Skip to content

Releases: kubescape/storage

Release v0.0.274

30 Apr 13:42
@github-actions github-actions
v0.0.274
2a689d8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.274 Latest
Latest

Summary by CodeRabbit

  • Bug Fixes

    • Improved cleanup operations to properly handle pod-based workloads as cleanable resource types. Pods are now correctly processed during cleanup cycles, ensuring orphaned pod profiles are appropriately removed.

  • Tests

    • Added tests validating pod cleanup behavior in standalone scenarios, confirming proper profile removal and retention across different workload configurations.
Assets 2
Loading

Release v0.0.272

16 Apr 13:02
@github-actions github-actions
v0.0.272
2dbea36
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.272

Summary

Fixes open Dependabot security alerts for the main module (go.mod):

  • #68 (HIGH): github.com/go-jose/go-jose/v4 — Go JOSE Panics in JWE decryption — bumped v4.1.3 → v4.1.4
  • #58 (MEDIUM): github.com/anchore/syft — Syft improper temporary file cleanup — bumped v1.32.0 → v1.42.3

The syft bump also transitively upgrades github.com/docker/docker from v28.3.3 → v28.5.2, providing partial mitigation for alerts #64 and #66 (no fully patched version ≥ 29.3.1 is available yet via the dependency chain).

Test plan

  • go build ./... succeeds
  • go mod tidy applied cleanly
  • CI passes

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated Go toolchain to a newer patch version for improved stability and security.
    • Upgraded core and indirect dependencies across the project, including security libraries and container ecosystem tools, to their latest versions for enhanced functionality and bug fixes.
Loading

Release v0.0.271

16 Apr 12:46
@github-actions github-actions
v0.0.271
2dbea36
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.271

Summary

Fixes open Dependabot security alerts for tests/integration-test-suite/go.mod:

Alert Package Old New Severity
#76 go.opentelemetry.io/otel/sdk 1.35.0 1.43.0 HIGH
#75 otlptrace/otlptracehttp 1.35.0 1.43.0 MEDIUM
#71 otlpmetric/otlpmetrichttp 1.35.0 1.43.0 MEDIUM
#69 otlplog/otlploghttp 0.11.0 0.19.0 MEDIUM
#67 github.com/go-jose/go-jose/v4 4.0.5 4.1.4 HIGH

All packages are indirect dependencies pulled via github.com/kubescape/node-agent and github.com/kubescape/storage. The upgrades were applied with go get and go mod tidy.

Remaining unfixable alerts

  • #64/#66: github.com/docker/docker — Moby AuthZ plugin bypass / off-by-one error — no patched version available yet (requires ≥ 29.3.1, which isn't released as a Go module). These alerts are also present in the integration-test-suite but cannot be resolved until upstream releases a fix.

Test plan

  • go mod tidy applied cleanly
  • All target packages at patched versions (verified via grep)
  • CI passes

🤖 Generated with Claude Code

Loading

Release v0.0.270

16 Apr 07:46
@github-actions github-actions
v0.0.270
6478a9c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.270 
Merge pull request #312 from kubescape/bump

chore(deps): update go-logger to v0.0.28
Loading

Release v0.0.268

14 Apr 12:40
@github-actions github-actions
v0.0.268
7a411ec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.268

Summary

HostTypeEksEc2 was accidentally removed alongside HostTypeEcsService/HostTypeEcsTask in #310. Only the latter two were deleted from armoapi-go — HostTypeEksEc2 still exists and is a valid host type.

Summary by CodeRabbit

  • Bug Fixes
    • EksEc2 host type configuration is now supported. Previously, configurations specifying this host type would fail with an unsupported error; they now process correctly.
Loading

Release v0.0.267

14 Apr 11:22
@github-actions github-actions
v0.0.267
18d4e8f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.267

Summary

  • Remove references to armotypes.HostTypeEcsService and armotypes.HostTypeEcsTask — deleted from armoapi-go in armosec/armoapi-go#628 (SUB-6879, redundant host types)
  • Bump armoapi-go from v0.0.693 to v0.0.696

These were duplicates of HostTypeEcsEc2 / HostTypeEcsFargate which remain. The removal unblocks downstream repos (postgres-connector, event-ingester-service) from upgrading armoapi-go.

Summary by CodeRabbit

  • Breaking Changes

    • Removed support for ECS Service, ECS Task, and EKS EC2 host types. Configurations using these host types will now return an error.

  • Dependencies

    • Updated internal dependencies.
Loading

Release v0.0.266

13 Apr 14:45
@github-actions github-actions
v0.0.266
5b3aa80
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.266

Sorry, we do not accept changes directly against this repository. Please see
CONTRIBUTING.md for information on where and how to contribute instead.

Summary by CodeRabbit

  • Refactor
    • Registry storage keys expanded to include cloud account identifier and region for improved multi-cloud organization.
    • Default host entries now populate and validate the additional cloud account and region fields when reading and writing stored keys.
Loading

Release v0.0.265

02 Apr 12:24
@github-actions github-actions
v0.0.265
3bf543a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.265

Summary by CodeRabbit

  • Bug Fixes

    • Fixed locking behavior during container profile retrieval to prevent race conditions and ensure consistent reads during concurrent access.

  • Performance

    • Improved concurrent access and migration handling to reduce contention and speed up storage read/write operations under load.
Loading

Release v0.0.264

01 Apr 16:52
@github-actions github-actions
v0.0.264
8bc5305
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.264

Fixes #304
This is safe to do after ensuring kubescape/kubevuln#339

Summary by CodeRabbit

  • Bug Fixes
    • Improved error resilience by gracefully initializing default values instead of returning errors in edge cases.
Loading

Release v0.0.263

01 Apr 13:03
@github-actions github-actions
v0.0.263
4e4ccf5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Release v0.0.263

Bumps github.com/cilium/cilium from 1.16.17 to 1.17.14.

Release notes

Sourced from github.com/cilium/cilium's releases.

1.17.14

Summary of Changes

Bugfixes:

CI Changes:

Misc Changes:

Other Changes:

... (truncated)

Changelog

Sourced from github.com/cilium/cilium's changelog.

v1.17.14

Summary of Changes

Bugfixes:

CI Changes:

Misc Changes:

Read more
Loading