tag:github.com,2008:https://github.com/FairwindsOps/polaris/releases 2025-08-18T16:01:19Z tag:github.com,2008:Repository/157735858/10.1.1 2025-08-18T16:16:38Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/e51b90ef79760e1a5448137701e6a3ef1e2b7ce8/hovercard" href="https://github.com/FairwindsOps/polaris/commit/e51b90ef79760e1a5448137701e6a3ef1e2b7ce8"><tt>e51b90e</tt></a> INS-1303: fix <a title="CVE-2025-47907" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-j5pm-7495-qmr3/hovercard" href="https://github.com/advisories/GHSA-j5pm-7495-qmr3">CVE-2025-47907</a></li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/ec1ba2f2db4da640809bc9f1df75fe07ae2b001f/hovercard" href="https://github.com/FairwindsOps/polaris/commit/ec1ba2f2db4da640809bc9f1df75fe07ae2b001f"><tt>ec1ba2f</tt></a> INS-1303: fix <a title="CVE-2025-47907" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-j5pm-7495-qmr3/hovercard" href="https://github.com/advisories/GHSA-j5pm-7495-qmr3">CVE-2025-47907</a> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3330831399" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1141" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1141/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1141">#1141</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/39fb27c6ddde1fa5549a11c610e2dbc25cfcaa3c/hovercard" href="https://github.com/FairwindsOps/polaris/commit/39fb27c6ddde1fa5549a11c610e2dbc25cfcaa3c"><tt>39fb27c</tt></a> Revert "INS-1303: fix <a title="CVE-2025-47907" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-j5pm-7495-qmr3/hovercard" href="https://github.com/advisories/GHSA-j5pm-7495-qmr3">CVE-2025-47907</a>"</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/10.1.0 2025-08-07T14:58:29Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/264dc51f4c276cdd203e98af79af7789128345c3/hovercard" href="https://github.com/FairwindsOps/polaris/commit/264dc51f4c276cdd203e98af79af7789128345c3"><tt>264dc51</tt></a> Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3189303542" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1127" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1127/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1127">#1127</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/45b1f6a1a5969bc918bea27425bb57af6b07608f/hovercard" href="https://github.com/FairwindsOps/polaris/commit/45b1f6a1a5969bc918bea27425bb57af6b07608f"><tt>45b1f6a</tt></a> Bumped libs (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3261106949" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1139" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1139/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1139">#1139</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/v10.1.0 2025-08-01T19:24:25Z <p>docs: update documentation from template (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3284860948" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1140" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1140/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1140">#1140</a>)</p> sudermanjr tag:github.com,2008:Repository/157735858/10.0.0 2025-07-24T20:13:09Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/2b17c3195752c8fa33ec61ac4d1bcb9c9622cda6/hovercard" href="https://github.com/FairwindsOps/polaris/commit/2b17c3195752c8fa33ec61ac4d1bcb9c9622cda6"><tt>2b17c31</tt></a> <strong>[Breaking Change]</strong> Polaris: upgrade github.com/qri-io/jsonschema to v0.2.1 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3256894650" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1135" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1135/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1135">#1135</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/38e540e0cfa5e910e50bd9beac5a593697356d37/hovercard" href="https://github.com/FairwindsOps/polaris/commit/38e540e0cfa5e910e50bd9beac5a593697356d37"><tt>38e540e</tt></a> <strong>[Breaking Change]</strong> Remove flags from audit command and remove auth command (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3260103990" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1138" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1138/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1138">#1138</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.6.4 2025-06-17T17:20:22Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/813d9c0a2aaf4bbeaaa2ee50844190686b2541c6/hovercard" href="https://github.com/FairwindsOps/polaris/commit/813d9c0a2aaf4bbeaaa2ee50844190686b2541c6"><tt>813d9c0</tt></a> INS-1097: Fix <a title="CVE-2025-22874" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-6f52-wpx2-hvf2/hovercard" href="https://github.com/advisories/GHSA-6f52-wpx2-hvf2">CVE-2025-22874</a> for polaris (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3114330766" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1122" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1122/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1122">#1122</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.6.3 2025-04-21T20:39:21Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/d70591b1b81769fb2f5ff6c73f839336d701a690/hovercard" href="https://github.com/FairwindsOps/polaris/commit/d70591b1b81769fb2f5ff6c73f839336d701a690"><tt>d70591b</tt></a> fixed pdbMinAvailableGreaterThanHPAMinReplicas and added validation for pdbMinAvailableEqualToHPAMinReplicas. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2563929207" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1073" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1073/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1073">#1073</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/8fe7a942600ed598564e6e60b06b0d055894f767/hovercard" href="https://github.com/FairwindsOps/polaris/commit/8fe7a942600ed598564e6e60b06b0d055894f767"><tt>8fe7a94</tt></a> Bump golang.org/x/net from 0.33.0 to 0.36.0 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3000056815" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1108" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1108/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1108">#1108</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/a74714b5e5dd78f8c8e22e6a974dbdcdb4f4c29b/hovercard" href="https://github.com/FairwindsOps/polaris/commit/a74714b5e5dd78f8c8e22e6a974dbdcdb4f4c29b"><tt>a74714b</tt></a> Bump k8s.io/apimachinery from 0.32.0 to 0.32.