Release Highlights: https://fission.io/docs/releases/v1.27.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• fix(storagesvc): honor scheme in S3 endpoint and enable TLS for https by @SAY-5 in #3499
• Multi-namespace tenancy: PRD + phased implementation (#3298) by @sanketsudake in #3497
• chore(deps): bump the go-dependencies group with 6 updates by @dependabot[bot] in #3496
• feat: namespace-scoped archive content isolation in storagesvc (RFC tenancy Phase 7) by @sanketsudake in #3500
• refactor(tenancy): single-source fetcher/builder RBAC across Go and Helm (Phase 6 base) by @sanketsudake in #3501
• feat(tenancy): opt-in tenancy.mode=cluster (watch-all) + tenancy config/code cleanup by @sanketsudake in #3502
• docs(tenancy): refresh multi-namespace status docs for the completed effort by @sanketsudake in #3503
• chore(deps): replace hashicorp/go-retryablehttp with a stdlib retry transport by @sanketsudake in #3505
• chore(deps): isolate test/benchmark into its own module to drop freetype (GPL-flagged) by @sanketsudake in #3506
• test(deps): move websocket tests from gorilla/websocket to coder/websocket by @sanketsudake in #3507
• ci(integration): serialise pod DNS A/AAAA queries to stop CoreDNS i/o-timeout flakes by @sanketsudake in #3509
• feat(httpmux): internal HTTP router (static + {var}/{var:regexp}) + pure-recorder metrics; migrate executor/storagesvc by @sanketsudake in #3510
• feat(router): migrate router onto httpmux; drop gorilla/mux (Phase 3) by @sanketsudake in #3512
• perf(httpmux/router): exact-route fast-path index + metrics alloc + websocket-detection fix by @sanketsudake in #3513
• refactor: simplify executor/CLI internals, harden error handling, fix 3 latent bugs by @sanketsudake in #3514
• RFC-0015: invocation correlation & failure attribution by @sanketsudake in #3515
• RFC-0016 (read path): logdb registry + Loki adapter + correlation filters by @sanketsudake in #3516
• RFC-0016 (collection): router per-invocation access record (external-collector model) by @sanketsudake in #3517
• test(rfc-0016): CI OTel Collector + Loki round-trip for the logging read path by @sanketsudake in #3518
• feat(cli): RFC-0017 — function debugging toolkit (describe + test enrichment) by @sanketsudake in #3519
• feat(cli): RFC-0016/0017 — streaming logs --follow + data-plane invocability in describe by @sanketsudake in #3520
• feat(otel): RFC-0016 — control-plane OTLP log push + collection-layer metrics by @sanketsudake in #3521
• RFC-0018: fission function run-local — local-development inner loop (phases 0–5) by @sanketsudake in #3522
• chore(gomod): flatten require blocks into one direct, one indirect, one tool by @sanketsudake in #3523
• chore(release): prepare 1.27 by @sanketsudake in #3524
• chore(codegen): regenerate swagger docs for FissionTenant by @sanketsudake in #3525

New Contributors

• @SAY-5 made their first contribution in #3499

Full Changelog: v1.26.0...v1.27.0

Release Highlights: https://fission.io/docs/releases/v1.26.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• test(integration): add Rust + JVM builder env tests; enable post_body/src_glob by @sanketsudake in #3477
• feat(router): Gateway API route provider; deprecate Ingress by @sanketsudake in #3478
• fix(security): confine fetcher file ops to shared volume via os.Root by @sanketsudake in #3479
• chore(deps): bump the go-dependencies group with 2 updates by @dependabot[bot] in #3480
• chore(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #3481
• feat(router): RFC-0008 streaming invocation path (SSE / chunked / WebSocket) by @sanketsudake in #3482
• feat(mcp): expose Fission functions as Model Context Protocol (MCP) tools by @sanketsudake in #3483
• feat: OCI-native package delivery by @sanketsudake in #3484
• feat: RFC-0002 EndpointSlice-native data plane (phases 0-3) by @sanketsudake in #3485
• docs: publish implemented RFCs under docs/rfc; add RFC-0002 perf benchmarks by @sanketsudake in #3486
• fix(router): expire endpoint quarantines after a TTL by @sanketsudake in #3487
• feat: RFC-0002 phase 4 — EndpointSlice data plane on by default by @sanketsudake in #3488
• chore(logging): fix three mislevelled/false-alarm control-plane logs by @sanketsudake in #3489
• chore(release): prepare 1.26 by @sanketsudake in #3490
• perf(router): RFC-0014 — shared transport (fix never-working keep-alive), allocation diet, resolver-cache removal by @sanketsudake in #3491
• perf(router): RFC-0013 — incremental route updates (route table + handler indirection, precedence + RouteConflict conditions) by @sanketsudake in #3493
• feat: RFC-0012 — OCI-native package delivery as the default (producer, B-fetcher variant, pool reaper, Path B default) by @sanketsudake in #3494

