Releases: rancher/rancher-selinux
Releases · rancher/rancher-selinux
v0.9-rc1.testing.1
What's Changed
- feat: add
microose2e and switch build to rockylinux by @andypitcher in #127 - chore(deps): update github/codeql-action action to v4.32.4 by @renovate-rancher[bot] in #126
- chore(deps): update actions/upload-artifact action to v7 by @renovate-rancher[bot] in #129
- chore(deps): update github/codeql-action action to v4.32.5 by @renovate-rancher[bot] in #130
- chore(deps): update actions/cache digest to 6682284 by @renovate-rancher[bot] in #131
- chore(deps): update github/codeql-action action to v4.32.6 by @renovate-rancher[bot] in #134
- ci: pin dependencies and scope e2e trigger paths by @Copilot in #135
- policy: add rancher-ai-agent and rancher-ai-mcp support by @andypitcher in #133
- chore(deps): update github actions by @renovate-rancher[bot] in #136
- chore(deps): update github actions by @renovate-rancher[bot] in #137
- chore(deps): update rancher/renovate-config digest to e1355a7 by @renovate-rancher[bot] in #138
- refactor(e2e): harden supply chain and binary verification logic by @andypitcher in #139
New Contributors
- @Copilot made their first contribution in #135
Full Changelog: v0.8.production.1...v0.9-rc1.testing.1
v0.8.production.1
🚀 Release Highlights
Features & Platform Support
- Update OS Support: Added support for Fedora 42 and EL10 (#114, #117).
- Deprecations: Retired support for Fedora 41 and EL8 (#114, #117).
- RPM Metadata: Added vendor and packager details to the
rancher-selinuxRPM for better traceability (#97). - License Compliance: Aligned license naming with standard SPDX identifiers (#76).
Security & Compliance
- OSSF Scorecard: Integrated the Scorecard workflow to improve supply chain security and pinned dependencies to specific digests (#85, #92).
- FOSSA Scanning: Added FOSSA scanning workflow for automated license and dependency analysis (#116).
- CodeQL: Continuous updates to CodeQL actions to ensure the latest security scanning capabilities (#89, #93, #119, #122, #123).
Testing & CI/CD
- E2E Refactor: Refactor of chart installation and SELinux verification processes (#91).
- Performance: Improved E2E timeouts for more stable CI runs (#112).
- Build System: Cleaned up the use of digests and adjusted Renovate frequency to a monthly schedule (#108, #110).
All Changes
Build & Maintenance
- migrate renovate config by @renovate-rancher[bot] in #75
- Align License name with SPDX Identifier by @pjbgf in #76
- build: add Scorecard workflow by @andypitcher in #85
- e2e: refactor chart installation and SELinux verification by @andypitcher in #91
- [scorecard] Fix permissions and Pin versions by @andypitcher in #92
- add vendor/packager details to rancher-selinux rpm by @skanakal in #97
- renovate: add schedule to run renovate monthly by @andypitcher in #108
- build: remove digest use and renovate frequency by @andypitcher in #110
- Improve e2e timeouts by @andypitcher in #112
- feat: add fedora42 and retire fedora41 by @andypitcher in #114
- Add FOSSA scanning workflow by @macedogm in #116
- feat: add el10 and remove el8 support by @andypitcher in #117
Dependency Updates
View 20+ automated dependency & action updates
- Update
actions/checkoutto v5/v6/v6.0.2 (#79, #107, #109, #118) - Update
actions/setup-goto v6 (#80, #125) - Update
github/codeql-actionfrom v4.31.0 to v4.32.2 (#89, #93, #119, #122, #123) - Update
actions/cachedigests (#77, #83) - Update
ossf/scorecard-actionto v2.4.3 (#86) - Update
actions/upload-artifactto v5 (#90) - Update Docker digests for
opensuse/tumbleweedandcentos:stream9(#95, #99, #101, #103) - General GitHub Action version bumps (#87, #102, #115, #120)
New Contributors
Full Changelog: v0.7.production.1...v0.8.production.1
v0.8-rc1.testing.2
What's Changed
- chore(deps): update actions/checkout action to v6.0.2 by @renovate-rancher[bot] in #118
- feat: add el10 and remove el8 support by @andypitcher in #117
- chore(deps): update github/codeql-action action to v4.31.10 by @renovate-rancher[bot] in #119
- chore(deps): update github actions by @renovate-rancher[bot] in #120
- chore(deps): update github/codeql-action action to v4.32.1 by @renovate-rancher[bot] in #122
Full Changelog: v0.8-rc1.testing.1...v0.8-rc1.testing.2
v0.8-rc1.testing.1
What's Changed
- chore(config): migrate renovate config by @renovate-rancher[bot] in #75
- Align License name with SPDX Identifier by @pjbgf in #76
- chore(deps): update actions/cache digest to 0400d5f by @renovate-rancher[bot] in #77
- chore(deps): update actions/checkout action to v5 by @renovate-rancher[bot] in #79
- chore(deps): update actions/setup-go action to v6 by @renovate-rancher[bot] in #80
