Download Latest Version
0.41.2 source code.tar.gz (6.6 MB)
Get an email when there's a new version of Falco
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| falco-aarch64.debug | 2025-05-29 | 218.4 MB | |
| falco-x86_64.debug | 2025-05-29 | 216.7 MB | |
| 0.41.0 source code.tar.gz | 2025-05-28 | 6.6 MB | |
| 0.41.0 source code.zip | 2025-05-28 | 6.8 MB | |
| README.md | 2025-05-28 | 11.9 kB | |
| Totals: 5 Items | 448.6 MB | 0 | |
| Packages | Download |
|---|---|
| rpm-x86_64 |  |
| deb-x86_64 | |
| tgz-x86_64 | |
| tgz-static-x86_64 | |
| rpm-aarch64 | |
| deb-aarch64 | |
| tgz-aarch64 | |
| Images |
|---|
docker pull docker.io/falcosecurity/falco:0.41.0 |
docker pull public.ecr.aws/falcosecurity/falco:0.41.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.41.0 |
docker pull docker.io/falcosecurity/falco-driver-loader:0.41.0-buster |
docker pull docker.io/falcosecurity/falco:0.41.0-debian |
v0.41.0
Released on 2025-05-29
Breaking Changes :warning:
- cleanup(engine)!: only consider .yaml/.yml rule files [#3551] - @LucaGuerra
- cleanup(userspace)!: deprecate print of
container.info[#3543] - @FedeDP - cleanup(userspace/falco)!: drop deprecated in 0.40.0 CLI flags. [#3496] - @FedeDP
Major Changes
- new(falco): add json_include_output_fields option [#3527] - @LucaGuerra
- new(build,userspace): switch to use container plugin [#3482] - @FedeDP
- new(docker,scripts,ci): use an override config file to enable ISO 8601 output timeformat on docker images [#3488] - @FedeDP
Minor Changes
- chore(build): update falcoctl to v0.11.2, rules for artifact follow to v4 [#3580] - @LucaGuerra
- update(cmake): bumped falcoctl to 0.11.1 and rules to 4.0.0. [#3577] - @FedeDP
- update(containers): update opencontainers labels [#3575] - @LucaGuerra
- update(metrics): improve restart/hot_reload conditions inspection [#3562] - @incertum
- update: empty
valuesinexceptionswon't emit a warning anymore [#3529] - @leogr - chore(falco.yaml): enable libs_logger by default with info level [#3507] - @FedeDP
Bug Fixes
- fix(metrics/prometheus): gracefully handle multiple event sources, avoid erroneous duplicate metrics [#3563] - @incertum
- fix(ci): properly install rpm systemd-rpm-macro package on building packages pipeline [#3521] - @FedeDP
- fix(userspace/falco): init cmdline options after loading all config files [#3493] - @FedeDP
- fix(cmake): add support for 16K kernel page to jemalloc [#3490] - @Darkness4
- fix(userspace/falco): fix jemalloc enabled in minimal build. [#3478] - @FedeDP
Non user-facing changes
- chore(deps): Bump submodules/falcosecurity-rules from
4ccf111tocb17833[#3572] - @dependabot[bot] - update(cmake/rules): bump to falco-rules-4.0.0-rc1 [#3567] - @leogr
- cleanup(userspace/falco): drop unused
libs_metrics_collectorvariable. [#3566] - @FedeDP - update(cmake): update libs and driver to latest master [#3564] - @github-actions[bot]
- fix(build): fixed container custom_target
sedcommand. [#3556] - @FedeDP - chore(deps): Bump submodules/falcosecurity-rules from
ae6ed41to4ccf111[#3555] - @dependabot[bot] - fix(cmake): fix bundled c-ares cmake issue with e.g. SLES [#3559] - @terror96
- chore(deps): Bump submodules/falcosecurity-rules from
1d2c6b1toae6ed41[#3553] - @dependabot[bot] - chore: revert "chore(deps): Bump submodules/falcosecurity-rules from
1d2c6b1to371e431" [#3552] - @FedeDP - update(cmake): update libs and driver to latest master [#3550] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3549] - @github-actions[bot]
- update(adopters): added SafeDep as adopter [#3548] - @KunalSin9h
- update(cmake): update libs and driver to latest master [#3547] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3541] - @github-actions[bot]
- fix(userspace): fixed engine
openssldep. [#3535] - @FedeDP - fix(userspace/falco): fix outputs_http timeout [#3523] - @benierc
- fix(ci): use clang-19 to build modern_ebpf skeleton. [#3537] - @FedeDP
- update(cmake): update libs and driver to latest master [#3531] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3530] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3525] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3520] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3516] - @github-actions[bot]
- docs(README.md): cleanups and enhancements [#3514] - @leogr
- update(cmake): update libs and driver to latest master [#3511] - @github-actions[bot]
- chore(deps): Bump submodules/falcosecurity-rules from
1d2c6b1to371e431[#3510] - @dependabot[bot] - update(cmake): update libs and driver to latest master [#3508] - @github-actions[bot]
- update(cmake): update libs and driver to latest master [#3506] - @github-actions[bot]
- fix(userspace/falco): when counting
-Mtimeout, do not account for async events [#3505] - @FedeDP - chore(deps): Bump submodules/falcosecurity-rules from
d8415c1to1d2c6b1[#3504] - @dependabot[bot] - docs(proposals): correct typo in example [#3499] - @leogr
- fix(docker): fixed entrypoints paths with new docker context. [#3492] - @FedeDP
- feat(falco/app): move actions not using config before
load_config[#3483] - @ekoops - refactor(falco/app): apply early return pattern in actions code [#3484] - @ekoops
- chore(deps): Bump submodules/falcosecurity-rules from
abf6637tod8415c1[#3489] - @dependabot[bot] - Add NETWAYS Web Services to ADOPTERS.md [#3487] - @mocdaniel
- chore: add back Falco static package to the release template. [#3472] - @FedeDP
Statistics
| MERGED PRS | NUMBER |
|---|---|
| Not user-facing | 36 |
| Release note | 17 |
| Total | 53 |