1. Ratify, an artifact security metadata verification engine (a CNCF Sandbox project), released its v1.4.0, introducing revocation checking with Certificate Revocation List (CRL) support based on Notation libraries, more Notary Project trust policy attributes in the Helm chart, and a new authentication provider for the Alibaba Cloud RRSA Store.
2. Kmesh, a high-performance service mesh data plane based on eBPF (a CNCF Sandbox project), reached its v1.0 with numerous significant improvements. They include encrypted communication between nodes via IPsec, authorisation execution offloaded to XDP eBPF, locality load balancing capability, zero-downtime restart support for kernel-native mode, circuit breaking and rate limiting in kernel-native mode, and compatibility with Istio 1.24.
3. Prometheus (a CNCF Graduated project) released its v3.2.0, bringing various improvements in UTF-8 support (for rule names and for the
targetLabel field in replace actions when relabeling), support for OTLP delta temporality in the OTLP endpoint, load balancer discovery for OpenStack Octavia, and new too-long-scrape-interval linting option for promtool check config.4. Backstage, a framework for building developer portals (a CNCF Incubating project), was updated to v1.36.0. Some of its highlights are: support for native ESM in Node.js code, the first version of Canon (a new UI Library designed for Backstage plugins and based on Base UI from MUI), a new auditor service for recording critical actions and events, a new template system in
yarn new for defining your own templates in a declarative way, and new permissions for Kubernetes plugins restricting access to K8s clusters and resources.5. Dex, an OIDC identity and OAuth 2.0 provider with pluggable connectors (a CNCF Sandbox project), released v2.42.0 with allowed localhost equivalent IP addresses, Discovery added to gRPC, support for Base64- and PEM-encoded certs, GitLab additional group with a role in GitLab connector, and other changes.
6. Flux (a CNCF Graduated project) announced v2.5.0. It brought health checks for custom resources in Kustomization API using Common Expression Language (CEL), GitHub app authentication for Git repositories, custom event metadata for notifications, filtering the declared resources via CEL expressions in the Receiver API, and a new
flux debug command.#news #releases