v1.36.0-rc2

• chore(deps): move back to official release of docker_credentials crate (#1771)
• chore(deps): update to latest version of sigstore-rs (#1760)
• Fix audit scanner cronJob (#1759)
• fix(deps): updates astral-tokio-tar to 0.6.2. (#1757)
• fix(chart): fix kubewarden-defaults version. (#1756)
• deps: Bump wasm-encoder, wasmparser to 0.249 (#1752)
• fix: handle docker credential files missing auth field (#1735)
• chore: use new name in PROJECT file, update release issue template (#1737)
• Migrate serde_yaml to yaml_serde (#1732)
• tests(helm): Annotated crds_test.yml for helm unittest >= 1.1.0 (#1730)
• refactor: Drop config/ folder, save templates to charts, and move to examples/ (#1705)
• chore: bump kube vers (#1723)
• ci: Upload logs of Go e2e tests, rename Helm chart e2e GH job (#1718)
• chore: add release contributors section (#1690)
• fix(ci): updatecli checking for files that does not exist (#1713)
• chore: update container images to use adm-controller namespace (#1712)
• refactor: update repository references to adm-controller (#1701)
• feat(controller): allow custom labels on PolicyServer resources (#1699)

⚠️ Breaking changes

• feat!: Don't delete policies when deleting their PolicyServer (#1724)

🚀 Features

• feat!: Don't delete policies when deleting their PolicyServer (#1724)
• feat: add hostNetwork support (#1682)

🐛 Bug Fixes

• fix(deps): update rust dependencies (major) (#1765)
• fix(deps): update rust dependencies (#1764)
• fix(deps): update rust dependencies (#1728)
• fix(deps): update go dependencies (#1748)
• fix(chart): restrict restart hook to sidecar telemetry mode (#1738)
• fix(kwctl): malformatted markdown installing text (#1733)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• fix(deps): update go dependencies (#1688)
• fix(deps): update rust dependencies (#1707)

🧰 Maintenance

• build: v1.36.0-rc2 release (#1773)
• chore(deps): update cached crate (#1770)
• fix(deps): update rust dependencies (major) (#1765)
• fix(deps): update rust dependencies (#1764)
• build: v1.36.0-rc1 release (#1768)
• build(deps): lock file maintenance (#1766)
• chore(deps): update golang:1.26.3 docker digest to 2d6c802 (#1761)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.152.1 - autoclosed (#1763)
• chore(deps): update github actions (#1762)
• fix(deps): update rust dependencies (#1728)
• build: v1.36.0-beta.1 release (#1755)
• chore(deps): update github actions (#1747)
• chore(deps): update golang:1.26.3 docker digest to 313faae (#1746)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.152.0 (#1749)
• fix(deps): update go dependencies (#1748)
• build(deps): lock file maintenance (#1750)
• chore: update FOSSA link (#1736)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• chore(deps): update github actions (#1726)
• chore(deps): update golang docker tag to v1.26.3 (#1727)
• build(deps): lock file maintenance (#1729)
• chore(deps): update github actions (#1722)
• build: v1.36.0-alpha release (#1721)
• chore(deps): update kubewarden/github-actions action to v7 (#1719)
• chore: Remove audit-scanner folder, not needed (#1715)
• fix(deps): update go dependencies (#1688)
• chore(deps): Update Helm chart dependencies (#1711)
• build(deps): lock file maintenance (#1710)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.151.0 (#1709)
• chore(deps): update github actions (#1708)
• fix(deps): update rust dependencies (#1707)
• chore(deps): update github actions (#1696)