Full Changelog: v1.25.0...v1.26.0

Release Highlights: https://fission.io/docs/releases/v1.25.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• ci(security): tighten GITHUB_TOKEN permissions and pin dashboard-linter by @sanketsudake in #3407
• chore(claude): add issue-pr-scrub backlog triage skill by @sanketsudake in #3408
• fix(executor): stop updateCPUUtilizationSvc goroutine on pool destroy by @sanketsudake in #3410
• fix(executor): apply executor-type label filter on informers (#2775) by @sanketsudake in #3411
• perf(metrics): use a histogram for http_requests_duration_seconds by @sanketsudake in #3412
• perf(executor): free pod cache maps and bound idle-reaper concurrency by @sanketsudake in #3413
• perf(metrics): convert remaining latency summaries to histograms by @sanketsudake in #3414
• feat(observability): memory-leak detection harness for router/executor by @sanketsudake in #3409
• docs(skill): capture pprof profile analysis workflow in debug-github-ci by @sanketsudake in #3415
• feat: RFC-0005 control-plane scalability, robustness & lifecycle by @sanketsudake in #3416
• feat: RFC-0005 WS3 — buildermgr on controller-runtime Manager by @sanketsudake in #3417
• feat: RFC-0005 WS3 — executor on controller-runtime Manager by @sanketsudake in #3418
• feat: RFC-0005 WS3 — router on controller-runtime Manager by @sanketsudake in #3419
• feat: RFC-0005 — native leader election for trigger subsystems; remove leaderelection helper by @sanketsudake in #3420
• refactor: RFC-0005 — replace GroupManager with errgroup; remove pkg/utils/manager by @sanketsudake in #3421
• feat: RFC-0005 WS3 — Reconciler scaffold + timer reconciler by @sanketsudake in #3422
• feat: RFC-0005 WS3 — kubewatcher reconciler by @sanketsudake in #3423
• refactor: RFC-0005 WS3 — canaryconfigmgr as a controller-runtime Reconciler by @sanketsudake in #3424
• feat: RFC-0005 WS3 — mqtrigger as a controller-runtime Reconciler by @sanketsudake in #3425
• feat: RFC-0005 WS3 (D1) — shared executor idle reaper by @sanketsudake in #3426
• feat: RFC-0005 WS3 (B1) — Package /status subresource + split status writers by @sanketsudake in #3427
• feat: RFC-0005 WS3 (B2) — buildermgr Environment + Package reconcilers by @sanketsudake in #3428
• feat: RFC-0005 WS3 (C) — router HTTPTrigger + Function reconcilers by @sanketsudake in #3429
• feat: RFC-0005 WS3 (D/cms) — executor ConfigMap/Secret reconcilers by @sanketsudake in #3430
• feat: RFC-0005 WS3 (D/container) — container executor Function reconciler by @sanketsudake in #3431
• feat: RFC-0005 WS3 (D/poolmgr) — pool manager Function reconciler by @sanketsudake in #3432
• feat: RFC-0005 WS3 (D/newdeploy) — newdeploy Function + Environment reconcilers by @sanketsudake in #3433
• feat: RFC-0005 WS3 (D/poolmgr-lifecycle) — poolmgr Environment + Function reconcilers by @sanketsudake in #3434
• feat: RFC-0005 WS3 (D/poolmgr-rs) — poolmgr ReplicaSet reconciler by @sanketsudake in #3435
• feat: RFC-0005 WS3 (D/poolmgr-readypod) — readyPod reconciler; retire gpmInformerFactory by @sanketsudake in #3436
• ci: bump integration-test kind k8s versions to v1.32.11 / v1.34.3 / v1.35.1 by @sanketsudake in #3437
• refactor: retire finformerFactory + fix TestGoEnv router resolver staleness by @sanketsudake in #3438
• logger: migrate --logger pod watch to a controller-runtime reconciler by @sanketsudake in #3440
• mqtrigger: migrate --mqt_keda scaler to a controller-runtime reconciler by @sanketsudake in #3439
