Kargo v1.11.8
security!
Kargo v1.11.8 was released with 7 changes, including one security item bumping the step-security/harden-runner GitHub Action from 2.21.1 to 2.22.1. The other six changes are maintenance items such as dependency bumps, CI, tests and docs, which the source condenses and omits.
What changes for platform teams
Platform teams running Kargo in their delivery pipelines get a patch release with a CI hardening action bump; the source does not describe any change to runtime behavior, configuration, or APIs. The security change is to a build-pipeline action, not a vulnerability fix in Kargo's own code.
Changes
- Bump step-security/harden-runner from 2.21.1 to 2.22.1security
6 maintenance lines (dependency bumps, CI, tests, docs)
- Fix(controller): prevent Stage status.metadata from being deleted by concurrent reconcilemaintenance
- Bump actions/upload-artifact from 7.0.1 to 7.0.2maintenance
- Bump actions/download-artifact from 8.0.1 to 8.0.2maintenance
- Bump library/node from 26.10.0 to 26.11.1maintenance
- Bump the go-patch group with 7 updatesmaintenance
- Bump Go to 1.27.2 and golang.org/x/net to v0.60.0maintenance
7 lines1 security6 maintenancetyped from the source notes
Full release notes ↗ · all Kargo releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules