-
v0.3.9 Stable
released this
2026-07-24 01:33:13 +00:00 | 13 commits to main since this releaseChanged
- Split the user and service-account convergence paths into explicit lifecycle
phases and clear the full static-analysis backlog so controller behavior is
easier to review and extend. - Emit Kubernetes Events through the current events.k8s.io recorder API across
every controller while retaining compatibility with the shared harness.
Fixed
- Preserve
spec.minioRefacross v1alpha1/v1beta1 conversion for every
top-level resource, cross-namespacespec.bucketRef.namespacefor every
bucket subresource, and credentialspec.secret.extraData; the v1beta1
storage schema previously omitted or discarded these fields. - Make MinioServiceAccount rotation retries converge MinIO on the candidate
key already published to the managed Secret. A durable, non-secret status
checkpoint prevents transientUpdateServiceAccount(NewSecretKey)failures
from minting a different key and churning consumers on every retry.
Security
- Update vulnerable Prometheus, OpenTelemetry,
x/net, andx/text
dependencies to their patched release floors. - Build with digest-pinned Go 1.25.12, which includes the
crypto/tlsfix for
GO-2026-5856, and use cryptographic entropy for reconcile-backoff jitter.
Included changes (v0.3.8 -> v0.3.9)
3a04236d04d1build: align CI with patched Go toolchainf1389773914ffix(operator): harden reconciliation and storage contracts
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Split the user and service-account convergence paths into explicit lifecycle