Skip to content

chore: Release v2.19.0#2949

Open
bhope wants to merge 2 commits intokubernetes:mainfrom
bhope:release-2.19
Open

chore: Release v2.19.0#2949
bhope wants to merge 2 commits intokubernetes:mainfrom
bhope:release-2.19

Conversation

@bhope
Copy link
Copy Markdown
Member

@bhope bhope commented May 6, 2026 •
edited
Loading

Release v2.19.0

  1. Update the CHANGELOG
  2. Update data.yml
  3. Update examples
  4. Regenerate README

Part of #2919

@k8s-ci-robot k8s-ci-robot requested review from dgrisonnet and nmn3m May 6, 2026 03:28
@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label May 6, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 6, 2026

This issue is currently awaiting triage.

If kube-state-metrics contributors determine this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@github-project-automation github-project-automation Bot moved this to Needs Triage in SIG Instrumentation May 6, 2026
@k8s-ci-robot k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels May 6, 2026
@linux-foundation-easycla
Copy link
Copy Markdown

linux-foundation-easycla Bot commented May 6, 2026 •
edited
Loading

CLA Signed

The committers listed above are authorized under a signed CLA.

@k8s-ci-robot k8s-ci-robot added cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. and removed cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels May 6, 2026
@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels May 6, 2026
mrueg
mrueg reviewed May 6, 2026
View reviewed changes
Comment thread CHANGELOG.md Outdated

NOTE: This release addresses a security vulnerability (GHSA-g3c8-4qh2-rhrg) where `/debug/pprof/*` endpoints were not protected by the `--auth-filter` flag. The endpoints have been moved to the telemetry server and are now correctly gated. See [#2924](https://github.com/kubernetes/kube-state-metrics/pull/2924) for details. Credits to @vldevadath for responsible disclosure.

* This release builds with Go `v1.26.1`
Copy link
Copy Markdown
Member

@mrueg mrueg May 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we bump this to 1.26.2 before the release? Thanks

Copy link
Copy Markdown
Member Author

@bhope bhope May 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mrueg Updating it in #2950
Once that's merged, will update here.

Copy link
Copy Markdown
Member Author

@bhope bhope May 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated. Thanks.

@bhope bhope force-pushed the release-2.19 branch 3 times, most recently from 26ade53 to 9f939dd Compare May 6, 2026 22:57
@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels May 6, 2026
@bhope bhope changed the title chore: CHANGELOG for v2.19.0 chore: Release v2.19.0 May 6, 2026
@bhope
Add Release v2.19.0
790234d 
Update data.yml and examples

docs: regenerate README with v2.19.0 compatibility matrix entry
mrueg
mrueg reviewed May 8, 2026
View reviewed changes
Comment thread CHANGELOG.md Outdated
* chore: Rebase [#2924](https://github.com/kubernetes/kube-state-metrics/pull/2924) with an additional commit by @rexagod in [#2947](https://github.com/kubernetes/kube-state-metrics/pull/2947)
* chore: bump Go from 1.26.1 to 1.26.2 by @bhope in [#2950](https://github.com/kubernetes/kube-state-metrics/pull/2950)

## New Contributors
Copy link
Copy Markdown
Member

@mrueg mrueg May 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We usually don't have these in the changelog

Copy link
Copy Markdown
Member Author

@bhope bhope May 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, so that's only in the release notes. Thanks for pointing that out, I will take it out.

Copy link
Copy Markdown
Member Author

@bhope bhope May 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed sections: Full changelog and new contributors.

@rexagod rexagod moved this from Needs Triage to Needs Approval in SIG Instrumentation May 11, 2026
@rexagod
Copy link
Copy Markdown
Member

rexagod commented May 11, 2026

/approve
/lgtm
/hold

(for @mrueg to take a look post their review, and unhold)

@k8s-ci-robot k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 11, 2026
@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 11, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented May 11, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bhope, rexagod

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 11, 2026
@rexagod
Copy link
Copy Markdown
Member

rexagod commented May 11, 2026 •
edited
Loading

It seems we've identified a severe bug downstream, which I'd ideally like to push here to save us the trouble of cutting a new patch release immediately after. Investigating, will update here.

@rexagod
Copy link
Copy Markdown
Member

rexagod commented May 11, 2026

Blocked by https://github.com/kubernetes/kube-state-metrics/pull/2955/changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mrueg mrueg mrueg left review comments

@dgrisonnet dgrisonnet Awaiting requested review from dgrisonnet

@nmn3m nmn3m Awaiting requested review from nmn3m

Assignees

@rexagod rexagod

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. lgtm "Looks good to me", indicates that a PR is ready to be merged. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

SIG Instrumentation
Status: Needs Approval

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@bhope @k8s-ci-robot @rexagod @mrueg