v1.5.0 - 2025-04-09
Changelog
Bug Fixes 🐞
- b0fdeb5 fix: update sha generation logic
- f0e9dcc fix: add unit test to show failures in current sha logic
Code Refactoring 💎
- 9548c23 refactor: cleanup unused err check
Features 🌈
- bf7e77e feat: add build for windows ltsc2025
Maintenance 🔧
- a488327 chore: bump kind to v0.27.0
- 515358e chore: disable trivy package testing for driver-crds
- 924b3b8 chore: bump docker golang base images to 1.23
- 572e439 chore: move tam7t to emeritus_approvers
- 0b00da8 chore: bump github/codeql-action from 3.28.0 to 3.28.8
- b8a1e5b chore: bump actions/setup-go from 5.2.0 to 5.3.0
- 4aad87b chore: bump golang.org/x/net from 0.28.0 to 0.33.0 in /hack/tools
- 25d7756 chore: bump gaurav-nelson/github-action-markdown-link-check
- c3cb4ff chore: bump step-security/harden-runner from 2.10.2 to 2.10.3
- 911b494 chore: bump codecov/codecov-action from 5.1.1 to 5.1.2
- aaa4a3c chore: bump github/codeql-action from 3.26.13 to 3.28.0
- 5a8d6b5 chore: bump actions/upload-artifact from 4.4.1 to 4.5.0
- 7c04af1 chore: bump actions/setup-go from 5.0.2 to 5.2.0
- a24d2fd chore: bump golang.org/x/crypto from 0.22.0 to 0.31.0
- 5fe63f7 chore: bump codecov/codecov-action from 4.5.0 to 5.1.1
- 658a778 chore: bump golang/govulncheck-action from 1.0.3 to 1.0.4
- 041d142 chore: bump to golang 1.22 builder image in dockerfile
- c5d2bd3 chore: bump trivy to v0.57.1 to mitigate rate limit issues
- f6bd4d8 chore: bump step-security/harden-runner from 2.9.1 to 2.10.2
- 88d1253 chore: bump actions/checkout from 4.1.7 to 4.2.1
- 44e7653 chore: bump github/codeql-action from 3.26.6 to 3.26.13
- cb6fd1e chore: bumps base images
- ef8f5eb chore: bump actions/upload-artifact from 4.4.0 to 4.4.1
- 2f6e7d0 chore: bump actions/upload-artifact from 4.3.6 to 4.4.0
- 92c73a0 chore: bump github/codeql-action from 3.26.5 to 3.26.6
- 7710922 chore: bump actions/dependency-review-action from 4.3.2 to 4.3.4
- 5e1d34f chore: bump golang/govulncheck-action from 1.0.2 to 1.0.3
- 6fe8bd5 chore: bump actions/checkout from 4.1.5 to 4.1.7
- f09e97c chore: bump github/codeql-action from 3.25.8 to 3.26.5
- dae0961 chore: bump actions/upload-artifact from 4.3.1 to 4.3.6
- 5e3935b chore: bump step-security/harden-runner from 2.6.1 to 2.9.1
- 0a0ed48 chore: bump kind version and k8s version in test matrix
- 36c6a8d chore: bump livenessprobe to v2.13.1
- c807dca chore: bump node-driver-registrar to v2.11.1
- 0c90683 chore: bump ossf/scorecard-action from 2.3.1 to 2.4.0
- 09e9b3b chore: bump actions/setup-go from 4.0.1 to 5.0.2
- 0363ede chore: bump codecov/codecov-action from 4.2.0 to 4.5.0
- 549a1de chore: bump github/codeql-action from 3.25.0 to 3.25.8
- 5672b8d chore: update debian-base to bookworm-v1.0.3
- c49351a chore: bump actions/checkout from 4.1.4 to 4.1.5
- c970d0e chore: bump actions/dependency-review-action from 4.2.4 to 4.3.2
- f43e0b6 chore: bump actions/checkout from 4.1.2 to 4.1.4
- 1c2a612 chore: bump kubectl to v1.29.4 in driver-crds for CVE-2023-45288
- 22da0cc chore: bump github/codeql-action from 3.24.10 to 3.25.0
- c1b0d9c chore: update debian-base to bookworm-v1.0.2
- d3c3968 chore: bump codecov/codecov-action from 3.1.5 to 4.2.0
- 3fa13ad chore: bump github/codeql-action from 3.24.8 to 3.24.10
- dfd7ff6 chore: bump actions/dependency-review-action from 4.0.0 to 4.2.4
