Skip to content

chore(deps): update regex - #235

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/regex
Open

chore(deps): update regex#235
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/regex

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
aquasecurity/trivy minor v0.70.0 → v0.72.0
argoproj/argo-cd patch v3.4.3 → v3.4.6
eclipse-theia/theia-blueprint minor v1.71.101 → v1.73.100
hashicorp/terraform patch v1.15.5 → v1.15.8
helm/helm patch v4.2.0 → v4.2.3
kubernetes/kubernetes patch v1.36.1 → v1.36.3
kubevirt/kubevirt minor v1.8.2 → v1.9.0
tektoncd/cli patch v0.45.0 → v0.45.1
terraform-linters/tflint minor v0.62.1 → v0.64.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

aquasecurity/trivy (aquasecurity/trivy)

v0.72.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10907

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0720-2026-06-30

v0.71.2

Compare Source

Changelog

v0.71.1

Compare Source

Changelog

  • 164b383 release: v0.71.1 [release/v0.71] (#​10818)
  • a72d9a4 fix(oci): validate artifact filename
  • 3dd9847 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#​10825)
  • a62cbe4 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#​10821)
  • 43d1d26 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#​10812)
  • ac7696c ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#​10815)

v0.71.0

Compare Source

⚡ Highlights ⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/10767

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0710-2026-06-01

argoproj/argo-cd (argoproj/argo-cd)

v3.4.6

Compare Source

v3.4.5

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes
Dependency updates

Full Changelog: argoproj/argo-cd@v3.4.4...v3.4.5

v3.4.4

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes
Other work

Full Changelog: argoproj/argo-cd@v3.4.3...v3.4.4

eclipse-theia/theia-blueprint (eclipse-theia/theia-blueprint)

v1.73.100

Compare Source

v1.72.300

Compare Source

hashicorp/terraform (hashicorp/terraform)

v1.15.8

Compare Source

1.15.8 (July 8, 2026)

BUG FIXES:

  • Fix terraform init error when installing providers sourced from a service-discovery alias advertised by the configured backend (such as localterraform.com)

NOTES:

  • command/init: Provider installation was changed to enable future enhancements in the area. This effectively reverses the log message changes from v1.15. initializing_provider_plugin_message is being re-introduced to replace the short-lived two message types initializing_provider_plugin_from_config_message & initializing_provider_plugin_from_state_message. The change should not have any significant end-user impact aside from the command output. (#​38838)

  • command/init: Provider installation was changed to enable future enhancements in the area. This partially reverses the init event order changes from v1.15; module installation will now occur after the backend is initialized. The change should not have any significant end-user impact aside from the command output. (#​38838)

v1.15.7

Compare Source

1.15.7 (June 24, 2026)

BUG FIXES:

  • Add concurrency safety to configs.Parser and SourceBundleParser (#​38745)

  • Fix submodule variable validation during init (#​38770)

v1.15.6

Compare Source

1.15.6 (June 10, 2026)

BUG FIXES:

  • Fixed an issue where resources being removed from state via removed block were incorrectly listed under planned_values in json representations of the plan file. (#​38665)

  • console: Fixed a panic caused by evaluating an expression involving deprecated values (#​38676)

  • Fix exit code for plan, query, and refresh commands for variable-related errors (#​38685)

  • Fix two module installation edge cases with null and sensitive/ephemeral module sources (#​38704)

helm/helm (helm/helm)

v4.2.3

Compare Source

v4.2.2: Helm v4.2.2

Compare Source

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32214
Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881c (George Jenkins)

Full Changelog: helm/helm@v4.2.1...v4.2.2

v4.2.1: Helm v4.2.1

Compare Source

Helm v4.2.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #​31925
  • Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #​32056
  • Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #​31757
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #​32081
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #​32153
  • Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 #​32128
  • Dependency updates

Installation and Upgrading

Download Helm v4.2.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#​31925) d591a19 (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#​32056) 2a9fcae (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 ffa5bd6 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 9f9dbaf (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 64a2891 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 e54a4a2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 acb762b (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 768586d (dependabot[bot])
  • fix(version): avoid false range detection on prerelease x/X eabfae5 (Benoit Tigeot)
  • fix(version): version range || can has no space e3fd51f (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg 1e47395 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints a33e239 (Benoit Tigeot)
  • fix(kube): always propagate context.Canceled in WaitForDelete fa06d44 (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 360d483 (Terry Howe)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 7651edf (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 b132e7e (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 eee491a (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 3e3c575 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 c4ce2bb (dependabot[bot])
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 3892dc2 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 c4bbb62 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 a0d7f16 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 8a3de05 (dependabot[bot])
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 57a4803 (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b33ae02 (dependabot[bot])