Contributors

@AkashKumar7902, @alegrey91, @chimera-kube-bot, @flavio, @jvanz, @kravciak, @kubewarden-auth-token-generator[bot], @renovate[bot], @sanjay7178, @viccuad, kubewarden-auth-token-generator[bot] and renovate[bot]

v1.36.0-rc1

• Fix audit scanner cronJob (#1759)
• fix(deps): updates astral-tokio-tar to 0.6.2. (#1757)
• fix(chart): fix kubewarden-defaults version. (#1756)
• deps: Bump wasm-encoder, wasmparser to 0.249 (#1752)
• fix: handle docker credential files missing auth field (#1735)
• chore: use new name in PROJECT file, update release issue template (#1737)
• Migrate serde_yaml to yaml_serde (#1732)
• tests(helm): Annotated crds_test.yml for helm unittest >= 1.1.0 (#1730)
• refactor: Drop config/ folder, save templates to charts, and move to examples/ (#1705)
• chore: bump kube vers (#1723)
• ci: Upload logs of Go e2e tests, rename Helm chart e2e GH job (#1718)
• chore: add release contributors section (#1690)
• fix(ci): updatecli checking for files that does not exist (#1713)
• chore: update container images to use adm-controller namespace (#1712)
• refactor: update repository references to adm-controller (#1701)
• feat(controller): allow custom labels on PolicyServer resources (#1699)

⚠️ Breaking changes

• feat!: Don't delete policies when deleting their PolicyServer (#1724)

🚀 Features

• feat!: Don't delete policies when deleting their PolicyServer (#1724)
• feat: add hostNetwork support (#1682)

🐛 Bug Fixes

• fix(deps): update rust dependencies (#1728)
• fix(deps): update go dependencies (#1748)
• fix(chart): restrict restart hook to sidecar telemetry mode (#1738)
• fix(kwctl): malformatted markdown installing text (#1733)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• fix(deps): update go dependencies (#1688)
• fix(deps): update rust dependencies (#1707)

🧰 Maintenance

• build: v1.36.0-rc1 release (#1768)
• build(deps): lock file maintenance (#1766)
• chore(deps): update golang:1.26.3 docker digest to 2d6c802 (#1761)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.152.1 - autoclosed (#1763)
• chore(deps): update github actions (#1762)
• fix(deps): update rust dependencies (#1728)
• build: v1.36.0-beta.1 release (#1755)
• chore(deps): update github actions (#1747)
• chore(deps): update golang:1.26.3 docker digest to 313faae (#1746)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.152.0 (#1749)
• fix(deps): update go dependencies (#1748)
• build(deps): lock file maintenance (#1750)
• chore: update FOSSA link (#1736)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• chore(deps): update github actions (#1726)
• chore(deps): update golang docker tag to v1.26.3 (#1727)
• build(deps): lock file maintenance (#1729)
• chore(deps): update github actions (#1722)
• build: v1.36.0-alpha release (#1721)
• chore(deps): update kubewarden/github-actions action to v7 (#1719)
• chore: Remove audit-scanner folder, not needed (#1715)
• fix(deps): update go dependencies (#1688)
• chore(deps): Update Helm chart dependencies (#1711)
• build(deps): lock file maintenance (#1710)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.151.0 (#1709)
• chore(deps): update github actions (#1708)
• fix(deps): update rust dependencies (#1707)
• chore(deps): update github actions (#1696)

Contributors

@AkashKumar7902, @alegrey91, @chimera-kube-bot, @flavio, @jvanz, @kravciak, @kubewarden-auth-token-generator[bot], @renovate[bot], @sanjay7178, @viccuad, kubewarden-auth-token-generator[bot] and renovate[bot]

v1.36.0-beta.1

• deps: Bump wasm-encoder, wasmparser to 0.249 (#1752)
• fix: handle docker credential files missing auth field (#1735)
• chore: use new name in PROJECT file, update release issue template (#1737)
• Migrate serde_yaml to yaml_serde (#1732)
• tests(helm): Annotated crds_test.yml for helm unittest >= 1.1.0 (#1730)
• refactor: Drop config/ folder, save templates to charts, and move to examples/ (#1705)
• chore: bump kube vers (#1723)
• ci: Upload logs of Go e2e tests, rename Helm chart e2e GH job (#1718)
• chore: add release contributors section (#1690)
• fix(ci): updatecli checking for files that does not exist (#1713)
• chore: update container images to use adm-controller namespace (#1712)
• refactor: update repository references to adm-controller (#1701)
• feat(controller): allow custom labels on PolicyServer resources (#1699)

