Changelog

• 217a71e Fix: 7018 Ensure Component removals are correctly persisted and reflected in status (#7027) (#7029)
• a2fe0b9 Fix: Backport commits to 1.10 (#7040)

What's Changed

• [Backport release-1.10] Fix: Preserve last-applied-configuration for shared resources in applications by @github-actions[bot] in #7001

Full Changelog: v1.10.5...v1.10.6

Changelog

• f89622e Fix: Fix issue with imports/packages in status validations (#6963) (#6971)
• 8401ff4 Fix: Prevent namespace admins from accessing vela-system definitions without explicit permissions (#6967)

What's Changed

• Chore: Replace the openssf badge with UI link by @anoop2811 in #6783
• Chore: fixes authentication issue to dockerhub for provenance attestation push by @roguepikachu in #6778
• Chore: update helm repo path in tests by @roguepikachu in #6797
• Fix: moves resource modification inside patch block by @semmet95 in #6791
• Chore: switches to new oapi type field type by @semmet95 in #6794
• Fix: vela cli namespace behaviour by @Chaitanyareddy0702 in #6805
• Fix: vela up command to behave similarly with kubectl by @Chaitanyareddy0702 in #6809
• Fix: check component status after initial deployment by @briankane in #6824
• Fix: corrects validating webhook behaviour with cuex compilers by @briankane in #6799
• Chore: upgrade Kubernetes dependencies to v0.31.10 & enhance CLI, workflows, tests, and documentation by @vishal210893 in #6837
• Chore: (deps): Bump sigstore/cosign-installer from 3.5.0 to 3.9.2 by @dependabot[bot] in #6834
• Chore: (deps): Bump zeebe-io/backport-action from 2.1.1 to 3.2.1 by @dependabot[bot] in #6820
• Fix: omit component revision in additionalLabel to add to k8s object when component revision is not set and DisableAllComponentRevision setted true #6643 by @njy17 in #6647
• Feat: Enhanced Status Reporting by @briankane in #6828
• Chore: (deps): Bump github/codeql-action from 3.28.16 to 3.29.5 by @dependabot[bot] in #6846
• Chore: (deps): Update github.com/docker/docker from v25.0.6 to v28.3.… by @vishal210893 in #6849
• Fix: Fixes the request workflowstep by @briankane in #6804
• Feat: Application Status Metrics & Structured Logs by @briankane in #6857
• Fix: prevent make reviewable typecheck noise via wrapper by @briankane in #6858
• Feat: Support Native Cue in HealthPolicy and CustomStatus by @briankane in #6859
• Chore: upgrades kind version by @semmet95 in #6853
• Feat: Allow gating with components dependsOn field by @Chaitanyareddy0702 in #6854
• Feat: Consolidate Health & Status and Pass Status Context Data by @briankane in #6860
• Feat: Validate Definition Permissions on App Creation by @briankane in #6876
• Feat(tests): Add unit test coverage for core packages by @AshvinBambhaniya2003 in #6880
• Fix: Address Wrong Storage trait for hostPath volumes #6811 by @scodeman in #6812
• Fix(cli): return non-zero exit code on vela def render error by @7h3-3mp7y-m4n in #6818
• Chore: removes references to kubevelafix by @semmet95 in #6882
• Fix: apply status results to correct component by @briankane in #6886
• Feat(utils): Enhance unit test coverage and quality for pkg/utils by @AshvinBambhaniya2003 in #6884
• Feat(tests): Add unit test coverage for core packages by @AshvinBambhaniya2003 in #6889
• Feat(multicluster): Enhance Unit Test Coverage for Multicluster Packages by @AshvinBambhaniya2003 in #6892
• Fix: inconsistent dry-run behavior with non-existent namespaces in CLI vs app.yaml by @vaibhav0096 in #6896
• Fix: Unbundle the X-Definition Validation from Authentication Features by @briankane in #6904
• Chore: refactors workflows to use re-usable actions and adds upgrade test by @roguepikachu in #6878
• Chore: Add workflow addon testing by @Chaitanyareddy0702 in #6911
• Fix: Enhance workflow context generation by @Chaitanyareddy0702 in #6925
• Fix: webhook TLS caBundle breakage during failed Helm upgrades by @vishal210893 in #6919
• Feat: webhook reject unknown cr outputs by @roguepikachu in #6932
• Feat(logging): Add colorized logging support for local development with dev-logs option to enable during development by @vishal210893 in #6931
• Fix: clean up runner for disk space during release by @anoop2811 in #6936

New Contributors

• @njy17 made their first contribution in #6647
• @AshvinBambhaniya2003 made their first contribution in #6880
• @7h3-3mp7y-m4n made their first contribution in #6818
• @vaibhav0096 made their first contribution in #6896

Full Changelog: v1.10.3...v1.10.4

What's Changed

• Fix: build failure due to deprecated actions/cache by @anoop2811 in #6711
• Feat: support token retrieval via AuthInfo.Exec command by @Chaitanyareddy0702 in #6721
• Chore: (deps): Bump docker/login-action from 3.0.0 to 3.4.0 by @dependabot in #6726
• Fix: removing detached clusters from resource trackers by @shivin in #6728
• Fix(parser) - The app.Spec.Policies[idx].Name must be a valid string by @jonatasteixeira in #6723
• Chore: (deps): Bump docker/setup-qemu-action from 3.0.0 to 3.6.0 by @dependabot in #6735
• Fix: support task component to be one-time run to completion by @shivin in #6733
• Feat: Enable CueX compiler in component & trait templating by @briankane in #6720
• Fix: modified webservice componenet definition to define resource req and … by @vishal210893 in #6714
• Fix: Vela not deleting the definition revisions by @Chaitanyareddy0702 in #6738
• Chore: (deps): Bump docker/build-push-action from 6.3.0 to 6.15.0 by @dependabot in #6740
• Fix(CUE): remove duplicate tcpSocket in startup-probe by @ComingCL in #6528
• Chore: adds slsa generator to the workflow by @roguepikachu in #6747
• Feat: added support for stateful set by @jguionnet in #6638
• Fix: upgrade vulnerable packages by @shivin in #6755
• Feat: add signed releases, SBOMs, and SLSA provenance by @roguepikachu in #6749
• Chore: Update score card action version by @jguionnet in #6759
• Fix: update workflow package to fix output compatibility by @PushparajShetty in #6761
• Fix: initilization for trait in output section by @PushparajShetty in #6762
• Chore: updates vuln dependencies versions by @semmet95 in #6757
• Fix: call errors.Wrap with a nil value error err by @alingse in #6739
• Fix: Failing issue-commands workflow by @anoop2811 in #6766
• Chore: update go and golangci version by @PushparajShetty in #6767
• Fix(Helm): make tolerations, nodeSelector, affinity more generic by @dzirg44 in #6771
• Fix(traitdefinition): Make localhostProfile optional for other types and provide it only for Localhost by @glaxman in #6773
• Fix: update apps with topology policy during cluster join by @shivin in #6768
• Feat(validation): fail-fast CUE validation for required parameters (incl. dynamic sources) by @vishal210893 in #6774
• Chore: (deps): Bump github/codeql-action from 2.1.37 to 3.28.16 by @dependabot in #6770
• Chore: (deps): Bump github.com/go-git/go-git/v5 from 5.13.1 to 5.16.0 by @dependabot in #6764
• Chore: (deps): Bump goreleaser/goreleaser-action from 5.0.0 to 6.3.0 by @dependabot in #6775

New Contributors

• @briankane made their first contribution in #6720
• @vishal210893 made their first contribution in #6714
• @ComingCL made their first contribution in #6528
• @roguepikachu made their first contribution in #6747
• @PushparajShetty made their first contribution in #6761
• @alingse made their first contribution in #6739
• @dzirg44 made their first contribution in #6771
• @glaxman made their first contribution in #6773

Full Changelog: v1.10.2...v1.10.3

What's Changed

• Fix: switches to new helm repo url by @semmet95 in #6694
• Chore: update workflow to fix the compatibility for outputs by @FogDong in #6701
• Fix: upddate deprecated action versions by @anoop2811 in #6702
• Fix: fix for skipping deletion of orphan resources by @shivin in #6700
• Chore: update CODEOWNERS by @dhiguero in #6695
• Chore: quick deploy button for kubevela by @taosher in #6692
• Fix: fix incorrect nil return value by @huochexizhan in #6705
• Chore: (deps): Bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by @dependabot in #6690
• Feat: add controller metrics by @yyzxw in #6650

New Contributors

• @semmet95 made their first contribution in #6694
• @shivin made their first contribution in #6700
• @taosher made their first contribution in #6692
• @huochexizhan made their first contribution in #6705

Full Changelog: v1.10.1...v1.10.2

What's Changed

• Fix: fix addon check by @FogDong in #6687

Full Changelog: v1.10.0...v1.10.1

What's Changed

• Chore: (deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #6439
• Chore: (deps): Bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #6506
• Chore: (deps): Bump golang.org/x/crypto from 0.21.0 to 0.23.0 by @dependabot in #6518
• Fix: disable auto maxprocs logging by @FogDong in #6530
• Fix(CUE): fix volumns variable err bug in vela-cli by @yukunjie in #6537
• Fix: e2e-tests and unit-tests by @Chaitanyareddy0702 in #6562
• Chore: Add Fog, Anoop and Daniel as codeowners by @anoop2811 in #6564
• Chore: update go version to 1.22 by @FogDong in #6560
• Fix: TestWorkflowList unit-test by @VibhorChinda in #6565
• Chore: (deps): Bump golang.org/x/crypto from 0.23.0 to 0.25.0 by @dependabot in #6569
• Fix(CUE): fix namespaces field missing in the requiredDuringSchedulingIgnoredDuringExecution at affinity trait by @fyp711 in #6567
• Chore: updates the make fmt command by @kanchan-dhamane in #6577
• Chore: (deps): Bump docker/build-push-action from 5.0.0 to 6.3.0 by @dependabot in #6571
• Fix(docs): documentation where schematic for component definition refers to kube by @shreyasHpandya in #6579
• Chore: (deps): Bump actions/github-script from 6.4.1 to 7.0.1 by @dependabot in #6407
• Chore: (deps): Bump actions/setup-node from 4.0.0 to 4.0.3 by @dependabot in #6582
• Refactor: use cuex engine by @FogDong in #6575
• Chore: use official workflow version by @FogDong in #6588
• Fix: fixed the pinned dependencies issue by @harshitasao in #6602
• Fix: fix github action token by @FogDong in #6608
• Feat(#6505): Add support for Cue Required field feature by @Chaitanyareddy0702 in #6622
• Fix: Correct spelling of "application" in deletion message (#6626) by @kgpp34 in #6628
• Feat: add new providers and fix definitions by @FogDong in #6599
• Chore: fix function name in comment by @HongKuang in #6499
• Fix: include the build labels and annotation metadata by @jonatasteixeira in #6655
• Chore: (deps): Bump golangci/golangci-lint-action from 3.7.0 to 6.1.1 by @dependabot in #6634
• Chore: (deps): Update k8s to 1.29 by @AiRanthem in #6654
• Fix: build issue with runners by @anoop2811 in #6669
• Feat: add securityContext and podSecurityContext traits by @thschue in #6666
• Chore: (deps): Bump golang.org/x/crypto from 0.25.0 to 0.32.0 by @dependabot in #6672
• Chore: (deps): Bump docker/setup-buildx-action from 3.0.0 to 3.8.0 by @dependabot in #6678
• Chore: (deps): Bump github.com/go-git/go-git/v5 from 5.8.1 to 5.13.1 by @dependabot in #6668
• Fix: return error before accesing mapping resource by @ecojuntak in #6660
• Feat: Semantic versioning support for Definitions by @kanchan-dhamane in #6648

New Contributors

• @yukunjie made their first contribution in #6537
• @Chaitanyareddy0702 made their first contribution in #6562
• @VibhorChinda made their first contribution in #6565
• @fyp711 made their first contribution in #6567
• @kanchan-dhamane made their first contribution in #6577
• @shreyasHpandya made their first contribution in #6579
• @harshitasao made their first contribution in #6602
• @kgpp34 made their first contribution in #6628
• @HongKuang made their first contribution in #6499
• @jonatasteixeira made their first contribution in #6655
• @AiRanthem made their first contribution in #6654
• @thschue made their first contribution in #6666
• @ecojuntak made their first contribution in #6660

Full Changelog: v1.9.11...v1.10.0

What's Changed

• Chore: (deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #6439
• Chore: (deps): Bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #6506
• Chore: (deps): Bump golang.org/x/crypto from 0.21.0 to 0.23.0 by @dependabot in #6518
• Fix: disable auto maxprocs logging by @FogDong in #6530
• Fix(CUE): fix volumns variable err bug in vela-cli by @yukunjie in #6537
• Fix: e2e-tests and unit-tests by @Chaitanyareddy0702 in #6562
• Chore: Add Fog, Anoop and Daniel as codeowners by @anoop2811 in #6564
• Chore: update go version to 1.22 by @FogDong in #6560
• Fix: TestWorkflowList unit-test by @VibhorChinda in #6565
• Chore: (deps): Bump golang.org/x/crypto from 0.23.0 to 0.25.0 by @dependabot in #6569
• Fix(CUE): fix namespaces field missing in the requiredDuringSchedulingIgnoredDuringExecution at affinity trait by @fyp711 in #6567
• Chore: updates the make fmt command by @kanchan-dhamane in #6577
• Chore: (deps): Bump docker/build-push-action from 5.0.0 to 6.3.0 by @dependabot in #6571
• Fix(docs): documentation where schematic for component definition refers to kube by @shreyasHpandya in #6579
• Chore: (deps): Bump actions/github-script from 6.4.1 to 7.0.1 by @dependabot in #6407
• Chore: (deps): Bump actions/setup-node from 4.0.0 to 4.0.3 by @dependabot in #6582
• Refactor: use cuex engine by @FogDong in #6575
• Chore: use official workflow version by @FogDong in #6588
• Fix: fixed the pinned dependencies issue by @harshitasao in #6602
• Fix: fix github action token by @FogDong in #6608
• Feat(#6505): Add support for Cue Required field feature by @Chaitanyareddy0702 in #6622
• Fix: Correct spelling of "application" in deletion message (#6626) by @kgpp34 in #6628
• Feat: add new providers and fix definitions by @FogDong in #6599

New Contributors

• @yukunjie made their first contribution in #6537
• @Chaitanyareddy0702 made their first contribution in #6562
• @VibhorChinda made their first contribution in #6565
• @fyp711 made their first contribution in #6567
• @kanchan-dhamane made their first contribution in #6577
• @shreyasHpandya made their first contribution in #6579
• @harshitasao made their first contribution in #6602
• @kgpp34 made their first contribution in #6628

Full Changelog: v1.9.11...v1.10.0-alpha.1

What's Changed

• Fix: upgrade workflow to fix suspend by @FogDong in #6623

Full Changelog: v1.9.12...v1.9.13