What's Changed

• Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #2421
• Fail early in e2e tests and remove unnecessary step by @thomasferrandiz in #2429
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #2431
• Bump k8s deps to v0.33.11 by @thomasferrandiz in #2432
• Bump the tencent group with 2 updates by @dependabot[bot] in #2430
• fix(vxlan): guard ifaceAddrsV6[0] on IPv4-only setups by @SAY-5 in #2434
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.83 to 1.3.87 in the tencent group by @dependabot[bot] in #2435
• Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #2436
• Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #2441
• Bump the etcd group with 4 updates by @dependabot[bot] in #2439
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.87 to 1.3.90 in the tencent group across 1 directory by @dependabot[bot] in #2440
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.90 to 1.3.94 in the tencent group by @dependabot[bot] in #2444
• Bump golang.org/x/sys from 0.43.0 to 0.44.0 in the other-go-modules group across 1 directory by @dependabot[bot] in #2445
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2452
• fix: reap orphaned zombie child processes when running as PID 1 by @pratikjagrut in #2438
• Bump github/codeql-action from 4.35.3 to 4.36.0 by @dependabot[bot] in #2450
• Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2453
• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #2451
• Bump golang.org/x/sys from 0.44.0 to 0.45.0 in the other-go-modules group by @dependabot[bot] in #2449
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.94 to 1.3.105 in the tencent group across 1 directory by @dependabot[bot] in #2448
• Bump the etcd group with 4 updates by @dependabot[bot] in #2455
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.105 to 1.3.108 in the tencent group across 1 directory by @dependabot[bot] in #2456
• Bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #2457
• Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2458
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2459
• Prepare for release v0.28.5 by @mgfritch in #2460

New Contributors

• @SAY-5 made their first contribution in #2434

Full Changelog: v0.28.4...v0.28.5

What's Changed

• fix go version (don't set patch version) by @thomasferrandiz in #2428

Full Changelog: v0.28.3...v0.28.4

What's Changed

• Update CONTRIBUTING.md by @pgonin in #2396
• Update code-of-conduct.md by @pgonin in #2395
• remove docker login steps in build and test workflows by @thomasferrandiz in #2410
• Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #2407
• Bump actions/configure-pages from 5.0.0 to 6.0.0 by @dependabot[bot] in #2406
• fix: honor --stderrthreshold flag when --logtostderr is enabled by @pierluigilenoci in #2405
• vxlan: fix v6 direct route deletion to use v6DirectRoute by @cuiweixie in #2403
• lease: fix LeaseAttrs.String() after json.Marshal errors by @cuiweixie in #2404
• Add GOVERNANCE.md by @pgonin in #2391
• Bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot[bot] in #2408
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #2409
• Bump the tencent group with 2 updates by @dependabot[bot] in #2381
• Improve the security of Dockerfile by @manuelbuil in #2412
• Secure makefile by @manuelbuil in #2414
• Verify the kubectl sha256sum by @manuelbuil in #2413
• Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2418
• Use dependabot to update images versions on the manifest by @rbrtbnfgl in #2419
• Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #2422
• Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in #2423
• Bump go to 1.25 by @thomasferrandiz in #2424
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #2420
• Bump the etcd group across 1 directory with 4 updates by @dependabot[bot] in #2398
• Bump the tencent group with 2 updates by @dependabot[bot] in #2417
• Bump the other-go-modules group across 1 directory with 3 updates by @dependabot[bot] in #2425
• Bump flannel-cni-plugin to v1.9.1-flannel1 by @thomasferrandiz in #2427
• Prepare for release v0.28.3 by @thomasferrandiz in #2426

New Contributors

• @pierluigilenoci made their first contribution in #2405
• @cuiweixie made their first contribution in #2403

