v13.0.1

What's Changed

• fix prepare-release by @slntopp in #1427
• ✨ add MONDOO_TMP_DIR environment variable to CronJob configurations and ensure disable-cache: false by @slntopp in #1434
• ✨ add garbage collection for stale node scan assets by @slntopp in #1435
• 🧹GC cutoff based on schedule by @slntopp in #1437
• chore(deps): bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1438
• ✨ bump: update chart and app version to 13.0.1 by @slntopp in #1439

Full Changelog: v13.0.0...v13.0.1

mondoo-operator-13.0.1

A Helm chart for installing mondoo-operator on Kubernetes

v13.0.0-beta6

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410
• 🐛 fix integration tests errors by @slntopp in #1411
• fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
• fix: use published image matching git tag in Helm chart installation by @slntopp in #1413
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #1405
• Bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in #1404
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1403
• Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1406
• Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #1407
• Bump EnricoMi/publish-unit-test-result-action from 2.22.0 to 2.23.0 by @dependabot[bot] in #1402
• v13 Release tests batch by @slntopp in #1416
• v13 registry mirroring and proxying testing by @slntopp in #1422
• 📚 v13 Documentation improvements by @slntopp in #1420
• feat: replace VaultAuth init container with operator-side vault-client-go by @chris-rock in https://github.com/mondoohq/mondoo-operator/pull/...

v13.0.0

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410
• 🐛 fix integration tests errors by @slntopp in #1411
• fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
• fix: use published image matching git tag in Helm chart installation by @slntopp in #1413
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #1405
• Bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in #1404
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1403
• Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1406
• Bump dawidd6/action-download-artifact from 14 to 16 by @dependabot[bot] in #1407
• Bump EnricoMi/publish-unit-test-result-action from 2.22.0 to 2.23.0 by @dependabot[bot] in #1402
• v13 Release tests batch by @slntopp in #1416
• v13 registry mirroring and proxying testing by @slntopp in #1422
• 📚 v13 Documentation improvements by @slntopp in #1420
• feat: replace VaultAuth init container with operator-side vault-client-go by @chris-rock in https://github.com/mondoohq/mondoo-operator/pull/...

mondoo-operator-13.0.0

A Helm chart for installing mondoo-operator on Kubernetes

v13.0.0-beta5

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410
• 🐛 fix integration tests errors by @slntopp in #1411
• fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412
• fix: use published image matching git tag in Helm chart installation by @slntopp in #1413

New Contributors

• @anurag-2911 made their first contribution in #1340
• @AdamVB made their first contribution in #1339

Full Changelog: v12.0.1...v13.0.0-beta5

v13.0.0-beta4

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410
• 🐛 fix integration tests errors by @slntopp in #1411
• fix: skip minikube image load and pass git tag as VERSION for pre-built operator in helm tests by @slntopp in #1412

New Contributors

• @anurag-2911 made their first contribution in #1340
• @AdamVB made their first contribution in #1339

Full Changelog: v12.0.1...v13.0.0-beta4

v13.0.0-beta3

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410
• 🐛 fix integration tests errors by @slntopp in #1411

New Contributors

• @anurag-2911 made their first contribution in #1340
• @AdamVB made their first contribution in #1339

Full Changelog: v12.0.1...v13.0.0-beta3

v13.0.0-beta2

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409
• Update publish.yaml to include write permissions by @slntopp in #1410

New Contributors

• @anurag-2911 made their first contribution in #1340
• @AdamVB made their first contribution in #1339