• test: deepen executor updateFunction + fission CLI integration coverage by @sanketsudake in #3441
• perf(logger): memoize base zap logger and lazy-init webhook loggers by @sanketsudake in #3442
• perf(storagesvc): replace graymeta/stow with minio-go + os to drop aws-sdk-go v1 by @sanketsudake in #3443
• fix(utils): confine zip extraction with os.Root (zip-slip / CWE-22) by @sanketsudake in #3444
• refactor(fetcher,builder): confine shared-volume FS ops with os.Root helpers by @sanketsudake in #3445
• chore(utils): remove unused functions from pkg/utils by @sanketsudake in #3446
• chore: raise minimum supported Kubernetes to 1.32 by @sanketsudake in #3448
• fix(rbac): grant executor update on services for AdoptExistingResources + serial adopt coverage by @sanketsudake in #3447
• fix(executor): make AdoptExistingResources resilient to concurrent re-stamping by @sanketsudake in #3450
• feat(crd): validate CRDs in the API server with CEL + server-side-apply markers by @sanketsudake in #3449
• refactor(executor): context-bound adopt/cleanup wait + de-duplicate adopt/cleanup by @sanketsudake in #3451
• refactor(webhook): drop the HTTPTrigger, TimeTrigger and CanaryConfig admission webhooks by @sanketsudake in #3452
• refactor(validation): split CRD validation into CEL-covered and webhook-only halves by @sanketsudake in #3454
• refactor(executor): share deployment helpers across newdeploy/container + cleanup by @sanketsudake in #3453
• test(fission-cli): raise coverage + dedupe create commands; fix canary status bug by @sanketsudake in #3455
• Security dep sweep: k8s 0.36 / controller-runtime 0.24 / KEDA 2.20 + OTel/sarama/minio/x-image by @sanketsudake in #3456
• refactor(executor): share one Environment reconciler across executor types by @sanketsudake in #3457
• refactor(executor): share one Function reconciler across executor types by @sanketsudake in #3458
• refactor(executor): serve newdeploy/container IsValid from the Manager cache (retire standalone informer factory) by @sanketsudake in #3459
• feat(executor): opt-in cleanup finalizer for reliable cross-namespace teardown by @sanketsudake in #3460
• feat(executor): self-heal newdeploy/container function workloads on drift by @sanketsudake in #3461
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3311
• chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #3463
• chore(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the go-dependencies group by @dependabot[bot] in #3462
• fix(httptrigger): enforce path-safety at admission (GHSA-vchh) by @sanketsudake in #3464
• fix(podspec): allowlist tenant caps + force drop:[ALL] (GHSA-qf5v) by @sanketsudake in #3465
• chore: Go 1.26.4, kind v0.32.0, release version 1.25.0 by @sanketsudake in #3467
• fix(executor,fetcher): use native sleep preStop hook instead of exec /bin/sleep by @sanketsudake in #3468
• fix: tolerate deletion races and stop logging routine churn as errors by @sanketsudake in #3469
• fix(publisher): retry transient router 404s; ci: metrics-server for HPA by @sanketsudake in #3470
• fix(test): retry Function status writes on conflict by @sanketsudake in #3471
• fix(executor): close specialize-vs-delete race; tolerate finalizer write races by @sanketsudake in #3472
• fix(executor): scope HPA resource metrics to the function container by @sanketsudake in #3473
• chore: sync generated code with types.go doc comments by @sanketsudake in #3474