⚠️ Breaking changes

• feat!: Don't delete policies when deleting their PolicyServer (#1724)

🚀 Features

• feat!: Don't delete policies when deleting their PolicyServer (#1724)
• feat: add hostNetwork support (#1682)

🐛 Bug Fixes

• fix(deps): update go dependencies (#1748)
• fix(chart): restrict restart hook to sidecar telemetry mode (#1738)
• fix(kwctl): malformatted markdown installing text (#1733)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• fix(deps): update go dependencies (#1688)
• fix(deps): update rust dependencies (#1707)

🧰 Maintenance

• build: v1.36.0-beta.1 release (#1755)
• chore(deps): update github actions (#1747)
• chore(deps): update golang:1.26.3 docker digest to 313faae (#1746)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.152.0 (#1749)
• fix(deps): update go dependencies (#1748)
• build(deps): lock file maintenance (#1750)
• chore: update FOSSA link (#1736)
• fix(deps): update k8s.io/utils digest to ff6756f (#1725)
• chore(deps): update github actions (#1726)
• chore(deps): update golang docker tag to v1.26.3 (#1727)
• build(deps): lock file maintenance (#1729)
• chore(deps): update github actions (#1722)
• build: v1.36.0-alpha release (#1721)
• chore(deps): update kubewarden/github-actions action to v7 (#1719)
• chore: Remove audit-scanner folder, not needed (#1715)
• fix(deps): update go dependencies (#1688)
• chore(deps): Update Helm chart dependencies (#1711)
• build(deps): lock file maintenance (#1710)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.151.0 (#1709)
• chore(deps): update github actions (#1708)
• fix(deps): update rust dependencies (#1707)
• chore(deps): update github actions (#1696)

Contributors

@AkashKumar7902, @alegrey91, @chimera-kube-bot, @flavio, @jvanz, @kubewarden-auth-token-generator[bot], @renovate[bot], @sanjay7178, @viccuad, kubewarden-auth-token-generator[bot] and renovate[bot]

v1.36.0-alpha

• chore: add release contributors section (#1690)
• fix(ci): updatecli checking for files that does not exist (#1713)
• chore: update container images to use adm-controller namespace (#1712)
• refactor: update repository references to adm-controller (#1701)
• feat(controller): allow custom labels on PolicyServer resources (#1699)

🐛 Bug Fixes

• fix(deps): update go dependencies (#1688)
• fix(deps): update rust dependencies (#1707)

🧰 Maintenance

• build: v1.36.0-alpha release (#1721)
• chore(deps): update kubewarden/github-actions action to v7 (#1719)
• chore: Remove audit-scanner folder, not needed (#1715)
• fix(deps): update go dependencies (#1688)
• chore(deps): Update Helm chart dependencies (#1711)
• build(deps): lock file maintenance (#1710)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.151.0 (#1709)
• chore(deps): update github actions (#1708)
• fix(deps): update rust dependencies (#1707)
• chore(deps): update github actions (#1696)

Contributors

@AkashKumar7902, @chimera-kube-bot, @flavio, @jvanz, @kubewarden-auth-token-generator[bot], @renovate[bot], @viccuad, kubewarden-auth-token-generator[bot] and renovate[bot]

v1.35.0

🔒 Security & 🚀 features

This release fixes GHSA-wqcw-g35j-j578.
Please have a look at the accompanying blogpost: https://kubewarden.io/blog/2026/04/adm-controller-1.35-release

• feat: Add host-capabilities whitelist (#1693)

