v1.23.0

• policy server use kubernetes recommended labels (#1037)

🚀 Features

• feat: support running with PSA enforce: restricted (#1044)

🐛 Bug Fixes

• fix(deps): update k8s.io/utils digest to 1f6e0b7 (#1063)
• fix: Correctly set service labels (#1054)
• fixed crd annotations link in go docstring (#1053)
• dev: fix tilt environment (#1043)
• fix: expose Policy Server over port 443 (#1033)
• fix: client-ca filepath (#1027)

🧰 Maintenance

• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.4 (#1067)
• fix(deps): update k8s.io/utils digest to 1f6e0b7 (#1063)
• build(deps): update all patch level dependencies (#1064)
• build(deps): update fossas/fossa-action action to v1.6.0 (#1062)
• build(deps): update module github.com/onsi/ginkgo/v2 to v2.23.2 (#1061)
• chore(deps): update kubewarden/github-actions action to v4 (#1060)
• build(deps): update all patch level dependencies (#1059)
• build(deps): Bump golang.org/x/net from 0.35.0 to 0.36.0 (#1058)
• build(deps): Bump github.com/containerd/containerd from 1.7.18 to 1.7.27 (#1056)
• build(deps): update all minor level dependencies (#1055)
• build(deps): update all patch level dependencies (#1051)
• build(deps): update docker/login-action action to v3.4.0 (#1046)
• build(deps): update all patch level dependencies (#1041)
• build(deps): update dependency go to 1.24 (#1040)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.3 (#1039)
• build(deps): update all minor level dependencies (#1036)
• build(deps): update all patch level dependencies (#1032)
• build(deps): update docker/setup-qemu-action action to v3.6.0 (#1029)
• build(deps): update kubewarden/github-actions action to v3.4.7 (#1028)
• build(deps): update all minor level dependencies (#1025)
• build(deps): update actions/download-artifact action to v4.1.9 (#1018)

v1.23.0-rc1

• policy server use kubernetes recommended labels (#1037)

🚀 Features

• feat: support running with PSA enforce: restricted (#1044)

🐛 Bug Fixes

• fix: Correctly set service labels (#1054)
• fixed crd annotations link in go docstring (#1053)
• dev: fix tilt environment (#1043)
• fix: expose Policy Server over port 443 (#1033)
• fix: client-ca filepath (#1027)

🧰 Maintenance

• build(deps): update all minor level dependencies (#1055)
• build(deps): update all patch level dependencies (#1051)
• build(deps): update docker/login-action action to v3.4.0 (#1046)
• build(deps): update all patch level dependencies (#1041)
• build(deps): update dependency go to 1.24 (#1040)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.3 (#1039)
• build(deps): update all minor level dependencies (#1036)
• build(deps): update all patch level dependencies (#1032)
• build(deps): update docker/setup-qemu-action action to v3.6.0 (#1029)
• build(deps): update kubewarden/github-actions action to v3.4.7 (#1028)
• build(deps): update all minor level dependencies (#1025)
• build(deps): update actions/download-artifact action to v4.1.9 (#1018)

v1.23.0-beta2

• policy server use kubernetes recommended labels (#1037)

🚀 Features

• feat: support running with PSA enforce: restricted (#1044)

🐛 Bug Fixes

• dev: fix tilt environment (#1043)
• fix: expose Policy Server over port 443 (#1033)
• fix: client-ca filepath (#1027)

🧰 Maintenance

• build(deps): update all patch level dependencies (#1041)
• build(deps): update dependency go to 1.24 (#1040)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.3 (#1039)
• build(deps): update all minor level dependencies (#1036)
• build(deps): update all patch level dependencies (#1032)
• build(deps): update docker/setup-qemu-action action to v3.6.0 (#1029)
• build(deps): update kubewarden/github-actions action to v3.4.7 (#1028)
• build(deps): update all minor level dependencies (#1025)
• build(deps): update actions/download-artifact action to v4.1.9 (#1018)

v1.23.0-beta1

🐛 Bug Fixes

• fix: client-ca filepath (#1027)

🧰 Maintenance

• build(deps): update docker/setup-qemu-action action to v3.6.0 (#1029)
• build(deps): update kubewarden/github-actions action to v3.4.7 (#1028)
• build(deps): update all minor level dependencies (#1025)
• build(deps): update actions/download-artifact action to v4.1.9 (#1018)

v1.22.0

🚀 Features

• feat: add mTLS support (#1000)

🐛 Bug Fixes

• fix: mount and configure internal CA only with mTLS enabled (#1011)

🧰 Maintenance

• build(deps): update all patch level dependencies (#1014)
• build(deps): update sigstore/cosign-installer action to v3.8.1 (#1013)
• build(deps): update all minor level dependencies (#1012)
• build(deps): update all minor level dependencies (#1007)
• Revert "dropme: green ci" (#1010)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.2 (#1009)
• build(deps): update all patch level dependencies (#1008)
• build(deps): update all minor level dependencies (#999)
• build(deps): disable cel-go bot updates (#1005)
• build(deps): update golangci/golangci-lint-action action to v6.3.2 (#1004)
• build(deps): update golangci/golangci-lint-action action to v6.3.1 (#1002)
• build(deps): update kubewarden/github-actions action to v3.4.6 (#998)
• chore(deps): update sigstore/cosign-installer action to v3.8.0 (#997)
• chore(deps): update golangci/golangci-lint-action action to v6.3.0 (#996)
• build(deps): update dependency go to v1.23.6 (#995)
• build(deps): move cel-go dependecy to indirect (#992)

v1.22.0-rc1

🚀 Features

• feat: add mTLS support (#1000)

