tag:github.com,2008:https://github.com/kcp-dev/kcp/releases 2025-07-25T11:58:58Z tag:github.com,2008:Repository/353364259/v0.28.0 2025-07-28T09:21:03Z <h2>Changes by Kind</h2> <h3>Security</h3> <ul> <li>Update <code>github.com/golang-jwt/jwt/v4</code> to v4.5.2 (addressing <a title="CVE-2025-30204" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-mh63-6h87-95cp/hovercard" href="https://github.com/advisories/GHSA-mh63-6h87-95cp">CVE-2025-30204</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2949099118" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3352" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3352/hovercard" href="https://github.com/kcp-dev/kcp/pull/3352">#3352</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3156754824" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3454" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3454/hovercard" href="https://github.com/kcp-dev/kcp/pull/3454">#3454</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> </ul> <h3>Deprecation</h3> <ul> <li>Deprecate <code>APIExport</code> Virtual Workspace URL population. Add feature flag <code>EnableDeprecatedAPIExportVirtualWorkspacesUrls</code> to re-enable deprecated <code>APIExport</code> Virtual Workspace URLs (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3071779427" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3411" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3411/hovercard" href="https://github.com/kcp-dev/kcp/pull/3411">#3411</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> </ul> <h3>API Change</h3> <ul> <li>Add caching API under <code>cache.kcp.io</code> to be able to interact with cache server programmatically (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3003134527" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3382" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3382/hovercard" href="https://github.com/kcp-dev/kcp/pull/3382">#3382</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add optional <code>spec.mount</code> to <code>Workspace</code> objects to stabilize mount API (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2997166245" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3380" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3380/hovercard" href="https://github.com/kcp-dev/kcp/pull/3380">#3380</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add <code>CachedResourcesEndpointSlice</code> resource (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3118349233" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3442" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3442/hovercard" href="https://github.com/kcp-dev/kcp/pull/3442">#3442</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>)</li> <li>Add new version of <code>APIBinding</code> to <code>apis.kcp.io/v1alpha2</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3020630308" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3384" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3384/hovercard" href="https://github.com/kcp-dev/kcp/pull/3384">#3384</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xmudrii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xmudrii">@xmudrii</a>)</li> <li>Add new version of <code>APIExport</code> to <code>apis.kcp.io/v1alpha2</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891415564" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3318" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3318/hovercard" href="https://github.com/kcp-dev/kcp/pull/3318">#3318</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>Implement support for verbs in PermissionClaims (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3053062521" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3402" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3402/hovercard" href="https://github.com/kcp-dev/kcp/pull/3402">#3402</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xmudrii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xmudrii">@xmudrii</a>)</li> <li>Make <code>CachedResource</code> GVR immutable and unique in the logical cluster (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3208680894" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3476" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3476/hovercard" href="https://github.com/kcp-dev/kcp/pull/3476">#3476</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>)</li> <li>Rebase to Kubernetes v1.32.3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3020518895" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3383" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3383/hovercard" href="https://github.com/kcp-dev/kcp/pull/3383">#3383</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>) <ul> <li><code>ValidatingAdmissionPolicy</code> has been removed from <code>admissionregistration.k8s.io/v1alpha1</code> as per Kubernetes v1.32 API lifecycle management</li> <li><code>admissionregistration.k8s.io/v1alpha1</code> is no longer being served by default</li> </ul> </li> <li>Stop printing Ready column for <code>APIExports</code> as virtual workspace URLs are no longer populated by default (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3262272857" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3493" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3493/hovercard" href="https://github.com/kcp-dev/kcp/pull/3493">#3493</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>Add <code>sdk/testing/server.ContextRunInProcessFunc</code>. Deprecate <code>sdk/testing/server.RunInProcessFunc</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3027572606" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3388" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3388/hovercard" href="https://github.com/kcp-dev/kcp/pull/3388">#3388</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ntnn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ntnn">@ntnn</a>)</li> <li>Serve both <code>v1alpha1</code> and <code>v1alpha2</code> of <code>APIBindings</code> in the <code>APIExport</code> Virtual Workspace (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3094284061" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3430" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3430/hovercard" href="https://github.com/kcp-dev/kcp/pull/3430">#3430</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xmudrii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xmudrii">@xmudrii</a>) <ul> <li>Fix a panic in the OpenAPI v3 endpoint for Virtual Workspaces happening if there's a resource with two or more versions</li> </ul> </li> </ul> <h3>Feature</h3> <ul> <li>Add Replication virtual workspace for <code>CachedResource</code>. Endpoint for the Replication VW is now displayed in its respective <code>CachedResourceEndpointSlice</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3222635803" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3480" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3480/hovercard" href="https://github.com/kcp-dev/kcp/pull/3480">#3480</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>)</li> <li>Add a new <code>--root-identities-file</code> CLI flag to <code>kcp</code> used to bootstrap APIExport identities inside the root workspace (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3046824783" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3400" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3400/hovercard" href="https://github.com/kcp-dev/kcp/pull/3400">#3400</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>)</li> <li>Add a controller to automatically keep defaultAPIBindings defined in a <code>WorkspaceType</code> up to date in all workspaces that derive from it. This behaviour is enabled by configuring <code>.spec.defaultAPIBindingLifecycle</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2999679016" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3381" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3381/hovercard" href="https://github.com/kcp-dev/kcp/pull/3381">#3381</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MisterMX/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/MisterMX">@MisterMX</a>)</li> <li>Enable CLI flag <code>--encryption-provider-config</code> in the <code>kcp</code> binary (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3198464387" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3470" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3470/hovercard" href="https://github.com/kcp-dev/kcp/pull/3470">#3470</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/adrianrobotka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/adrianrobotka">@adrianrobotka</a>)</li> <li>Print flags in sections for <code>kcp-front-proxy</code> binary (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3022216140" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3385" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3385/hovercard" href="https://github.com/kcp-dev/kcp/pull/3385">#3385</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sttts/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sttts">@sttts</a>)</li> <li>Run the admission chain in the virtual workspace (forwarding) registry with the <code>create</code> verb upon creating a new object using server-side apply. As a result, running the server-side apply for a claimed resource in the APIExport Virtual Workspace requires the <code>create</code> verb (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3113858773" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3439" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3439/hovercard" href="https://github.com/kcp-dev/kcp/pull/3439">#3439</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xmudrii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xmudrii">@xmudrii</a>)</li> <li>The kcp specific CRDs are now bundled into one yaml file that is part of the release (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3178300585" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3466" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3466/hovercard" href="https://github.com/kcp-dev/kcp/pull/3466">#3466</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mikkeldamsgaard/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mikkeldamsgaard">@mikkeldamsgaard</a>)</li> </ul> <h3>Bug or Regression</h3> <ul> <li>Authorization checks on resources from an <code>APIExport</code> delegate to the next authorizer if the <code>APIExport</code> is not found (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3179046320" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3467" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3467/hovercard" href="https://github.com/kcp-dev/kcp/pull/3467">#3467</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ntnn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ntnn">@ntnn</a>)</li> <li>Disable the <code>cd semantic</code> notice when <code>--short</code> is provided (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3083461274" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3423" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3423/hovercard" href="https://github.com/kcp-dev/kcp/pull/3423">#3423</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ntnn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ntnn">@ntnn</a>)</li> <li>Fix <code>--bind-address</code> not being honoured in some generated configuration files (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3077037725" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3418" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3418/hovercard" href="https://github.com/kcp-dev/kcp/pull/3418">#3418</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ntnn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ntnn">@ntnn</a>)</li> <li>Fix <code>APIResourceSchema</code> name for the <code>WorkspaceTypes</code> resource to unblock upgrade from previous versions (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2946642657" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3349" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3349/hovercard" href="https://github.com/kcp-dev/kcp/pull/3349">#3349</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>Fix URL update when logicalcluster URL changes but workspace URL is not updated (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3206293000" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3474" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3474/hovercard" href="https://github.com/kcp-dev/kcp/pull/3474">#3474</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Only set <code>experimental.tenancy.kcp.io/owner</code> annotation on <code>LogicalCluster</code> if <code>Workspace</code> has the annotation (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3113466694" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3438" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3438/hovercard" href="https://github.com/kcp-dev/kcp/pull/3438">#3438</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>Remove <code>VOLUME</code> from Dockerfile so no <code>/data</code> volume is mounted anymore (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3109822949" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3434" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3434/hovercard" href="https://github.com/kcp-dev/kcp/pull/3434">#3434</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h3>Other (Cleanup or Flake)</h3> <ul> <li>Fix consistency for DynamicRestMapper &amp; workspace cleaner (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3126834916" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3447" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3447/hovercard" href="https://github.com/kcp-dev/kcp/pull/3447">#3447</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Move to use dynamicRestMapper everywhere to dynamically resolve Kind to resource and vice versa (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3165956544" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3462" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3462/hovercard" href="https://github.com/kcp-dev/kcp/pull/3462">#3462</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Update to Go 1.23.10 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3122650860" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3443" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3443/hovercard" href="https://github.com/kcp-dev/kcp/pull/3443">#3443</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>Update to kcp/code-generator v3 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3063097520" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3406" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3406/hovercard" href="https://github.com/kcp-dev/kcp/pull/3406">#3406</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>Stop exposing mini-front-proxy handlers (including <code>/metrics</code>) on kcp server unless <code>--additional-mappings-file</code> is passed (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2977075064" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3361" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3361/hovercard" href="https://github.com/kcp-dev/kcp/pull/3361">#3361</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h2>Dependencies</h2> <h3>Added</h3> <ul> <li>github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: <a href="https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/tree/detectors/gcp/v1.24.2">v1.24.2</a></li> <li>github.com/Microsoft/hnslib: <a href="https://github.com/Microsoft/hnslib/tree/v0.0.8">v0.0.8</a></li> <li>github.com/containerd/containerd/api: <a href="https://github.com/containerd/containerd/tree/api/v1.7.19">v1.7.19</a></li> <li>github.com/containerd/errdefs: <a href="https://github.com/containerd/errdefs/tree/v0.1.0">v0.1.0</a></li> <li>github.com/containerd/log: <a href="https://github.com/containerd/log/tree/v0.1.0">v0.1.0</a></li> <li>github.com/kcp-dev/code-generator/v3: <a href="https://github.com/kcp-dev/code-generator/tree/4094fb8">4094fb8</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/externaljwt: <a href="https://github.com/kcp-dev/kubernetes/tree/staging/src/k8s.io/externaljwt/ddbe171">ddbe171</a></li> <li>github.com/klauspost/compress: <a href="https://github.com/klauspost/compress/tree/v1.17.11">v1.17.11</a></li> <li>github.com/kylelemons/godebug: <a href="https://github.com/kylelemons/godebug/tree/v1.1.0">v1.1.0</a></li> <li>github.com/moby/sys/userns: <a href="https://github.com/moby/sys/tree/userns/v0.1.0">v0.1.0</a></li> <li>github.com/planetscale/vtprotobuf: <a href="https://github.com/planetscale/vtprotobuf/tree/0393e58">0393e58</a></li> <li>go.opentelemetry.io/auto/sdk: v1.1.0</li> <li>go.opentelemetry.io/contrib/detectors/gcp: v1.31.0</li> <li>go.opentelemetry.io/otel/sdk/metric: v1.31.0</li> </ul> <h3>Changed</h3> <ul> <li>cel.dev/expr: v0.15.0 → v0.19.1</li> <li>cloud.google.com/go/accessapproval: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/accesscontextmanager: v1.8.1 → v1.8.5</li> <li>cloud.google.com/go/aiplatform: v1.48.0 → v1.60.0</li> <li>cloud.google.com/go/analytics: v0.21.3 → v0.23.0</li> <li>cloud.google.com/go/apigateway: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/apigeeconnect: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/apigeeregistry: v0.7.1 → v0.8.3</li> <li>cloud.google.com/go/appengine: v1.8.1 → v1.8.5</li> <li>cloud.google.com/go/area120: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/artifactregistry: v1.14.1 → v1.14.7</li> <li>cloud.google.com/go/asset: v1.14.1 → v1.17.2</li> <li>cloud.google.com/go/assuredworkloads: v1.11.1 → v1.11.5</li> <li>cloud.google.com/go/automl: v1.13.1 → v1.13.5</li> <li>cloud.google.com/go/baremetalsolution: v1.1.1 → v1.2.4</li> <li>cloud.google.com/go/batch: v1.3.1 → v1.8.0</li> <li>cloud.google.com/go/beyondcorp: v1.0.0 → v1.0.4</li> <li>cloud.google.com/go/bigquery: v1.53.0 → v1.59.1</li> <li>cloud.google.com/go/billing: v1.16.0 → v1.18.2</li> <li>cloud.google.com/go/binaryauthorization: v1.6.1 → v1.8.1</li> <li>cloud.google.com/go/certificatemanager: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/channel: v1.16.0 → v1.17.5</li> <li>cloud.google.com/go/cloudbuild: v1.13.0 → v1.15.1</li> <li>cloud.google.com/go/clouddms: v1.6.1 → v1.7.4</li> <li>cloud.google.com/go/cloudtasks: v1.12.1 → v1.12.6</li> <li>cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.2</li> <li>cloud.google.com/go/compute: v1.23.0 → v1.24.0</li> <li>cloud.google.com/go/contactcenterinsights: v1.10.0 → v1.13.0</li> <li>cloud.google.com/go/container: v1.24.0 → v1.31.0</li> <li>cloud.google.com/go/containeranalysis: v0.10.1 → v0.11.4</li> <li>cloud.google.com/go/datacatalog: v1.16.0 → v1.19.3</li> <li>cloud.google.com/go/dataflow: v0.9.1 → v0.9.5</li> <li>cloud.google.com/go/dataform: v0.8.1 → v0.9.2</li> <li>cloud.google.com/go/datafusion: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/datalabeling: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/dataplex: v1.9.0 → v1.14.2</li> <li>cloud.google.com/go/dataproc/v2: v2.0.1 → v2.4.0</li> <li>cloud.google.com/go/dataqna: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/datastore: v1.13.0 → v1.15.0</li> <li>cloud.google.com/go/datastream: v1.10.0 → v1.10.4</li> <li>cloud.google.com/go/deploy: v1.13.0 → v1.17.1</li> <li>cloud.google.com/go/dialogflow: v1.40.0 → v1.49.0</li> <li>cloud.google.com/go/dlp: v1.10.1 → v1.11.2</li> <li>cloud.google.com/go/documentai: v1.22.0 → v1.25.0</li> <li>cloud.google.com/go/domains: v0.9.1 → v0.9.5</li> <li>cloud.google.com/go/edgecontainer: v1.1.1 → v1.1.5</li> <li>cloud.google.com/go/essentialcontacts: v1.6.2 → v1.6.6</li> <li>cloud.google.com/go/eventarc: v1.13.0 → v1.13.4</li> <li>cloud.google.com/go/filestore: v1.7.1 → v1.8.1</li> <li>cloud.google.com/go/firestore: v1.12.0 → v1.14.0</li> <li>cloud.google.com/go/functions: v1.15.1 → v1.16.0</li> <li>cloud.google.com/go/gkebackup: v1.3.0 → v1.3.5</li> <li>cloud.google.com/go/gkeconnect: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/gkehub: v0.14.1 → v0.14.5</li> <li>cloud.google.com/go/gkemulticloud: v1.0.0 → v1.1.1</li> <li>cloud.google.com/go/gsuiteaddons: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/iam: v1.1.1 → v1.1.6</li> <li>cloud.google.com/go/iap: v1.8.1 → v1.9.4</li> <li>cloud.google.com/go/ids: v1.4.1 → v1.4.5</li> <li>cloud.google.com/go/iot: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/kms: v1.15.0 → v1.15.7</li> <li>cloud.google.com/go/language: v1.10.1 → v1.12.3</li> <li>cloud.google.com/go/lifesciences: v0.9.1 → v0.9.5</li> <li>cloud.google.com/go/logging: v1.7.0 → v1.9.0</li> <li>cloud.google.com/go/longrunning: v0.5.1 → v0.5.5</li> <li>cloud.google.com/go/managedidentities: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/maps: v1.4.0 → v1.6.4</li> <li>cloud.google.com/go/mediatranslation: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/memcache: v1.10.1 → v1.10.5</li> <li>cloud.google.com/go/metastore: v1.12.0 → v1.13.4</li> <li>cloud.google.com/go/monitoring: v1.15.1 → v1.18.0</li> <li>cloud.google.com/go/networkconnectivity: v1.12.1 → v1.14.4</li> <li>cloud.google.com/go/networkmanagement: v1.8.0 → v1.9.4</li> <li>cloud.google.com/go/networksecurity: v0.9.1 → v0.9.5</li> <li>cloud.google.com/go/notebooks: v1.9.1 → v1.11.3</li> <li>cloud.google.com/go/optimization: v1.4.1 → v1.6.3</li> <li>cloud.google.com/go/orchestration: v1.8.1 → v1.8.5</li> <li>cloud.google.com/go/orgpolicy: v1.11.1 → v1.12.1</li> <li>cloud.google.com/go/osconfig: v1.12.1 → v1.12.5</li> <li>cloud.google.com/go/oslogin: v1.10.1 → v1.13.1</li> <li>cloud.google.com/go/phishingprotection: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/policytroubleshooter: v1.8.0 → v1.10.3</li> <li>cloud.google.com/go/privatecatalog: v0.9.1 → v0.9.5</li> <li>cloud.google.com/go/pubsub: v1.33.0 → v1.36.1</li> <li>cloud.google.com/go/recaptchaenterprise/v2: v2.7.2 → v2.9.2</li> <li>cloud.google.com/go/recommendationengine: v0.8.1 → v0.8.5</li> <li>cloud.google.com/go/recommender: v1.10.1 → v1.12.1</li> <li>cloud.google.com/go/redis: v1.13.1 → v1.14.2</li> <li>cloud.google.com/go/resourcemanager: v1.9.1 → v1.9.5</li> <li>cloud.google.com/go/resourcesettings: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/retail: v1.14.1 → v1.16.0</li> <li>cloud.google.com/go/run: v1.2.0 → v1.3.4</li> <li>cloud.google.com/go/scheduler: v1.10.1 → v1.10.6</li> <li>cloud.google.com/go/secretmanager: v1.11.1 → v1.11.5</li> <li>cloud.google.com/go/security: v1.15.1 → v1.15.5</li> <li>cloud.google.com/go/securitycenter: v1.23.0 → v1.24.4</li> <li>cloud.google.com/go/servicedirectory: v1.11.0 → v1.11.4</li> <li>cloud.google.com/go/shell: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/spanner: v1.47.0 → v1.56.0</li> <li>cloud.google.com/go/speech: v1.19.0 → v1.21.1</li> <li>cloud.google.com/go/storagetransfer: v1.10.0 → v1.10.4</li> <li>cloud.google.com/go/talent: v1.6.2 → v1.6.6</li> <li>cloud.google.com/go/texttospeech: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/tpu: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/trace: v1.10.1 → v1.10.5</li> <li>cloud.google.com/go/translate: v1.8.2 → v1.10.1</li> <li>cloud.google.com/go/video: v1.19.0 → v1.20.4</li> <li>cloud.google.com/go/videointelligence: v1.11.1 → v1.11.5</li> <li>cloud.google.com/go/vision/v2: v2.7.2 → v2.8.0</li> <li>cloud.google.com/go/vmmigration: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/vmwareengine: v1.0.0 → v1.1.1</li> <li>cloud.google.com/go/vpcaccess: v1.7.1 → v1.7.5</li> <li>cloud.google.com/go/webrisk: v1.9.1 → v1.9.5</li> <li>cloud.google.com/go/websecurityscanner: v1.6.1 → v1.6.5</li> <li>cloud.google.com/go/workflows: v1.11.1 → v1.12.4</li> <li>cloud.google.com/go: v0.110.7 → v0.112.0</li> <li>github.com/Azure/go-ansiterm: <a href="https://github.com/Azure/go-ansiterm/compare/d185dfc...306776e">d185dfc → 306776e</a></li> <li>github.com/Microsoft/go-winio: <a href="https://github.com/Microsoft/go-winio/compare/v0.6.0...v0.6.2">v0.6.0 → v0.6.2</a></li> <li>github.com/antlr4-go/antlr/v4: <a href="https://github.com/antlr4-go/antlr/compare/v4.13.0...v4.13.1">v4.13.0 → v4.13.1</a></li> <li>github.com/armon/circbuf: <a href="https://github.com/armon/circbuf/compare/bbbad09...5111143">bbbad09 → 5111143</a></li> <li>github.com/cncf/xds/go: <a href="https://github.com/cncf/xds/compare/555b57e...b4127c9">555b57e → b4127c9</a></li> <li>github.com/containerd/ttrpc: <a href="https://github.com/containerd/ttrpc/compare/v1.2.2...v1.2.5">v1.2.2 → v1.2.5</a></li> <li>github.com/coredns/corefile-migration: <a href="https://github.com/coredns/corefile-migration/compare/v1.0.23...v1.0.24">v1.0.23 → v1.0.24</a></li> <li>github.com/cpuguy83/go-md2man/v2: <a href="https://github.com/cpuguy83/go-md2man/compare/v2.0.4...v2.0.6">v2.0.4 → v2.0.6</a></li> <li>github.com/cyphar/filepath-securejoin: <a href="https://github.com/cyphar/filepath-securejoin/compare/v0.2.4...v0.3.4">v0.2.4 → v0.3.4</a></li> <li>github.com/distribution/reference: <a href="https://github.com/distribution/reference/compare/v0.5.0...v0.6.0">v0.5.0 → v0.6.0</a></li> <li>github.com/emicklei/go-restful/v3: <a href="https://github.com/emicklei/go-restful/compare/v3.11.0...v3.12.1">v3.11.0 → v3.12.1</a></li> <li>github.com/envoyproxy/go-control-plane: <a href="https://github.com/envoyproxy/go-control-plane/compare/v0.12.0...v0.13.1">v0.12.0 → v0.13.1</a></li> <li>github.com/envoyproxy/protoc-gen-validate: <a href="https://github.com/envoyproxy/protoc-gen-validate/compare/v1.0.4...v1.1.0">v1.0.4 → v1.1.0</a></li> <li>github.com/exponent-io/jsonpath: <a href="https://github.com/exponent-io/jsonpath/compare/d6023ce...1de76d7">d6023ce → 1de76d7</a></li> <li>github.com/fatih/color: <a href="https://github.com/fatih/color/compare/v1.15.0...v1.18.0">v1.15.0 → v1.18.0</a></li> <li>github.com/golang-jwt/jwt/v4: <a href="https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2">v4.5.0 → v4.5.2</a></li> <li>github.com/golang/glog: <a href="https://github.com/golang/glog/compare/v1.2.1...v1.2.2">v1.2.1 → v1.2.2</a></li> <li>github.com/google/btree: <a href="https://github.com/google/btree/compare/v1.0.1...v1.1.3">v1.0.1 → v1.1.3</a></li> <li>github.com/google/cadvisor: <a href="https://github.com/google/cadvisor/compare/v0.49.0...v0.51.0">v0.49.0 → v0.51.0</a></li> <li>github.com/google/cel-go: <a href="https://github.com/google/cel-go/compare/v0.20.1...v0.22.1">v0.20.1 → v0.22.1</a></li> <li>github.com/google/go-cmp: <a href="https://github.com/google/go-cmp/compare/v0.6.0...v0.7.0">v0.6.0 → v0.7.0</a></li> <li>github.com/google/pprof: <a href="https://github.com/google/pprof/compare/4bfdf5a...40e02aa">4bfdf5a → 40e02aa</a></li> <li>github.com/gregjones/httpcache: <a href="https://github.com/gregjones/httpcache/compare/9cad4c3...901d907">9cad4c3 → 901d907</a></li> <li>github.com/grpc-ecosystem/grpc-gateway/v2: <a href="https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.20.0...v2.25.1">v2.20.0 → v2.25.1</a></li> <li>github.com/jonboulle/clockwork: <a href="https://github.com/jonboulle/clockwork/compare/v0.2.2...v0.4.0">v0.2.2 → v0.4.0</a></li> <li>github.com/kcp-dev/apimachinery/v2: <a href="https://github.com/kcp-dev/apimachinery/compare/431177b...ebb573a">431177b → ebb573a</a></li> <li>github.com/kcp-dev/client-go: <a href="https://github.com/kcp-dev/client-go/compare/3dea338...decc4df">3dea338 → decc4df</a></li> <li>github.com/kcp-dev/embeddedetcd: <a href="https://github.com/kcp-dev/embeddedetcd/compare/v1.0.2...89d1631">v1.0.2 → 89d1631</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/api: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/api/0011b8c...staging/src/k8s.io/api/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apiextensions-apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apiextensions-apiserver/0011b8c...staging/src/k8s.io/apiextensions-apiserver/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apimachinery: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apimachinery/0011b8c...staging/src/k8s.io/apimachinery/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apiserver/0011b8c...staging/src/k8s.io/apiserver/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cli-runtime: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cli-runtime/0011b8c...staging/src/k8s.io/cli-runtime/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/client-go: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/client-go/0011b8c...staging/src/k8s.io/client-go/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cloud-provider: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cloud-provider/0011b8c...staging/src/k8s.io/cloud-provider/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cluster-bootstrap: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cluster-bootstrap/0011b8c...staging/src/k8s.io/cluster-bootstrap/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/code-generator: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/code-generator/0011b8c...staging/src/k8s.io/code-generator/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/component-base: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/component-base/0011b8c...staging/src/k8s.io/component-base/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/component-helpers: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/component-helpers/0011b8c...staging/src/k8s.io/component-helpers/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/controller-manager: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/controller-manager/0011b8c...staging/src/k8s.io/controller-manager/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cri-api: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cri-api/0011b8c...staging/src/k8s.io/cri-api/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cri-client: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cri-client/0011b8c...staging/src/k8s.io/cri-client/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/csi-translation-lib: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/csi-translation-lib/0011b8c...staging/src/k8s.io/csi-translation-lib/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/dynamic-resource-allocation: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/dynamic-resource-allocation/0011b8c...staging/src/k8s.io/dynamic-resource-allocation/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/endpointslice: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/endpointslice/0011b8c...staging/src/k8s.io/endpointslice/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kms: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kms/0011b8c...staging/src/k8s.io/kms/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-aggregator: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-aggregator/0011b8c...staging/src/k8s.io/kube-aggregator/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-controller-manager: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-controller-manager/0011b8c...staging/src/k8s.io/kube-controller-manager/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-proxy: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-proxy/0011b8c...staging/src/k8s.io/kube-proxy/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-scheduler: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-scheduler/0011b8c...staging/src/k8s.io/kube-scheduler/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kubectl: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kubectl/0011b8c...staging/src/k8s.io/kubectl/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kubelet: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kubelet/0011b8c...staging/src/k8s.io/kubelet/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/metrics: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/metrics/0011b8c...staging/src/k8s.io/metrics/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/mount-utils: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/mount-utils/0011b8c...staging/src/k8s.io/mount-utils/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/pod-security-admission: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/pod-security-admission/0011b8c...staging/src/k8s.io/pod-security-admission/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/sample-apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/sample-apiserver/0011b8c...staging/src/k8s.io/sample-apiserver/ddbe171">0011b8c → ddbe171</a></li> <li>github.com/kcp-dev/kubernetes: <a href="https://github.com/kcp-dev/kubernetes/compare/0011b8c...ddbe171">0011b8c → ddbe171</a></li> <li>github.com/mattn/go-isatty: <a href="https://github.com/mattn/go-isatty/compare/v0.0.17...v0.0.20">v0.0.17 → v0.0.20</a></li> <li>github.com/moby/spdystream: <a href="https://github.com/moby/spdystream/compare/v0.4.0...v0.5.0">v0.4.0 → v0.5.0</a></li> <li>github.com/moby/sys/mountinfo: <a href="https://github.com/moby/sys/compare/mountinfo/v0.7.1...mountinfo/v0.7.2">v0.7.1 → v0.7.2</a></li> <li>github.com/mohae/deepcopy: <a href="https://github.com/mohae/deepcopy/compare/491d360...c48cc78">491d360 → c48cc78</a></li> <li>github.com/onsi/ginkgo/v2: <a href="https://github.com/onsi/ginkgo/compare/v2.19.0...v2.22.1">v2.19.0 → v2.22.1</a></li> <li>github.com/onsi/gomega: <a href="https://github.com/onsi/gomega/compare/v1.33.1...v1.36.2">v1.33.1 → v1.36.2</a></li> <li>github.com/opencontainers/runc: <a href="https://github.com/opencontainers/runc/compare/v1.1.13...v1.2.1">v1.1.13 → v1.2.1</a></li> <li>github.com/opencontainers/runtime-spec: <a href="https://github.com/opencontainers/runtime-spec/compare/494a5a6...v1.2.0">494a5a6 → v1.2.0</a></li> <li>github.com/opencontainers/selinux: <a href="https://github.com/opencontainers/selinux/compare/v1.11.0...v1.11.1">v1.11.0 → v1.11.1</a></li> <li>github.com/prometheus/client_golang: <a href="https://github.com/prometheus/client_golang/compare/v1.19.1...v1.20.5">v1.19.1 → v1.20.5</a></li> <li>github.com/prometheus/common: <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.61.0">v0.55.0 → v0.61.0</a></li> <li>github.com/rogpeppe/go-internal: <a href="https://github.com/rogpeppe/go-internal/compare/v1.12.0...v1.13.1">v1.12.0 → v1.13.1</a></li> <li>github.com/spf13/cobra: <a href="https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1">v1.8.1 → v1.9.1</a></li> <li>github.com/stretchr/testify: <a href="https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0">v1.9.0 → v1.10.0</a></li> <li>github.com/vishvananda/netlink: <a href="https://github.com/vishvananda/netlink/compare/v1.1.0...62fb240">v1.1.0 → 62fb240</a></li> <li>github.com/xiang90/probing: <a href="https://github.com/xiang90/probing/compare/43a291a...a49e3df">43a291a → a49e3df</a></li> <li>go.etcd.io/bbolt: v1.3.9 → v1.3.11</li> <li>go.etcd.io/etcd/api/v3: v3.5.14 → v3.5.17</li> <li>go.etcd.io/etcd/client/pkg/v3: v3.5.14 → v3.5.17</li> <li>go.etcd.io/etcd/client/v2: v2.305.13 → v2.305.16</li> <li>go.etcd.io/etcd/client/v3: v3.5.14 → v3.5.17</li> <li>go.etcd.io/etcd/pkg/v3: v3.5.13 → v3.5.16</li> <li>go.etcd.io/etcd/raft/v3: v3.5.13 → v3.5.16</li> <li>go.etcd.io/etcd/server/v3: v3.5.13 → v3.5.16</li> <li>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.53.0 → v0.58.0</li> <li>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 → v0.58.0</li> <li>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.27.0 → v1.33.0</li> <li>go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 → v1.33.0</li> <li>go.opentelemetry.io/otel/metric: v1.28.0 → v1.33.0</li> <li>go.opentelemetry.io/otel/sdk: v1.28.0 → v1.33.0</li> <li>go.opentelemetry.io/otel/trace: v1.28.0 → v1.33.0</li> <li>go.opentelemetry.io/otel: v1.28.0 → v1.33.0</li> <li>go.opentelemetry.io/proto/otlp: v1.3.1 → v1.5.0</li> <li>go.uber.org/zap: v1.26.0 → v1.27.0</li> <li>golang.org/x/crypto: v0.35.0 → v0.37.0</li> <li>golang.org/x/exp: f3d0a9c → 7e4ce0a</li> <li>golang.org/x/mod: v0.23.0 → v0.24.0</li> <li>golang.org/x/net: v0.36.0 → v0.39.0</li> <li>golang.org/x/oauth2: v0.21.0 → v0.29.0</li> <li>golang.org/x/sync: v0.11.0 → v0.13.0</li> <li>golang.org/x/sys: v0.30.0 → v0.32.0</li> <li>golang.org/x/term: v0.29.0 → v0.31.0</li> <li>golang.org/x/text: v0.22.0 → v0.24.0</li> <li>golang.org/x/time: v0.3.0 → v0.11.0</li> <li>golang.org/x/tools: v0.30.0 → v0.32.0</li> <li>golang.org/x/xerrors: 04be3eb → 5ec99f8</li> <li>google.golang.org/appengine: v1.6.7 → v1.4.0</li> <li>google.golang.org/genproto/googleapis/api: 5315273 → 5f5ef82</li> <li>google.golang.org/genproto/googleapis/rpc: f6361c8 → 5f5ef82</li> <li>google.golang.org/genproto: b8732ec → 012b6fc</li> <li>google.golang.org/grpc: v1.65.0 → v1.69.2</li> <li>google.golang.org/protobuf: v1.36.5 → v1.36.2</li> <li>k8s.io/gengo/v2: 51d4e06 → 2b36238</li> <li>k8s.io/kube-openapi: 70dd376 → 2c72e55</li> <li>k8s.io/system-validators: v1.8.0 → v1.9.1</li> <li>k8s.io/utils: 18e509b → 24370be</li> <li>sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.30.3 → v0.31.1</li> <li>sigs.k8s.io/json: bc3834c → cfa47c3</li> <li>sigs.k8s.io/kustomize/api: v0.17.2 → v0.18.0</li> <li>sigs.k8s.io/kustomize/kustomize/v5: v5.4.2 → v5.5.0</li> <li>sigs.k8s.io/kustomize/kyaml: v0.17.1 → v0.18.1</li> <li>sigs.k8s.io/structured-merge-diff/v4: v4.4.1 → v4.5.0</li> </ul> <h3>Removed</h3> <ul> <li>github.com/Microsoft/hcsshim: <a href="https://github.com/Microsoft/hcsshim/tree/v0.8.26">v0.8.26</a></li> <li>github.com/checkpoint-restore/go-criu/v5: <a href="https://github.com/checkpoint-restore/go-criu/tree/v5.3.0">v5.3.0</a></li> <li>github.com/cilium/ebpf: <a href="https://github.com/cilium/ebpf/tree/v0.9.1">v0.9.1</a></li> <li>github.com/containerd/cgroups: <a href="https://github.com/containerd/cgroups/tree/v1.1.0">v1.1.0</a></li> <li>github.com/containerd/console: <a href="https://github.com/containerd/console/tree/v1.0.3">v1.0.3</a></li> <li>github.com/daviddengcn/go-colortext: <a href="https://github.com/daviddengcn/go-colortext/tree/v1.0.0">v1.0.0</a></li> <li>github.com/imdario/mergo: <a href="https://github.com/imdario/mergo/tree/v0.3.12">v0.3.12</a></li> <li>github.com/seccomp/libseccomp-golang: <a href="https://github.com/seccomp/libseccomp-golang/tree/v0.10.0">v0.10.0</a></li> <li>github.com/shurcooL/sanitized_anchor_name: <a href="https://github.com/shurcooL/sanitized_anchor_name/tree/v1.0.0">v1.0.0</a></li> <li>github.com/syndtr/gocapability: <a href="https://github.com/syndtr/gocapability/tree/42c35b4">42c35b4</a></li> <li>github.com/urfave/cli: <a href="https://github.com/urfave/cli/tree/v1.22.1">v1.22.1</a></li> <li>go.opencensus.io: v0.24.0</li> <li>go.starlark.net: a134d8f</li> </ul> github-actions[bot] tag:github.com,2008:Repository/353364259/sdk/v0.28.0 2025-07-25T11:59:12Z <p>sdk/v0.28.0</p> embik tag:github.com,2008:Repository/353364259/cli/v0.28.0 2025-07-25T11:59:17Z <p>cli/v0.28.0</p> embik tag:github.com,2008:Repository/353364259/v0.27.1 2025-03-28T08:21:08Z <h2>Changes by Kind</h2> <h3>Security</h3> <ul> <li>Update <code>github.com/golang-jwt/jwt/v4</code> to v4.5.2 (addressing <a title="CVE-2025-30204" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-mh63-6h87-95cp/hovercard" href="https://github.com/advisories/GHSA-mh63-6h87-95cp">CVE-2025-30204</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2950921560" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3356" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3356/hovercard" href="https://github.com/kcp-dev/kcp/pull/3356">#3356</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h3>Bug or Regression</h3> <ul> <li>Fix <code>APIResourceSchema</code> name for the <code>WorkspaceTypes</code> resource to unblock upgrade from previous versions (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2949116230" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3353" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3353/hovercard" href="https://github.com/kcp-dev/kcp/pull/3353">#3353</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h2>Dependencies</h2> <h3>Added</h3> <p><em>Nothing has changed.</em></p> <h3>Changed</h3> <ul> <li>github.com/golang-jwt/jwt/v4: <a href="https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.2">v4.5.0 → v4.5.2</a></li> </ul> <h3>Removed</h3> <p><em>Nothing has changed.</em></p> github-actions[bot] tag:github.com,2008:Repository/353364259/sdk/v0.27.1 2025-03-28T07:57:22Z <p>sdk/v0.27.1</p> embik tag:github.com,2008:Repository/353364259/cli/v0.27.1 2025-03-28T07:57:16Z <p>cli/v0.27.1</p> embik tag:github.com,2008:Repository/353364259/v0.27.0 2025-03-21T08:37:04Z <h2>Changes by Kind</h2> <h3>Breaking Change</h3> <ul> <li>Release artifacts for ppc64le are no longer published (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2730266737" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3211" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3211/hovercard" href="https://github.com/kcp-dev/kcp/pull/3211">#3211</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h3>Security</h3> <ul> <li>Fix impersonation for non-system users (<a href="https://github.com/kcp-dev/kcp/security/advisories/GHSA-c7xh-gjv4-4jgv">GHSA-c7xh-gjv4-4jgv</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2723124255" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3206" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3206/hovercard" href="https://github.com/kcp-dev/kcp/pull/3206">#3206</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add additional authorizer to APIExport Virtual Workspace that queries APIBinding for authorization decisions (<a href="https://github.com/kcp-dev/kcp/security/advisories/GHSA-w2rr-38wv-8rrp">GHSA-w2rr-38wv-8rrp</a> / <a title="CVE-2025-29922" data-hovercard-type="advisory" data-hovercard-url="/advisories/GHSA-w2rr-38wv-8rrp/hovercard" href="https://github.com/advisories/GHSA-w2rr-38wv-8rrp">CVE-2025-29922</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2927802994" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3338" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3338/hovercard" href="https://github.com/kcp-dev/kcp/pull/3338">#3338</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h3>API Change</h3> <ul> <li>Expose the kcp e2e test framework through the SDK. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2911762388" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3327" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3327/hovercard" href="https://github.com/kcp-dev/kcp/pull/3327">#3327</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sttts/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sttts">@sttts</a>)</li> <li>Updated dependencies to be in line with Kubernetes v1.31.6 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2873280126" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3307" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3307/hovercard" href="https://github.com/kcp-dev/kcp/pull/3307">#3307</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/gman0/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gman0">@gman0</a>)</li> </ul> <h3>Feature</h3> <ul> <li>Pass through original identity of controllers accessing a logical cluster through the APIExport virtual workspace. To get the required permissions, a warrant mechanism is added through user extra fields that attaches secondary user identities purely used for authorization. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2480603429" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3156" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3156/hovercard" href="https://github.com/kcp-dev/kcp/pull/3156">#3156</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sttts/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sttts">@sttts</a>)</li> <li>Make APIExportEndpointSlices consumer aware (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2797179940" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3256" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3256/hovercard" href="https://github.com/kcp-dev/kcp/pull/3256">#3256</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add workspace phase reporter reconciler (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2595244833" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3183" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3183/hovercard" href="https://github.com/kcp-dev/kcp/pull/3183">#3183</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add the Unavailable phase to the API (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2595244833" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3183" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3183/hovercard" href="https://github.com/kcp-dev/kcp/pull/3183">#3183</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Implement exclusion of Unavailable workspaces from serving via proxy to avoid serving something which is not supposed to be served. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2595244833" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3183" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3183/hovercard" href="https://github.com/kcp-dev/kcp/pull/3183">#3183</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add OpenAPI v3 schema support to the Virtual Workspace framework (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2783807434" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3246" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3246/hovercard" href="https://github.com/kcp-dev/kcp/pull/3246">#3246</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xmudrii/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xmudrii">@xmudrii</a>)</li> <li>Add <code>--accept-permission-claim</code> and <code>--reject-permission-claim</code> flag to <code>kubectl kcp bind apiexport</code> (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2922172566" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3334" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3334/hovercard" href="https://github.com/kcp-dev/kcp/pull/3334">#3334</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Add original user/groups information as extra to the impersonating client used by virtual workspace. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2477689010" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3155" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3155/hovercard" href="https://github.com/kcp-dev/kcp/pull/3155">#3155</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/turkenh/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/turkenh">@turkenh</a>)</li> <li>Add support for external webhook authorization. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2655759865" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3198" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3198/hovercard" href="https://github.com/kcp-dev/kcp/pull/3198">#3198</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>Add user info support for scopes through the extra key <code>authentication.kcp.io/scopes: cluster:&lt;name&gt;,...</code> to contain a user in a certain cluster. Multiple extra values are conjunctive, i.e. their intersection is the allowed scope. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2754229270" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3235" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3235/hovercard" href="https://github.com/kcp-dev/kcp/pull/3235">#3235</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sttts/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sttts">@sttts</a>)</li> <li>Enable structured authentication configuration from a file with —authentication-config flag. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2850778789" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3295" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3295/hovercard" href="https://github.com/kcp-dev/kcp/pull/3295">#3295</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cnvergence/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cnvergence">@cnvergence</a>)</li> <li>Enhance local development experience for VirtualWorkspaces, adding <code>--mappings-file</code> option for local dev (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2687869151" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3199" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3199/hovercard" href="https://github.com/kcp-dev/kcp/pull/3199">#3199</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Provide <code>--authorization-order</code> flag that allows kcp administrator to tune the authorizer behaviour and rearrange the order. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2821579834" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3281" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3281/hovercard" href="https://github.com/kcp-dev/kcp/pull/3281">#3281</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cnvergence/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cnvergence">@cnvergence</a>)</li> <li>Provide a feature gate <code>GlobalServiceAccount</code> that enables cross-workspace <code>ServiceAccount</code> authorization (requires <code>--service-account-lookup=false</code> in sharded environments). (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2914679074" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3328" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3328/hovercard" href="https://github.com/kcp-dev/kcp/pull/3328">#3328</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/cnvergence/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/cnvergence">@cnvergence</a>)</li> <li>Replicate <code>APIExportEndpointSlices</code> to cache server (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2813636818" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3277" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3277/hovercard" href="https://github.com/kcp-dev/kcp/pull/3277">#3277</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> </ul> <h3>Bug or Regression</h3> <ul> <li>Fix critical race condition between APIBindings and CRDs potentially allowing the same resource to be bound by multiple bindings or CRDs, leading to data loss or inconsistent state. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2793610345" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3251" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3251/hovercard" href="https://github.com/kcp-dev/kcp/pull/3251">#3251</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/sttts/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/sttts">@sttts</a>)</li> <li>Fix external modifications to annotations being reverted by admission webhook (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2752627763" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3229" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3229/hovercard" href="https://github.com/kcp-dev/kcp/pull/3229">#3229</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ntnn/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ntnn">@ntnn</a>)</li> <li>Add additional validation for impersonation to prevent groups and extras privileged impersonations. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2778442399" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3243" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3243/hovercard" href="https://github.com/kcp-dev/kcp/pull/3243">#3243</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Fix regression in DeepCopy generator (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2615947034" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3188" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3188/hovercard" href="https://github.com/kcp-dev/kcp/pull/3188">#3188</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Purposefully crash if leader election was won but controllers failed to install, allowing another instance to take leadership (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2623694722" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3196" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3196/hovercard" href="https://github.com/kcp-dev/kcp/pull/3196">#3196</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>Update kcp start options to print to stdout (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2754792198" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3237" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3237/hovercard" href="https://github.com/kcp-dev/kcp/pull/3237">#3237</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jmcshane/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jmcshane">@jmcshane</a>)</li> </ul> <h3>Other (Cleanup or Flake)</h3> <ul> <li>Add wget to final image (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2768850953" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3240" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3240/hovercard" href="https://github.com/kcp-dev/kcp/pull/3240">#3240</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Build apigen binary on releases (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2909541559" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3326" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3326/hovercard" href="https://github.com/kcp-dev/kcp/pull/3326">#3326</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/mjudeikis/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/mjudeikis">@mjudeikis</a>)</li> <li>Crd-puller will generate files with 0644 permissions instead of 0777. (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2897784359" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3319" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3319/hovercard" href="https://github.com/kcp-dev/kcp/pull/3319">#3319</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>Update golangci-lint to 1.26.2, remove dependency on standalone staticcheck binary (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2723508727" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3208" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3208/hovercard" href="https://github.com/kcp-dev/kcp/pull/3208">#3208</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/xrstf/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/xrstf">@xrstf</a>)</li> <li>kcp is built with Go 1.23.7 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2919345384" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3331" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3331/hovercard" href="https://github.com/kcp-dev/kcp/pull/3331">#3331</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>kcp is built with Go 1.22.10 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2730376333" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3212" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3212/hovercard" href="https://github.com/kcp-dev/kcp/pull/3212">#3212</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> <li>kcp is built with Go 1.22.9 (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2690916240" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3200" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3200/hovercard" href="https://github.com/kcp-dev/kcp/pull/3200">#3200</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> <h2>Dependencies</h2> <h3>Added</h3> <ul> <li>github.com/kcp-dev/embeddedetcd: <a href="https://github.com/kcp-dev/embeddedetcd/tree/v1.0.2">v1.0.2</a></li> </ul> <h3>Changed</h3> <ul> <li>github.com/go-openapi/jsonpointer: <a href="https://github.com/go-openapi/jsonpointer/compare/v0.19.6...v0.21.0">v0.19.6 → v0.21.0</a></li> <li>github.com/go-openapi/jsonreference: <a href="https://github.com/go-openapi/jsonreference/compare/v0.20.2...v0.21.0">v0.20.2 → v0.21.0</a></li> <li>github.com/go-openapi/swag: <a href="https://github.com/go-openapi/swag/compare/v0.22.4...v0.23.0">v0.22.4 → v0.23.0</a></li> <li>github.com/google/gnostic-models: <a href="https://github.com/google/gnostic-models/compare/v0.6.8...v0.6.9">v0.6.8 → v0.6.9</a></li> <li>github.com/kcp-dev/apimachinery/v2: <a href="https://github.com/kcp-dev/apimachinery/compare/a9eb975...431177b">a9eb975 → 431177b</a></li> <li>github.com/kcp-dev/client-go: <a href="https://github.com/kcp-dev/client-go/compare/f5949d8...3dea338">f5949d8 → 3dea338</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/api: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/api/ab5c3a6...staging/src/k8s.io/api/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apiextensions-apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apiextensions-apiserver/ab5c3a6...staging/src/k8s.io/apiextensions-apiserver/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apimachinery: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apimachinery/ab5c3a6...staging/src/k8s.io/apimachinery/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/apiserver/ab5c3a6...staging/src/k8s.io/apiserver/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cli-runtime: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cli-runtime/ab5c3a6...staging/src/k8s.io/cli-runtime/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/client-go: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/client-go/ab5c3a6...staging/src/k8s.io/client-go/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cloud-provider: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cloud-provider/ab5c3a6...staging/src/k8s.io/cloud-provider/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cluster-bootstrap: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cluster-bootstrap/ab5c3a6...staging/src/k8s.io/cluster-bootstrap/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/code-generator: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/code-generator/ab5c3a6...staging/src/k8s.io/code-generator/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/component-base: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/component-base/ab5c3a6...staging/src/k8s.io/component-base/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/component-helpers: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/component-helpers/ab5c3a6...staging/src/k8s.io/component-helpers/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/controller-manager: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/controller-manager/ab5c3a6...staging/src/k8s.io/controller-manager/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cri-api: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cri-api/ab5c3a6...staging/src/k8s.io/cri-api/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/cri-client: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/cri-client/ab5c3a6...staging/src/k8s.io/cri-client/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/csi-translation-lib: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/csi-translation-lib/ab5c3a6...staging/src/k8s.io/csi-translation-lib/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/dynamic-resource-allocation: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/dynamic-resource-allocation/ab5c3a6...staging/src/k8s.io/dynamic-resource-allocation/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/endpointslice: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/endpointslice/ab5c3a6...staging/src/k8s.io/endpointslice/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kms: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kms/ab5c3a6...staging/src/k8s.io/kms/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-aggregator: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-aggregator/ab5c3a6...staging/src/k8s.io/kube-aggregator/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-controller-manager: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-controller-manager/ab5c3a6...staging/src/k8s.io/kube-controller-manager/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-proxy: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-proxy/ab5c3a6...staging/src/k8s.io/kube-proxy/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kube-scheduler: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kube-scheduler/ab5c3a6...staging/src/k8s.io/kube-scheduler/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kubectl: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kubectl/ab5c3a6...staging/src/k8s.io/kubectl/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/kubelet: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/kubelet/ab5c3a6...staging/src/k8s.io/kubelet/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/metrics: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/metrics/ab5c3a6...staging/src/k8s.io/metrics/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/mount-utils: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/mount-utils/ab5c3a6...staging/src/k8s.io/mount-utils/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/pod-security-admission: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/pod-security-admission/ab5c3a6...staging/src/k8s.io/pod-security-admission/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes/staging/src/k8s.io/sample-apiserver: <a href="https://github.com/kcp-dev/kubernetes/compare/staging/src/k8s.io/sample-apiserver/ab5c3a6...staging/src/k8s.io/sample-apiserver/0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/kcp-dev/kubernetes: <a href="https://github.com/kcp-dev/kubernetes/compare/ab5c3a6...0011b8c">ab5c3a6 → 0011b8c</a></li> <li>github.com/mailru/easyjson: <a href="https://github.com/mailru/easyjson/compare/v0.7.7...v0.9.0">v0.7.7 → v0.9.0</a></li> <li>github.com/spf13/pflag: <a href="https://github.com/spf13/pflag/compare/d5e0c06...v1.0.6">d5e0c06 → v1.0.6</a></li> <li>golang.org/x/crypto: v0.24.0 → v0.35.0</li> <li>golang.org/x/mod: v0.17.0 → v0.23.0</li> <li>golang.org/x/net: v0.26.0 → v0.36.0</li> <li>golang.org/x/sync: v0.7.0 → v0.11.0</li> <li>golang.org/x/sys: v0.21.0 → v0.30.0</li> <li>golang.org/x/telemetry: f48c80b → bda5523</li> <li>golang.org/x/term: v0.21.0 → v0.29.0</li> <li>golang.org/x/text: v0.16.0 → v0.22.0</li> <li>golang.org/x/tools: e35e4cc → v0.30.0</li> <li>google.golang.org/protobuf: v1.34.2 → v1.36.5</li> </ul> <h3>Removed</h3> <ul> <li>github.com/kr/pty: <a href="https://github.com/kr/pty/tree/v1.1.1">v1.1.1</a></li> </ul> github-actions[bot] tag:github.com,2008:Repository/353364259/v0.26.3 2025-03-18T14:05:41Z <p>Note: v0.26.2 has not been released properly due to an issue in our release engineering tools and thus, should be skipped.</p> <h2>Changes by Kind</h2> <h3>Security</h3> <ul> <li>Add additional authorizer to APIExport Virtual Workspace that queries APIBinding for authorization decisions (<a href="https://github.com/kcp-dev/kcp/security/advisories/GHSA-w2rr-38wv-8rrp">GHSA-w2rr-38wv-8rrp</a>) (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2927802994" data-permission-text="Title is private" data-url="https://github.com/kcp-dev/kcp/issues/3338" data-hovercard-type="pull_request" data-hovercard-url="/kcp-dev/kcp/pull/3338/hovercard" href="https://github.com/kcp-dev/kcp/pull/3338">#3338</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/embik/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/embik">@embik</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/353364259/v0.26.2 2025-03-18T11:35:36Z <p>v0.26.2</p> embik tag:github.com,2008:Repository/353364259/sdk/v0.27.0 2025-03-18T11:45:29Z <p>sdk/v0.27.0</p> embik