- 8f1c32e chore: bump actions/checkout from 4.1.1 to 4.1.2
- 78e1995 chore: bump github/codeql-action from 3.24.3 to 3.24.8
- 987599f chore: bump google.golang.org/grpc in /test/e2eprovider
- ab9df20 chore: update node-driver-registrar:v2.10.0, livenessprobe:v2.12.0
- 10e8b27 chore: update debian-base to bookworm-v1.0.1
- 275cf5f chore: bump github/codeql-action from 3.23.1 to 3.24.3
- 6cbaa7c chore: bump actions/upload-artifact from 4.2.0 to 4.3.1
- d8daac9 chore: bump actions/dependency-review-action from 3.1.5 to 4.0.0
- 91e5453 chore: bump codecov/codecov-action from 3.1.4 to 3.1.5
- b91661f chore: bump github/codeql-action from 3.23.0 to 3.23.1
- 07c7f49 chore: bump actions/upload-artifact from 4.0.0 to 4.2.0
- 0af3027 chore: bump k8s.io/klog/v2 from 2.100.1 to 2.120.1 in /test/e2eprovider
- 0a5d00e chore: bump actions/checkout
- 4fefeb8 chore: bump actions/dependency-review-action from 3.1.3 to 3.1.5
- cc87fdc chore: bump ossf/scorecard-action from 2.2.0 to 2.3.1
- 3be4d17 chore: bump actions/upload-artifact from 3.1.2 to 4.0.0
- 903314f chore: update to go 1.21.6 in docker
- b5f9ce6 chore: bump google.golang.org/grpc in /test/e2eprovider
- f3c1bb8 chore: bump github/codeql-action from 2.21.5 to 3.23.0
- 0117e89 chore: bump step-security/harden-runner from 2.4.0 to 2.6.1
- abe4833 chore: bump actions/dependency-review-action from 3.0.6 to 3.1.3
- c4b22eb chore: update to go 1.21.4 in docker
- 7cdb803 chore: update to go 1.21
- 5a184ae chore: bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 in /test/e2eprovider
- a3fbe36 chore: bump google.golang.org/grpc from 1.49.0 to 1.56.3
- 2a6ad3c chore: bump google.golang.org/grpc in /test/e2eprovider
- 0de7b33 chore: bump golang.org/x/net from 0.10.0 to 0.17.0 in /hack/tools
- 41c8819 chore: bump golang.org/x/net from 0.8.0 to 0.17.0
- 7cf7be9 chore: bump golang.org/x/net from 0.8.0 to 0.17.0 in /test/e2eprovider
- 9743144 chore: bump actions/checkout from 3.5.3 to 4.0.0
- a4aa61d chore: bump github/codeql-action from 2.21.2 to 2.21.5
- dca6d3f chore: cleanup secretproviderclass status
- da9fd72 chore: bump github/codeql-action from 2.21.0 to 2.21.2
- 1b10489 chore: bump k8s.io/code-generator from 0.27.3 to 0.27.4 in /hack/tools
- 663d733 chore: bump github/codeql-action from 2.20.4 to 2.21.0
- a4aea02 chore: bump sigs.k8s.io/controller-tools in /hack/tools
- db8c839 chore: bump github/codeql-action from 2.20.3 to 2.20.4
- 14952e6 chore: bump github/codeql-action from 2.20.1 to 2.20.3
- 2403169 chore: update debian-base to bookworm-v1.0.0
- ca06ac3 chore: bump github/codeql-action from 2.20.0 to 2.20.1
- 19f5ce2 chore: bump ossf/scorecard-action from 2.1.3 to 2.2.0
- 61e53b7 chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 3e9a018 chore: bump k8s.io/code-generator from 0.27.2 to 0.27.3 in /hack/tools
- 47468b8 chore: bump github.com/golangci/golangci-lint in /hack/tools
- 0d6bd57 chore: bump github/codeql-action from 2.3.6 to 2.20.0
- f87cf12 chore: bump actions/dependency-review-action from 3.0.4 to 3.0.6
- fb2ff09 chore: bump actions/checkout from 3.5.2 to 3.5.3
- d2ac05d chore: bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0
- 49f966f chore: bump github/codeql-action from 2.3.3 to 2.3.6
- 6938b86 chore: bump github.com/golangci/golangci-lint in /hack/tools
