(deps): bump actions/upload-artifact in /.github/actions/scan-image (#5727)
• 063b42e chore(deps): bump go version to 1.25.5 (#5728)
• f62fdb1 fix(ec): fix check for kots bin path (#5716)
• 0021ba8 Update KOTS image dependency tags (#5714)
• eafb0e4 chore(deps): bump actions/checkout from 5 to 6 (#5712)
• 927502c chore(deps): bump github.com/sigstore/fulcio (#5710)
• 0032555 chore(ci): fix publish kurl addon action, strip v prefix from tag (#5711)

v1.129.1

Changelog

• 1865300 Shifts license verification upstream (#5699)
• ba9fe42 Add registry prefix to kotsadm images (#5707)
• b1d09eb Update KOTS image dependency tags (#5709)
• eabf32a Update KOTS image dependency tags (#5708)
• 9cafc5e chore(deps): bump chainguard-images/actions (#5660)
• 893f4e9 chore(deps): bump chainguard-images/actions (#5658)
• 0e43e47 chore(ci): update artifact actions (#5706)
• 577d095 fix(ci): fix workflow promote-kurl-release (#5705)
• 08f4124 fix(ci): kurl addon release should not be marked as released until promotion (#5704)
• 6f82494 Update KOTS image dependency tags (#5703)
• f994357 fix broken redactor link (#5694)
• b8ccbc9 Update KOTS image dependency tags (#5701)
• 5de7d7f chore(deps): bump actions/checkout from 5 to 6 (#5700)
• aadee49 Adds missing fields to LicenseFieldValue (#5698)
• 3b204ca chore(ci): use cve0 for kotsadm migrations image (#5697)
• 0857fe2 chore(deps): bump the go_modules group across 2 directories with 1 update (#5696)
• 44cf9f8 chore(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.1 (#5695)
• 61e5e49 chore(ci): use rqlite securebuild image (#5692)
• e7736ec chore(ci): print scan results on failed severity cutoff (#5691)
• 711b2ed Update KOTS image dependency tags (#5693)
• c927363 chore(ci): fix regression tests (#5686)
• a083def Update KOTS image dependency tags (#5688)
• 9c5c8e3 chore(ci): use dex securebuild image (#5687)
• 7b5e977 Update KOTS image dependency tags (#5685)
• d30d1b1 Revert "Update KOTS image dependency tags (#5668)" (#5684)
• bbc1e7c Update KOTS image dependency tags (#5683)
• 390ac89 Updates node package in melange build (#5682)
• b72b158 chore(deps): bump min-document (#5681)
• 0c0671a Update Go to 1.25.4 (#5678)
• 9776dd8 Add support for v1beta2 License API (#5675)
• 511861c Update KOTS image dependency tags (#5679)
• d5e214f chore(deps): bump github.com/containerd/containerd (#5677)
• befe425 chore(deps): bump github.com/opencontainers/runc (#5676)
• 89872d7 feat: Implement KOTS linter migration (#5670)
• cdd93be Update KOTS image dependency tags (#5674)
• 1089524 Add app redirect path unit tests (#5673)
• a9de104 Update KOTS image dependency tags (#5672)

v1.129.0

Changelog

• c927363 chore(ci): fix regression tests (#5686)
• a083def Update KOTS image dependency tags (#5688)
• 9c5c8e3 chore(ci): use dex securebuild image (#5687)
• 7b5e977 Update KOTS image dependency tags (#5685)
• d30d1b1 Revert "Update KOTS image dependency tags (#5668)" (#5684)
• bbc1e7c Update KOTS image dependency tags (#5683)
• 390ac89 Updates node package in melange build (#5682)
• b72b158 chore(deps): bump min-document (#5681)
• 0c0671a Update Go to 1.25.4 (#5678)
• 9776dd8 Add support for v1beta2 License API (#5675)
• 511861c Update KOTS image dependency tags (#5679)
• d5e214f chore(deps): bump github.com/containerd/containerd (#5677)
• befe425 chore(deps): bump github.com/opencontainers/runc (#5676)
• 89872d7 feat: Implement KOTS linter migration (#5670)
• cdd93be Update KOTS image dependency tags (#5674)
• 1089524 Add app redirect path unit tests (#5673)
• a9de104 Update KOTS image dependency tags (#5672)