Skip to content

Releases: rancher/rancher-selinux

v0.9-rc1.testing.1

21 Apr 15:44
230c2b6

Choose a tag to compare

v0.9-rc1.testing.1 Pre-release
Pre-release

What's Changed

  • feat: add microos e2e and switch build to rockylinux by @andypitcher in #127
  • chore(deps): update github/codeql-action action to v4.32.4 by @renovate-rancher[bot] in #126
  • chore(deps): update actions/upload-artifact action to v7 by @renovate-rancher[bot] in #129
  • chore(deps): update github/codeql-action action to v4.32.5 by @renovate-rancher[bot] in #130
  • chore(deps): update actions/cache digest to 6682284 by @renovate-rancher[bot] in #131
  • chore(deps): update github/codeql-action action to v4.32.6 by @renovate-rancher[bot] in #134
  • ci: pin dependencies and scope e2e trigger paths by @Copilot in #135
  • policy: add rancher-ai-agent and rancher-ai-mcp support by @andypitcher in #133
  • chore(deps): update github actions by @renovate-rancher[bot] in #136
  • chore(deps): update github actions by @renovate-rancher[bot] in #137
  • chore(deps): update rancher/renovate-config digest to e1355a7 by @renovate-rancher[bot] in #138
  • refactor(e2e): harden supply chain and binary verification logic by @andypitcher in #139

New Contributors

  • @Copilot made their first contribution in #135

Full Changelog: v0.8.production.1...v0.9-rc1.testing.1

v0.8.production.1

26 Feb 13:23
5cb8df8

Choose a tag to compare

🚀 Release Highlights

Features & Platform Support

  • Update OS Support: Added support for Fedora 42 and EL10 (#114, #117).
  • Deprecations: Retired support for Fedora 41 and EL8 (#114, #117).
  • RPM Metadata: Added vendor and packager details to the rancher-selinux RPM for better traceability (#97).
  • License Compliance: Aligned license naming with standard SPDX identifiers (#76).

Security & Compliance

  • OSSF Scorecard: Integrated the Scorecard workflow to improve supply chain security and pinned dependencies to specific digests (#85, #92).
  • FOSSA Scanning: Added FOSSA scanning workflow for automated license and dependency analysis (#116).
  • CodeQL: Continuous updates to CodeQL actions to ensure the latest security scanning capabilities (#89, #93, #119, #122, #123).

Testing & CI/CD

  • E2E Refactor: Refactor of chart installation and SELinux verification processes (#91).
  • Performance: Improved E2E timeouts for more stable CI runs (#112).
  • Build System: Cleaned up the use of digests and adjusted Renovate frequency to a monthly schedule (#108, #110).

All Changes

Build & Maintenance

Dependency Updates

View 20+ automated dependency & action updates
  • Update actions/checkout to v5/v6/v6.0.2 (#79, #107, #109, #118)
  • Update actions/setup-go to v6 (#80, #125)
  • Update github/codeql-action from v4.31.0 to v4.32.2 (#89, #93, #119, #122, #123)
  • Update actions/cache digests (#77, #83)
  • Update ossf/scorecard-action to v2.4.3 (#86)
  • Update actions/upload-artifact to v5 (#90)
  • Update Docker digests for opensuse/tumbleweed and centos:stream9 (#95, #99, #101, #103)
  • General GitHub Action version bumps (#87, #102, #115, #120)

New Contributors

Full Changelog: v0.7.production.1...v0.8.production.1

v0.8-rc1.testing.2

19 Feb 11:03
1619a3f

Choose a tag to compare

v0.8-rc1.testing.2 Pre-release
Pre-release

What's Changed

  • chore(deps): update actions/checkout action to v6.0.2 by @renovate-rancher[bot] in #118
  • feat: add el10 and remove el8 support by @andypitcher in #117
  • chore(deps): update github/codeql-action action to v4.31.10 by @renovate-rancher[bot] in #119
  • chore(deps): update github actions by @renovate-rancher[bot] in #120
  • chore(deps): update github/codeql-action action to v4.32.1 by @renovate-rancher[bot] in #122