- c8b330c chore: bump k8s.io/code-generator from 0.26.4 to 0.27.2 in /hack/tools
- 6551fe2 chore: bump k8s deps to
v1.26.4(#1254) - 7b9e0f9 chore: bump codecov/codecov-action from 3.1.3 to 3.1.4
- ceb7ec6 chore: bump actions/setup-go from 4.0.0 to 4.0.1
- 7e5b5dc chore: bump golang from
79ffe35to31a8f92in /test/e2eprovider - 73fd4cc chore: bump golang from
eaf1267to31a8f92in /docker - 26c8cd5 chore: bump github/codeql-action from 2.3.2 to 2.3.3
- bc0fbbb chore: bump step-security/harden-runner from 2.3.1 to 2.4.0
- 086c6b6 chore: update node-driver-registrar:v2.8.0, livenessprobe:v2.10.0
- ace8c5a chore: bump google.golang.org/grpc in /test/e2eprovider
- cb49b72 chore: bump k8s.io/klog/v2 from 2.80.1 to 2.100.1 in /test/e2eprovider
- beb650e chore: bump golang from
403f486to79ffe35in /docker - 7b4879f chore: bump monis.app/mlog from 0.0.2 to 0.0.4 in /test/e2eprovider
- ca9178e chore: bump golang from
403f486to79ffe35in /test/e2eprovider - b855553 chore: bump codecov/codecov-action from 3.1.2 to 3.1.3
- 4f2eae2 chore: bump github/codeql-action from 2.3.0 to 2.3.2
- 5743ab3 chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 0b457df chore: bump github/codeql-action from 2.2.12 to 2.3.0
- 0e85ac0 chore: enable gocritic linter and fix errors
- 1ef0c67 chore: cleanup WritePayloads to be easier to use
- 23b30d1 chore: allow retries on pre-upgrade hook jobs
- 7c7b3e5 chore: bump actions/checkout from 3.5.0 to 3.5.2
- b8069f4 chore: bump github/codeql-action from 2.2.11 to 2.2.12
- dc4bf06 chore: update to go 1.20
- 8048905 chore: bump trivy version to v0.39.1
- 379a4a4 chore: bump kind version to v0.18.0
- e582845 chore: bump github/codeql-action from 2.2.9 to 2.2.11
- 7cce3bb chore: updates error message
- cab63b3 chore: remove unused node name in rotation reconciler
- 957817e chore: remove unused providerVolumePath code paths
- 34afcef chore: bump actions/checkout from 3.4.0 to 3.5.0
- 76f266a chore: bump github.com/golangci/golangci-lint in /hack/tools
- 8b508b2 chore: bump github/codeql-action from 2.2.7 to 2.2.9
- adba078 chore: bump k8s.io/code-generator from 0.26.2 to 0.26.3 in /hack/tools
- a556236 chore: bump google.golang.org/protobuf in /hack/tools
- fa40c79 chore: update golangci-lint to v1.52.1
- ead9b01 chore: bump github/codeql-action from 2.2.6 to 2.2.7
- b4e4c6a chore: bump actions/checkout from 3.3.0 to 3.4.0
- f62667c chore: bump google.golang.org/protobuf in /hack/tools
- ba9625b chore: bump google.golang.org/protobuf in /hack/tools
- 8d15bd1 chore: bump github/codeql-action from 2.2.5 to 2.2.6
- 1367ef6 chore: bump k8s.io/code-generator from 0.26.1 to 0.26.2 in /hack/tools
- 9d23ab4 chore: bump google.golang.org/grpc/cmd/protoc-gen-go-grpc in /hack/tools
- 686b1dc chore: bump gaurav-nelson/github-action-markdown-link-check
- c9e9052 chore: bump github/codeql-action from 2.2.4 to 2.2.5
- 8da23b0 chore: bump golang.org/x/net from 0.4.0 to 0.7.0
- f62048e chore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /hack/tools
- 8bf3cea chore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /test/e2eprovider
- 37b523c chore: bump github/codeql-action from 2.2.2 to 2.2.4
- 7951913 chore: use base and test image from
registry.k8s.io - bd9efb6 chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 06130f8 chore: bump github/codeql-action from 2.2.1 to 2.2.2
