v3.19.0-rc.1

Notable Changes

• 🛡️OPA rego v1 syntax is available in Gatekeeper ConstraintTemplates. Find out more about OPA rego v1 here.
• 📤Updated Pub/Sub mechanism to generalized export mechanism to enable additional backends such as disk to export violations.

Features

• feat: gator test --deny-only flag (#3809) (Steeve)
• feat: Update Rego driver to support rego.v1 (#3873)(Charlie Egan]

Bug Fixes

• adding a comment to clean up disk space in runner (CP: 3877) (#3878) #3878 (Jaydip Gabani)
• Add flag to enable/disable referential constraints (#3701) (David Lee)
• bumping frameworks to fix GO-2025-3372 (#3810) (Jaydip Gabani)
• fixing nil pointer error when converting VAPB from v1beta1 to v1 (#3754) (Jaydip Gabani)
• parse namespace from oldObject when processing a DELETE operation (#3837) (Clément Nussbaumer)
• replace plus character with underscore in version label (#3742) (Filippo Rossi)

Documentation

• Add connect to operations (#3785) (Martin Alexander)
• Use markdown emphasize-syntax in demo documentation (#3786) (Sascha)
• addressing deny-only gator flag nits (#3870) (Jaydip Gabani)

Chores

• Prepare v3.19.0-rc.1 release (#3879) #3879 (github-actions[bot])
• update curlimages/curl to v8.12.0 (#3817) (Thomas Berreis)
• adding FAQs for multi-engine (#3761) (Jaydip Gabani)
• adding annotation to generate VAPB right away once the waiting window is over to protect against clock skews (#3773) (Jaydip Gabani)
• adding warning for alpha flags (#3764) (Jaydip Gabani)
• bump @babel/helpers from 7.17.8 to 7.26.10 in /website (#3856) (dependabot[bot])
• bump @babel/runtime from 7.18.6 to 7.26.10 in /website (#3855) (dependabot[bot])
• bump @babel/runtime-corejs3 from 7.18.6 to 7.26.10 in /website (#3848) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 (#3866) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 in /test/externaldata/dummy-provider (#3865) (dependabot[bot])
• bump distroless/static-debian12 from 5c7e2b4 to 3f2b64e in /test/externaldata/dummy-provider (#3775) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 3f2b64e (#3774) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 5c7e2b4 in /test/externaldata/dummy-provider (#3721) (dependabot[bot])
• bump frameworks and kube dep to 1.32.3 (#3873) (Jaydip Gabani)
• bump github.com/containerd/containerd from 1.7.25 to 1.7.27 (#3857) (dependabot[bot])
• bump github.com/golang/glog from 1.2.1 to 1.2.4 (#3802) (dependabot[bot])
• bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#3523) (dependabot[bot])
• bump github/codeql-action from 3.28.8 to 3.28.9 in the all group (#3813) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm (#3821) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /build/tooling (#3823) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/externaldata/dummy-provider (#3824) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/image (#3825) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 (#3793) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/externaldata/dummy-provider (#3794) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/image (#3791) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f (#3812) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /build/tooling (#3811) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/externaldata/dummy-provider (#3815) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/image (#3814) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 (#3727) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /build/tooling (#3726) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /test/externaldata/dummy-provider (#3730) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /build/tooling (#3834) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /test/image (#3835) (dependabot[bot])
• bump golang from b970e6d to d7d795d (#3844) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /build/tooling (#3841) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /test/externaldata/dummy-provider (#3843) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /test/image (#3852) (dependabot[bot])
• bump golang from d7d795d to fa1a01d (#3867) (dependabot[bot])
• bump golang from d7d795d to fa1a01d in /build/tooling (#3869) (dependabot[bot])
• bump golang from d7d795d to fa1a01d in /test/externaldata/dummy-provider (#3864) (dependabot[bot])
• bump golang from d7d795d to fa1a01d in /test/image (#3863) (dependabot[bot])
• bump golang from ef30001 to 2e83858 in /test/image (#3758) (dependabot[bot])
• bump golang from ef30001 to 3149bc5 in /build/tooling (#3805) (dependabot[bot])
• bump google.golang.org/protobuf from 1.36.3 to 1.36.5 (#3816) (dependabot[bot])
• bump http-proxy-middleware from 2.0.6 to 2.0.7 in /website (#3662) (dependabot[bot])
• bump kubectl from v1.31.2 to v1.32.0 (#3747) (dependabot[bot])
• bump kubectl from v1.32.0 to v1.32.1 (#3792) (dependabot[bot])
• bump kubectl from v1.32.1 to v1.32.2 (#3820) (dependabot[bot])
• bump prismjs from 1.28.0 to 1.30.0 in /website (#3845) (dependabot[bot])
• bump serialize-javascript from 6.0.0 to 6.0.2 in /website (#3819) (dependabot[bot])
• bump the all group across 1 directory with 5 updates (#3871) (dependabot[bot])
• bump the all group across 1 directory with 7 updates (#3796) (dependabot[bot])
• bump the all group with 2 updates (#3804) (dependabot[bot])
• bump the all group with 2 updates (#3826) (dependabot[bot])
• bump the all group with 2 updates (#3853) (dependabot[bot])
• bump the all group with 3 updates (#3801) (dependabot[bot])
• bump the all group with 3 updates (#3842) (dependabot[bot])
• bump the all group with 4 updates (#3833) (dependabot[bot])
• bump the all group with 6 updates (#3830) (dependabot[bot])
• bump the k8s group across 1 directory with 6 updates (#3790) (dependabot[bot])
• bump the k8s group with 5 updates (#3822) (dependabot[bot])
• bumping cert controller (#3874) (Jaydip Gabani)
• bumping frameworks/constraints to 9e57a57 (#3783) (Steeve)
• bumping net, crypto dep (#3766) (Jaydip Gabani)
• removing finalizers and controllerswitch (#3779) (Jaydip Gabani)
• removing unused function (#3838) (Jaydip Gabani)
• update opa v1 with v0 rego compat (#3798) (Sertaç Özercan)
• updating pubsub system (#3646) (Jaydip Gabani)
• allow changing the name of container in audit and controlle manager (#3759) (Huang Huang)