- +Add ResourceClaim analyzer for missing DeviceClassesadded
- *Close the custom analyzer gRPC connection after each analysisfixed
- *Correct API doc lookups for the webhook analyzersfixed
- *Handle empty AI responses and respect configured languagefixed
- *Honor StatefulSet start ordinalsfixed
- *Honour K8SGPT_BACKEND on every serve startfixed
- *Ignore in-progress Deployment replica mismatchesfixed
- *Paginate S3 object listingsfixed
- *Recognize EKS node monitoring agent node conditions (#1798) (635d9b1), closesfixed
- *Register kyverno policy-report scheme once to avoid concurrent map writesfixed
- *Render PDB selector operators as readable phrasesfixed
- *Report blocked PDBs whose selector is empty or uses matchExpressionsfixed
18 more lines
- *Report DeadlineExceeded and JobFailed conditions in Job analyzerfixed
- *Report FailedBinding events in PersistentVolumeClaim analyzerfixed
- *Report missing default backend services in Ingress analyzerfixed
- *Scope analyzer events to object identityfixed
- *Scope ConfigMap usage tracking to pod namespacefixed
- *Scope NetworkPolicy pod lookup to policy namespacefixed
- *Scope service events to endpoint namespacefixed
- *Send involvedObject filters as a field selector in MCP list-eventsfixed
- *Stop reporting local StorageClasses as deprecatedfixed
- *Stop the OLM analyzers panicking on catalogs without an imagefixed
- *Thread analyzer context instead of context.Background()fixed
- *Use apimeta.FindStatusCondition for GatewayClass Accepted conditionfixed
- *Use apimeta.FindStatusCondition for PDB DisruptionAllowed conditionfixed
- ·Deps: update codecov/codecov-action digest to 303a32dother
- ·Deps: update docker/build-push-action digest to c3c9e26other
- ·Deps: update docker/setup-buildx-action digest to f87e599other
- ·Deps: update docker/setup-qemu-action digest to 9901266other
- ·Deps: update jlumbroso/free-disk-space digest to 36e9a5aother
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·Point CONTRIBUTING.md at CNCF Slackmaintenance
31 lines1 added24 fixed5 other1 maintenancetyped from the source notes
K8sGPT v0.4.39 adds a --resource flag to analyze a single resource and a ValidatingAdmissionPolicy analyzer. It also includes six fixes, covering event-derived failure anonymisation, RoleBinding ClusterRole resolution, ReplicaFailure reporting and OpenAI client handling. Two security entries update the gRPC Go module to v1.83.1 and v1.83.2.
platform teams Platform teams running K8sGPT can now analyze one resource at a time and get diagnostics for ValidatingAdmissionPolicy objects. The gRPC updates are dependency CVE bumps, with no vulnerability in K8sGPT's own code reported in the notes.
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
- !Deps: update module google.golang.org/grpc to v1.83.1 [security]security
- !Deps: update module google.golang.org/grpc to v1.83.2 [security]security
- +Add --resource flag to analyze a single resourceadded
- +Add ValidatingAdmissionPolicy analyzeradded
- *Anonymise resource names in event-derived failuresfixed
- *Do not also report an unsupported scaleTargetRef as missingfixed
- *Filter service events by involved object kindfixed
- *Guard against empty completion choices in OpenAIClientfixed
- *Report ReplicaFailure regardless of replica countfixed
- *Resolve ClusterRole references in RoleBindingsfixed
- ·Deps: update actions/checkout action to v7other
- ·Deps: update golang docker tag to v1.27other
12 lines2 security2 added6 fixed2 othertyped from the source notes
- *Correct --with-stat flag descriptionfixed
- *Validate namespace exists before running core analyzersfixed
- ·Deps: update docker/setup-buildx-action digest to 37fe631other
- ·Deps: update softprops/action-gh-release digest to efb3536other
4 lines2 fixed2 othertyped from the source notes
v0.4.372026-08-27patchsecurity++****************!sharesource - !Deps: update module google.golang.org/grpc to v1.82.1 [security]security
- +Add Amazon Bedrock Mantle (OpenAI-compatible) AI provideradded
- +Add LiteLLM backendadded
- *Clamp max-concurrency in custom analysis to avoid deadlock and panicfixed
- *Deps: update k8s.io/utils digest to cf1189dfixed
- *Do not panic on an Ingress path with a resource backendfixed
- *Guard against nil backend port in HTTPRoute analyzerfixed
- *Guard against nil spec.replicas in deployment analyzerfixed
- *Guard empty API key in Google GenAI clientfixed
- *Ignore HPA ScalingLimited TooFewReplicas at minReplicasfixed
- *Inspect Gateway Accepted and Programmed by typefixed
- *Mask real pod name and namespace in statefulset analyzerfixed
18 more lines
- *Point release-please extra-files at the real chart pathfixed
- *Populate ParentObject in ClusterCatalog and ClusterExtension analyzersfixed
- *Prevent nil prometheus config dereference on invalid gzipped configfixed
- *Report Deployment ProgressDeadlineExceeded when replica counts still matchfixed
