v0.10.0

Welcome to our glorious v0.10.0 release of the security-profiles-operator! The general usage and setup can be found in our documentation. 🥳 👯

To install the operator, run:

$ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/security-profiles-operator/v0.10.0/deploy/operator.yaml

You can also verify the container image signature by using cosign:

$ cosign verify \
    --certificate-identity krel-trust@k8s-releng-prod.iam.gserviceaccount.com \
    --certificate-oidc-issuer https://accounts.google.com \
    registry.k8s.io/security-profiles-operator/security-profiles-operator:v0.10.0

Beside the operator image, we now also ship spoc, the official Security Profiles Operator Command Line Interface! Binaries for amd64 and arm64 are attached to this release.

To verify the signature of spoc. download all release artifacts and run for amd64 (works in the same way for arm64:

$ cosign verify-blob \
    --certificate-identity sgrunert@redhat.com \
    --certificate-oidc-issuer https://github.com/login/oauth \
    --certificate spoc.amd64.cert \
    --signature spoc.amd64.sig \
    spoc.amd64

To verify the Bill of Materials (BOM) using the bom tool, download the artifacts into a build directory and run:

> bom validate -e spoc.spdx -d build/
+-------------------+-------+-----------------------------+----------------+
|     FILENAME      | VALID |           MESSAGE           | INVALID HASHES |
+-------------------+-------+-----------------------------+----------------+
| spoc.amd64        | OK    | File validated successfully | -              |
| spoc.amd64.cert   | OK    | File validated successfully | -              |
| spoc.amd64.sha512 | OK    | File validated successfully | -              |
| spoc.amd64.sig    | OK    | File validated successfully | -              |
| spoc.arm64        | OK    | File validated successfully | -              |
| spoc.arm64.cert   | OK    | File validated successfully | -              |
| spoc.arm64.sha512 | OK    | File validated successfully | -              |
| spoc.arm64.sig    | OK    | File validated successfully | -              |
+-------------------+-------+-----------------------------+----------------+

The .spdx file is signed as well and we also provide .sha512 sum files for the binaries.

Feel free to provide us any kind of feedback in the official Kubernetes Slack #security-profiles-operator channel.

Changes by Kind

Feature

• Add BPF-based log enricher (#2908, @mhils)
• Adds an option (--audit-log-interval-seconds) to set the audit log interval for the JSON Log Enricher (#2867, @ngopalak-redhat)
• Add In-Pod Activity Log recorder in audit JSON lines format (#2835, @ngopalak-redhat)
• Add Request UID to JSON log enricher to correlate container and API Server Audit log (#2878, @ngopalak-redhat)
• Add file system support for JSON Log Enricher Audit logging (#2871, @ngopalak-redhat)
• Adds eBPF support to json audit log enricher (#2929, @ngopalak-redhat)
• Adds support for kubectl node debugging for JSON Log enricher (#2907, @ngopalak-redhat)
• Introduced log filtering capabilities for enrichers, configurable via SPOD, enabling filtering of audit JSON and log-enricher output based on custom rules. (#2909, @ngopalak-redhat)
• Support for TLS 1.3 in SPO webhooks (#2954, @ngopalak-redhat)

Bug or Regression

• Applies the changes to Seccomp and Apparmor profiles only whent here are effective changes in the CRs. (#2826, @ccojocar)

Other (Cleanup or Flake)

• Removed support for in-memory btf because most kernels should now expose /sys/kernel/btf/vmlinux (#2969, @saschagrunert)
• Switch to beta maturity with respect to community operators (operator hub). (#2818, @saschagrunert)