Full Changelog: v1.24.0...v1.25.0

Release Highlights: https://fission.io/docs/releases/v1.24.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• Bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #3378
• Reject cross-namespace references in Package + KubernetesWatchTrigger (GHSA-vjhc, GHSA-gc3j) by @sanketsudake in #3379
• CRD conditions + SSA list markers by @sanketsudake in #3381
• Cross-origin defense: CORS deny + security headers across all Fission HTTP listeners by @sanketsudake in #3382
• Update contact information for vulnerability reporting by @sanketsudake in #3386
• Bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in #3385
• Drop secret materialization and allowlist PodSpec fields in MessageQueueTrigger by @sanketsudake in #3367
• Reject cross-namespace Environment + Package references in Function (… by @sanketsudake in #3389
• Drop fission-builder SA token from user builder container (GHSA-8wcj) by @sanketsudake in #3390
• Reject dangerous PodSpec fields in Environment + Function (GHSA-gx55,… by @sanketsudake in #3391
• Bump Go dependencies (security sweep, 2026-05-25) by @sanketsudake in #3392
• Bump workflow tool versions (skaffold v2.21.0, goreleaser-action v7.2.2) by @sanketsudake in #3393
• Bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #3395
• Bump Helm chart version to 1.24.0 for next release by @sanketsudake in #3396
• fission-cli: surface CRD status conditions in list/get + dedup printers by @sanketsudake in #3397
• fission-cli: generics-based dedup of spec subsystem + cobra/CRUD cleanup by @sanketsudake in #3398
• fission-cli: add -o json|yaml|wide to list & describe commands by @sanketsudake in #3399
• Switch license headers to SPDX identifiers by @sanketsudake in #3400
• chore(spdx): remove one-time license-header strip script by @sanketsudake in #3401
• fission-cli: add 'wait --for=condition' to condition-bearing resources by @sanketsudake in #3402
• fission-cli: add 'spec apply --dry-run' by @sanketsudake in #3403
• ci: integration-test coverage for fission-bundle by @sanketsudake in #3404
• fix(security): validate Runtime/Builder Container SecurityContext (GHSA-m63v) by @sanketsudake in #3406
• test: increase unit and integration coverage across low-coverage packages by @sanketsudake in #3405

Full Changelog: v1.23.0...v1.24.0

Release Highlights: https://fission.io/docs/releases/v1.23.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• Bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 by @dependabot[bot] in #3295
• Separate chart and app version by @sanketsudake in #3297
• Bump github.com/kedacore/keda/v2 from 2.18.2 to 2.18.3 by @dependabot[bot] in #3299
• Bump the github-actions group with 3 updates by @dependabot[bot] in #3301
• Couple of enhancements & library updates by @dependabot[bot] in #3303
• Use errors instead of hashicorp/go-multierror package by @sanketsudake in #3304
• Use modernizer and upgrade golangci-lint config by @sanketsudake in #3306
• Bump anchore/sbom-action from 0.20.11 to 0.21.0 in the github-actions group by @dependabot[bot] in #3305
• Optimize throttler and reduce webhook code duplication by @sanketsudake in #3307
• Switch to logr interface across codebase by @sanketsudake in #3313
• Add better abstractions for Subscribe in mqtrigger package by @sanketsudake in #3317
• Add checks in specialize pod handler by @sanketsudake in #3318
• Bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #3319
• Bump the go-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #3316
• Update keda image versions to latest by @sanketsudake in #3320
• Upgrade go version 1.26 by @sanketsudake in #3326
• Bump the github-actions group across 1 directory with 5 updates by @dependabot[bot] in #3329
• Fix atomic usage by @sanketsudake in #3348
• Bump the github-actions group across 1 directory with 17 updates by @dependabot[bot] in #3341
• Add CLAUDE & AGENTS md by @sanketsudake in #3349
• Deps/security sweep 2026 04 by @sanketsudake in #3350
• Bump the github-actions group with 8 updates by @dependabot[bot] in #3352
• Bump the github-actions group with 2 updates by @dependabot[bot] in #3354
• Bump golang.org/x/image from 0.18.0 to 0.38.0 by @dependabot[bot] in #3342
• Migrate bash integration tests to Go by @sanketsudake in #3356
• Retire bash integration test suite (Phase 6 teardown) by @sanketsudake in #3357
• Bump Go dependencies (security sweep, 2026-05) by @sanketsudake in #3358
• Misc fixes by @sanketsudake in #3361
• Bump docker/cli to v29.4.3 to close 3 Dependabot CVEs by @sanketsudake in #3362
• Add debug-github-ci skill by @sanketsudake in #3363
• Security fixes 2026 05 by @sanketsudake in #3364
• Add per-service NetworkPolicies covering every Fission listener by @sanketsudake in #3365
• Drop fission-fetcher SA token from function user containers by @sanketsudake in #3366
• Add HMAC application-layer auth to StorageSvc /v1/archive by @sanketsudake in #3368
• fix: allow equals in ingress trigger parsing by @immanuwell in #3370
• Extend HMAC application-layer auth to fetcher, builder, executor, and router-internal by @sanketsudake in #3369
• Bump the github-actions group with 2 updates by @dependabot[bot] in #3360
• Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in #3371
• Go deps security sweep (2026-05b) + Go 1.26.3 + chart v1.23.0 by @sanketsudake in #3375
• Refresh workflow CLI tool versions (helm, kind, skaffold, cosign, golangci-lint) by @sanketsudake in #3376

