github.com/flannel-io/flannel

What's Changed

• Add helm chart unittest target and CI job by @mgfritch in #2495
• build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #2493
• build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2498
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #2501
• e2e: replace k3s with kind by @thomasferrandiz in #2506
• chore: bump CodeQL GHA actions by @thomasferrandiz in #2512
• security: fix CVE-2026-46600, CVE-2026-56852, suppress GO-2026-5932 false positive by @thomasferrandiz in #2514
• Pin Dockerfile base images to SHA digests by @thomasferrandiz in #2515
• Add ClusterFuzzLite continuous fuzzing by @thomasferrandiz in #2516
• docs: clarify network policy options in README by @locker95 in #2503
• Fix permissions in fuzzer workflows by @thomasferrandiz in #2517
• build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in #2510
• build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2499
• build(deps): bump Azure/setup-helm from 4.3.1 to 5.0.1 by @dependabot[bot] in #2508
• Add ADOPTERS.md listing organisations using Flannel in production by @pgonin with @Copilot in #2397
• docs: document missing VXLAN backend options by @locker95 in #2504
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2520
• Add readiness (/readyz) and liveness (/healthz) probes to flanneld by @thomasferrandiz in #2523
• build(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in #2519
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #2521
• build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2507
• subnet/etcd: recover single-subnet watch from compaction by @phinze in #2524
• Prepare for release v0.28.9 by @thomasferrandiz in #2525

New Contributors

• @locker95 made their first contribution in #2503

Full Changelog: v0.28.8...v0.28.9

What's Changed

• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2490
• build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot[bot] in #2494
• Simplify WriteSubnetFile and make atomic by @brandond in #2497
• build(deps): bump the other-go-modules group across 1 directory with 2 updates by @dependabot[bot] in #2489
• Prepare release v0.28.8 by @thomasferrandiz in #2505

New Contributors

• @brandond made their first contribution in #2497

Full Changelog: v0.28.7...v0.28.8

What's Changed

• fix: use install-conf in chart by @thomasferrandiz in #2484
• prepare for release v0.28.7 by @thomasferrandiz in #2485

Full Changelog: v0.28.6...v0.28.7

What's Changed

• Bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #2463
• Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #2465
• Bump the other-go-modules group with 2 updates by @dependabot[bot] in #2464
• feat: new install_conf cmd to install flannel's config file by @thomasferrandiz in #2466
• Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #2468
• Bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in #2467
• Bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2461
• subnet/etcd: recover subnet watch from compaction by @phinze in #2471
• fix: skip invalid CIDRs in subnet file readers by @immanuwell in #2454
• etcd: bug fixes suggested by Claude by @thomasferrandiz in #2472
• build(deps): bump the etcd group with 4 updates by @dependabot[bot] in #2474
• build(deps): bump the tencent group with 2 updates by @dependabot[bot] in #2475
• build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in #2476
• build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2478
• build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #2479
• build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #2473
• build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot[bot] in #2480
• Bump flannel plugin and prepare release v0.28.6 by @thomasferrandiz in #2481
• fix: use semver tag type in Docker meta to support release events by @thomasferrandiz with @Copilot in #2483

New Contributors

• @phinze made their first contribution in #2471
• @immanuwell made their first contribution in #2454