🐛 Bug Fixes

• fix(deps): update rust crate wasmparser to 0.247 (#1676)
• fix(deps): update go dependencies to v0.35.4 (#1675)
• fix(ci): install kwctl version from Github Action. (#1662)
• fix(ci): fix breaking input name changes from kubewarden/github-actions (#1660)

🧰 Maintenance

• deps(ci): Bump syft-installer to v5.1.1 (#1697)
• fix: allow usage of Go WASI policies built by go 1.26 (#1683)
• ci: Don't bump container FROM tags with updatecli anymore (#1681)
• fix: shorten cluster name to fit into 32 chars limit (#1669)
• chore(ci): Actually use opa checksum for v1.12.2 (#1668)
• chore: Declare rancher 2.15 compatibility (#1664)
• Revert "fix(ci): install kwctl version from Github Action." (#1667)
• fix(ci): Set opa checksum, fixes burrego e2e tests (#1661)
• build: v1.35.0 release (#1695)
• build(deps): lock file maintenance (#1692)
• chore(deps): update rust dependencies (#1686)
• chore(deps): update golang:1.26.2 docker digest to b54cbf5 (#1685)
• chore(deps): update rust crate rustls-webpki to v0.103.13 [security] (#1684)
• deps(rust): update Rust toolchain to 1.95.0 (#1680)
• fix(deps): update rust crate wasmparser to 0.247 (#1676)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.150.1 (#1677)
• chore(deps): update golang:1.26.2 docker digest to 5f3787b (#1672)
• chore(deps): update alpine docker tag to v3.23.4 (#1673)
• chore(deps): update github actions (#1674)
• fix(deps): update go dependencies to v0.35.4 (#1675)
• build(deps): lock file maintenance (#1678)
• chore(deps): update rust crate rustls-webpki to v0.103.12 [security] (#1671)
• chore(deps): update github actions (#1666)
• chore(deps): update golang:1.26.2 docker digest to fcdb3e4 (#1654)
• build(deps): lock file maintenance (#1655)
• chore(deps): update github actions (major) (#1653)
• chore(deps): update rust dependencies (#1652)
• chore(deps): update github actions (#1651)

v1.34.2

• chore(deps): update wasmtime-provider (#1648)

🧰 Maintenance

• build: v1.34.2 release (#1650)

v1.34.1

• chore(deps): update wasmtime (#1642)
• chore: update go lang used in Dockerfile to v1.26.2 (#1643)

🧰 Maintenance

• build: v1.34.1 release (#1647)
• chore(deps): update rust dependencies (#1645)

v1.34.0

• chore: Port app-readme.md from helm-charts repo (#1632)
• ci: Check all autogenerated code (#1627)
• ci(release): Add contents read for build-kwctl step call (#1628)
• fix: pin versions and add checksum verifications (#1623)
• fix(ci): skip autolabeler in PR from forks (#1612)
• fix(ci): move permissions to job level (#1609)
• fix(ci): missing autolabeler permissions (#1608)
• fix(kwctl): normalize registry:// URIs to include explicit tag (#1595)
• feat(ci): Zizmor CI (#1596)
• chore: Remove unused GH workflows attestation.yml (#1606)
• feat: add workflow to inherit milestone from parent issue (#1573)

🐛 Bug Fixes

• fix(deps): update rust dependencies (#1636)
• fix(deps): update go dependencies (#1633)
• fix(deps): update rust dependencies (#1616)
• fix(deps): update rust dependencies (#1585)
• fix(deps): update go dependencies (#1600)