- *Report keda scaledobject failures when no event existsfixed
- *Resolve EKS default kubeconfig path across platformsfixed
- *Scan init containers for ConfigMap usagefixed
- *Scan projected volume sources for ConfigMap usagefixed
- *Skip empty results from custom analyzers with no findingsfixed
- *Skip failure report for jobs that completed successfully after retriesfixed
- *Use empty default for auth add --model so per-backend fallback runsfixed
- ·Deps: update actions/checkout digest to fbc6f39other
- ·Deps: update actions/setup-go action to v7other
- ·Deps: update docker/build-push-action digest to 53b7df9other
- ·Deps: update docker/login-action digest to dbcb813other
- ·Deps: update golangci/golangci-lint-action action to v9other
- ·Deps: update goreleaser/goreleaser-action action to v7other
- ·Deps: update softprops/action-gh-release action to v3other
30 lines1 security2 added20 fixed7 othertyped from the source notes
- !Deps: update module golang.org/x/net to v0.55.0 [security]security
- *Correct Vertex AI legacy model ids by removing stray asterisk (#1684) (60a9794), closesfixed
- *Deps: update k8s.io/utils digest to be93311fixed
- *Guard interplex cache Store and Load against nil grpc connfixed
- *Send temperature or top_p exclusively for Anthropic modelsfixed
- ·Deps: update docker/login-action action to v4other
- ·Deps: update docker/metadata-action digest to dc80280other
- ·Deps: update docker/setup-buildx-action action to v4other
- ·Deps: update docker/setup-qemu-action action to v4other
- ·Deps: update golang docker tag to v1.26other
- ·Deps: update googleapis/release-please-action action to v5other
- ·Migrate to Go 1.26 and golangci-lint v2.12.2other
12 lines1 security4 fixed7 othertyped from the source notes
- *Detect SchedulingGated pods (#1474)fixed
- *Guard against empty conditions in Gateway/GatewayClass analyzersfixed
- *Guard against nil TargetRef in Service not-ready endpointsfixed
- ·Deps: update docker/build-push-action action to v7other
- ·Deps: update docker/build-push-action digest to 10e90e3other
- ·Deps: update docker/metadata-action action to v6other
- ·Deps: update docker/setup-qemu-action digest to c7c5346other
7 lines3 fixed4 othertyped from the source notes
- !Deps: update module github.com/aws/aws-sdk-go-v2/service/bedrockruntime to v1.50.4 [security]security
- !Deps: update module github.com/kedacore/keda/v2 to v2.17.3 [security]security
- +Add Anthropic API supportadded
- *Allow Azure OpenAI API version overridefixed
- *Deps: update k8s.io/utils digest to a95e086fixed
- ·Deps: pin dependenciesother
- ·Deps: replace google-github-actions/release-please-action action with googleapis/release-please-action v4.1.1other
- ·Deps: update codecov/codecov-action action to v7other
- ·Deps: update codecov/codecov-action digest to 0fb7174other
- ·Deps: update docker/login-action digest to c94ce9fother
- ·Deps: update docker/metadata-action digest to c299e40other
- ·Deps: update docker/setup-buildx-action digest to 8d2750cother
1 more lines
- ·Deps: update softprops/action-gh-release digest to 3bb1273other
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·Deps: update module github.com/olekukonko/tablewriter to v1maintenance
14 lines2 security1 added2 fixed8 other1 maintenancetyped from the source notes
- !Deps: update module github.com/ollama/ollama to v0.17.1 [security]security
- +Analyze previous logs for restarted containersadded
- *Skip empty ingress tls secret namesfixed
2 maintenance lines (dependency bumps, CI, tests, docs)
- ·Prepare governance docs for CNCF incubationmaintenance
- ·Remove FOSSA license badge and checkmaintenance
5 lines1 security1 added1 fixed2 maintenancetyped from the source notes
- !Deps: update module google.golang.org/grpc to v1.79.3 [security]security
- +Add Azure API Type Support and add Custom HTTP Headeradded
- +Add daemonset analyzer and special cases for pod and jobadded
- *Amazonbedrockconverse claude models temp and toppfixed
- *Improve ConfigMap usage detection for sidecar patternsfixed
- *Recognize GKE built-in ingress classes 'gce' and 'gce-internal'fixed
6 lines1 security2 added3 fixedtyped from the source notes
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·Align Go version with go.mod toolchainmaintenance
2 lines1 other1 maintenancetyped from the source notes
- *Validate namespace before running custom analyzersfixed
1 line1 fixedtyped from the source notes
- +Serve: add short flag and env var for metrics portadded
- *Deps: update k8s.io/utils digest to b8788abfixed
- *Use proper JSON marshaling for customrest prompt to handle special characters (#1615) (99911fb), closesfixed
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·Improve MCP server handlers with better error handling and paginationmaintenance
4 lines1 added2 fixed1 maintenancetyped from the source notes
18 older releases