Full Changelog: v0.28.2...v0.28.3

What's Changed

• Bump golang.org/x/sys from 0.40.0 to 0.41.0 in the other-go-modules group by @dependabot[bot] in #2352
• Bump github/codeql-action from 4.31.11 to 4.32.3 by @dependabot[bot] in #2356
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2350
• Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #2349
• Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in #2362
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #2363
• Bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.40.0 by @dependabot[bot] in #2360
• Bump the etcd group with 4 updates by @dependabot[bot] in #2355
• Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #2364
• Add Scorecard workflow for supply-chain security by @thomasferrandiz in #2365
• [StepSecurity] Apply security best practices by @step-security-bot in #2366
• Add OpenSSF Scorecard badge to README by @pgonin in #2367
• Remove old manifests by @manuelbuil in #2368
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #2357
• Add 2025 activity summary report by @Copilot in #2343
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2374
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2375
• Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 by @dependabot[bot] in #2378
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #2376
• Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #2377
• Add SECURITY.md security policy by @pgonin in #2371
• Add Security policy page to main README page by @pgonin in #2380
• Bump the tencent group with 2 updates by @dependabot[bot] in #2339
• Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #2383
• Bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #2384
• Bump actions/upload-artifact from 4.6.1 to 7.0.0 by @dependabot[bot] in #2385
• Bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot[bot] in #2386
• Bump github/codeql-action from 3.32.5 to 4.32.6 by @dependabot[bot] in #2382
• Bump google.golang.org/grpc from 1.71.1 to 1.79.3 by @dependabot[bot] in #2387
• Add ROADMAP.md and update README roadmap link by @pgonin in #2393
• Bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #2399
• fix extensions code exec by @thomasferrandiz in #2400
• Prepare update flannel to v0.28.2 by @thomasferrandiz in #2402

New Contributors

• @step-security-bot made their first contribution in #2366
• @Copilot made their first contribution in #2343

Full Changelog: v0.28.1...v0.28.2

What's Changed

• Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #2341
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #2342
• Fix blackhole creation test logic in AddBlackholeV4Route and AddBlackholeV6Route by @axeal in #2329
• Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the other-go-modules group by @dependabot[bot] in #2340
• Bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #2344
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #2345
• Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 in the other-go-modules group by @dependabot[bot] in #2347
• Prepare update flannel to v0.28.1 by @rbrtbnfgl in #2351

New Contributors

• @axeal made their first contribution in #2329

Full Changelog: v0.28.0...v0.28.1

What's Changed

• Bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2282
• Added TAG to fix bin version by @rbrtbnfgl in #2297
• Bump docker image versions by @thomasferrandiz in #2299
• ip: improve primary address selection to account for address flags by @lilioid in #2295
• Additional check on podCIDR by @rbrtbnfgl in #2306
• fix GHA path in dependabot.yaml by @thomasferrandiz in #2304
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot[bot] in #2312
• Bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot[bot] in #2308
• Bump actions/configure-pages from 4.0.0 to 5.0.0 by @dependabot[bot] in #2309
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2310
• Bump github/codeql-action from 3.28.13 to 4.31.6 by @dependabot[bot] in #2311
• Update community meeting frequency to monthly by @pgonin in #2313
• Fix spelling by @fguendling in #2302
• Bump actions/upload-pages-artifact from 3.0.1 to 4.0.0 by @dependabot[bot] in #2317
• Bump docker/login-action from 3.4.0 to 3.6.0 by @dependabot[bot] in #2318
• Bump docker/metadata-action from 5.7.0 to 5.10.0 by @dependabot[bot] in #2316
• Bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot[bot] in #2315
• Bump golangci/golangci-lint-action from 6.1.1 to 9.2.0 by @dependabot[bot] in #2314
• doc: add external routing configuration notice of public IPv6 prefixes by @lilioid in #2290
• Bump to go 1.24 and k8s deps to v0.32.10 by @thomasferrandiz in #2320
• Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in #2303
• Bump the etcd group with 4 updates by @dependabot[bot] in #2284
• Bump the tencent group with 2 updates by @dependabot[bot] in #2296
• Bump the other-go-modules group across 1 directory with 4 updates by @dependabot[bot] in #2298
• Bump github/codeql-action from 4.31.7 to 4.31.8 by @dependabot[bot] in #2326
• Bump docker/build-push-action from 5.4.0 to 6.18.0 by @dependabot[bot] in #2327
• Bump actions/attest-build-provenance from 2.2.3 to 3.0.0 by @dependabot[bot] in #2325
• Bump aquasecurity/trivy-action from 0.30.0 to 0.33.1 by @dependabot[bot] in #2324
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.11 to 1.3.12 in the tencent group by @dependabot[bot] in #2322
• Bump actions/setup-go from 5.4.0 to 6.1.0 by @dependabot[bot] in #2323
• Added check for nftables before checking br_netfilter module by @rbrtbnfgl in #2321
• Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #2335
• Bump the tencent group with 2 updates by @dependabot[bot] in #2333
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #2336
• Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @dependabot[bot] in #2334
• Bump the etcd group with 4 updates by @dependabot[bot] in #2332
• Bump the tencent group with 2 updates by @dependabot[bot] in #2337