New Contributors

• @immanuwell made their first contribution in #3370

Full Changelog: v1.22.0...v1.23.0

Release Highlights: https://fission.io/docs/releases/v1.22.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• Fix: false duplicate http trigger detection on specs re-apply by @soharab-ic in #3160
• Bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in #3162
• Fix: error on fission spec validate but fission spec apply works fine by @soharab-ic in #3164
• Update Go version to 1.24 by @sanketsudake in #3167
• Bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #3171
• Remove github.com/pkg/errors with appropriate replacements by @sanketsudake in #3172
• Bump the go-dependencies group across 1 directory with 10 updates by @dependabot[bot] in #3174
• Add best practices badge by @sanketsudake in #3175
• Bump the github-actions group with 6 updates by @dependabot[bot] in #3177
• Bump the github-actions group with 3 updates by @dependabot[bot] in #3180
• Restructure fission-bundle CLI and remove old modules by @sanketsudake in #3178
• Bump the go-dependencies group across 1 directory with 2 updates by @dependabot[bot] in #3181
• Update Go version to 1.24.1 by @sanketsudake in #3182
• Bump github/codeql-action from 3.28.10 to 3.28.11 in the github-actions group by @dependabot[bot] in #3185
• Bump the go-dependencies group with 11 updates by @dependabot[bot] in #3184
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3158
• Bump the github-actions group across 1 directory with 9 updates by @dependabot[bot] in #3202
• Bump the go-dependencies group across 1 directory with 13 updates by @dependabot[bot] in #3201
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3187
• use golangci-lint migrate to eliminate error by @rotty3000 in #3220
• Bump the github-actions group across 1 directory with 8 updates by @dependabot[bot] in #3217
• Add staticcheck fixes by @sanketsudake in #3221
• Bump the go-dependencies group across 1 directory with 17 updates by @dependabot[bot] in #3222
• Create a publisher per cron timer by @markretallack in #3218
• Bump the go-dependencies group with 8 updates by @dependabot[bot] in #3224
• Update GoReleaser configurations by @emmanuel-ferdman in #3231
• Bump the go-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #3232
• Bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #3233
• Bump the go-dependencies group across 1 directory with 19 updates by @dependabot[bot] in #3238
• Usa labels instead of deprecated commonLabels by @facorazza in #3239
• Bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #3247
• Bump the github-actions group with 4 updates by @dependabot[bot] in #3249
• Bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #3255
• Fix kustomize rendering failures by @sanketsudake in #3256
• Bump the go-dependencies group across 1 directory with 23 updates by @dependabot[bot] in #3254
• Use forked code-generator via godeps by @sanketsudake in #3257
• Bump the go-dependencies group with 3 updates by @dependabot[bot] in #3258
• Bump the github-actions group with 3 updates by @dependabot[bot] in #3259
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3211
• Bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #3269
• Use go 1.25 waitgroup Go method instead of Add/Wait by @sanketsudake in #3265
• Bump the go-dependencies group across 1 directory with 8 updates by @dependabot[bot] in #3266
• Add support to customise storagesvc deployment strategy by @ian-thompson-yv in #3196
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3267
• Bump github/codeql-action from 4.31.0 to 4.31.2 in the github-actions group by @dependabot[bot] in #3272
• Update release version v1.22.0 by @sanketsudake in #3270
• Bump golang.org/x/net from 0.25.0 to 0.36.0 in /test/tests/websocket in the go_modules group across 1 directory by @dependabot[bot] in #3186
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #3280
• Remove dashboard linter from tool dependency by @sanketsudake in #3285
• Bump the go-dependencies group across 1 directory with 22 updates by @dependabot[bot] in #3286
• Bump the github-actions group across 1 directory with 9 updates by @dependabot[bot] in #3282
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3277
• Changes in goreleaser by @sanketsudake in #3274
• Bump the github-actions group with 7 updates by @dependabot[bot] in #3290
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in #3289
• Bump k8s.io/apiextensions-apiserver from 0.34.2 to 0.34.3 in the go-dependencies group by @dependabot[bot] in #3288
• Bump github.com/opencontainers/runc from 1.2.3 to 1.2.8 in the go_modules group across 1 directory by @dependabot[bot] in #3275
• Chart version update by @sanketsudake in #3291
• Update dependabot.yml for formatting and ignore rules by @sanketsudake in #3292
• Add npm dependabot rules by @sanketsudake in #3293

