diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 361321f07..f0d633610 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,4 +1,4 @@ { - ".": "0.4.0" + ".": "0.5.0" } diff --git a/CHANGELOG.md b/CHANGELOG.md index 9ba620d1a..9ac27e88e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,44 @@ Release notes are generated and maintained via **release-please** based on **Conventional Commits**. +## [0.5.0](https://github.com/dc-tec/openbao-operator/compare/0.4.0...0.5.0) (2026-08-11) + + +### Features + +* **api:** stabilize v1alpha1 contracts ([#583](https://github.com/dc-tec/openbao-operator/issues/583)) ([711944e](https://github.com/dc-tec/openbao-operator/commit/711944ed4ec7fa434afbd8f74b5af62b6934b929)) +* **config:** support plugin-backed KMS seals ([#535](https://github.com/dc-tec/openbao-operator/issues/535)) ([f911438](https://github.com/dc-tec/openbao-operator/commit/f9114382c9b9e364155da21320761e0b17686eb9)) +* **config:** support self-init profile controls ([#536](https://github.com/dc-tec/openbao-operator/issues/536)) ([a79c5a0](https://github.com/dc-tec/openbao-operator/commit/a79c5a0c84f615a88c3f1ac9e619da21abb7ce59)) +* **tooling:** make devenv the contributor entry point ([89e5c96](https://github.com/dc-tec/openbao-operator/commit/89e5c9618cbd386eab2aebbc3a40785936f97d0c)) +* **upgrade:** allow idle strategy switching ([#556](https://github.com/dc-tec/openbao-operator/issues/556)) ([3509ffb](https://github.com/dc-tec/openbao-operator/commit/3509ffb2abea197cc6609bd56d3b31b2c049fd60)) + + +### Bug Fixes + +* **api:** align status and lifecycle contracts ([#604](https://github.com/dc-tec/openbao-operator/issues/604)) ([2a7a3ff](https://github.com/dc-tec/openbao-operator/commit/2a7a3ff81908c3b89ac54b6522efb226b488661f)) +* **api:** configure voter resources ([#600](https://github.com/dc-tec/openbao-operator/issues/600)) ([409f482](https://github.com/dc-tec/openbao-operator/commit/409f4827aa446fc5868a6453fadfdc89941b4534)) +* **charts:** allow provisioner metrics traffic ([#605](https://github.com/dc-tec/openbao-operator/issues/605)) ([b6cd1f3](https://github.com/dc-tec/openbao-operator/commit/b6cd1f330420005354de3529fe63849194fe9bc7)) +* **charts:** set single-tenant controller watch namespace ([#599](https://github.com/dc-tec/openbao-operator/issues/599)) ([026baf2](https://github.com/dc-tec/openbao-operator/commit/026baf21352df2783afc00668bba7cf756acbbf6)) +* **compat:** qualify OpenBao 2.6.0 ([#546](https://github.com/dc-tec/openbao-operator/issues/546)) ([fea6897](https://github.com/dc-tec/openbao-operator/commit/fea68976fe1d4ec169d30ed6f03c62b6f7517cfb)) +* **config:** omit plugin directory without plugins ([#533](https://github.com/dc-tec/openbao-operator/issues/533)) ([1736c6b](https://github.com/dc-tec/openbao-operator/commit/1736c6b2a268083170e49ea05b6c1ec9d23d6d2a)) +* **deps:** remediate website security advisories ([#597](https://github.com/dc-tec/openbao-operator/issues/597)) ([7dd7c37](https://github.com/dc-tec/openbao-operator/commit/7dd7c3737059978baec92c0b215239c84ad220ea)) +* **deps:** remediate website transitive vulnerabilities ([#591](https://github.com/dc-tec/openbao-operator/issues/591)) ([eba02bb](https://github.com/dc-tec/openbao-operator/commit/eba02bb4f166162370a071ab8df93891f98ed9ac)) +* **deps:** update vulnerable brace-expansion ([#576](https://github.com/dc-tec/openbao-operator/issues/576)) ([26e7438](https://github.com/dc-tec/openbao-operator/commit/26e74388855697c4eea306ea5bcd0e51cf79e6df)) +* **deps:** update vulnerable Go modules ([#569](https://github.com/dc-tec/openbao-operator/issues/569)) ([75d4b9b](https://github.com/dc-tec/openbao-operator/commit/75d4b9b31fba3e0432d7c80c183c64448c2786e0)) +* **deps:** update vulnerable website transitive dependencies ([#561](https://github.com/dc-tec/openbao-operator/issues/561)) ([8a857ab](https://github.com/dc-tec/openbao-operator/commit/8a857ab24b065ade486702f815c8701b697e3319)) +* **docs:** improve ultrawide layout ([#610](https://github.com/dc-tec/openbao-operator/issues/610)) ([9525648](https://github.com/dc-tec/openbao-operator/commit/952564879bb52254266ab3b1b837361386583203)) +* **docs:** restore TypeScript compatibility ([#568](https://github.com/dc-tec/openbao-operator/issues/568)) ([cf514da](https://github.com/dc-tec/openbao-operator/commit/cf514da72dca35cfb58dc88f9f111bd68cc17236)) +* **networking:** align Gateway and TLS readiness ([#602](https://github.com/dc-tec/openbao-operator/issues/602)) ([1151b31](https://github.com/dc-tec/openbao-operator/commit/1151b31ef05a9b9f096e83896b03f932556d10f3)) +* **provisioner:** clean up tenant governance resources ([#606](https://github.com/dc-tec/openbao-operator/issues/606)) ([bf53821](https://github.com/dc-tec/openbao-operator/commit/bf538212baa79eadb65f74f4db1e204d39870651)) +* **release:** harden release candidate gates ([#618](https://github.com/dc-tec/openbao-operator/issues/618)) ([4e999fb](https://github.com/dc-tec/openbao-operator/commit/4e999fba6720f037c8bcd4b9db9232986ae300a4)) +* **release:** preserve SPDX schema validity ([#617](https://github.com/dc-tec/openbao-operator/issues/617)) ([305b241](https://github.com/dc-tec/openbao-operator/commit/305b241913063770d5b7efc655d48a3bca8abd8c)) +* **upgrade:** verify blue-green validation hook images ([#601](https://github.com/dc-tec/openbao-operator/issues/601)) ([686922a](https://github.com/dc-tec/openbao-operator/commit/686922a286d4b58c485b2118212d9967ab3dd160)) + + +### Performance Improvements + +* **tooling:** reduce devenv base closure ([#614](https://github.com/dc-tec/openbao-operator/issues/614)) ([af2826a](https://github.com/dc-tec/openbao-operator/commit/af2826af2262a53707340c4d8659dbc84d851cbb)) + ## [0.4.0](https://github.com/dc-tec/openbao-operator/compare/0.3.0...0.4.0) (2026-07-04) diff --git a/charts/openbao-operator/Chart.yaml b/charts/openbao-operator/Chart.yaml index da51c4fc5..d9d1b7f1f 100644 --- a/charts/openbao-operator/Chart.yaml +++ b/charts/openbao-operator/Chart.yaml @@ -4,8 +4,8 @@ description: >- OpenBao Operator installs the OpenBao Kubernetes operator and its required cluster-scoped resources. type: application -version: 0.4.0 -appVersion: 0.4.0 +version: 0.5.0 +appVersion: 0.5.0 icon: >- https://raw.githubusercontent.com/dc-tec/openbao-operator/main/website/static/img/brand/logo.svg home: https://github.com/dc-tec/openbao-operator @@ -29,29 +29,63 @@ annotations: artifacthub.io/prerelease: "false" artifacthub.io/containsSecurityUpdates: 'true' artifacthub.io/changes: | - - kind: security - description: "security: require authority for network publication" - kind: added - description: "self-init: add initial recovery key bootstrap" + description: "api: stabilize v1alpha1 contracts" + - kind: added + description: "config: support plugin-backed KMS seals" + - kind: added + description: "config: support self-init profile controls" + - kind: added + description: "tooling: make devenv the contributor entry point" + - kind: added + description: "upgrade: allow idle strategy switching" + - kind: fixed + description: "api: align status and lifecycle contracts" + - kind: fixed + description: "api: configure voter resources" + - kind: fixed + description: "charts: allow provisioner metrics traffic" + - kind: fixed + description: "charts: set single-tenant controller watch namespace" + - kind: fixed + description: "compat: qualify OpenBao 2.6.0" + - kind: fixed + description: "config: omit plugin directory without plugins" + - kind: fixed + description: "deps: remediate website security advisories" - kind: security - description: "security: delegate dangerous CR controls" + description: "deps: remediate website transitive vulnerabilities" - kind: security - description: "security: enforce CR reference authorization" + description: "deps: update vulnerable brace-expansion" - kind: security - description: "security: enforce hardened contract for unsafe controls" + description: "deps: update vulnerable Go modules" - kind: security - description: "security: require provenance for managed resources" + description: "deps: update vulnerable website transitive dependencies" + - kind: fixed + description: "docs: improve ultrawide layout" + - kind: fixed + description: "docs: restore TypeScript compatibility" + - kind: fixed + description: "networking: align Gateway and TLS readiness" + - kind: fixed + description: "provisioner: clean up tenant governance resources" + - kind: fixed + description: "release: harden release candidate gates" + - kind: fixed + description: "release: preserve SPDX schema validity" - kind: fixed - description: "self-init: make bootstrap config one-shot" + description: "upgrade: verify blue-green validation hook images" + - kind: changed + description: "tooling: reduce devenv base closure" artifacthub.io/images: | - name: openbao-operator - image: ghcr.io/dc-tec/openbao-operator:0.4.0 + image: ghcr.io/dc-tec/openbao-operator:0.5.0 - name: openbao-init - image: ghcr.io/dc-tec/openbao-init:0.4.0 + image: ghcr.io/dc-tec/openbao-init:0.5.0 - name: openbao-backup - image: ghcr.io/dc-tec/openbao-backup:0.4.0 + image: ghcr.io/dc-tec/openbao-backup:0.5.0 - name: openbao-upgrade - image: ghcr.io/dc-tec/openbao-upgrade:0.4.0 + image: ghcr.io/dc-tec/openbao-upgrade:0.5.0 artifacthub.io/crds: | - kind: OpenBaoCluster version: v1alpha1