New Contributors

• @lilioid made their first contribution in #2295
• @pgonin made their first contribution in #2313
• @fguendling made their first contribution in #2302

Full Changelog: v0.27.4...v0.28.0

What's Changed

• firewall: add option to disable fully-random mode for MASQUERADE by @gilgameshfreedom in #2281
• OWNERS: remove philips by @philips in #2286
• Fix: recreate VXLAN device (flannel.*) when external interface is deleted and re-added by @pratikjagrut in #2272
• Fix interface IP address lookup in dual-stack mode by @np-13 in #2283
• Prepare Flannel to v0.27.4 updated CNI image and OWNERS by @rbrtbnfgl in #2287
• Removed PodSecurityPolicy manifest creation by @rbrtbnfgl in #2288

New Contributors

• @gilgameshfreedom made their first contribution in #2281
• @np-13 made their first contribution in #2283

Full Changelog: v0.27.3...v0.27.4

What's Changed

• Bump the etcd group with 4 updates by @dependabot[bot] in #2268
• Bump the tencent group with 2 updates by @dependabot[bot] in #2269
• Bump the tencent group with 2 updates by @dependabot[bot] in #2271
• Bump golang.org/x/sys from 0.34.0 to 0.35.0 in the other-go-modules group by @dependabot[bot] in #2274
• Bump github.com/coreos/go-systemd/v22 from 22.5.0 to 22.6.0 in the other-go-modules group by @dependabot[bot] in #2275
• Bump the tencent group with 2 updates by @dependabot[bot] in #2276
• Prepare for release v0.27.3 by @thomasferrandiz in #2278

Full Changelog: v0.27.2...v0.27.3

What's Changed

• Bump the other-go-modules group with 2 updates by @dependabot[bot] in #2260
• Bump the etcd group with 4 updates by @dependabot[bot] in #2238
• Bump the tencent group with 2 updates by @dependabot[bot] in #2257
• Optimize Dockerfile by @thomasferrandiz in #2261
• Bump k8s libs and test version by @thomasferrandiz in #2262
• Bump etcd version in tests by @thomasferrandiz in #2263
• Bump the tencent group with 2 updates by @dependabot[bot] in #2265
• Prepare release v0.27.2 by @thomasferrandiz in #2266

Full Changelog: v0.27.1...v0.27.2

What's Changed

• doc: document flag --iptables-forward-rules by @pratikjagrut in #2249
• capture close() err on subnet file save by @ahmetb in #2248
• Bump the tencent group with 2 updates by @dependabot in #2246
• enable setting resources in helm chart by @tyholling in #2250
• Fix deadlock in startup for large clusters by @sudheerv in #2251
• Bump golang.org/x/sync from 0.13.0 to 0.15.0 in the other-go-modules group by @dependabot in #2256
• Added flag to enable blackhole route locally for Canal by @rbrtbnfgl in #2258
• Allow me to designate a nodeSelector in the helm chart by @apanzerj in #2259

New Contributors

• @pratikjagrut made their first contribution in #2249
• @ahmetb made their first contribution in #2248
• @tyholling made their first contribution in #2250
• @sudheerv made their first contribution in #2251
• @apanzerj made their first contribution in #2259

Full Changelog: v0.27.0...v0.27.1