New Contributors

• @rotty3000 made their first contribution in #3220
• @emmanuel-ferdman made their first contribution in #3231
• @facorazza made their first contribution in #3239
• @ian-thompson-yv made their first contribution in #3196

Full Changelog: v1.21.0...v1.22.0

Release Highlights: https://fission.io/docs/releases/v1.22.0-rc2/
Install Guide: https://fission.io/docs/installation/

Release Highlights: https://fission.io/docs/releases/v1.21.0/
Install Guide: https://fission.io/docs/installation/

What's Changed

• Fix: an invalid env manifest file breaks the executor component which stops the creation and deletion of envs by @soharab-ic in #3034
• Add podSpec to generated environment manifest by @soharab-ic in #3033
• Update K8s version for envtest to 1.30.x by @soharab-ic in #3038
• Remove unreachable code by @soharab-ic in #3039
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #3056
• Add path safety fixes by @sanketsudake in #3061
• Add OpenSSF Scorecard action by @sanketsudake in #3066
• Add OpenSSF scorecard badge by @sanketsudake in #3067
• Apply best security practices for OpenSSF by @sanketsudake in #3069
• Bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in #3074
• Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #3073
• Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @dependabot in #3072
• Bump codecov/codecov-action from 4.5.0 to 5.1.1 by @dependabot in #3071
• Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @dependabot in #3070
• Skip CI for dependabot PR and remove manual dispatch by @sanketsudake in #3080
• Update Go dependencies by @sanketsudake in #3081
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #3077
• Add provenance steps for release by @sanketsudake in #3083
• Update dependabot config by @sanketsudake in #3094
• Grouped dependabot updates for dockerfile and github-actions by @sanketsudake in #3111
• Bump the global group with 9 updates by @dependabot in #3118
• Update dependabot.yml grouping by @sanketsudake in #3119
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #3110
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3121
• Bump helm/kind-action from 1.11.0 to 1.12.0 in the github-actions group by @dependabot in #3122
• Fix SBOM and provenance for releases by @sanketsudake in #3124
• Update Go version to 1.23.4 by @sanketsudake in #3126
• Bump the go-dependencies group across 1 directory with 25 updates by @dependabot in #3125
• fix: apply kubernetes resources to the webhook-server by @mrsimonemms in #3084
• Log only related configmap and secret by @lx1036 in #3049
• fix: fix slice init length by @occupyhabit in #3064
• Update create.go to handle namespace isolation by @sofsms in #3130
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3132
• Bump the go-dependencies group with 3 updates by @dependabot in #3131
• Use controller-gen and code-generator latest version by @sanketsudake in #3133
• Use mholt/archives instead of mholt/archiver by @sanketsudake in #3128
• Update k8s versions and set minimum version to 1.27.0 by @sanketsudake in #3134
• Bump the go-dependencies group with 4 updates by @dependabot in #3141
• Bump the github-actions group with 4 updates by @dependabot in #3140
• PR-3051: Fix download deploy package out of k8s cluster by @soharab-ic in #3136
• Update chart version v1.21.0-rc1 by @sanketsudake in #3143
• Use GHCR repo for fetcher image by default by @sanketsudake in #3145
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3139
• Update chart version v1.21.0-rc2 by @sanketsudake in #3146
• fix: custom runtime container name is invalid by @lcgash in #3065
• Bump the github-actions group with 2 updates by @dependabot in #3148
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3149
• Duplicate Job names in helm chart templates by @sanketsudake in #3150
• Adopt custom defaulter and validator interface for webhooks intead of deprecated default by @sanketsudake in #3152
• Update SECURITY.md by @sanketsudake in #3151
• Bump the go-dependencies group with 17 updates by @dependabot in #3147
• Update all images used to GHCR repo by @sanketsudake in #3154

