v0.18.1

This release corresponds to Gatekeeper v3.20.1.

What's Changed

• Change SemanticEqual to include annotations for constraint caching by @nreisch in #606

Full Changelog: v0.18.0...v0.18.1

v0.18.0

This release corresponds to Gatekeeper v3.20.0.

What's Changed

• chore: bump golang.org/x/net from 0.37.0 to 0.38.0 in /constraint by @dependabot[bot] in #541
• chore: bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /constraint by @dependabot[bot] in #544
• chore: bump golang from fa1a01d to 75e6700 in /constraint by @dependabot[bot] in #543
• chore: bump the all group across 1 directory with 3 updates by @dependabot[bot] in #545
• chore: bump golang from 75e6700 to e719692 in /constraint by @dependabot[bot] in #546
• chore: bump golang.org/x/net from 0.38.0 to 0.39.0 in /constraint by @dependabot[bot] in #548
• chore: bump golang from e719692 to 00eccd4 in /constraint by @dependabot[bot] in #547
• chore: bump github/codeql-action from 3.28.14 to 3.28.15 in the all group by @dependabot[bot] in #549
• chore: bump codecov/codecov-action from 5.4.0 to 5.4.2 in the all group by @dependabot[bot] in #550
• chore: bump the all group with 2 updates by @dependabot[bot] in #551
• chore: bump the k8s group in /constraint with 3 updates by @dependabot[bot] in #552
• chore: bumping go in CI and fixing test errors by @JaydipGabani in #560
• chore: bump the all group across 1 directory with 4 updates by @dependabot[bot] in #561
• chore: bump golang.org/x/net from 0.39.0 to 0.40.0 in /constraint by @dependabot[bot] in #559
• chore: bump github.com/golang/glog from 1.2.4 to 1.2.5 in /constraint by @dependabot[bot] in #556
• chore: bump github.com/open-policy-agent/opa from 1.3.0 to 1.4.2 in /constraint by @dependabot[bot] in #555
• chore: bump the k8s group in /constraint with 3 updates by @dependabot[bot] in #562
• chore: bump golang from 00eccd4 to 404aa93 in /constraint by @dependabot[bot] in #554
• chore: bump ossf/scorecard-action from 2.4.1 to 2.4.2 in the all group by @dependabot[bot] in #565
• chore: bump golang from 89a04cc to 573d865 in /constraint by @dependabot[bot] in #563
• chore: bump github.com/open-policy-agent/opa from 1.4.2 to 1.5.0 in /constraint by @dependabot[bot] in #566
• chore: bump golang from 29d9726 to c83619b in /constraint by @dependabot[bot] in #567
• chore: bump golang.org/x/net from 0.40.0 to 0.41.0 in /constraint by @dependabot[bot] in #569
• chore: bump github/codeql-action from 3.28.18 to 3.28.19 in the all group by @dependabot[bot] in #568
• chore: bump golang from c83619b to 5d170d8 in /constraint by @dependabot[bot] in #570
• chore: bump sigs.k8s.io/controller-runtime from 0.20.4 to 0.21.0 in /constraint in the k8s group by @dependabot[bot] in #564
• chore: bump golang from 5d170d8 to ee7ff13 in /constraint by @dependabot[bot] in #571
• chore: bump the all group with 2 updates by @dependabot[bot] in #572
• chore: bump the k8s group in /constraint with 3 updates by @dependabot[bot] in #573

Full Changelog: v0.17.0...v0.18.0

v0.17.0

This release corresponds to Gatekeeper v3.19.3.

What's Changed

• chore: bump the all group across 1 directory with 6 updates by @dependabot[bot] in #503
• targetEnforcementAction key should take care of the object kind by @WnP in #510
• chore: update opa v1 with v0 rego compat by @sozercan in #518
• fix: fixing GO-2025-3372 vuln by @JaydipGabani in #524
• chore: bump the all group across 1 directory with 5 updates by @dependabot[bot] in #525
• chore: bump step-security/harden-runner from 2.10.4 to 2.11.0 in the all group by @dependabot[bot] in #529
• chore: bump the all group with 3 updates by @dependabot[bot] in #530
• chore: bump codecov/codecov-action from 5.3.1 to 5.4.0 in the all group by @dependabot[bot] in #532
• chore: bump github/codeql-action from 3.28.10 to 3.28.11 in the all group by @dependabot[bot] in #534
• constraint: Update Rego driver to support rego.v1 by @charlieegan3 in #517
• chore: bump the all group with 3 updates by @dependabot[bot] in #538
• chore: bump github.com/spf13/pflag from 1.0.5 to 1.0.6 in /constraint by @dependabot[bot] in #523
• chore: bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in /constraint by @dependabot[bot] in #527
• chore: bump golang.org/x/net from 0.34.0 to 0.37.0 in /constraint by @dependabot[bot] in #536
• chore: updating linting version by @JaydipGabani in #539
• chore: bump github.com/onsi/gomega from 1.33.1 to 1.36.3 in /constraint by @dependabot[bot] in #537
• chore: bump github.com/open-policy-agent/opa from 1.1.0 to 1.2.0 in /constraint by @dependabot[bot] in #531
• chore: bump golang from 1.23-bookworm to 1.24-bookworm in /constraint by @dependabot[bot] in #526
• chore: bump the k8s group across 1 directory with 5 updates by @dependabot[bot] in #533
• chore: bumping opa to 1.3.0 by @JaydipGabani in #540