Full Changelog: mondoo-operator-12.0.1...v13.0.0-beta2

v13.0.0 beta1

What's Changed

• 🧹 improved testing and release by @imilchev in #1323
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1328
• Bump actions/download-artifact from 5 to 7 by @dependabot[bot] in #1327
• Bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #1326
• Bump dawidd6/action-download-artifact from 11 to 12 by @dependabot[bot] in #1330
• Bump EnricoMi/publish-unit-test-result-action from 2.21.0 to 2.22.0 by @dependabot[bot] in #1325
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #1324
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1332
• 🧹 fix gh action for "Push multi-platform virtual tag" by @chris-rock in #1333
• Bump the gomodupdates group across 1 directory with 5 updates by @dependabot[bot] in #1329
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1335
• 🧹 update test matrix by @chris-rock in #1334
• 🧹 remove admission controller by @chris-rock in #1336
• ✨ Pin GitHub actions to hashes by @czunker in #1343
• 🧹 update copyright year by @chris-rock in #1344
• ⭐️ refactor: simplify k8s scanning to direct cnspec execution by @chris-rock in #1341
• Bump the gomodupdates group across 1 directory with 2 updates by @dependabot[bot] in #1345
• Replace deprecated --score-threshold by @anurag-2911 in #1340
• ⭐️ refactor cluster scan new external cluster scan capability by @chris-rock in #1338
• Feature/multiple private registry secrets by @AdamVB in #1339
• 🧹 use qemu for cross builds by @chris-rock in #1346
• fix(ci): skip image scan for arm/arm64 builds by @chris-rock in #1347
• 🧹 improve error handling by @chris-rock in #1348
• 🧹 update documentation by @chris-rock in #1349
• 🐛 fix docker/build-push-action by @chris-rock in #1350
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1351
• Bump docker/setup-buildx-action from 3.10.0 to 3.12.0 by @dependabot[bot] in #1352
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1353
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1354
• 🐛 allow scanning external clusters when local cluster scan is disabled by @imilchev in #1356
• 🐛 fix service account permissions to support wif scans by @imilchev in #1357
• Bump github.com/cert-manager/cert-manager from 1.19.2 to 1.19.3 in the gomodupdates group by @dependabot[bot] in #1360
• Bump go.mondoo.com/cnquery/v12 from 12.20.1 to 12.21.0 in the gomodupdates group by @dependabot[bot] in #1361
• Bump dawidd6/action-download-artifact from 12 to 14 by @dependabot[bot] in #1355
• external cluster setup by @chris-rock in #1358
• ⭐️ publish helm charts to OCI by @chris-rock in #1367
• ⭐️ ecr auth for container images by @chris-rock in #1368
• 🐛 add ephemeral storage limits for GKE Autopilot compatibility by @chris-rock in #1375
• 🐛 add missing delete verb to batch jobs RBAC by @chris-rock in #1376
• 🐛 preserve active jobs when cleaning up completed scan jobs by @chris-rock in #1377
• Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.88.1 to 0.89.0 in the gomodupdates group by @dependabot[bot] in #1378
• ⭐️ add actionlint for GitHub Actions linting by @chris-rock in #1373
• ⭐️ fix logging severity for GKE/cloud log explorers by @chris-rock in #1372
• Explicitly set permissions on all GitHub Actions workflows by @chris-rock in #1384
• 🐛 use DeleteCompletedJobs to preserve active scans during CronJob updates by @chris-rock in #1385
• Support image digest in MondooAuditConfig by @chris-rock in #1382
• ⭐️ add annotations support for scanned assets by @chris-rock in #1379
• Bump go.mondoo.com/cnquery/v12 from 12.21.0 to 12.22.0 in the gomodupdates group by @dependabot[bot] in #1386
• docs: add WIF testing documentation for issue #1364 by @chris-rock in #1371
• Format README.md for consistent markdown style by @chris-rock in #1387
• Use smaller container images in integration tests by @chris-rock in #1388
• 🧹 resource watcher improvements by @chris-rock in #1369
• ⭐️ Automate release process via GitHub Release by @chris-rock in #1380
• ⭐️ Improve Helm chart management and cleanup by @chris-rock in #1374
• ⭐️ use Server-Side Apply (SSA) for resource reconciliation by @chris-rock in #1381
• Migrate K8s scanner to plain cnspec image by @chris-rock in #1389
• Add Helm chart documentation and improve values.yaml annotations by @chris-rock in #1390
• feat: add MondooOperatorConfig for proxy and image registry support by @chris-rock in #1391
• Bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #1394
• Bump azure/setup-helm from 4.3.0 to 4.3.1 by @dependabot[bot] in #1392
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1393
• fix: add nolint:gosec annotations for new gosec rules by @chris-rock in #1398
• fix: skip version file updates on main for pre-release tags by @chris-rock in #1396
• Bump the gomodupdates group with 2 updates by @dependabot[bot] in #1395
• Tests and improvements v13-beta by @slntopp in #1409

New Contributors

• @anurag-2911 made their first contribution in #1340
• @AdamVB made their first contribution in #1339

Full Changelog: mondoo-operator-12.0.1...v13.0.0-beta1