New Contributors

• @mrsimonemms made their first contribution in #3084
• @lx1036 made their first contribution in #3049
• @occupyhabit made their first contribution in #3064
• @lcgash made their first contribution in #3065

Full Changelog: v1.20.5...v1.21.0

Install Guide: https://fission.io/docs/installation/

What's Changed

• Fix: an invalid env manifest file breaks the executor component which stops the creation and deletion of envs by @soharab-ic in #3034
• Add podSpec to generated environment manifest by @soharab-ic in #3033
• Update K8s version for envtest to 1.30.x by @soharab-ic in #3038
• Remove unreachable code by @soharab-ic in #3039
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #3056
• Add path safety fixes by @sanketsudake in #3061
• Add OpenSSF Scorecard action by @sanketsudake in #3066
• Add OpenSSF scorecard badge by @sanketsudake in #3067
• Apply best security practices for OpenSSF by @sanketsudake in #3069
• Bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in #3074
• Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #3073
• Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @dependabot in #3072
• Bump codecov/codecov-action from 4.5.0 to 5.1.1 by @dependabot in #3071
• Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @dependabot in #3070
• Skip CI for dependabot PR and remove manual dispatch by @sanketsudake in #3080
• Update Go dependencies by @sanketsudake in #3081
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #3077
• Add provenance steps for release by @sanketsudake in #3083
• Update dependabot config by @sanketsudake in #3094
• Grouped dependabot updates for dockerfile and github-actions by @sanketsudake in #3111
• Bump the global group with 9 updates by @dependabot in #3118
• Update dependabot.yml grouping by @sanketsudake in #3119
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #3110
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3121
• Bump helm/kind-action from 1.11.0 to 1.12.0 in the github-actions group by @dependabot in #3122
• Fix SBOM and provenance for releases by @sanketsudake in #3124
• Update Go version to 1.23.4 by @sanketsudake in #3126
• Bump the go-dependencies group across 1 directory with 25 updates by @dependabot in #3125
• fix: apply kubernetes resources to the webhook-server by @mrsimonemms in #3084
• Log only related configmap and secret by @lx1036 in #3049
• fix: fix slice init length by @occupyhabit in #3064
• Update create.go to handle namespace isolation by @sofsms in #3130
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3132
• Bump the go-dependencies group with 3 updates by @dependabot in #3131
• Use controller-gen and code-generator latest version by @sanketsudake in #3133
• Use mholt/archives instead of mholt/archiver by @sanketsudake in #3128
• Update k8s versions and set minimum version to 1.27.0 by @sanketsudake in #3134
• Bump the go-dependencies group with 4 updates by @dependabot in #3141
• Bump the github-actions group with 4 updates by @dependabot in #3140
• PR-3051: Fix download deploy package out of k8s cluster by @soharab-ic in #3136
• Update chart version v1.21.0-rc1 by @sanketsudake in #3143
• Use GHCR repo for fetcher image by default by @sanketsudake in #3145
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3139
• Update chart version v1.21.0-rc2 by @sanketsudake in #3146
• fix: custom runtime container name is invalid by @lcgash in #3065
• Bump the github-actions group with 2 updates by @dependabot in #3148
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3149
• Duplicate Job names in helm chart templates by @sanketsudake in #3150
• Adopt custom defaulter and validator interface for webhooks intead of deprecated default by @sanketsudake in #3152
• Update SECURITY.md by @sanketsudake in #3151
• Bump the go-dependencies group with 17 updates by @dependabot in #3147