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2858109179" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1102" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1102/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1102">#1102</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/f29571e8bb4478e8215075f89c004269ffdce22f/hovercard" href="https://github.com/FairwindsOps/polaris/commit/f29571e8bb4478e8215075f89c004269ffdce22f"><tt>f29571e</tt></a> Bump k8s.io/client-go from 0.32.0 to 0.32.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2858109394" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1103" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1103/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1103">#1103</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/ba04b7e330a033b4b88642d2f87b01b2e1985967/hovercard" href="https://github.com/FairwindsOps/polaris/commit/ba04b7e330a033b4b88642d2f87b01b2e1985967"><tt>ba04b7e</tt></a> Bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.20.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2858108931" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1101" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1101/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1101">#1101</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/d7d30ac6116e301af0ddf785e0e0fb4c5157ec23/hovercard" href="https://github.com/FairwindsOps/polaris/commit/d7d30ac6116e301af0ddf785e0e0fb4c5157ec23"><tt>d7d30ac</tt></a> INS-933 - pullPolicyNotAlways is crashing webhook mutations (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3009098293" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1115" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1115/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1115">#1115</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.6.2 2025-02-19T13:06:34Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/d451480acf616c00ffefbec3f2e57e64f08309c6/hovercard" href="https://github.com/FairwindsOps/polaris/commit/d451480acf616c00ffefbec3f2e57e64f08309c6"><tt>d451480</tt></a> Bump k8s.io/api from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691049554" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1083" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1083/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1083">#1083</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/2d9aa54e689ef738e5a819b64e242fde08c12774/hovercard" href="https://github.com/FairwindsOps/polaris/commit/2d9aa54e689ef738e5a819b64e242fde08c12774"><tt>2d9aa54</tt></a> Bump k8s.io/apimachinery from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691050713" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1087" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1087/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1087">#1087</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/37edbc71598fbdf85009ff24964c3cd442508bab/hovercard" href="https://github.com/FairwindsOps/polaris/commit/37edbc71598fbdf85009ff24964c3cd442508bab"><tt>37edbc7</tt></a> Bump k8s.io/client-go from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691049864" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1084/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1084">#1084</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/705e6e4016dcab030e36be7b71918ca90a374d2d/hovercard" href="https://github.com/FairwindsOps/polaris/commit/705e6e4016dcab030e36be7b71918ca90a374d2d"><tt>705e6e4</tt></a> Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691050426" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1086" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1086/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1086">#1086</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/80e6f7214ee611feb8a0ad2f8be6e58f822b868b/hovercard" href="https://github.com/FairwindsOps/polaris/commit/80e6f7214ee611feb8a0ad2f8be6e58f822b868b"><tt>80e6f72</tt></a> INSIGHTS-593 Fix Polaris vulerabilities (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2766084775" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1094" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1094/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1094">#1094</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/1d20a16cb3c49272c855f82f87be10ae258154a7/hovercard" href="https://github.com/FairwindsOps/polaris/commit/1d20a16cb3c49272c855f82f87be10ae258154a7"><tt>1d20a16</tt></a> update supporting libs and bump alpine to 3.21 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2742664179" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1093" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1093/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1093">#1093</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.6.1 2025-01-02T16:17:21Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/d451480acf616c00ffefbec3f2e57e64f08309c6/hovercard" href="https://github.com/FairwindsOps/polaris/commit/d451480acf616c00ffefbec3f2e57e64f08309c6"><tt>d451480</tt></a> Bump k8s.io/api from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691049554" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1083" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1083/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1083">#1083</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/2d9aa54e689ef738e5a819b64e242fde08c12774/hovercard" href="https://github.com/FairwindsOps/polaris/commit/2d9aa54e689ef738e5a819b64e242fde08c12774"><tt>2d9aa54</tt></a> Bump k8s.io/apimachinery from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691050713" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1087" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1087/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1087">#1087</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/37edbc71598fbdf85009ff24964c3cd442508bab/hovercard" href="https://github.com/FairwindsOps/polaris/commit/37edbc71598fbdf85009ff24964c3cd442508bab"><tt>37edbc7</tt></a> Bump k8s.io/client-go from 0.31.2 to 0.31.