Fission Files

Release Highlights: https://fission.io/docs/releases/v1.25.0/ Install Guide: https://fission.io/docs/installation/

What's Changed

• ci(security): tighten GITHUB_TOKEN permissions and pin dashboard-linter by @sanketsudake in https://github.com/fission/fission/pull/3407
• chore(claude): add issue-pr-scrub backlog triage skill by @sanketsudake in https://github.com/fission/fission/pull/3408
• fix(executor): stop updateCPUUtilizationSvc goroutine on pool destroy by @sanketsudake in https://github.com/fission/fission/pull/3410
• fix(executor): apply executor-type label filter on informers (#2775) by @sanketsudake in https://github.com/fission/fission/pull/3411
• perf(metrics): use a histogram for http_requests_duration_seconds by @sanketsudake in https://github.com/fission/fission/pull/3412
• perf(executor): free pod cache maps and bound idle-reaper concurrency by @sanketsudake in https://github.com/fission/fission/pull/3413
• perf(metrics): convert remaining latency summaries to histograms by @sanketsudake in https://github.com/fission/fission/pull/3414
• feat(observability): memory-leak detection harness for router/executor by @sanketsudake in https://github.com/fission/fission/pull/3409
• docs(skill): capture pprof profile analysis workflow in debug-github-ci by @sanketsudake in https://github.com/fission/fission/pull/3415
• feat: RFC-0005 control-plane scalability, robustness & lifecycle by @sanketsudake in https://github.com/fission/fission/pull/3416
• feat: RFC-0005 WS3 — buildermgr on controller-runtime Manager by @sanketsudake in https://github.com/fission/fission/pull/3417
• feat: RFC-0005 WS3 — executor on controller-runtime Manager by @sanketsudake in https://github.com/fission/fission/pull/3418
• feat: RFC-0005 WS3 — router on controller-runtime Manager by @sanketsudake in https://github.com/fission/fission/pull/3419
• feat: RFC-0005 — native leader election for trigger subsystems; remove leaderelection helper by @sanketsudake in https://github.com/fission/fission/pull/3420
• refactor: RFC-0005 — replace GroupManager with errgroup; remove pkg/utils/manager by @sanketsudake in https://github.com/fission/fission/pull/3421
• feat: RFC-0005 WS3 — Reconciler scaffold + timer reconciler by @sanketsudake in https://github.com/fission/fission/pull/3422
• feat: RFC-0005 WS3 — kubewatcher reconciler by @sanketsudake in https://github.com/fission/fission/pull/3423
• refactor: RFC-0005 WS3 — canaryconfigmgr as a controller-runtime Reconciler by @sanketsudake in https://github.com/fission/fission/pull/3424
• feat: RFC-0005 WS3 — mqtrigger as a controller-runtime Reconciler by @sanketsudake in https://github.com/fission/fission/pull/3425
• feat: RFC-0005 WS3 (D1) — shared executor idle reaper by @sanketsudake in https://github.com/fission/fission/pull/3426
• feat: RFC-0005 WS3 (B1) — Package /status subresource + split status writers by @sanketsudake in https://github.com/fission/fission/pull/3427
• feat: RFC-0005 WS3 (B2) — buildermgr Environment + Package reconcilers by @sanketsudake in https://github.com/fission/fission/pull/3428
• feat: RFC-0005 WS3 (C) — router HTTPTrigger + Function reconcilers by @sanketsudake in https://github.com/fission/fission/pull/3429
• feat: RFC-0005 WS3 (D/cms) — executor ConfigMap/Secret reconcilers by @sanketsudake in https://github.com/fission/fission/pull/3430
• feat: RFC-0005 WS3 (D/container) — container executor Function reconciler by @sanketsudake in https://github.com/fission/fission/pull/3431
• feat: RFC-0005 WS3 (D/poolmgr) — pool manager Function reconciler by @sanketsudake in https://github.com/fission/fission/pull/3432
• feat: RFC-0005 WS3 (D/newdeploy) — newdeploy Function + Environment reconcilers by @sanketsudake in https://github.com/fission/fission/pull/3433
• feat: RFC-0005 WS3 (D/poolmgr-lifecycle) — poolmgr Environment + Function reconcilers by @sanketsudake in https://github.com/fission/fission/pull/3434
• feat: RFC-0005 WS3 (D/poolmgr-rs) — poolmgr ReplicaSet reconciler by @sanketsudake in https://github.com/fission/fission/pull/3435
• feat: RFC-0005 WS3 (D/poolmgr-readypod) — readyPod reconciler; retire gpmInformerFactory by @sanketsudake in https://github.com/fission/fission/pull/3436
• ci: bump integration-test kind k8s versions to v1.32.11 / v1.34.3 / v1.35.1 by @sanketsudake in https://github.com/fission/fission/pull/3437
• refactor: retire finformerFactory + fix TestGoEnv router resolver staleness by @sanketsudake in https://github.com/fission/fission/pull/3438
• logger: migrate --logger pod watch to a controller-runtime reconciler by @sanketsudake in https://github.com/fission/fission/pull/3440
• mqtrigger: migrate --mqt_keda scaler to a controller-runtime reconciler by @sanketsudake in https://github.com/fission/fission/pull/3439