New Contributors

• @WnP made their first contribution in #510
• @charlieegan3 made their first contribution in #517

Full Changelog: v0.16.0...v0.17.0

v0.16.0

This release corresponds to Gatekeeper v3.18.3.

What's Changed

• chore: bump github.com/open-policy-agent/opa from 0.67.0 to 0.68.0 in /constraint by @dependabot[bot] in #472
• chore: bump golang.org/x/net from 0.27.0 to 0.29.0 in /constraint by @dependabot[bot] in #475
• chore: bump the all group across 1 directory with 7 updates by @dependabot[bot] in #482
• chore: bump the all group with 3 updates by @dependabot[bot] in #484
• chore: bump golang.org/x/net from 0.29.0 to 0.30.0 in /constraint by @dependabot[bot] in #483
• chore: renaming gatekeeper ci test to add informative by @JaydipGabani in #479
• chore: bump golang from 1.22-bookworm to 1.23-bookworm in /constraint by @dependabot[bot] in #468
• feat: remove cel driver from framework by @abhipatnala in #486

New Contributors

• @abhipatnala made their first contribution in #486

Full Changelog: v0.15.0...v0.16.0

v0.15.0

This release corresponds to Gatekeeper v3.17.2.

What's Changed

• chore: adding generateVAP field on template by @JaydipGabani in #427
• chore: refactoring errors in cel engine schema by @JaydipGabani in #448
• fix: Unset Object on DELETE requests when using the VAP driver by @maxsmythe in #449
• chore: bump the all group across 1 directory with 8 updates by @dependabot[bot] in #452
• chore: bump golang.org/x/net from 0.25.0 to 0.27.0 in /constraint by @dependabot[bot] in #451
• chore: bump github.com/spf13/cobra from 1.8.0 to 1.8.1 in /constraint by @dependabot[bot] in #444
• chore: bump github.com/open-policy-agent/opa from 0.64.1 to 0.66.0 in /constraint by @dependabot[bot] in #447
• feat: adding scopedenforcementactions by @JaydipGabani in #403
• chore: bump golang from b03f3ba to 5c56bd4 in /constraint by @dependabot[bot] in #434
• chore: bumping opa 0.66.0 to 0.67.0 by @JaydipGabani in #459
• Use k8s client lib v0.30.1 by @tamalsaha in #435
• chore: updating to use 0.30.3 k8s client by @JaydipGabani in #461

New Contributors

• @tamalsaha made their first contribution in #435

Full Changelog: v0.14.0...v0.15.0

v0.14.0

This release corresponds to Gatekeeper v3.16.3.