🐛 Bug Fixes

• fix: mount and configure internal CA only with mTLS enabled (#1011)

🧰 Maintenance

• build(deps): update sigstore/cosign-installer action to v3.8.1 (#1013)
• build(deps): update all minor level dependencies (#1012)
• build(deps): update all minor level dependencies (#1007)
• Revert "dropme: green ci" (#1010)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.2 (#1009)
• build(deps): update all patch level dependencies (#1008)
• build(deps): update all minor level dependencies (#999)
• build(deps): disable cel-go bot updates (#1005)
• build(deps): update golangci/golangci-lint-action action to v6.3.2 (#1004)
• build(deps): update golangci/golangci-lint-action action to v6.3.1 (#1002)
• build(deps): update kubewarden/github-actions action to v3.4.6 (#998)
• chore(deps): update sigstore/cosign-installer action to v3.8.0 (#997)
• chore(deps): update golangci/golangci-lint-action action to v6.3.0 (#996)
• build(deps): update dependency go to v1.23.6 (#995)
• build(deps): move cel-go dependecy to indirect (#992)

v1.21.0

🚀 Features

• Webhook integration tests and clean up MatchCondition validation code (#957)
• feat(test): use builder to build test objects. (#955)

🐛 Bug Fixes

• fix: AdmissionPolicyGroup must not have context aware resources (#984)
• fix: stricter checks on AdmissionPolicy and AdmissionPolicyGroup rules (#985)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• fix(deps): update all non-major dependencies (#958)
• fix: rename "url" field into "module". (#952)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

🧰 Maintenance

• chore(deps): update docker/build-push-action action to v6.13.0 (#982)
• build(deps): update codecov/codecov-action action to v5.3.1 (#981)
• chore(deps): update fossas/fossa-action action to v1.5.0 (#979)
• chore(deps): update codecov/codecov-action action to v5.3.0 (#978)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.1 (#977)
• chore(deps): update codecov/codecov-action action to v5.2.0 (#975)
• chore(deps): update actions/setup-go action to v5.3.0 (#973)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• chore(deps): update release-drafter/release-drafter action to v6.1.0 (#970)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• build(deps): update kubewarden/github-actions action to v3.4.5 (#968)
• build(deps): update all patch level dependencies (#965)
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 (#966)
• chore: move release template to the org repository. (#963)
• chore(deps): update docker/build-push-action action to v6.12.0 (#964)
• chore(ci): use common renovate bot configuration. (#962)
• fix(deps): update all non-major dependencies (#958)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

v1.21.0-rc2

🚀 Features

• Webhook integration tests and clean up MatchCondition validation code (#957)
• feat(test): use builder to build test objects. (#955)

🐛 Bug Fixes

• fix: AdmissionPolicyGroup must not have context aware resources (#984)
• fix: stricter checks on AdmissionPolicy and AdmissionPolicyGroup rules (#985)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• fix(deps): update all non-major dependencies (#958)
• fix: rename "url" field into "module". (#952)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

🧰 Maintenance

• chore(deps): update docker/build-push-action action to v6.13.0 (#982)
• build(deps): update codecov/codecov-action action to v5.3.1 (#981)
• chore(deps): update fossas/fossa-action action to v1.5.0 (#979)
• chore(deps): update codecov/codecov-action action to v5.3.0 (#978)
• build(deps): update module sigs.k8s.io/controller-runtime to v0.20.1 (#977)
• chore(deps): update codecov/codecov-action action to v5.2.0 (#975)
• chore(deps): update actions/setup-go action to v5.3.0 (#973)
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• chore(deps): update release-drafter/release-drafter action to v6.1.0 (#970)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• build(deps): update kubewarden/github-actions action to v3.4.5 (#968)
• build(deps): update all patch level dependencies (#965)
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 (#966)
• chore: move release template to the org repository. (#963)
• chore(deps): update docker/build-push-action action to v6.12.0 (#964)
• chore(ci): use common renovate bot configuration. (#962)
• fix(deps): update all non-major dependencies (#958)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

v1.21.0-rc1

🚀 Features

• Webhook integration tests and clean up MatchCondition validation code (#957)
• feat(test): use builder to build test objects. (#955)

🐛 Bug Fixes

• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• fix(deps): update all non-major dependencies (#958)
• fix: rename "url" field into "module". (#952)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

🧰 Maintenance

• fix(deps): update module sigs.k8s.io/controller-runtime to v0.20.0 (#967)
• chore(deps): update release-drafter/release-drafter action to v6.1.0 (#970)
• fix(deps): update opentelemetry-go monorepo to v1.34.0 (#969)
• build(deps): update kubewarden/github-actions action to v3.4.5 (#968)
• build(deps): update all patch level dependencies (#965)
• chore(deps): update golangci/golangci-lint-action action to v6.2.0 (#966)
• chore: move release template to the org repository. (#963)
• chore(deps): update docker/build-push-action action to v6.12.0 (#964)
• chore(ci): use common renovate bot configuration. (#962)
• fix(deps): update all non-major dependencies (#958)
• fix(deps): update all non-major dependencies (#951)
• fix(deps): update all non-major dependencies (#950)

v1.20.1

• generate crd docs (#947)

🐛 Bug Fixes

• fix(deps): update all non-major dependencies (#943)

🧰 Maintenance

• chore(deps): update ginkgo binary (#949)
• build(deps): bump x/net to v0.33.0 (#948)
• fix(deps): update all non-major dependencies (#943)