Kargo Files

What's Changed

• chore(backport release-1.12): docs: add searchable promotion step catalog by @akuitybot in https://github.com/akuity/kargo/pull/7584
• chore(backport release-1.12): fix(chart): link install notes to the CLI release matching the installed version by @akuitybot in https://github.com/akuity/kargo/pull/7586
• chore(deps): bump step-security/harden-runner from 2.22.0 to 2.22.1 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7577
• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7575
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7573
• chore(deps): bump library/node from 26.10.0 to 26.11.1 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7572
• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7574
• chore(deps): bump the go-patch group across 1 directory with 19 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7576
• chore(backport release-1.12): fix(promotion): harden oci-download and oci-push transport by @akuitybot in https://github.com/akuity/kargo/pull/7603
• chore(backport release-1.12): build: keep the Go symbol table in credential-helper and helm by @akuitybot in https://github.com/akuity/kargo/pull/7647
• chore(deps): bump the go-minor group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7602
• chore(deps/api): bump the go-patch group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7513
• chore(backport release-1.12): docs: correct the garbage collector docs to reflect actual schedule in chart by @akuitybot in https://github.com/akuity/kargo/pull/7539
• chore(backport release-1.12): docs: fix credential CLI commands in managing secrets guide by @akuitybot in https://github.com/akuity/kargo/pull/7653
• chore(backport release-1.12): feat(server): accept PBKDF2-HMAC-SHA256 admin password hashes by @akuitybot in https://github.com/akuity/kargo/pull/7654
• chore(backport release-1.12): fix: keep best-releases.json and the release support page current (#7406) by @krancour in https://github.com/akuity/kargo/pull/7609
• chore(backport release-1.12): docs: make the GitHub CLI the quickstart's default path for the fork and the token by @akuitybot in https://github.com/akuity/kargo/pull/7662
• chore(backport release-1.12): fix: bind kind and k3d port mappings to localhost by @akuitybot in https://github.com/akuity/kargo/pull/7661
• chore(backport release-1.12): feat(tar): add mtime option and always strip ownership by @akuitybot in https://github.com/akuity/kargo/pull/7657
• chore(backport release-1.12): feat(ui): default/sync warehouse with last promotion in stage node by @akuitybot in https://github.com/akuity/kargo/pull/7632
• chore(backport release-1.12): fix(ui): order the Freight timeline by discoveredAt by @akuitybot in https://github.com/akuity/kargo/pull/7680
• chore(deps): bump actions/setup-java from 6.0.1 to 6.1.0 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7673
• chore(deps): bump step-security/harden-runner from 2.22.1 to 2.22.2 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7672
• chore(deps): bump google.golang.org/api from 0.304.0 to 0.305.0 in the go-minor group by @dependabot[bot] in https://github.com/akuity/kargo/pull/7671
• chore(backport release-1.12): fix(controller): never requeue a Promotion with a non-positive interval by @akuitybot in https://github.com/akuity/kargo/pull/7681
• chore(backport release-1.12): fix(server): answer with HTTP statuses, not Connect codes, from REST handlers by @akuitybot in https://github.com/akuity/kargo/pull/7679
• chore(deps): bump the go-patch group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7670
• chore(backport release-1.12): fix(git): stop leaking clone directories into the temp dir (#7548) by @krancour in https://github.com/akuity/kargo/pull/7683
• chore(backport release-1.12): fix(api): count soak time only in a Stage's upstream Stages by @akuitybot in https://github.com/akuity/kargo/pull/7686
• chore(backport release-1.12): fix(webhook): confirm Freight availability with the API server before refusing a Promotion by @akuitybot in https://github.com/akuity/kargo/pull/7684
• chore(backport release-1.12): fix(git): kill keyboxd, not just gpg-agent, before removing stale GnuPG sockets by @akuitybot in https://github.com/akuity/kargo/pull/7690
• chore(backport release-1.12): chore(deps): bump Go to 1.27.3 and fix high-severity CVEs (#7707) by @krancour in https://github.com/akuity/kargo/pull/7709
• chore(backport release-1.12): fix(api): reject unusable OIDC discovery responses so they are retried (#7623) by @krancour in https://github.com/akuity/kargo/pull/7689
• chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7720
• chore(deps): bump library/node from 26.11.1 to 26.12.1 by @dependabot[bot] in https://github.com/akuity/kargo/pull/7715
• chore(deps): bump the go-patch group with 6 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7732
• chore(deps): bump the go-minor group with 4 updates by @dependabot[bot] in https://github.com/akuity/kargo/pull/7733
• chore(backport release-1.12): fix(api): accept scalar claim values when mapping users to ServiceAccounts by @akuitybot in https://github.com/akuity/kargo/pull/7735
• chore(backport release-1.12): fix(controller): guard branch lock maps in git-push and github-push by @akuitybot in https://github.com/akuity/kargo/pull/7746
• chore(backport release-1.12): fix(controller): serialize all use of Kustomize's OpenAPI schema by @akuitybot in https://github.com/akuity/kargo/pull/7756

Full Changelog: https://github.com/akuity/kargo/compare/v1.12.4...v1.12.5