3.5.0
Changelog
[3.5.0] - 2026-07-22
Features
Falco Upgrade
- upgrade falco to 0.43.0
- upgrade falco-libs to 0.23.1
- upgrade plugins to v0.7.1
- upgrade falco.yaml config for plugins
Enhancements
- Reduce Scan Manager to least privilege on non-OpenShift clusters by removing OpenShift-specific RBAC that is not required outside OpenShift.
- Add
openshift.enabledfield invalues.yamlto allow explicitly overriding OpenShift platform detection, covering environments where auto-detection is unreliable - Skip the api-server-modifier DaemonSet and its ClusterRole on OpenShift, where the kube-apiserver is operator-managed and has no static pod manifest to mutate
Full Changelog: 3.4.2...3.5.0
Upgrade instructions
Sample upgrade command:
helm upgrade \
--values overrides.yaml \
--namespace trendmicro-system \
trendmicro \
https://github.com/trendmicro/visionone-container-security-helm/archive/3.5.0.tar.gz