Full Changelog: v0.8-rc1.testing.1...v0.8-rc1.testing.2

v0.8-rc1.testing.1

20 Jan 14:59
9da1ba8

Choose a tag to compare

v0.8-rc1.testing.1 Pre-release
Pre-release

What's Changed

  • chore(config): migrate renovate config by @renovate-rancher[bot] in #75
  • Align License name with SPDX Identifier by @pjbgf in #76
  • chore(deps): update actions/cache digest to 0400d5f by @renovate-rancher[bot] in #77
  • chore(deps): update actions/checkout action to v5 by @renovate-rancher[bot] in #79
  • chore(deps): update actions/setup-go action to v6 by @renovate-rancher[bot] in #80
  • chore(deps): update actions/cache digest to 0057852 by @renovate-rancher[bot] in #83
  • build: add Scorecard workflow by @andypitcher in #85
  • chore(deps): update github actions (major) by @renovate-rancher[bot] in #87
  • chore(deps): update ossf/scorecard-action action to v2.4.3 by @renovate-rancher[bot] in #86
  • chore(deps): update actions/upload-artifact action to v5 by @renovate-rancher[bot] in #90
  • chore(deps): update github/codeql-action action to v4.31.0 by @renovate-rancher[bot] in #89
  • e2e: refactor chart installation and SELinux verification by @andypitcher in #91
  • chore(deps): update github/codeql-action action to v4.31.2 by @renovate-rancher[bot] in #93
  • [scorecard] Fix permissions and Pin versions by @andypitcher in #92
  • chore(deps): update opensuse/tumbleweed:latest docker digest to fef63b8 by @renovate-rancher[bot] in #95
  • add vendor/packager details to rancher-selinux rpm by @skanakal in #97
  • chore(deps): update quay.io/centos/centos:stream9 docker digest to 1d4cc4b by @renovate-rancher[bot] in #99
  • chore(deps): update quay.io/centos/centos:stream9 docker digest to ec0a248 by @renovate-rancher[bot] in #101
  • chore(deps): update quay.io/centos/centos:stream9 docker digest to e15ceb6 by @renovate-rancher[bot] in #103
  • chore(deps): update github actions by @renovate-rancher[bot] in #102
  • renovate: add schedule to run renovate monthly by @andypitcher in #108
  • chore(deps): update actions/checkout action to v6 by @renovate-rancher[bot] in #107
  • build: remove digest use and renovate frequency by @andypitcher in #110
  • chore(deps): update actions/checkout action to v6 by @renovate-rancher[bot] in #109
  • Improve e2e timeouts by @andypitcher in #112
  • Add FOSSA scanning workflow by @macedogm in #116
  • feat: add fedora42 and retire fedora41 by @andypitcher in #114
  • chore(deps): update github actions by @renovate-rancher[bot] in #115

New Contributors

Full Changelog: v0.7-rc1.testing.1...v0.8-rc1.testing.1

v0.7.production.1

06 Jun 12:00
670ce71

Choose a tag to compare

What's Changed

  • Replace Fedora37 by Fedora41 by @andypitcher in #67
  • chore(deps): update actions/setup-go digest to d35c59a by @renovate-rancher in #70
  • Improve README - Add coverage and support matrix by @andypitcher in #68
  • Distro update support and consolidate gen_require by @andypitcher in #71
  • Fix rancher-monitoring-prometheus e2e by @andypitcher in #74
  • Add watch permissions on rke_logreader_t:var_log_t:dir context by @philippebi in #73

New Contributors

Full Changelog: v0.6.production.1...v0.7.production.1

v0.7-rc1.testing.1

29 May 09:17
670ce71

Choose a tag to compare

v0.7-rc1.testing.1 Pre-release
Pre-release

What's Changed

  • Replace Fedora37 by Fedora41 by @andypitcher in #67
  • chore(deps): update actions/setup-go digest to d35c59a by @renovate-rancher in #70
  • Improve README - Add coverage and support matrix by @andypitcher in #68
  • Distro update support and consolidate gen_require by @andypitcher in #71
  • Fix rancher-monitoring-prometheus e2e by @andypitcher in #74
  • Add watch permissions on rke_logreader_t:var_log_t:dir context by @philippebi in #73

New Contributors

Full Changelog: v0.6.production.1...v0.7-rc1.testing.1

v0.6.production.1

18 Apr 17:08
040f911

Choose a tag to compare

What's Changed

  • chore(deps): pin dependencies by @renovate-rancher in #64
  • chore(deps): update github actions by @renovate-rancher in #65
  • Add initial Renovate configuration by @renovate-rancher in #57
  • Add initial E2E structure for validating SELinux policies by @pjbgf in #60
  • Fix #59 rancher-logging-root-fluentbit not working with policy centos9 by @xandradx in #62
  • E2E for Rancher Monitoring and Logging by @andypitcher in #63
  • Refine the policy and add other distro support for the Prometheus Node Exporter by @andypitcher in #55
  • [Centos9] Add support for prometheus node-exporter container by @andypitcher in #54

Important

  • Centos7 support has been removed since it has reached EOL.

New Contributors

Full Changelog: v0.5.production.1...v0.6.production.1

v0.6-rc1.testing.3

10 Mar 11:17
917e64c

Choose a tag to compare

v0.6-rc1.testing.3 Pre-release
Pre-release

What's Changed

  • Add initial Renovate configuration by @renovate-rancher in #57
  • Add initial E2E structure for validating SELinux policies by @pjbgf in #60
  • Fix #59 rancher-logging-root-fluentbit not working with policy centos9 by @xandradx in #62
  • E2E for Rancher Monitoring and Logging by @andypitcher in #63

New Contributors

Full Changelog: v0.6-rc1.testing.2...v0.6-rc1.testing.3

v0.6-rc1.testing.2

22 Jan 14:03
f273f19

Choose a tag to compare

v0.6-rc1.testing.2 Pre-release
Pre-release

What's Changed

  • Refine the policy and add other distro support for the Prometheus Node Exporter by @andypitcher in #55

Full Changelog: v0.6-rc1.testing.1...v0.6-rc1.testing.2

v0.6-rc1.testing.1

10 Jan 12:00
5cc1352

Choose a tag to compare

v0.6-rc1.testing.1 Pre-release
Pre-release

What's Changed

  • [Centos9] Add support for prometheus node-exporter container by @andypitcher in #54

Full Changelog: v0.5-rc1.testing.2...v0.6-rc1.testing.1