- bd549ea chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 3042513 chore: bump github/codeql-action from 2.1.39 to 2.2.1
- ebce4e4 chore: bump goreleaser/goreleaser-action from 4.1.0 to 4.2.0
- 0a3fee2 chore: bump k8s.io/code-generator from 0.26.0 to 0.26.1 in /hack/tools
- 98ec718 chore: bump github/codeql-action from 2.1.38 to 2.1.39
- 143dc71 chore: pin buildx to
v0.10.6 - fe84ebc chore: bump github/codeql-action from 2.1.37 to 2.1.38
- 8979367 chore: bump actions/checkout from 3.2.0 to 3.3.0
- c4229cb chore: update livenessprobe to v2.9.0
- 94fc545 chore: update node-driver-registrar to v2.7.0
- 42e786e chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 1b6d197 chore: remove windows version 1903, 1909 and 2004 (EOL)
- 93d0e05 chore: bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0
- 68c4a7a chore: bump github/codeql-action from 2.1.36 to 2.1.37
- d2398b1 chore: bump actions/checkout from 3.1.0 to 3.2.0
- df7c1a5 chore: bump k8s.io/code-generator from 0.25.4 to 0.26.0 in /hack/tools
- d772515 chore: bump github/codeql-action from 2.1.35 to 2.1.36
- 7513988 chore: reenable trivy scan for binary
- 4c1a8f5 chore: use kubectl v1.26.0 in driver-crds
- da5a280 chore: switch to
registry.k8s.io - 215e5c2 chore: update node-driver-registrar to v2.6.2
- 4e6cc57 chore: bump github/codeql-action from 2.1.32 to 2.1.35
- c60d93f chore: bump stefanprodan/helm-gh-pages from 1.6.0 to 1.7.0
- 6a64a91 chore: bump k8s.io/code-generator from 0.25.3 to 0.25.4 in /hack/tools
- c9ec363 chore: bump github/codeql-action from 2.1.31 to 2.1.32
- 1111a97 chore: use kubectl 1.25.4 in driver-crds
- ca89feb chore: remove k8s.io/kubernetes dep
- 59473a2 chore: bump github/codeql-action from 2.1.29 to 2.1.31
- 8778a4c chore: update livenessprobe to v2.8.0
- b12d68a chore: bump github/codeql-action from 2.1.28 to 2.1.29
- 2beee6f chore: bump sigs.k8s.io/controller-tools in /hack/tools
- 4776c62 chore: bump k8s.io/code-generator from 0.25.0 to 0.25.3 in /hack/tools
- 603bb66 chore: bump github.com/golangci/golangci-lint in /hack/tools
- 358b8a3 chore: bump google.golang.org/protobuf in /hack/tools
- 75b1134 chore: bump actions/checkout from 2 to 3
- 6841c6d chore: bump sigs.k8s.io/kustomize/kustomize/v4 in /hack/tools
- f6021d8 chore: bump goreleaser/goreleaser-action from 2.8.1 to 3.2.0
- d3e4260 chore: adds
ok-to-testlabel on dependabot prs - 8a52d33 chore: bump github.com/golangci/golangci-lint in /hack/tools
- c8fc68f chore: bump stefanprodan/helm-gh-pages from 1.4.1 to 1.6.0
- 57a5cb9 chore: bump gaurav-nelson/github-action-markdown-link-check
- 762f81f chore: add dependabot.yml
- e3ed2f2 chore: use kubectl 1.25.x in driver-crds
- f938672 chore: update golangci-lint to v1.49.0
- 6fda350 chore: run apt update && apt upgrade -y in dockerfile
- 0dc8c0f chore: support kubernetes v1.25.0
- 980a539 chore: remove psp
- f020bdf chore: update debian-base to bullseye-v1.4.2
- 5680241 chore: update k8s deps to v0.24.4
- 4be2208 chore: update to go 1.19
- e272dc9 chore: update debian-base to bullseye-v1.4.1
- efb3274 chore: update debian-base to bullseye-v1.4.0
- 27032f6 chore: update boilerplate for the generated proto files
- fe049c3 chore: use
google.golang.org/protobufand regenerate proto - a95f0e5 chore: update kustomize to v4
- 1d264d2 chore: update tools dependencies and generate manifests
