Tetragon Files

Changes from v1.6.0 to v1.6.1

total: 62 commits, prs: 34 pr commits: 62

Upgrade notes

No upgrade note for that patch release.

Bugfixes

• [v1.6] Fix memory leaks in process and event caches (https://github.com/cilium/tetragon/pull/4257) by @mtardy
• fix(pkg/sensors): fixed kretprobe args merge helper (https://github.com/cilium/tetragon/pull/4505) by @FedeDP
• [v1.6 backport] bpf: make op_capabilities_gained filter consistent (https://github.com/cilium/tetragon/pull/4564) by @andrewstrohman
• fix(pkg/sensors): cgtrackermap size for uprobe, lsm and usdt sensors (https://github.com/cilium/tetragon/pull/4586) by @FedeDP
• fix(process/cache): balance parent refcount ops during LRU eviction (1.6) (https://github.com/cilium/tetragon/pull/4689) by @dwindsor
• Update default tetragon-rthooks image tag from v0.5 to v0.8. (https://github.com/cilium/tetragon/pull/4768) by @will-isovalent
• tetragon: policies can now be loaded even if kptr_restrict is equal to 2 (https://github.com/cilium/tetragon/pull/4776) by @FedeDP
• helm: Handle tetragon.enabled value properly (https://github.com/cilium/tetragon/pull/4292) by @michi-covalent
• uprobe: support match args (https://github.com/cilium/tetragon/pull/4319) by @andrewstrohman
• [backport/v1.6] Add umode_t in validation (https://github.com/cilium/tetragon/pull/4338) by @tpapagian
• uprobes: allow using BTF resolve (https://github.com/cilium/tetragon/pull/4380) by @andrewstrohman
• various v1.6 backports 20260219 (https://github.com/cilium/tetragon/pull/4669) by @kkourt
• [v1.6] new(bpf,pkg,docs): use tracefs instead of debugfs (https://github.com/cilium/tetragon/pull/4754) by @FedeDP
• [backport/v1.6] helm: fix rthooks container resources not being applied (https://github.com/cilium/tetragon/pull/4775) by @tpapagian
• bug: Avoid overwritten slogLeveler (https://github.com/cilium/tetragon/pull/4300) by @sayboras
• Fixed NotEqual operator for integer matchArgs with multiple values (https://github.com/cilium/tetragon/pull/4727) by @AritraDey-Dev
• process: improve exec refcounting (https://github.com/cilium/tetragon/pull/4473) by @kevsecurity

CI changes

• Makefile: update buf breaking change check to v1.6 branch (https://github.com/cilium/tetragon/pull/4801) by @dangome3
• fixes backports (https://github.com/cilium/tetragon/pull/4318) by @olsajiri
• [v1.6] tetragon: Fix TestMatchBinariesFollowChildrenUpdate test (https://github.com/cilium/tetragon/pull/4514) by @olsajiri
• [v1.6] Revert "ci: Fix package e2e tests GHA" (https://github.com/cilium/tetragon/pull/4695) by @andrewstrohman
• Backports/kevsecurity/v1.6/improve ring reliability in tests (https://github.com/cilium/tetragon/pull/4268) by @kevsecurity
• Backports/v1.6: tetragon: Limit sys_close events in test (https://github.com/cilium/tetragon/pull/4271) by @kevsecurity
• Makefile: don't rely on PWD (https://github.com/cilium/tetragon/pull/4782) by @dangome3

Dependency updates

• fix(deps): update module github.com/cilium/ebpf to v0.20.0 (https://github.com/cilium/tetragon/pull/4688) by @sayboras
• fix(deps): update module github.com/containerd/containerd to v1.7.29 [security] (v1.6) (https://github.com/cilium/tetragon/pull/4305) by @cilium-renovate[bot]
• chore(deps): update docker.io/library/alpine docker tag to v3.23.0 (v1.6) (https://github.com/cilium/tetragon/pull/4413) by @cilium-renovate[bot]
• chore(deps): update docker.io/library/alpine docker tag to v3.23.2 (v1.6) (https://github.com/cilium/tetragon/pull/4453) by @cilium-renovate[bot]
• chore(deps): update docker.io/library/alpine docker tag to v3.23.3 (v1.6) (https://github.com/cilium/tetragon/pull/4592) by @cilium-renovate[bot]
• chore(deps): update module golang.org/x/net to v0.45.0 [security] (v1.6) (https://github.com/cilium/tetragon/pull/4614) by @cilium-renovate[bot]
• chore(deps): update go to v1.25.8 (v1.6) (patch) (https://github.com/cilium/tetragon/pull/4793) by @cilium-renovate[bot]
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (v1.6) (https://github.com/cilium/tetragon/pull/4773) by @cilium-renovate[bot]

Full Changelog: https://github.com/cilium/tetragon/compare/v1.6.0...v1.6.1