🧰 Maintenance

• build: v1.34.0 release (#1641)
• chore(deps): update github actions (#1634)
• build(deps): lock file maintenance (#1637)
• fix(deps): update rust dependencies (#1636)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.149.0 (#1635)
• fix(deps): update go dependencies (#1633)
• build: v1.34.0-rc2 release (#1630)
• build: v1.34.0-rc1 release (#1625)
• chore(deps): update github actions (#1624)
• fix(deps): update rust dependencies (#1616)
• build(deps): lock file maintenance (#1622)
• chore(deps): update github actions (#1620)
• refactor(charts): Change generation of RBAC templates (#1520)
• chore(deps): update github actions (major) (#1617)
• deps(rust): update Rust toolchain to 1.94.1 (#1619)
• build(deps): lock file maintenance (#1618)
• chore(deps): update github actions (major) (#1527)
• fix(deps): update rust dependencies (#1585)
• fix(deps): update go dependencies (#1600)
• chore(deps): update github actions (#1599)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.148.0 (#1601)
• build(deps): lock file maintenance (#1604)
• deps(rust): update Rust toolchain to 1.94.0 (#1605)

v1.34.0-rc2

• ci(release): Add contents read for build-kwctl step call (#1628)
• fix: pin versions and add checksum verifications (#1623)
• fix(ci): skip autolabeler in PR from forks (#1612)
• fix(ci): move permissions to job level (#1609)
• fix(ci): missing autolabeler permissions (#1608)
• fix(kwctl): normalize registry:// URIs to include explicit tag (#1595)
• feat(ci): Zizmor CI (#1596)
• chore: Remove unused GH workflows attestation.yml (#1606)
• feat: add workflow to inherit milestone from parent issue (#1573)

🐛 Bug Fixes

• fix(deps): update rust dependencies (#1616)
• fix(deps): update rust dependencies (#1585)
• fix(deps): update go dependencies (#1600)

🧰 Maintenance

• build: v1.34.0-rc2 release (#1630)
• build: v1.34.0-rc1 release (#1625)
• chore(deps): update github actions (#1624)
• fix(deps): update rust dependencies (#1616)
• build(deps): lock file maintenance (#1622)
• chore(deps): update github actions (#1620)
• chore(charts): controller-gen output file into charts. (#1520)
• chore(deps): update github actions (major) (#1617)
• deps(rust): update Rust toolchain to 1.94.1 (#1619)
• build(deps): lock file maintenance (#1618)
• chore(deps): update github actions (major) (#1527)
• fix(deps): update rust dependencies (#1585)
• fix(deps): update go dependencies (#1600)
• chore(deps): update github actions (#1599)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.148.0 (#1601)
• build(deps): lock file maintenance (#1604)
• deps(rust): update Rust toolchain to 1.94.0 (#1605)

v1.33.1

• fix: Use correct chart versions for 1.33.1 (#1594)
• test: Consume mirrored kalaksi:tinyproxy image (#1593)
• ci(release): Bump attestation GHA to 4.6.0 (#1592)
• fix(ci): fix broken release, address issue during attestation step (#1589)
• deps: Consume testcontainers tinyproxy image from gitlab registry (#1588)
• feat: foward image pull secrets (#1583)

🐛 Bug Fixes

• fix(deps): update rust crate cached to 0.58 (#1565)
• fix(deps): update go dependencies (#1568)

🧰 Maintenance

• chore(deps): Bump google.golang.org/grpc from 1.79.2 to 1.79.3 (#1590)
• build: v1.33.1 release (#1587)
• build(deps): lock file maintenance (#1584)
• chore(deps): Update Helm chart dependencies (#1582)
• chore(deps): update module github.com/opencontainers/runc to v1.4.1 (#1578)
• build(deps): lock file maintenance (#1581)
• chore(deps): update rust dependencies (#1579)
• chore(deps): update github actions (#1577)
• fix(deps): update rust crate cached to 0.58 (#1565)
• fix(deps): update go dependencies (#1568)
• chore(deps): Update Helm chart dependencies (#1570)
• chore(deps): update golang docker tag to v1.26.1 (#1562)
• build(deps): lock file maintenance (#1569)
• chore(deps): update github actions (#1566)
• chore(deps): update otel/opentelemetry-collector docker tag to v0.147.0 (#1567)