What's Changed

• Create VAP binding objects; update semantic equals to include labels by @maxsmythe in #386
• chore: bump the all group with 2 updates by @dependabot[bot] in #382
• fix: add matchConstraints to vap by @ritazh in #389
• chore: bump golang.org/x/net from 0.19.0 to 0.20.0 in /constraint by @dependabot[bot] in #390
• chore: bump github.com/onsi/gomega from 1.27.7 to 1.31.1 in /constraint by @dependabot[bot] in #391
• Run matchers against both object and oldObject by @maxsmythe in #393
• chore: bump golang.org/x/net from 0.20.0 to 0.21.0 in /constraint by @dependabot[bot] in #396
• fix: setting default value for enforcement action by @JaydipGabani in #267
• feat: vap update to reduce operations, v1beta1, and fail open by @ritazh in #397
• chore: bump the all group with 2 updates by @dependabot[bot] in #395
• chore: bump github.com/open-policy-agent/opa from 0.60.0 to 0.62.1 in /constraint by @dependabot[bot] in #402
• Add switch for whether VAP or webhook should enforce constraints by @maxsmythe in #400
• chore: bump the k8s group in /constraint with 5 updates by @dependabot[bot] in #405
• fix: Gatekeeper variables must be defined first so that other variables can consume them by @maxsmythe in #408
• chore: bump to go 1.22 by @sozercan in #412
• chore: bump golang.org/x/net from 0.22.0 to 0.24.0 in /constraint by @dependabot[bot] in #410
• [StepSecurity] Apply security best practices by @step-security-bot in #413
• chore: bump github.com/open-policy-agent/opa from 0.62.1 to 0.63.0 in /constraint by @dependabot[bot] in #407
• chore: bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 in /constraint in the k8s group by @dependabot[bot] in #415
• chore: bump golang from 48b942a to 8e4358f in /constraint by @dependabot[bot] in #414
• chore: bump github.com/golang/glog from 1.2.0 to 1.2.1 in /constraint by @dependabot[bot] in #409
• chore: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.45.0 to 0.46.0 in /constraint by @dependabot[bot] in #417
• chore: bump golang.org/x/net from 0.24.0 to 0.25.0 in /constraint by @dependabot[bot] in #430
• chore: bump the all group across 1 directory with 8 updates by @dependabot[bot] in #431
• chore: bump github.com/onsi/gomega from 1.31.1 to 1.33.1 in /constraint by @dependabot[bot] in #429
• chore: bump golang from 8e4358f to b03f3ba in /constraint by @dependabot[bot] in #418
• fix: Create dynamic CEL object variable by @maxsmythe in #432
• chore: bump the all group with 3 updates by @dependabot[bot] in #436
• chore: bump github.com/open-policy-agent/opa from 0.63.0 to 0.64.1 in /constraint by @dependabot[bot] in #425
• fix: anyObject was not fully plumbed to compiler, streamline plumbing to fix by @maxsmythe in #437

New Contributors

• @step-security-bot made their first contribution in #413

Full Changelog: v0.13.0...v0.14.0

v0.13.0

This release corresponds to Gatekeeper v3.15.1.

What's Changed

• chore: upgrade to k8s 1.28.3 by @maxsmythe in #372
• feat: Add ValidatingAdmissionPolicy generation function by @maxsmythe in #376
• chore: bump google.golang.org/grpc from 1.58.2 to 1.58.3 in /constraint by @dependabot[bot] in #368
• chore: bump opa to 0.60.0 by @ritazh in #387

Full Changelog: v0.12.0...v0.13.0

v0.12.0

This release corresponds to Gatekeeper v3.14.2.

What's Changed

• feat: validate unknown fields for CR by @acpana in #346
• Use updated vap schema by @maxsmythe in #348
• ci: group dependabot prs by @sozercan in #353
• chore: bump golang.org/x/net from 0.11.0 to 0.17.0 in /constraint by @dependabot[bot] in #362
• chore: bump opa to 0.57.1 by @sozercan in #363
• fix: fixes disable cache flow by @nilekhc in #369

Full Changelog: v0.11.0...v0.12.0

v0.11.0

This release corresponds to Gatekeeper v3.13.4.

What's Changed

• chore: bump golang.org/x/net from 0.7.0 to 0.8.0 in /constraint by @dependabot[bot] in #305
• rework tracedump msg by @acpana in #299
• chore: bump github.com/open-policy-agent/opa from 0.49.2 to 0.51.0 in /constraint by @dependabot[bot] in #316
• chore: bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.3 in /constraint by @dependabot[bot] in #313
• chore: bump actions/setup-go from 3 to 4 by @dependabot[bot] in #309
• chore: bump github.com/golang/glog from 1.0.0 to 1.1.1 in /constraint by @dependabot[bot] in #314
• feat: add more generalized Stats by @acpana in #283
• fix: default params for open api by @acpana in #325
• Update gatekeeper.yml to use go version 1.20 by @acpana in #333
• Update to K8s v0.27.2; add prototype CEL driver by @maxsmythe in #331
• feat: implements external data response cache by @nilekhc in #334
• chore: bump github.com/open-policy-agent/opa from 0.51.0 to 0.54.0 in /constraint by @dependabot[bot] in #339

Full Changelog: v0.10.0...v0.11.0

v0.10.0

This release corresponds to Gatekeeper v3.12.0.

What's Changed

• ci: remove kubebuilder dependency by @sozercan in #279
• chore: Upgrade to k8s v0.26.1 by @maxsmythe in #284
• chore: bump github.com/open-policy-agent/opa from 0.47.2 to 0.49.2 in /constraint by @dependabot[bot] in #297
• chore: bump golang.org/x/net from 0.4.0 to 0.7.0 in /constraint by @dependabot[bot] in #295
• fix: fix externaldata url description by @sozercan in #290
• chore: bump github.com/onsi/gomega from 1.24.1 to 1.27.2 in /constraint by @dependabot[bot] in #301
• update externaldata storage version by @sozercan in #300
• chore: bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.5 in /constraint by @dependabot[bot] in #302
• Add multi-engine support by @maxsmythe in #293

Full Changelog: v0.9.0...v0.10.0