Dependencies

Added

• github.com/DataDog/datadog-agent/comp/core/tagger/origindetection: v0.64.2
• github.com/DataDog/datadog-agent/pkg/version: v0.64.2
• github.com/DataDog/dd-trace-go/v2: v2.0.0
• github.com/Masterminds/goutils: v1.1.1
• github.com/Masterminds/sprig/v3: v3.3.0
• github.com/cenkalti/backoff/v5: v5.0.2
• github.com/cheggaaa/pb/v3: v3.1.6
• github.com/containerd/containerd/v2: v2.1.1
• github.com/google/go-github/v72: v72.0.0
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
• github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.1.0
• github.com/huandu/xstrings: v1.5.0
• github.com/keybase/go-keychain: v0.0.1
• github.com/mitchellh/copystructure: v1.2.0
• github.com/mitchellh/reflectwalk: v1.0.2
• github.com/moby/sys/atomicwriter: v0.1.0
• github.com/olekukonko/errors: v1.1.0
• github.com/olekukonko/ll: v0.0.9
• github.com/olekukonko/ts: 78ecb04
• github.com/opencontainers/cgroups: v0.0.4
• github.com/puzpuzpuz/xsync/v3: v3.5.1
• github.com/shirou/gopsutil/v4: v4.25.3
• github.com/shopspring/decimal: v1.4.0
• github.com/sigstore/rekor-tiles: v0.1.5
• github.com/tink-crypto/tink-go-hcvault/v2: v2.3.0
• go.etcd.io/gofail: v0.2.0
• go.etcd.io/raft/v3: v3.6.0
• go.yaml.in/yaml/v2: v2.4.2
• go.yaml.in/yaml/v3: v3.0.3
• goa.design/goa/v3: v3.20.1
• golang.org/x/tools/go/expect: v0.1.0-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
• gonum.org/v1/gonum: v0.16.0
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.19.1 → v0.24.0
• chainguard.dev/go-grpc-kit: v0.17.7 → v0.17.10
• chainguard.dev/sdk: v0.1.29 → v0.1.32
• cloud.google.com/go/auth/oauth2adapt: v0.2.7 → v0.2.8
• cloud.google.com/go/auth: v0.15.0 → v0.16.2
• cloud.google.com/go/compute/metadata: v0.6.0 → v0.7.0
• cloud.google.com/go/iam: v1.4.1 → v1.5.2
• cloud.google.com/go/kms: v1.21.1 → v1.22.0
• cloud.google.com/go/longrunning: v0.6.5 → v0.6.7
• cloud.google.com/go/monitoring: v1.21.2 → v1.24.0
• cloud.google.com/go/pubsub: v1.45.3 → v1.47.0
• cloud.google.com/go/security: v1.18.4 → v1.18.5
• cloud.google.com/go/storage: v1.49.0 → v1.50.0
• cloud.google.com/go/trace: v1.11.2 → v1.11.3
• cloud.google.com/go: v0.118.3 → v0.121.1
• dario.cat/mergo: v1.0.1 → v1.0.2
• github.com/AdaLogics/go-fuzz-headers: ced1acd → e8a1dd7
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.17.1 → v1.18.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.8.2 → v1.10.1
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.10.0 → v1.11.1
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v1.6.0 → v1.6.1
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.3.3 → v1.4.2
• github.com/BurntSushi/toml: v1.4.0 → v1.5.0
• github.com/DataDog/appsec-internal-go: v1.9.0 → v1.11.2
• github.com/DataDog/datadog-agent/pkg/obfuscate: v0.58.0 → v0.64.2
• github.com/DataDog/datadog-agent/pkg/proto: v0.58.0 → v0.64.2
• github.com/DataDog/datadog-agent/pkg/remoteconfig/state: v0.58.0 → v0.64.2
• github.com/DataDog/datadog-agent/pkg/trace: v0.58.0 → v0.64.2