Full Changelog: helm/helm@v4.2.0...v4.2.1

kubernetes/kubernetes (kubernetes/kubernetes)

v1.36.3

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.36.2

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubevirt/kubevirt (kubevirt/kubevirt)

v1.9.0

Compare Source

tag v1.9.0
Tagger: Luboslav Pivarc lpivarc@redhat.com

This release follows v1.8.4 and consists of 1653 changes, contributed by 108 people, leading to 2195 files changed, 209726 insertions(+), 38785 deletions(-).
v1.9.0 is a promotion of release candidate v1.9.0-rc.2 which was originally published 2026-07-28
The source code and selected binaries are available for download at: https://github.com/kubevirt/kubevirt/releases/tag/v1.9.0.

The primary release artifact of KubeVirt is the git tree. The release tag is
signed and can be verified using git tag -v v1.9.0.

Pre-built containers are published on Quay and can be viewed at: https://quay.io/kubevirt/.

Notable changes

  • [PR #​18567][kubevirt-bot] Bug fix: Expose VFIO cdev devices (/dev/vfio/devices/vfioN) to virt-launcher containers, fixing IOMMUFD-based GPU passthrough on ARM64 systems with SMMUv3.
  • [PR #​18532][kubevirt-bot] virt-launcher pods get cleaned up along with migration objects
  • [PR #​18539][kubevirt-bot] BugFix: hotplug volume detach deadlock when VMIs exchange RWO PVCs between attachment pods.
  • [PR #​18507][kubevirt-bot] Fixed missing validation for network interface bindings: interfaces with no binding or multiple bindings are now rejected at admission instead of failing silently at runtime.
  • [PR #​18466][kubevirt-bot] Network binding plugin sidecars can now infer their registration name using the NETWORK_BINDING_PLUGIN_NAME environment variable.
  • [PR #​18438][iholder101] Bug fix: VMs with NFS-backed storage are no longer incorrectly restarted during temporary NFS unavailability (e.g., NFS server failover).
  • [PR #​18446][kubevirt-bot] vep-10: move GPUsWithDRA and HostDevicesWithDRA to beta
  • [PR #​18445][kubevirt-bot] Add E2E tests support for DRA feature.
  • [PR #​18433][kubevirt-bot] Network conformance tests can now be run with a custom network binding plugin via the --primary-network-binding-plugin test flag.
  • [PR #​18412][kubevirt-bot] Set explicit SMMUv3 address capability defaults for Grace I/O Virtualization.
  • [PR #​18404][kubevirt-bot] The kubevirt_vmi_guest_os_panic_total metric is now emitted
  • [PR #​18405][kubevirt-bot] BugFix: Importer pod rejected by ValidatingAdmissionPolicy 'kubevirt-plugin-sidecar-subpath-policy'
  • [PR #​18331][kubevirt-bot] Live migration data stream can be compressed now by using .spec.experimental.compression field in MigrationPolicy applied to a set of VMs. Currently only "zstd" algorithm is supported.
  • [PR #​18356][kubevirt-bot] Support inferFromVolume for VolumeSnapshot-backed DataVolumes, DataVolumeTemplates, and DataSources
  • [PR #​18343][kubevirt-bot] Bug fix: PreferredPanicDeviceModel now creates a panic device when none exist on the VMI, instead of silently ignoring the preference.
  • [PR #​18299][lyarwood] Bug fix: Increase IOMMUFD socket accept timeout from 60 seconds to 15 minutes to prevent silent fallback to legacy VFIO on environments with slow container image pulls.
  • [PR #​18095][fra2404] Add PortRanges support for masquerade interfaces (Alpha, guarded by PortRangesSpec feature gate)
  • [PR #​18011][fanzhangio] When the alpha GraceIOVirtualization feature gate is enabled, KubeVirt now configures NVIDIA Grace GPU passthrough with SMMUv3/IOMMUFD, ACPI Generic Initiator NUMA topology, NUMA distance mapping, and automatic PCI 64-bit hole sizing.
  • [PR #​18048][alancaldelas] WorkloadEncryptionSEV graduated from Alpha -> Beta
  • [PR #​18216][awels] BugFix: Fixes bug in cancelling of decentralized live migration not removing finalizer from migration resource
  • [PR #​18004][avlitman] Add VMNonRecoverableOSPanic alert
  • [PR #​18065][0xFelix] The Template feature gate has been graduated to Beta and is now enabled by default. Virt-template components are deployed automatically unless explicitly disabled.
  • [PR #​18116][brianmcarey] Build KubeVirt with go 1.26.4
  • [PR #​18161][machadovilaca] Add kubevirt_vmi_gpu_info metric to correlate GPU UUIDs with VMIs
  • [PR #​17837][keinsword] Nebius is listed as an adopter of KubeVirt since 2023.
  • [PR #​17846][ksimon1] virt-api: add X-Content-Type-Options: nosniff security header
  • [PR #​18101][dsanatar] Remove ephemeral hotplug volume metric and alert
  • [PR #​18082][alromeros] Expose FS freeze status early in VirtualMachineBackup