New Contributors

• @mrsimonemms made their first contribution in #3084
• @lx1036 made their first contribution in #3049
• @occupyhabit made their first contribution in #3064
• @lcgash made their first contribution in #3065

Full Changelog: v1.20.5...v1.21.0-rc2

Install Guide: https://fission.io/docs/installation/

What's Changed

• Fix: an invalid env manifest file breaks the executor component which stops the creation and deletion of envs by @soharab-ic in #3034
• Add podSpec to generated environment manifest by @soharab-ic in #3033
• Update K8s version for envtest to 1.30.x by @soharab-ic in #3038
• Remove unreachable code by @soharab-ic in #3039
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #3056
• Add path safety fixes by @sanketsudake in #3061
• Add OpenSSF Scorecard action by @sanketsudake in #3066
• Add OpenSSF scorecard badge by @sanketsudake in #3067
• Apply best security practices for OpenSSF by @sanketsudake in #3069
• Bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in #3074
• Bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in #3073
• Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @dependabot in #3072
• Bump codecov/codecov-action from 4.5.0 to 5.1.1 by @dependabot in #3071
• Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @dependabot in #3070
• Skip CI for dependabot PR and remove manual dispatch by @sanketsudake in #3080
• Update Go dependencies by @sanketsudake in #3081
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #3077
• Add provenance steps for release by @sanketsudake in #3083
• Update dependabot config by @sanketsudake in #3094
• Grouped dependabot updates for dockerfile and github-actions by @sanketsudake in #3111
• Bump the global group with 9 updates by @dependabot in #3118
• Update dependabot.yml grouping by @sanketsudake in #3119
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #3110
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3121
• Bump helm/kind-action from 1.11.0 to 1.12.0 in the github-actions group by @dependabot in #3122
• Fix SBOM and provenance for releases by @sanketsudake in #3124
• Update Go version to 1.23.4 by @sanketsudake in #3126
• Bump the go-dependencies group across 1 directory with 25 updates by @dependabot in #3125
• fix: apply kubernetes resources to the webhook-server by @mrsimonemms in #3084
• Log only related configmap and secret by @lx1036 in #3049
• fix: fix slice init length by @occupyhabit in #3064
• Update create.go to handle namespace isolation by @sofsms in #3130
• Bump the docker-images group across 5 directories with 1 update by @dependabot in #3132
• Bump the go-dependencies group with 3 updates by @dependabot in #3131
• Use controller-gen and code-generator latest version by @sanketsudake in #3133
• Use mholt/archives instead of mholt/archiver by @sanketsudake in #3128
• Update k8s versions and set minimum version to 1.27.0 by @sanketsudake in #3134
• Bump the go-dependencies group with 4 updates by @dependabot in #3141
• Bump the github-actions group with 4 updates by @dependabot in #3140
• PR-3051: Fix download deploy package out of k8s cluster by @soharab-ic in #3136
• Update chart version v1.21.0-rc1 by @sanketsudake in #3143

New Contributors

• @mrsimonemms made their first contribution in #3084
• @lx1036 made their first contribution in #3049
• @occupyhabit made their first contribution in #3064

Full Changelog: v1.20.5...v1.21.0-rc1