• github.com/DataDog/datadog-agent/pkg/util/log: v0.58.0 → v0.64.2
• github.com/DataDog/datadog-agent/pkg/util/scrubber: v0.58.0 → v0.64.2
• github.com/DataDog/go-libddwaf/v3: v3.5.1 → v3.5.4
• github.com/DataDog/go-runtime-metrics-internal: a14610d → 81009b9
• github.com/DataDog/go-sqllexer: v0.0.14 → v0.1.3
• github.com/DataDog/opentelemetry-mapping-go/pkg/otlp/attributes: v0.20.0 → v0.26.0
• github.com/DataDog/sketches-go: v1.4.5 → v1.4.7
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.25.0 → v1.29.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric: v0.48.1 → v0.49.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping: v0.48.1 → v0.49.0
• github.com/Khan/genqlient: v0.8.0 → v0.8.1
• github.com/Microsoft/hcsshim: v0.12.9 → v0.13.0
• github.com/agnivade/levenshtein: v1.2.0 → v1.2.1
• github.com/alexflint/go-arg: v1.4.2 → v1.5.1
• github.com/alexflint/go-scalar: v1.0.0 → v1.2.0
• github.com/aquasecurity/libbpfgo: 1.5 → 1.5.1
• github.com/aws/aws-sdk-go-v2/config: v1.29.10 → v1.29.16
• github.com/aws/aws-sdk-go-v2/credentials: v1.17.63 → v1.17.69
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.16.30 → v1.16.31
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.3.34 → v1.3.35
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.6.34 → v2.6.35
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.12.15 → v1.12.16
• github.com/aws/aws-sdk-go-v2/service/kms: v1.38.1 → v1.41.0
• github.com/aws/aws-sdk-go-v2/service/sso: v1.25.1 → v1.25.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.29.2 → v1.30.2
• github.com/aws/aws-sdk-go-v2/service/sts: v1.33.17 → v1.33.21
• github.com/aws/aws-sdk-go-v2: v1.36.3 → v1.36.4
• github.com/aws/aws-sdk-go: v1.55.6 → v1.55.7
• github.com/aws/smithy-go: v1.22.2 → v1.22.3
• github.com/bgentry/speakeasy: v0.1.0 → v0.2.0
• github.com/bufbuild/protocompile: v0.10.0 → v0.14.1
• github.com/buildkite/agent/v3: v3.95.1 → v3.98.2
• github.com/cert-manager/cert-manager: v1.17.1 → v1.18.2
• github.com/chainguard-dev/clog: v1.5.1 → v1.7.0
• github.com/cilium/ebpf: v0.16.0 → v0.17.3
• github.com/cncf/xds/go: cff3c89 → 2ac532f
• github.com/containerd/cgroups/v3: v3.0.3 → v3.0.5
• github.com/containerd/platforms: v0.2.1 → v1.0.0-rc.1
• github.com/containernetworking/cni: v1.2.3 → v1.3.0
• github.com/containernetworking/plugins: v1.5.1 → v1.7.1
• github.com/containers/common: v0.62.3 → v0.64.1
• github.com/containers/image/v5: v5.34.3 → v5.36.1
• github.com/containers/storage: v1.57.2 → v1.59.1
• github.com/coreos/go-oidc/v3: v3.12.0 → v3.14.1
• github.com/coreos/go-oidc: v2.2.1+incompatible → v2.3.0+incompatible
• github.com/cpuguy83/go-md2man/v2: v2.0.6 → v2.0.7
• github.com/cyberphone/json-canonicalization: ba74d44 → 19d51d7
• github.com/danieljoos/wincred: v1.2.1 → v1.2.2
• github.com/dgraph-io/badger/v4: v4.5.1 → v4.7.0
• github.com/dgraph-io/ristretto/v2: v2.1.0 → v2.2.0
• github.com/docker/cli: v27.5.0+incompatible → v28.2.2+incompatible
• github.com/docker/docker-credential-helpers: v0.8.2 → v0.9.3