  • [PR #​18252][kubevirt-bot] Updated virt-template to v0.2.2
  • [PR #​18198][orenc1] VEP-160: Graduate OptOutRoleAggregation feature gate to Beta
  • [PR #​18112][xpivarc] SRIOV vGPU now supports display
  • [PR #​17199][lyarwood] Add CrossArchitectureVirtualization Alpha feature gate enabling cross-architecture VM execution. When enabled, VMs can run on nodes with a different architecture (e.g. ARM64 guest on AMD64 host) via QEMU TCG software emulation. The scheduler prefers native-arch nodes and falls back to cross-arch emulation when unavailable. The feature gate is designed to accommodate future hardware-accelerated backends (e.g. SAE) under the same gate.
  • [PR #​18102][iholder101] Plugin sidecars can now mutate the libvirt domain XML via gRPC domain hooks, enabling arbitrary domain customization through sidecar containers injected alongside virt-launcher pods.
  • [PR #​18103][orelmisan] Fix infinite migration target pod loop caused by stale VMI MigrationState when the target pod fails after preparation.
  • [PR #​18141][machadovilaca] Skip PrometheusRule generation when VMStatsCollector is enabled
  • [PR #​17818][fossedihelm] MigrationPriorityQueue feature gate has been promoted to GA.
  • [PR #​18228][kubevirt-bot] Updated common-instancetypes bundles to v1.7.0
  • [PR #​17540][orenc1] Add RBAC role aggregation upgrade e2e test
  • [PR #​18220][0xFelix] Updated virt-template to v0.2.1
  • [PR #​17770][jschintag] IBM Secure Execution is now generally available
  • [PR #​18188][machadovilaca] Add VMStatsHandler with HTTP endpoint for VM stats collection
  • [PR #​18032][0xFelix] Add VirtualMachineTemplate as a source kind for OCI export via VMExport.
  • [PR #​18001][iholder101] Add node lifecycle hooks for the plugin framework, enabling plugins to run callbacks at VM start/stop and migration phases (alpha, behind Plugins feature gate).
  • [PR #​17998][fanzhangio] VMIs requesting NVIDIA Grace GPU PCI passthrough resources are now validated by admission. Such VMIs require the GraceIOVirtualization, PCINUMAAwareTopology, and IOMMUFD feature gates, arm64 architecture, the virt machine type, and dedicated CPU placement; ambiguous NVIDIA wildcard PCI selectors are rejected when GraceIOVirtualization is enabled.
  • [PR #​17886][fanzhangio] PCI NUMA-aware placement (PCINUMAAwareTopology) now fails with an error for VMIs using numa.guestMappingPassthrough when a host device cannot be placed on a NUMA-aligned PCIe topology. Non-passthrough VMIs retain the existing fallback behavior.
  • [PR #​17544][Aseeef] Adds a robust migration stall detection mechanism that triggers post-copy or stop-and-copy opportunistically at local minimas reducing both total migration duration and downtime.
  • [PR #​18105][keinsword] BugFix: fixed hotplug mount resolution when multiple attachment pods exist for volumes from the same underlying device, and prevented virt-handler from reusing one hotplug volume's source pod UID for later volumes in the same sync loop.
  • [PR #​17664][ksimon1] feat: Add annotation-based GuestAgentPing probe pausing
  • [PR #​18129][iholder101] Fixed missing RBAC rules for plugin.kubevirt.io in the kubevirt.io:view ClusterRole, restoring cluster-reader access to Plugin resources.
  • [PR #​17910][jcanocan] virtctl: updated virt-template subcomands to v1beta1
  • [PR #​18143][akalenyu] BugFix: Storage Live Migration Filesystem-to-Block fails with libvirt error Code 84 pre-creation of storage target for incremental storage migration of disk is not supported
  • [PR #​18090][Acedus] VirtualMachineBackups now consist of only 3 conditions: Progressing, Complete, and Failed, with matching reasons to replace the now removed Initializing, ExportInitiated, ExportReady, Aborting and Done.
  • [PR #​17861][mhenriks] VEP 250: Add serviceAccountName to VirtualMachineInstance Spec
  • [PR #​17960][dsanatar] Fix the virtctl image-upload command token expiry issue by refreshing the token.
  • [PR #​17976][ethan-gallant] virt-operator: customizeComponents.Patches now apply to the install-strategy job (match it with resourceType "Job" and resourceName "virt-operator-install-strategy"). The job's generated name changed from "kubevirt--job" to "virt-operator-install-strategy-".
  • [PR #​17505][alromeros] Enable live migration for VMs with SCSI persistent reservations