• test: deepen executor updateFunction + fission CLI integration coverage by @sanketsudake in https://github.com/fission/fission/pull/3441
• perf(logger): memoize base zap logger and lazy-init webhook loggers by @sanketsudake in https://github.com/fission/fission/pull/3442
• perf(storagesvc): replace graymeta/stow with minio-go + os to drop aws-sdk-go v1 by @sanketsudake in https://github.com/fission/fission/pull/3443
• fix(utils): confine zip extraction with os.Root (zip-slip / CWE-22) by @sanketsudake in https://github.com/fission/fission/pull/3444
• refactor(fetcher,builder): confine shared-volume FS ops with os.Root helpers by @sanketsudake in https://github.com/fission/fission/pull/3445
• chore(utils): remove unused functions from pkg/utils by @sanketsudake in https://github.com/fission/fission/pull/3446
• chore: raise minimum supported Kubernetes to 1.32 by @sanketsudake in https://github.com/fission/fission/pull/3448
• fix(rbac): grant executor update on services for AdoptExistingResources + serial adopt coverage by @sanketsudake in https://github.com/fission/fission/pull/3447
• fix(executor): make AdoptExistingResources resilient to concurrent re-stamping by @sanketsudake in https://github.com/fission/fission/pull/3450
• feat(crd): validate CRDs in the API server with CEL + server-side-apply markers by @sanketsudake in https://github.com/fission/fission/pull/3449
• refactor(executor): context-bound adopt/cleanup wait + de-duplicate adopt/cleanup by @sanketsudake in https://github.com/fission/fission/pull/3451
• refactor(webhook): drop the HTTPTrigger, TimeTrigger and CanaryConfig admission webhooks by @sanketsudake in https://github.com/fission/fission/pull/3452
• refactor(validation): split CRD validation into CEL-covered and webhook-only halves by @sanketsudake in https://github.com/fission/fission/pull/3454
• refactor(executor): share deployment helpers across newdeploy/container + cleanup by @sanketsudake in https://github.com/fission/fission/pull/3453
• test(fission-cli): raise coverage + dedupe create commands; fix canary status bug by @sanketsudake in https://github.com/fission/fission/pull/3455
• Security dep sweep: k8s 0.36 / controller-runtime 0.24 / KEDA 2.20 + OTel/sarama/minio/x-image by @sanketsudake in https://github.com/fission/fission/pull/3456
• refactor(executor): share one Environment reconciler across executor types by @sanketsudake in https://github.com/fission/fission/pull/3457
• refactor(executor): share one Function reconciler across executor types by @sanketsudake in https://github.com/fission/fission/pull/3458
• refactor(executor): serve newdeploy/container IsValid from the Manager cache (retire standalone informer factory) by @sanketsudake in https://github.com/fission/fission/pull/3459
• feat(executor): opt-in cleanup finalizer for reliable cross-namespace teardown by @sanketsudake in https://github.com/fission/fission/pull/3460
• feat(executor): self-heal newdeploy/container function workloads on drift by @sanketsudake in https://github.com/fission/fission/pull/3461
• Bump the docker-images group across 5 directories with 1 update by @dependabot[bot] in https://github.com/fission/fission/pull/3311
• chore(deps): bump the github-actions group with 3 updates by @dependabot[bot] in https://github.com/fission/fission/pull/3463
• chore(deps): bump github.com/prometheus/common from 0.68.0 to 0.68.1 in the go-dependencies group by @dependabot[bot] in https://github.com/fission/fission/pull/3462
• fix(httptrigger): enforce path-safety at admission (GHSA-vchh) by @sanketsudake in https://github.com/fission/fission/pull/3464
• fix(podspec): allowlist tenant caps + force drop:[ALL] (GHSA-qf5v) by @sanketsudake in https://github.com/fission/fission/pull/3465
• chore: Go 1.26.4, kind v0.32.0, release version 1.25.0 by @sanketsudake in https://github.com/fission/fission/pull/3467
• fix(executor,fetcher): use native sleep preStop hook instead of exec /bin/sleep by @sanketsudake in https://github.com/fission/fission/pull/3468
• fix: tolerate deletion races and stop logging routine churn as errors by @sanketsudake in https://github.com/fission/fission/pull/3469
• fix(publisher): retry transient router 404s; ci: metrics-server for HPA by @sanketsudake in https://github.com/fission/fission/pull/3470
• fix(test): retry Function status writes on conflict by @sanketsudake in https://github.com/fission/fission/pull/3471
• fix(executor): close specialize-vs-delete race; tolerate finalizer write races by @sanketsudake in https://github.com/fission/fission/pull/3472
• fix(executor): scope HPA resource metrics to the function container by @sanketsudake in https://github.com/fission/fission/pull/3473
• chore: sync generated code with types.go doc comments by @sanketsudake in https://github.com/fission/fission/pull/3474

Full Changelog: https://github.com/fission/fission/compare/v1.24.0...v1.25.0