• github.com/docker/docker: v27.5.1+incompatible → v28.3.2+incompatible
• github.com/ebitengine/purego: v0.6.0-alpha.5 → v0.8.3
• github.com/fsnotify/fsnotify: v1.8.0 → v1.9.0
• github.com/fullstorydev/grpcurl: v1.9.2 → v1.9.3
• github.com/fxamacker/cbor/v2: v2.7.0 → v2.8.0
• github.com/go-jose/go-jose/v4: v4.0.5 → v4.1.1
• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/go-ole/go-ole: v1.2.6 → v1.3.0
• github.com/go-sql-driver/mysql: v1.8.1 → v1.9.2
• github.com/go-viper/mapstructure/v2: v2.2.1 → v2.3.0
• github.com/golang/glog: v1.2.4 → v1.2.5
• github.com/golang/groupcache: 41bb18b → 2c02b82
• github.com/golang/mock: v1.6.0 → v1.7.0-rc.1
• github.com/google/cel-go: v0.22.1 → v0.23.2
• github.com/google/certificate-transparency-go: v1.3.1 → v1.3.2
• github.com/google/flatbuffers: v24.12.23+incompatible → v25.2.10+incompatible
• github.com/google/go-containerregistry: v0.20.3 → v0.20.6
• github.com/google/pprof: 40e02aa → 27863c8
• github.com/google/trillian: v1.7.1 → v1.7.2
• github.com/googleapis/gax-go/v2: v2.14.1 → v2.14.2
• github.com/gorilla/websocket: v1.5.3 → e064f32
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.1 → v2.26.3
• github.com/hairyhenderson/go-which: v0.2.0 → v0.2.2
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.8 → v0.2.0
• github.com/hashicorp/go-sockaddr: v1.0.6 → v1.0.7
• github.com/jackc/pgx/v5: v5.7.2 → v5.7.5
• github.com/jellydator/ttlcache/v3: v3.3.0 → v3.4.0
• github.com/jhump/protoreflect: v1.16.0 → v1.17.0
• github.com/jonboulle/clockwork: v0.4.0 → v0.5.0
• github.com/lestrrat-go/blackmagic: v1.0.2 → v1.0.3
• github.com/lestrrat-go/jwx/v2: v2.1.4 → v2.1.6
• github.com/lufia/plan9stats: 115f729 → 8bc96cf
• github.com/magiconair/properties: v1.8.9 → v1.8.10
• github.com/mattn/go-colorable: v0.1.13 → v0.1.14
• github.com/mattn/go-sqlite3: v1.14.24 → v1.14.28
• github.com/maxbrunsfeld/counterfeiter/v6: v6.11.2 → v6.11.3
• github.com/moby/sys/user: v0.3.0 → v0.4.0
• github.com/olekukonko/tablewriter: v0.0.5 → v1.0.9
• github.com/onsi/ginkgo/v2: v2.22.2 → v2.23.4
• github.com/onsi/gomega: v1.36.2 → v1.37.0
• github.com/open-policy-agent/opa: v1.1.0 → v1.5.1
• github.com/opencontainers/runc: v1.2.6 → v1.3.0
• github.com/opencontainers/runtime-tools: f7e3563 → 0ea5ed0
• github.com/opencontainers/selinux: v1.11.1 → v1.12.0
• github.com/pelletier/go-toml/v2: v2.2.3 → v2.2.4
• github.com/philhofer/fwd: fbbf495 → 20a13a1
• github.com/pkg/sftp: v1.13.7 → v1.13.9
• github.com/power-devops/perfstat: c35f1ee → 82ca368
• github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring: v0.81.0 → v0.84.1
• github.com/prometheus/client_golang: v1.22.0 → v1.23.0
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.65.0
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• github.com/redis/go-redis/v9: v9.7.0 → v9.7.3
• github.com/rogpeppe/go-internal: a5dc8ff → v1.14.1
• github.com/seccomp/libseccomp-golang: v0.10.0 → v0.11.1
• github.com/sigstore/cosign/v2: v2.5.0 → v2.5.2
• github.com/sigstore/fulcio: v1.6.6 → v1.7.1