Full Changelog: v0.28.5...v0.28.6

What's Changed

• Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #2421
• Fail early in e2e tests and remove unnecessary step by @thomasferrandiz in #2429
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #2431
• Bump k8s deps to v0.33.11 by @thomasferrandiz in #2432
• Bump the tencent group with 2 updates by @dependabot[bot] in #2430
• fix(vxlan): guard ifaceAddrsV6[0] on IPv4-only setups by @SAY-5 in #2434
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.83 to 1.3.87 in the tencent group by @dependabot[bot] in #2435
• Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #2436
• Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #2441
• Bump the etcd group with 4 updates by @dependabot[bot] in #2439
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.87 to 1.3.90 in the tencent group across 1 directory by @dependabot[bot] in #2440
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.90 to 1.3.94 in the tencent group by @dependabot[bot] in #2444
• Bump golang.org/x/sys from 0.43.0 to 0.44.0 in the other-go-modules group across 1 directory by @dependabot[bot] in #2445
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2452
• fix: reap orphaned zombie child processes when running as PID 1 by @pratikjagrut in #2438
• Bump github/codeql-action from 4.35.3 to 4.36.0 by @dependabot[bot] in #2450
• Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2453
• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #2451
• Bump golang.org/x/sys from 0.44.0 to 0.45.0 in the other-go-modules group by @dependabot[bot] in #2449
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.94 to 1.3.105 in the tencent group across 1 directory by @dependabot[bot] in #2448
• Bump the etcd group with 4 updates by @dependabot[bot] in #2455
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.105 to 1.3.108 in the tencent group across 1 directory by @dependabot[bot] in #2456
• Bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #2457
• Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2458
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2459
• Prepare for release v0.28.5 by @mgfritch in #2460

New Contributors

• @SAY-5 made their first contribution in #2434

Full Changelog: v0.28.4...v0.28.5

What's Changed

• fix go version (don't set patch version) by @thomasferrandiz in #2428

Full Changelog: v0.28.3...v0.28.4

What's Changed

• Update CONTRIBUTING.md by @pgonin in #2396
• Update code-of-conduct.md by @pgonin in #2395
• remove docker login steps in build and test workflows by @thomasferrandiz in #2410
• Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #2407
• Bump actions/configure-pages from 5.0.0 to 6.0.0 by @dependabot[bot] in #2406
• fix: honor --stderrthreshold flag when --logtostderr is enabled by @pierluigilenoci in #2405
• vxlan: fix v6 direct route deletion to use v6DirectRoute by @cuiweixie in #2403
• lease: fix LeaseAttrs.String() after json.Marshal errors by @cuiweixie in #2404
• Add GOVERNANCE.md by @pgonin in #2391
• Bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot[bot] in #2408
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #2409
• Bump the tencent group with 2 updates by @dependabot[bot] in #2381
• Improve the security of Dockerfile by @manuelbuil in #2412
• Secure makefile by @manuelbuil in #2414
• Verify the kubectl sha256sum by @manuelbuil in #2413
• Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2418
• Use dependabot to update images versions on the manifest by @rbrtbnfgl in #2419
• Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #2422
• Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in #2423
• Bump go to 1.25 by @thomasferrandiz in #2424
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #2420
• Bump the etcd group across 1 directory with 4 updates by @dependabot[bot] in #2398
• Bump the tencent group with 2 updates by @dependabot[bot] in #2417
• Bump the other-go-modules group across 1 directory with 3 updates by @dependabot[bot] in #2425
• Bump flannel-cni-plugin to v1.9.1-flannel1 by @thomasferrandiz in #2427
• Prepare for release v0.28.3 by @thomasferrandiz in #2426

New Contributors

• @pierluigilenoci made their first contribution in #2405
• @cuiweixie made their first contribution in #2403

Full Changelog: v0.28.2...v0.28.3

What's Changed

• Bump golang.org/x/sys from 0.40.0 to 0.41.0 in the other-go-modules group by @dependabot[bot] in #2352
• Bump github/codeql-action from 4.31.11 to 4.32.3 by @dependabot[bot] in #2356
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2350
• Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #2349
• Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in #2362
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #2363
• Bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.40.0 by @dependabot[bot] in #2360
• Bump the etcd group with 4 updates by @dependabot[bot] in #2355
• Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #2364
• Add Scorecard workflow for supply-chain security by @thomasferrandiz in #2365
• [StepSecurity] Apply security best practices by @step-security-bot in #2366
• Add OpenSSF Scorecard badge to README by @pgonin in #2367
• Remove old manifests by @manuelbuil in #2368
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #2357
• Add 2025 activity summary report by @Copilot in #2343
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2374
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2375
• Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 by @dependabot[bot] in #2378
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #2376
• Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #2377
• Add SECURITY.md security policy by @pgonin in #2371
• Add Security policy page to main README page by @pgonin in #2380
• Bump the tencent group with 2 updates by @dependabot[bot] in #2339
• Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #2383
• Bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #2384
• Bump actions/upload-artifact from 4.6.1 to 7.0.0 by @dependabot[bot] in #2385
• Bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot[bot] in #2386
• Bump github/codeql-action from 3.32.5 to 4.32.6 by @dependabot[bot] in #2382
• Bump google.golang.org/grpc from 1.71.1 to 1.79.3 by @dependabot[bot] in #2387
• Add ROADMAP.md and update README roadmap link by @pgonin in #2393
• Bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #2399
• fix extensions code exec by @thomasferrandiz in #2400
• Prepare update flannel to v0.28.2 by @thomasferrandiz in #2402

New Contributors

• @step-security-bot made their first contribution in #2366
• @Copilot made their first contribution in #2343

Full Changelog: v0.28.1...v0.28.2

What's Changed

• Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #2341
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #2342
• Fix blackhole creation test logic in AddBlackholeV4Route and AddBlackholeV6Route by @axeal in #2329
• Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the other-go-modules group by @dependabot[bot] in #2340
• Bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #2344
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #2345
• Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 in the other-go-modules group by @dependabot[bot] in #2347
• Prepare update flannel to v0.28.1 by @rbrtbnfgl in #2351

New Contributors

• @axeal made their first contribution in #2329

Full Changelog: v0.28.0...v0.28.1

What's Changed

• Bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2282
• Added TAG to fix bin version by @rbrtbnfgl in #2297
• Bump docker image versions by @thomasferrandiz in #2299
• ip: improve primary address selection to account for address flags by @lilioid in #2295
• Additional check on podCIDR by @rbrtbnfgl in #2306
• fix GHA path in dependabot.yaml by @thomasferrandiz in #2304
• Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot[bot] in #2312
• Bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot[bot] in #2308
• Bump actions/configure-pages from 4.0.0 to 5.0.0 by @dependabot[bot] in #2309
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2310
• Bump github/codeql-action from 3.28.13 to 4.31.6 by @dependabot[bot] in #2311
• Update community meeting frequency to monthly by @pgonin in #2313
• Fix spelling by @fguendling in #2302
• Bump actions/upload-pages-artifact from 3.0.1 to 4.0.0 by @dependabot[bot] in #2317
• Bump docker/login-action from 3.4.0 to 3.6.0 by @dependabot[bot] in #2318
• Bump docker/metadata-action from 5.7.0 to 5.10.0 by @dependabot[bot] in #2316
• Bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot[bot] in #2315
• Bump golangci/golangci-lint-action from 6.1.1 to 9.2.0 by @dependabot[bot] in #2314
• doc: add external routing configuration notice of public IPv6 prefixes by @lilioid in #2290
• Bump to go 1.24 and k8s deps to v0.32.10 by @thomasferrandiz in #2320
• Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in #2303
• Bump the etcd group with 4 updates by @dependabot[bot] in #2284
• Bump the tencent group with 2 updates by @dependabot[bot] in #2296
• Bump the other-go-modules group across 1 directory with 4 updates by @dependabot[bot] in #2298
• Bump github/codeql-action from 4.31.7 to 4.31.8 by @dependabot[bot] in #2326
• Bump docker/build-push-action from 5.4.0 to 6.18.0 by @dependabot[bot] in #2327
• Bump actions/attest-build-provenance from 2.2.3 to 3.0.0 by @dependabot[bot] in #2325
• Bump aquasecurity/trivy-action from 0.30.0 to 0.33.1 by @dependabot[bot] in #2324
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.11 to 1.3.12 in the tencent group by @dependabot[bot] in #2322
• Bump actions/setup-go from 5.4.0 to 6.1.0 by @dependabot[bot] in #2323
• Added check for nftables before checking br_netfilter module by @rbrtbnfgl in #2321
• Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #2335
• Bump the tencent group with 2 updates by @dependabot[bot] in #2333
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #2336
• Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @dependabot[bot] in #2334
• Bump the etcd group with 4 updates by @dependabot[bot] in #2332
• Bump the tencent group with 2 updates by @dependabot[bot] in #2337

New Contributors

• @lilioid made their first contribution in #2295
• @pgonin made their first contribution in #2313
• @fguendling made their first contribution in #2302

Full Changelog: v0.27.4...v0.28.0