Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a47795e0fe2e639d7ef5c9b9d408d849682552975a7f92ec201a268973b62a313 - attestation and
108e9186e8c5677a54d55ff8417b251780c369562123de0526230b3edff0a516cd17b6cbd5637869 - signature

v2.35.0 - 2026-08-10

Features

• validate Codebase deletion against deployment usage and return structured errors
• label Codebases with a normalized gitUrlPath hash
• Reconcile EventListener labelSelector for declarative trigger registration

Bug Fixes

• Verify TLS certificates in integration secret connection checks
• Verify SSH host keys for all git, GitServer and Gerrit connections
• Make create-strategy provisioning idempotent and refuse destructive pushes
• Check the fetched ref namespace and force-fetch in remote checkout
• Remove stray init master branch before pushing operator-authored repositories
• Replace clone-based CodebaseBranch git operations with packless transport
• align scaffolded helm chart README with helm-docs

Code Refactoring

• Remove dead git methods and vestigial CodebaseBranch workdir cleanup

Routine

• Update current development version

BREAKING CHANGE:

integrations with untrusted certificates report connected=false until their CA is
mounted through caCerts.

GitServers authenticating over SSH to a host outside the seeded providers must have their host
keys added to knownHosts.entries before upgrading. GitServers using token authentication are unaffected.

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677afc0b4e2649b6a4ab0d2932c1c110b2fa105450507d73c68224b52645b3790813 - attestation and
108e9186e8c5677af325fa17b14018369edcd5b35625b34578486c215138d379e933f2f23f33d2db - signature

v2.34.0 - 2026-07-13

Features

• Add stale branch detection and cleanup for codebase branches
• add HTTPRoute exposure to application Helm chart scaffold
• add Envoy Gateway HTTPRoute support for GitServer webhook

Bug Fixes

• Enable leader election in the operator deployment
• default gatewayApi values to prevent nil-pointer render
• garbage-collect GitServer credentials Secret on deletion

Code Refactoring

• extract duplicated literals and hostname formatting in EventListener creation

Routine

• Update current development version

Documentation

• add CLAUDE.md with repository guidance

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a816fdceec13ada9a59084042201bf9821fd7f80ba845c80167ae41e327b6700f - attestation and
108e9186e8c5677a58c7b936ed082c67b748c7e3e7116fb1a18c30f077df284d4224431d1543137e - signature

v2.33.0 - 2026-05-21

Features

• replace self-signed cert generation with cert-manager

Routine

• bump k8s.io and other dependencies
• Update current development version

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a3ab3fbb55e1dab097849162ad6138a088cc4be6d5ddf05c938e209b749560098 - attestation and
108e9186e8c5677a00d8f2ea1e81a6c26ab4f12428950ccf2c30c95fe7733ffd43c9de71a20034e5 - signature

v2.32.0 - 2026-04-13

Routine

• Update commit message pattern validation and CHANGELOG
• Update current development version

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ab30b959965db0ceaedcb34748d26201fe955db3cddb7906f44b2344d8466e083 - attestation and
108e9186e8c5677ae17a100d1ffda04ac32effb1500ded3bd40a48cd5d07a4bfd99593981894c55c - signature

v2.31.0 - 2026-04-04

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a45cf4eddd671db6894b27b21502d81f1d6817606cf143eb58aa780e8cdf7de58 - attestation and
108e9186e8c5677adc6ee20b729cfc2a0a57b9fab17b419c61d9d63a2e3bbd9841bd628db4056c1b - signature

v2.30.0 - 2026-03-27

Features

• simplify GitLab CI template selection via annotation-based ConfigMap lookup
• add tektonDisabled field and ciTool enum validation for multi-CI support
• Add Docker registry and podLabels to helm chart (#246)

Bug Fixes

• add Helm chart validation to CI pipeline and fix label indentation
• update CodebaseBranch pipelines example with security field (#254)

Routine

• Upgrade golangci-lint from v1.64.7 to v2.8.0 (#257)
• add security pipeline field to CodebaseBranch CRD (#254)
• Update Operator SDK from v1.39.2 to v1.42.0 (#252)
• Update CI pipelines (#249)
• Update current development version (#249)
• Update current development version (#244)

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a4dfdae97f6f94cd52780342eb3d611c7617e48863b59df3f4477c4d0eb45dac9 - attestation and
108e9186e8c5677ae7f20d68f6738c9ccb6bce2942ef0025a307c455947b8102c43b03d5ad093b15 - signature

v2.29.1 - 2025-12-05

Features

• Add Docker registry and podLabels to helm chart (#246)

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ac41ae406540c2fad3a97b6b7e98f3097dea8dadb18a8d75300b90c3249fc5493 - attestation and
108e9186e8c5677a95b3fad1d99c7e5003f2aa3a547301d980948eb8588984e8efe698bb0b7f443b - signature

v2.29.0 - 2025-11-21

Features

• Add validation for gitUrlPath to ensure it does not end with a space (#236)
• Add CloneRepositoryCredentials to Codebase spec (#234)
• Add support onboarding git projects with access token (#231)
• Add support for gitlabci (#225)

Bug Fixes

• Raise pod memory to prevent clone OOM (#240)
• Branch repository provisioning with gitprovider v2 (#231)

Code Refactoring

• Project onboarding workflow (#231)
• Extract common git repository preparation logic (#229)
• Use Status().Patch() for git status updates in chain handlers (#227)
• Move gitlab configuration to the separate chain handler (#225)

Routine

• Update Kuberocketai to the latest stable version
• Update KubeRocketAI (#220)
• Setup KubeRocketAI (#220)
• Update current development version (#217)

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ab942503611cf14614dc5d69a9ae7c3961ce917a2ad65a2194d5ec06685f502a4 - attestation and
108e9186e8c5677a24017038bba626800bb8cdb6d946dd2242655403b6992a6a277e2f7e3442d382 - signature

v2.28.0 - 2025-07-21

Features

• Support creation git branch from another branch (#214)
• CodebaseBranch spec improvements (#208)
• Allow usage of any branch name for CodebaseBranch (#198)

Bug Fixes

• CodebaseImageStream labels break auto-deploy (#198)
• Prevent cleaning build number for CodebaseBranch (#194)

Code Refactoring

• Codebase label for CodebaseBranch (#198)
• Update codebase and codebasebranch label to improve consistency (#198)

Routine

• Allow overriding securityContext fields (#212)
• Add multi-architecture build support (#210)
• Update current development version (#196)
• Update current development version (#192)
• Add ImagePullSecrets field support (#190)
• Rename ConfigMap from 'edp-config' to 'krci-config' (#183)
• Update current development version (#187)

Deployment Certifications and Source Traceability

EDP container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a32f5eab37b3123abdd5df703715e510bf582bf6131f24e7879ccca059e1880e6 - attestation and
108e9186e8c5677ab5dd20f83416b15a5af482f7690c0a75bcd8ad039904366c4c6204bacd5cc44a - signature

v2.27.2 - 2025-04-11

Bug Fixes

• Prevent cleaning build number for CodebaseBranch (#194)