• github.com/sigstore/protobuf-specs: v0.4.1 → v0.4.3
• github.com/sigstore/rekor: v1.3.9 → v1.3.10
• github.com/sigstore/sigstore-go: v0.7.1 → v1.0.0
• github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.9.1 → v1.9.5
• github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.9.1 → v1.9.5
• github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.9.1 → v1.9.5
• github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.9.1 → v1.9.5
• github.com/sigstore/sigstore: v1.9.1 → v1.9.5
• github.com/sigstore/timestamp-authority: v1.2.5 → v1.2.8
• github.com/skeema/knownhosts: v1.3.0 → v1.3.1
• github.com/sylabs/sif/v2: v2.20.2 → v2.21.1
• github.com/tchap/go-patricia/v2: v2.3.2 → v2.3.3
• github.com/theupdateframework/go-tuf/v2: v2.0.2 → v2.1.1
• github.com/tink-crypto/tink-go/v2: v2.3.0 → v2.4.0
• github.com/tinylib/msgp: v1.2.1 → v1.2.5
• github.com/tklauser/go-sysconf: v0.3.12 → v0.3.15
• github.com/tklauser/numcpus: v0.6.1 → v0.10.0
• github.com/urfave/cli/v2: v2.27.6 → v2.27.7
• github.com/urfave/cli: v1.22.16 → v1.22.17
• github.com/vbatts/tar-split: v0.11.7 → v0.12.1
• github.com/vbauerster/mpb/v8: v8.9.1 → v8.10.2
• github.com/vektah/gqlparser/v2: v2.5.19 → v2.5.26
• github.com/vishvananda/netlink: v1.3.0 → v1.3.1
• github.com/vishvananda/netns: v0.0.4 → v0.0.5
• gitlab.com/gitlab-org/api/client-go: v0.127.0 → v0.130.1
• go.etcd.io/bbolt: v1.3.11 → v1.4.2
• go.etcd.io/etcd/api/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/client/pkg/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/client/v2: v2.305.17 → v2.305.21
• go.etcd.io/etcd/client/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/etcdctl/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/etcdutl/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/pkg/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/raft/v3: v3.5.17 → v3.5.21
• go.etcd.io/etcd/server/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/tests/v3: v3.5.17 → v3.6.0
• go.etcd.io/etcd/v3: v3.5.17 → v3.6.0
• go.opentelemetry.io/collector/component: v0.104.0 → v1.27.0
• go.opentelemetry.io/collector/pdata/pprofile: v0.104.0 → v0.121.0
• go.opentelemetry.io/collector/pdata: v1.11.0 → v1.27.0
• go.opentelemetry.io/collector/semconv: v0.104.0 → v0.123.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.36.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.59.0 → v0.61.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.59.0 → v0.61.0
• go.opentelemetry.io/contrib/propagators/aws: v1.35.0 → v1.36.0
• go.opentelemetry.io/contrib/propagators/b3: v1.35.0 → v1.36.0
• go.opentelemetry.io/contrib/propagators/jaeger: v1.35.0 → v1.36.0
• go.opentelemetry.io/contrib/propagators/ot: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.33.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.35.0 → v1.36.0
• go.opentelemetry.io/otel/metric: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.37.0
• go.opentelemetry.io/otel/sdk: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel/trace: v1.35.0 → v1.37.0
