v3.16.0

Notable Changes

• 🐊 As previously announced, validate-template-rego flag, which was used to validate Rego for constraint templates, is removed in this release. Please make use of Gator to validate constraint template in shift left manner to avoid any impact with this behavior change.
• 🎓 Integration with Kubernetes Validating Admission Policy (VAP) is now alpha! We are working on changes to the Gatekeeper Policy Library to add CEL-based policies.

What's Changed

• chore: bump kubectl from v1.29.0 to v1.29.1 by @dependabot in #3232
• chore: bump golang from 6ac4c35 to adf7ccb in /build/tooling by @dependabot in #3233
• chore: bump golang from 6ac4c35 to adf7ccb in /test/image by @dependabot in #3231
• chore: bump golang from adf7ccb to 47fa179 in /build/tooling by @dependabot in #3238
• chore: bump golang from adf7ccb to 47fa179 in /test/image by @dependabot in #3236
• docs: add docs on how to contribute templates by @salaxander in #3242
• chore: Setting pubsub annotations using --set in makefile by @JaydipGabani in #3160
• fix: fixing panic in debug log by @JaydipGabani in #3244
• fix: fixing panic in error log by @JaydipGabani in #3246
• docs: add request input struct by @salaxander in #3234
• feat: Update audit and controller manager with pod labels in #3240
• ci: removing auto tagging workflow by @JaydipGabani in #3257
• chore: Prepare v3.16.0-beta.0 release by @github-actions in #3256
• ci: running ci with gatekeeper debug logs by @JaydipGabani in #3260
• fix: Remove validation of constraint template rego by @mzkhan in #3262
• ci: bump k8s matrix by @sozercan in #3267
• chore: bump kubectl from v1.29.1 to v1.29.2 by @dependabot in #3273
• chore: Upgrade controller-runtime to 0.17.2, remove fork by @maxsmythe in #3278
• ci: fix license lint by @sozercan in #3279
• fix #3261 Sort constraint status audit results by @prachirp in #3277
• chore: bump the k8s group with 4 updates by @dependabot in #3280
• chore: bump oras.land/oras-go from 1.2.4 to 1.2.5 by @dependabot in #3239
• chore: bump the all group with 10 updates by @dependabot in #3281
• feat: add disableAudit helm option by @DorB-P in #3270
• chore: bump cloud.google.com/go/trace from 1.10.4 to 1.10.5 by @dependabot in #3254
• feat: vap generation by @ritazh in #3266
• ci: pointing to correct versioned yaml on website creation by @JaydipGabani in #3258
• chore: bump the all group with 4 updates by @dependabot in #3292
• docs: document constraint match.source by @sozercan in #3291
• fix: update unit test for vap generation; add custom assets for envtest by @ritazh in #3289
• chore: bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #3301
• fix: fixing metrics views by @JaydipGabani in #3307
• chore: bump kubectl from v1.29.2 to v1.29.3 by @dependabot in #3317
• chore: bump the k8s group with 4 updates by @dependabot in #3318
• chore: bump the all group with 4 updates by @dependabot in #3313
• chore: bump follow-redirects from 1.15.4 to 1.15.6 in /website by @dependabot in #3316
• chore: bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #3285
• chore: Prepare v3.16.0-beta.1 release by @github-actions in #3306
• fix: store constraint status audit results in sorted order by @prachirp in #3293
• chore: bump github.com/docker/docker from 25.0.1+incompatible to 25.0.2+incompatible by @dependabot in #3324
• chore: bump cloud.google.com/go/trace from 1.10.5 to 1.10.6 by @dependabot in #3319
• chore: bump frameworks to 359cf1b by @sozercan in #3326
• chore: bump github.com/docker/docker from 25.0.2+incompatible to 25.0.5+incompatible by @dependabot in #3327
• docs: fix go install gator by @sozercan in #3325
• chore: bump webpack-dev-middleware from 5.3.1 to 5.3.4 in /website by @dependabot in #3332
• chore: bump express from 4.18.1 to 4.19.2 in /website by @dependabot in #3334
• feat: enable vap in helm by @ritazh in #3329
• docs: update opa version in readme by @ritazh in #3330
• fix: over-restrictive validation of wildcard match patterns by @bencouture in #3310
• chore: bump to go 1.22 bookworm by @sozercan in #3323
• chore: update lint by @sozercan in #3338
• feat: Enable toggling of deferring to VAP by @maxsmythe in #3335
• feat(helm): matchConditions added in Validating & MutatingWebhookConfiguration by @leewoobin789 in #3343
• chore: Prepare v3.16.0-beta.2 release by @github-actions in #3344
• [StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #3351
• chore: fix GO-2024-2687 by @sozercan in #3350
• docs: correcting metrics names by @JaydipGabani in #3353
• docs: add vap generation doc and demo by @ritazh in #3363
• chore: bump frameworks to c2efb0 by @sozercan in #3366
• chore: Prepare v3.16.0-rc.0 release by @github-actions in #3369
• chore: Prepare v3.16.0 release by @github-actions in #3375

New Contributors

• @mzkhan made their first contribution in #3262
• @DorB-P made their first contribution in #3270
• @bencouture made their first contribution in #3310

Full Changelog: v3.15.0...v3.16.0