v5.0.0

5.0.0 (2026-04-22)

• feat!: add Kyverno-based cc_init_data injection for OSC 1.12 / Trustee 1.1 (2132197)

Bug Fixes

• differentiate kata vs kata-cc runtime classes by platform (8618f9d)
• disable Kyverno reportsController to match disabled policyreport CRDs (2e3dcd0)
• exclude policyreport CRDs from Kyverno to avoid ACM conflict (8575f32)
• minor fixes (507771a)
• point insecure-policy deployment to debug-initdata (43d8314)
• remove fixed runAsUser from hello-openshift Deployments (cd6a60a)
• switch initdata injection from MutatingPolicy to ClusterPolicy (d3ef527)
• use kata-remote runtime class for cloud peer-pods (a41a649)
• use released trustee chart v0.3.* instead of git branch (717c854)

Features

• convert bare Pods to Deployments, retarget Kyverno to Deployments (e75c6e2)

BREAKING CHANGES

• Requires Kyverno and OSC 1.12 / Trustee 1.1.0

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

v4.0.1

4.0.1 (2026-03-20)

Bug Fixes

• add Dependabot npm monitoring with conventional commit prefixes (6125928)
• update semantic-release dependencies to address security vulnerabilities (5c326c9), closes hi#severity

v4.0.0

What's Changed

• feat: add attestion support for GA release of trustee and CoCo on azure by @butler54 in #70
• feat!: release 4.0.0 with GA CoCo stack by @butler54 in #72

Full Changelog: v3.4.1...v4.0.0

v3.4.1

3.4.1 (2025-12-09)

Bug Fixes

• correct route to service mapping (#66) (9c6f715)

v3.4.0

3.4.0 (2025-12-03)

Features

• upgrade pattern logic (#64) (4b2c49c)

v3.3.0

3.3.0 (2025-12-03)

Features

• externalise the core charts (#62) (105e99d)

v3.2.0

3.2.0 (2025-11-26)

Features

• add multicluster support (#56) (f8b6b25)

v3.1.1

3.1.1 (2025-10-06)

Bug Fixes

• disabling ESO objects when backend: none (#57) (e993d3c)

v3.1.0

3.1.0 (2025-09-17)

Features

• use self-signed certs for trustee to allow use in private environments (#55) (1b99369)

v3.0.0

3.0.0 (2025-08-29)

• feat!: update to general availability versions of sandboxed containers and trustee (#54) (bbeb442)

BREAKING CHANGES

• pre GA releases will no longer work due to introduction of compressed initdata

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: linting fixes

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: linting errors

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: python and markdown linting

Signed-off-by: Chris Butler chris.butler@redhat.com

• chore: markdown fixes

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: remove gzipper and use newly available gzip

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: remove manual approval until a better solution is made

Signed-off-by: Chris Butler chris.butler@redhat.com

• chore: revert LE to default for cluster

Signed-off-by: Chris Butler chris.butler@redhat.com

• fix: ensure pinning of csvs

Signed-off-by: Chris Butler chris.butler@redhat.com