- e0f1850 chore: update kubernetes deps to v1.24.1
- 5ddc969 chore: add
crds.podLabelsfor helm hook jobs (#962) - d70d198 chore: update debian-base to bullseye-v1.3.0
- a48fdde chore: bump
node-driver-registrar:v2.5.1andlivenessprobe:v2.7.0 - 68ef471 chore: bump kind version to v0.13.0 to support kubernetes v1.24
- 75d28a4 chore: update pull request template
- 1faac89 chore: change default to
/var/runfor providers path - e6cc3d5 chore: upgrade makefile test binary versions
- 4b09e85 chore: upgrade to go 1.18
- 1ec0f8b chore: remove deprecated minimumProviderVersions in helm chart
- b46dfcb chore: make token requests conditional for v1.20+
- 37f55b2 chore: bump
node-driver-registrar:v2.5.0andlivenessprobe:v2.6.0 - ca257a8 chore: mark
v1alpha1api version as deprecated - ae87243 chore: remove old helm packages and index
- ccb9fa4 chore: updates trivy command
- a596624 chore: log invalid key in error
- dac5381 chore: update debian-base to bullseye-v1.1.0
- f694be2 chore: bump node-driver-reegistrar image to v2.4.0
- 9750771 chore: remove deprecated
--filtered-watch-secretflag - c78559e chore: bump livenessprobe image to v2.5.0
- 2b27e0c chore: upgrade kubernetes deps
- 6069215 chore: use TARGETARCH for image build and makefile update
- e1f143c chore: use
corev1as import alias instead ofv1
Security Fix 🛡️
- 7e85471 security: bump golang.org/x/net to v0.38.0 to fix CVE-2025-22872
- 0a9f6c3 security: bump golang.org/x/net to v0.33.0 to fix CVE-2024-45338
- 0abfaa3 security: bump golang.org/x/net to v0.23.0+ to fix GO-2024-2687
- b54143d security: bump kubectl to v1.29.3 in driver-crds for CVE-2024-24786
- 9f4a2bb security: bump golang.org/x/crypto to v0.17.0 to fix CVE-2023-48795
- d3a4a98 security: bump kubernetes version to v1.27.0 in driver-crds
- 369ab7b security: fix CVE-2022-41717
- fe26e98 security: fix CVE-2022-27664
- 586ff3f security: fix CVE-2022-27664
- e24efb7 security: fix multiple CVEs
- 0dde850 security: fix CVE-2022-37434
- 2d85ba6 security: fix CVE-2022-1996
- 94077a6 security: fix multiple CVEs
- 3bfd4f2 security: fix CVE-2022-29526
- ce8133d security: fix CVE-2021-4209
- 9357134 security: fix CVE-2022-1996
- 0c70232 security: fix CVE-2022-34903
- 6152bf1 security: fix CVE-2022-2068
- 84f8b21 security: fix CVE-2022-1664
- 860c83e security: fix CVE-2022-1292
- 28a14d2 security: fix CVE-2022-1271
- f4b9d0f security: fix CVE-2018-25032 and update to debian-base:bullseye-v1.2.0
- 5a34967 security: fix CVEs
- b558858 security: fix CVE-2022-0778, CVE-2021-4160
- e6d1c8f security: fix CVE-2021-3995, CVE-2021-3996
- 6462375 security: fix CVE-2021-43618
Testing 💚
- 71fdb54 test: reset rotation response in mock server for upgrade tests
- 8feeb00 test: delete metrics ns in e2e for upgrade tests
- fd1821b test: use e2e-provider for manifest tests
- c99911f test: remove target path check in fake provider server
- 4a54858 test: improve nodeserver testing
- ca6a736 test: more usage of t.TempDir()
- cc6f126 test: replace tmpdir with t.TempDir()
- df67b53 test: cleanup provider tests (part 1)
- 725b77d test: use helm upgrade --install for azure e2e
- 86d368e test: use helm charts for azure provider
- 0ec6250 test: conditionally check token requests role and binding
- 899d3ed test: add test for view and admin cluster role (#845)