  • [PR #​17956][fossedihelm] Add IOMMUFD device plugin to virt-handler behind the IOMMUFD Alpha feature gate. When enabled, virt-controller requests devices.kubevirt.io/iommufd for every launcher pod. Nodes without /dev/iommu (kernel <6.2) will report unhealthy devices, making pods unschedulable there. This feature also emits domain-level and uses virDomainFDAssociate, which require a libvirt/QEMU stack that supports fdgroup-based IOMMUFD, currently libvirt >= 12.2. Enable this gate only on clusters where target nodes and virt-launcher images provide compatible kernel, libvirt, and QEMU support.
  • [PR #​17993][Acedus] BugFix: Live migration with CBT and RWO backend storage now correctly retains checkpoints post-migration
  • [PR #​17623][MarSik] The RebootPolicy feature was graduated to Beta status.
  • [PR #​17422][jean-edouard] Libvirt bumped to v11.10
  • [PR #​17891][vladikr] Add foundation types for Grace IO Virtualization: GraceIOVirtualization feature gate, IOMMU domain XML schema, HostDevice IOMMU/ACPI extensions, and NUMACell pointer change for zero-memory cells.
  • [PR #​17897][iholder101] Added CEL-based domain hook evaluation for the structured plugin system (alpha, behind Plugins feature gate).
  • [PR #​17551][jschintag] Allow configuring launch security via preference.
  • [PR #​17923][alaypatel07] vep-10: add dra packages to lint configuration and fix linter errors
  • [PR #​16990][lyarwood] Migrated port-forwarding and remote exec from hardcoded SPDY to WebSocket-primary with SPDY fallback, fixing intermittent stream creation failures against Kubernetes 1.31+ clusters where the PortForwardWebsockets feature gate is enabled.
  • [PR #​18076][jcanocan] Updated virt-template to v0.2.0
  • [PR #​18052][vidit-bhat] Fixed a build failure in pkg/hypervisor on GOOS/GOARCH combinations outside linux/{amd64,arm64,s390x}, which previously prevented downstream packagers from cross-building virtctl on architectures such as riscv64, ppc64le, and 386. On those architectures, common.SchedSetScheduler now returns the new sentinel error common.ErrUnsupportedRTScheduling.
  • [PR #​17996][ksimon1] virt-operator: fix DeploymentInProgress after toggling optional feature gates
  • [PR #​17984][Acedus] Incremental backups now distinguish discarded blocks from data changes by merging base:allocation and qemu:dirty-bitmap contexts, reducing transfer size by skipping dirty extents that read as zero.
  • [PR #​17845][orelmisan] Network binding plugins can now read the interface MTU from the network-info downward API annotation.
  • [PR #​17809][michalskrivanek] cgroup v1 support is deprecated now, with removal planned for the next release
  • [PR #​17797][alaypatel07] vep-10: migrate away from k8sv1.PodResourceClaim to kubevirts own type
  • [PR #​17790][iholder101] Introduce the Plugin CRD (plugin.kubevirt.io/v1alpha1) behind the Plugins feature gate (Alpha), enabling declarative VM extension via domain hooks, node hooks, and admission references (VEP-190).
  • [PR #​17947][Barakmor1] Use --expand-cpu-features and --supported-cpu-features in node-labeller for
  • [PR #​17944][0xFelix] Add OCI artifact export support behind the OCIExport feature gate. Use virtctl vmexport download --format=oci to export a VM as an OCI image layout TAR.
  • [PR #​17989][UdayYendva] Bump github.com/moby/spdystream from v0.5.0 to v0.5.1 to address CVE-2026-35469 (GHSA-pc3f-x583-g7j2).
  • [PR #​16599][dasionov] Promote VideoConfig FG to General Availability
  • [PR #​17661][oshoval] Add alpha support for DRA SR-IOV networks via spec.networks[].resourceClaim behind NetworkDevicesWithDRA, with webhook validation and virt-launcher hostdev generation from DRA metadata.
  • [PR #​16932][dsanatar] Graduate HotplugVolumes and DeclarativeHotplugVolumes to Beta
  • [PR #​17883][yaroslavborbat] Fixed a target-side hotplug mount leak that could remain after failed or canceled live migration.
  • [PR #​17836][iholder101] Add kubevirt_vmi_guest_os_panic_total Prometheus counter metric to track guest OS panic events per VMI, with labels for panic type and hyper-v bugcheck code
  • [PR #​17959][mhenriks] Fix symlink traversal in VMExport dir handler
  • [PR #​16674][akalenyu] Persistent Reservation GA
  • [PR #​17550][machadovilaca] Add GetVMStats unified gRPC RPC for monitoring data collection
  • [PR #​17757][Acedus] Fix: Handle disks with qcow2 overlay in migration related code
  • [PR #​17825][akalenyu] BugFix: endless cycle of attachment pod deletion/creation
  • [PR #​17699][dsanatar] only populate vmexport with a vm manifest if source is not pvc
  • [PR #​17798][SamAlber] Fixed a gRPC connection leak in virt-handler's GetLauncherClient that caused unbounded memory growth, socket accumulation, and goroutine leaks when multipl

