Kargo v1.12.5
Changes
40 maintenance lines (dependency bumps, CI, tests, docs)
- Docs: add searchable promotion step catalogmaintenance
- Fix(chart): link install notes to the CLI release matching the installed versionmaintenance
- Bump step-security/harden-runner from 2.22.0 to 2.22.1maintenance
- Bump actions/download-artifact from 8.0.1 to 8.0.2maintenance
- Bump actions/upload-artifact from 7.0.1 to 7.0.2maintenance
- Bump library/node from 26.10.0 to 26.11.1maintenance
- Bump actions/setup-node from 7.0.0 to 7.1.0maintenance
- Bump the go-patch group across 1 directory with 19 updatesmaintenance
- Fix(promotion): harden oci-download and oci-push transportmaintenance
- Build: keep the Go symbol table in credential-helper and helmmaintenance
- Bump the go-minor group across 1 directory with 6 updatesmaintenance
- Bump the go-patch group across 1 directory with 3 updatesmaintenance
- Docs: correct the garbage collector docs to reflect actual schedule in chartmaintenance
- Docs: fix credential CLI commands in managing secrets guidemaintenance
- Feat(server): accept PBKDF2-HMAC-SHA256 admin password hashesmaintenance
- Fix: keep best-releases.json and the release support page currentmaintenance
- Docs: make the GitHub CLI the quickstart's default path for the fork and the tokenmaintenance
- Fix: bind kind and k3d port mappings to localhostmaintenance
- Feat(tar): add mtime option and always strip ownershipmaintenance
- Feat(ui): default/sync warehouse with last promotion in stage nodemaintenance
- Fix(ui): order the Freight timeline by discoveredAtmaintenance
- Bump actions/setup-java from 6.0.1 to 6.1.0maintenance
- Bump step-security/harden-runner from 2.22.1 to 2.22.2maintenance
- Bump google.golang.org/api from 0.304.0 to 0.305.0 in the go-minor groupmaintenance
- Fix(controller): never requeue a Promotion with a non-positive intervalmaintenance
- Fix(server): answer with HTTP statuses, not Connect codes, from REST handlersmaintenance
- Bump the go-patch group across 1 directory with 4 updatesmaintenance
- Fix(git): stop leaking clone directories into the temp dirmaintenance
- Fix(api): count soak time only in a Stage's upstream Stagesmaintenance
- Fix(webhook): confirm Freight availability with the API server before refusing a Promotionmaintenance
- Fix(git): kill keyboxd, not just gpg-agent, before removing stale GnuPG socketsmaintenance
- Chore(deps): bump Go to 1.27.3 and fix high-severity CVEsmaintenance
- Fix(api): reject unusable OIDC discovery responses so they are retriedmaintenance
- Bump docker/login-action from 4.6.0 to 4.7.0maintenance
- Bump library/node from 26.11.1 to 26.12.1maintenance
- Bump the go-patch group with 6 updatesmaintenance
- Bump the go-minor group with 4 updatesmaintenance
- Fix(api): accept scalar claim values when mapping users to ServiceAccountsmaintenance
- Fix(controller): guard branch lock maps in git-push and github-pushmaintenance
- Fix(controller): serialize all use of Kustomize's OpenAPI schemamaintenance
40 lines40 maintenancetyped from the source notes