- chore(deps): update actions/cache digest to 0057852 by @renovate-rancher[bot] in #83
- build: add Scorecard workflow by @andypitcher in #85
- chore(deps): update github actions (major) by @renovate-rancher[bot] in #87
- chore(deps): update ossf/scorecard-action action to v2.4.3 by @renovate-rancher[bot] in #86
- chore(deps): update actions/upload-artifact action to v5 by @renovate-rancher[bot] in #90
- chore(deps): update github/codeql-action action to v4.31.0 by @renovate-rancher[bot] in #89
- e2e: refactor chart installation and SELinux verification by @andypitcher in #91
- chore(deps): update github/codeql-action action to v4.31.2 by @renovate-rancher[bot] in #93
- [scorecard] Fix permissions and Pin versions by @andypitcher in #92
- chore(deps): update opensuse/tumbleweed:latest docker digest to fef63b8 by @renovate-rancher[bot] in #95
- add vendor/packager details to rancher-selinux rpm by @skanakal in #97
- chore(deps): update quay.io/centos/centos:stream9 docker digest to 1d4cc4b by @renovate-rancher[bot] in #99
- chore(deps): update quay.io/centos/centos:stream9 docker digest to ec0a248 by @renovate-rancher[bot] in #101
- chore(deps): update quay.io/centos/centos:stream9 docker digest to e15ceb6 by @renovate-rancher[bot] in #103
- chore(deps): update github actions by @renovate-rancher[bot] in #102
- renovate: add schedule to run renovate monthly by @andypitcher in #108
- chore(deps): update actions/checkout action to v6 by @renovate-rancher[bot] in #107
- build: remove digest use and renovate frequency by @andypitcher in #110
- chore(deps): update actions/checkout action to v6 by @renovate-rancher[bot] in #109
- Improve e2e timeouts by @andypitcher in #112
- Add FOSSA scanning workflow by @macedogm in #116
- feat: add fedora42 and retire fedora41 by @andypitcher in #114
- chore(deps): update github actions by @renovate-rancher[bot] in #115
New Contributors
Full Changelog: v0.7-rc1.testing.1...v0.8-rc1.testing.1
v0.7.production.1
What's Changed
- Replace Fedora37 by Fedora41 by @andypitcher in #67
- chore(deps): update actions/setup-go digest to d35c59a by @renovate-rancher in #70
- Improve README - Add coverage and support matrix by @andypitcher in #68
- Distro update support and consolidate gen_require by @andypitcher in #71
- Fix rancher-monitoring-prometheus e2e by @andypitcher in #74
- Add watch permissions on rke_logreader_t:var_log_t:dir context by @philippebi in #73
New Contributors
- @philippebi made their first contribution in #73
Full Changelog: v0.6.production.1...v0.7.production.1
v0.7-rc1.testing.1
What's Changed
- Replace Fedora37 by Fedora41 by @andypitcher in #67
- chore(deps): update actions/setup-go digest to d35c59a by @renovate-rancher in #70
- Improve README - Add coverage and support matrix by @andypitcher in #68
- Distro update support and consolidate gen_require by @andypitcher in #71
- Fix rancher-monitoring-prometheus e2e by @andypitcher in #74
- Add watch permissions on rke_logreader_t:var_log_t:dir context by @philippebi in #73
New Contributors
- @philippebi made their first contribution in #73
Full Changelog: v0.6.production.1...v0.7-rc1.testing.1
v0.6.production.1
What's Changed
- chore(deps): pin dependencies by @renovate-rancher in #64
- chore(deps): update github actions by @renovate-rancher in #65
- Add initial Renovate configuration by @renovate-rancher in #57
- Add initial E2E structure for validating SELinux policies by @pjbgf in #60
- Fix #59 rancher-logging-root-fluentbit not working with policy centos9 by @xandradx in #62
- E2E for Rancher Monitoring and Logging by @andypitcher in #63
- Refine the policy and add other distro support for the Prometheus Node Exporter by @andypitcher in #55
- [Centos9] Add support for prometheus node-exporter container by @andypitcher in #54
Important
Centos7support has been removed since it has reached EOL.
New Contributors
Full Changelog: v0.5.production.1...v0.6.production.1
v0.6-rc1.testing.3
What's Changed
- Add initial Renovate configuration by @renovate-rancher in #57
- Add initial E2E structure for validating SELinux policies by @pjbgf in #60
- Fix #59 rancher-logging-root-fluentbit not working with policy centos9 by @xandradx in #62
- E2E for Rancher Monitoring and Logging by @andypitcher in #63
New Contributors
Full Changelog: v0.6-rc1.testing.2...v0.6-rc1.testing.3
v0.6-rc1.testing.2
What's Changed
- Refine the policy and add other distro support for the Prometheus Node Exporter by @andypitcher in #55
Full Changelog: v0.6-rc1.testing.1...v0.6-rc1.testing.2
v0.6-rc1.testing.1
What's Changed
- [Centos9] Add support for prometheus node-exporter container by @andypitcher in #54
Full Changelog: v0.5-rc1.testing.2...v0.6-rc1.testing.1