• go.opentelemetry.io/otel: v1.35.0 → v1.37.0
• go.opentelemetry.io/proto/otlp: v1.5.0 → v1.6.0
• go.step.sm/crypto: v0.60.0 → v0.66.0
• go.uber.org/mock: v0.5.0 → v0.5.2
• golang.org/x/crypto: v0.37.0 → v0.41.0
• golang.org/x/exp: 7d7fa50 → 7e4ce0a
• golang.org/x/mod: v0.24.0 → v0.27.0
• golang.org/x/net: v0.39.0 → v0.43.0
• golang.org/x/oauth2: v0.29.0 → v0.30.0
• golang.org/x/sync: v0.13.0 → v0.16.0
• golang.org/x/sys: v0.32.0 → v0.35.0
• golang.org/x/telemetry: bda5523 → 8d8967a
• golang.org/x/term: v0.31.0 → v0.34.0
• golang.org/x/text: v0.24.0 → v0.28.0
• golang.org/x/time: v0.11.0 → v0.12.0
• golang.org/x/tools: v0.30.0 → v0.35.0
• gomodules.xyz/jsonpatch/v2: v2.4.0 → v2.5.0
• google.golang.org/api: v0.227.0 → v0.237.0
• google.golang.org/genproto/googleapis/api: a0af3ef → 8d1bb00
• google.golang.org/genproto/googleapis/bytestream: e70fdf4 → 513f239
• google.golang.org/genproto/googleapis/rpc: e70fdf4 → 8d1bb00
• google.golang.org/genproto: a0af3ef → f936aa4
• google.golang.org/grpc: v1.71.1 → v1.75.0
• google.golang.org/protobuf: v1.36.6 → v1.36.7
• gopkg.in/DataDog/dd-trace-go.v1: v1.72.1 → v1.74.0
• k8s.io/api: v0.32.3 → v0.33.4
• k8s.io/apiextensions-apiserver: v0.32.2 → v0.33.2
• k8s.io/apimachinery: v0.32.3 → v0.33.4
• k8s.io/apiserver: v0.32.2 → v0.33.2
• k8s.io/cli-runtime: v0.32.3 → v0.33.4
• k8s.io/client-go: v0.32.3 → v0.33.4
• k8s.io/code-generator: v0.32.2 → v0.33.2
• k8s.io/component-base: v0.32.2 → v0.33.2
• k8s.io/gengo/v2: 2b36238 → 1244d31
• k8s.io/kms: v0.32.2 → v0.33.2
• k8s.io/kube-openapi: 2c72e55 → c8a335a
• k8s.io/utils: 24370be → 4c0f3b2
• kernel.org/pub/linux/libs/security/libcap/cap: v1.2.73 → v1.2.76
• kernel.org/pub/linux/libs/security/libcap/psx: v1.2.73 → v1.2.76
• oras.land/oras-go/v2: v2.5.0 → v2.6.0
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.1 → v0.31.2
• sigs.k8s.io/controller-runtime: v0.20.4 → v0.21.0
• sigs.k8s.io/controller-tools: v0.17.3 → v0.18.0
• sigs.k8s.io/kustomize/api: v0.18.0 → v0.19.0
• sigs.k8s.io/kustomize/kyaml: v0.18.1 → v0.19.0
• sigs.k8s.io/release-utils: v0.11.1 → v0.12.1
• sigs.k8s.io/structured-merge-diff/v4: v4.5.0 → v4.7.0
• sigs.k8s.io/yaml: v1.4.0 → v1.6.0
• tags.cncf.io/container-device-interface: v0.8.0 → v1.0.1

Removed

• github.com/OneOfOne/xxhash: v1.2.8
• github.com/ProtonMail/go-crypto: afb1ddc
• github.com/bwesterb/go-ristretto: v1.2.3
• github.com/cloudflare/circl: v1.3.7
• github.com/containerd/containerd: v1.7.25
• github.com/goadesign/goa: v2.2.5+incompatible
• github.com/google/go-github/v55: v55.0.0
• github.com/google/tink/go: v1.7.0
• github.com/hashicorp/golang-lru: v1.0.2
• github.com/ostreedev/ostree-go: 719684c
• github.com/shirou/gopsutil/v3: v3.24.4
• github.com/shoenig/go-m1cpu: v0.1.6
• github.com/syndtr/gocapability: 42c35b4
• go.opentelemetry.io/collector/config/configtelemetry: v0.104.0
• goa.design/goa: v2.2.5+incompatible
• gopkg.in/cheggaaa/pb.v1: v1.0.28
• gopkg.in/square/go-jose.v2: v2.6.0
  Activity