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691049864" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1084/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1084">#1084</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/705e6e4016dcab030e36be7b71918ca90a374d2d/hovercard" href="https://github.com/FairwindsOps/polaris/commit/705e6e4016dcab030e36be7b71918ca90a374d2d"><tt>705e6e4</tt></a> Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2691050426" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1086" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1086/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1086">#1086</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/80e6f7214ee611feb8a0ad2f8be6e58f822b868b/hovercard" href="https://github.com/FairwindsOps/polaris/commit/80e6f7214ee611feb8a0ad2f8be6e58f822b868b"><tt>80e6f72</tt></a> INSIGHTS-593 Fix Polaris vulerabilities (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2766084775" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1094" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1094/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1094">#1094</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/1d20a16cb3c49272c855f82f87be10ae258154a7/hovercard" href="https://github.com/FairwindsOps/polaris/commit/1d20a16cb3c49272c855f82f87be10ae258154a7"><tt>1d20a16</tt></a> update supporting libs and bump alpine to 3.21 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2742664179" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1093" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1093/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1093">#1093</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.6.0 2024-11-13T12:03:44Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/913988e44c896faec34b0e5853f16f763b297b6e/hovercard" href="https://github.com/FairwindsOps/polaris/commit/913988e44c896faec34b0e5853f16f763b297b6e"><tt>913988e</tt></a> Bump github.com/fatih/color from 1.17.0 to 1.18.0 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2618657891" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1081" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1081/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1081">#1081</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/f281cd1e3312b9cddce1bb44f49f87f356b12cf1/hovercard" href="https://github.com/FairwindsOps/polaris/commit/f281cd1e3312b9cddce1bb44f49f87f356b12cf1"><tt>f281cd1</tt></a> Bump k8s.io/api from 0.31.1 to 0.31.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2618656181" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1077" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1077/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1077">#1077</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/4b87bafbb958fbbb643830f80abec3fed21ba2b9/hovercard" href="https://github.com/FairwindsOps/polaris/commit/4b87bafbb958fbbb643830f80abec3fed21ba2b9"><tt>4b87baf</tt></a> Bump k8s.io/client-go from 0.31.1 to 0.31.2 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2618656548" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1078" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1078/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1078">#1078</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/62effa36b6c3581665f0b010369e1a90454c2a4e/hovercard" href="https://github.com/FairwindsOps/polaris/commit/62effa36b6c3581665f0b010369e1a90454c2a4e"><tt>62effa3</tt></a> Bump sigs.k8s.io/controller-runtime from 0.19.0 to 0.19.1 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2618656907" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1079" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1079/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1079">#1079</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/4dd3a81bbd44f6541253209bb6fdb4b4060088c5/hovercard" href="https://github.com/FairwindsOps/polaris/commit/4dd3a81bbd44f6541253209bb6fdb4b4060088c5"><tt>4dd3a81</tt></a> INSIGHTS-475 Add 3 new checks to polaris (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2652423532" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1082" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1082/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1082">#1082</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot tag:github.com,2008:Repository/157735858/9.5.0 2024-10-22T18:45:44Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/073847559ad21f55e4c151b54651799db8ac0913/hovercard" href="https://github.com/FairwindsOps/polaris/commit/073847559ad21f55e4c151b54651799db8ac0913"><tt>0738475</tt></a> Add --merge-config flag to support merging with default configuration (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2576514609" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1075" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1075/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1075">#1075</a>)</li> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/FairwindsOps/polaris/commit/9b5438d8642f7535a192d416e38aeba8316a2566/hovercard" href="https://github.com/FairwindsOps/polaris/commit/9b5438d8642f7535a192d416e38aeba8316a2566"><tt>9b5438d</tt></a> Fix: rolebindingRolePodExecAttach check (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2561847124" data-permission-text="Title is private" data-url="https://github.com/FairwindsOps/polaris/issues/1070" data-hovercard-type="pull_request" data-hovercard-url="/FairwindsOps/polaris/pull/1070/hovercard" href="https://github.com/FairwindsOps/polaris/pull/1070">#1070</a>)</li> </ul> <p>You can verify the signature of the checksums.txt file using <a href="https://github.com/sigstore/cosign">cosign</a>.</p> <div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub"><pre class="notranslate"><code>cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub </code></pre></div> reactiveops-bot