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency aquasecurity/trivy to v0.71.0 chore(deps): update regex Jun 2, 2026
@renovate
renovate Bot force-pushed the renovate/regex branch from b9960dd to 54fa15a Compare June 2, 2026 17:12
@renovate renovate Bot changed the title chore(deps): update regex chore(deps): update regex to v0.63.0 Jun 3, 2026
@renovate
renovate Bot force-pushed the renovate/regex branch from 54fa15a to 6945d95 Compare June 3, 2026 06:30
@renovate renovate Bot changed the title chore(deps): update regex to v0.63.0 chore(deps): update regex Jun 3, 2026
@renovate
renovate Bot force-pushed the renovate/regex branch 8 times, most recently from 87d8aaf to 80bfdac Compare June 9, 2026 02:44
@renovate
renovate Bot force-pushed the renovate/regex branch 12 times, most recently from c33da82 to ab55eb7 Compare June 19, 2026 04:15
@renovate
renovate Bot force-pushed the renovate/regex branch 5 times, most recently from 6a0dca5 to 5898cb2 Compare June 23, 2026 10:32
@renovate
renovate Bot force-pushed the renovate/regex branch 7 times, most recently from a4bf1e0 to a1f7132 Compare July 7, 2026 04:09
@renovate
renovate Bot force-pushed the renovate/regex branch 10 times, most recently from 322f5ff to fc77f4d Compare July 14, 2026 04:37
@renovate
renovate Bot force-pushed the renovate/regex branch 10 times, most recently from 0e6e9be to 241f32f Compare July 24, 2026 14:59
@renovate
renovate Bot force-pushed the renovate/regex branch 2 times, most recently from c667220 to d9c849e Compare July 27, 2026 05:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants