v0.21.1

Changes by Kind

Feature

• Build kube-cross, go-runner, releng-ci with golang 1.26.2/1.25.9
  • Remove Go 1.24 variants as all supported release branches are now on 1.26/1.25 (#4366, @xmudrii) [SIG Release]
• Bump distroless-iptables to use Go 1.26.2/1.25.9 (#4367, @xmudrii) [SIG Release]
• Update k8s-cloud-builder and k8s-ci-builder to Go 1.26.2/1.25.9
  • Drop k8s-cloud-builder and k8s-ci-builder configs for release-1.32 (#4368, @xmudrii) [SIG Release]

Uncategorized

• Fix release-notes --skip-first-commit crash on repositories where the skipped-to commit is not on the first-parent chain. (#4352, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• cloud.google.com/go/aiplatform: v1.114.0 → v1.120.0
• cloud.google.com/go/area120: v0.9.7 → v0.10.0
• cloud.google.com/go/artifactregistry: v1.19.0 → v1.20.0
• cloud.google.com/go/asset: v1.22.0 → v1.22.1
• cloud.google.com/go/auth: v0.18.2 → 87cdcc9
• cloud.google.com/go/bigquery: v1.72.0 → v1.74.0
• cloud.google.com/go/bigtable: v1.41.0 → v1.42.0
• cloud.google.com/go/container: v1.45.0 → v1.46.0
• cloud.google.com/go/dataform: v0.12.1 → v0.13.0
• cloud.google.com/go/dataproc/v2: v2.15.0 → v2.16.0
• cloud.google.com/go/datastore: v1.21.0 → v1.22.0
• cloud.google.com/go/dialogflow: v1.74.0 → v1.76.0
• cloud.google.com/go/documentai: v1.39.0 → v1.42.0
• cloud.google.com/go/iam: v1.5.3 → v1.6.0
• cloud.google.com/go/kms: v1.25.0 → v1.26.0
• cloud.google.com/go/maps: v1.26.0 → v1.29.0
• cloud.google.com/go/networkconnectivity: v1.20.0 → v1.21.0
• cloud.google.com/go/networkmanagement: v1.21.0 → v1.23.0
• cloud.google.com/go/osconfig: v1.15.1 → v1.16.0
• cloud.google.com/go/retail: v1.25.1 → v1.26.0
• cloud.google.com/go/spanner: v1.87.0 → v1.88.0
• cloud.google.com/go/speech: v1.29.0 → v1.30.0
• cloud.google.com/go/storage: v1.60.0 → v1.61.3
• filippo.io/edwards25519: v1.1.1 → v1.2.0
• github.com/aws/aws-sdk-go-v2: v1.41.3 → v1.41.5
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.7.6 → v1.7.8
• github.com/aws/aws-sdk-go-v2/config: v1.32.11 → v1.32.13
• github.com/aws/aws-sdk-go-v2/credentials: v1.19.11 → v1.19.13
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.18.19 → v1.18.21
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.22.5 → v1.22.10
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.4.19 → v1.4.21
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.7.19 → v2.7.21
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.8.5 → v1.8.6
• github.com/aws/aws-sdk-go-v2/internal/v4a: v1.4.19 → v1.4.22
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.13.6 → v1.13.7
• github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.9.11 → v1.9.13
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.13.19 → v1.13.21
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.19.19 → v1.19.21
• github.com/aws/aws-sdk-go-v2/service/kms: v1.49.5 → v1.50.3
• github.com/aws/aws-sdk-go-v2/service/s3: v1.96.3 → v1.97.3
• github.com/aws/aws-sdk-go-v2/service/signin: v1.0.7 → v1.0.9
• github.com/aws/aws-sdk-go-v2/service/sso: v1.30.12 → v1.30.14
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.35.16 → v1.35.18
• github.com/aws/aws-sdk-go-v2/service/sts: v1.41.8 → v1.41.10
• github.com/clipperhouse/displaywidth: v0.6.0 → v0.10.0
• github.com/clipperhouse/uax29/v2: v2.3.0 → v2.6.0
• github.com/docker/cli: v29.3.0 → v29.4.0
• github.com/gabriel-vasile/mimetype: v1.4.10 → v1.4.13
• github.com/go-git/go-git/v5: v5.17.0 → v5.17.2
• github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
• github.com/go-openapi/strfmt: v0.26.0 → v0.26.1
• github.com/go-playground/validator/v10: v10.28.0 → v10.30.2
• github.com/google/go-containerregistry: v0.21.3 → v0.21.5
• github.com/googleapis/enterprise-certificate-proxy: v0.3.12 → v0.3.14
• github.com/googleapis/gax-go/v2: v2.17.0 → v2.19.0
• github.com/in-toto/attestation: v1.1.2 → v1.2.0
• github.com/klauspost/compress: v1.18.4 → v1.18.5
• github.com/letsencrypt/borp: a78493c → 89c6927
• github.com/letsencrypt/boulder: v0.20251110.0 → v0.20260223.0
• github.com/mattn/go-isatty: v0.0.20 → v0.0.21
• github.com/maxbrunsfeld/counterfeiter/v6: v6.12.1 → v6.12.2
• github.com/moby/moby/api: v1.54.0 → v1.54.1
• github.com/moby/moby/client: [v0.3.0 → v0.4.0](https://github.com/moby/moby/compare/clien...

v0.21.0

Changes by Kind

Deprecation

• Removed the long-time deprecated push-build.sh. (#4296, @saschagrunert) [SIG Release]

Feature

• Build Go 1.26.1/1.25.8 images (#4327, @cpanato) [SIG Release]
• Krel announce send now logs mailing list URLs after sending and no longer shows a confusing retry counter on the confirmation prompt. (#4333, @saschagrunert) [SIG Release]
• Update k8s-cloud-builder and k8s-ci-builder to Go 1.26.0 (#4323, @cpanato) [SIG Release]

Bug or Regression

• Fixed a bug in krel push where auto-discovered versions with a version suffix caused a path mismatch between staging and pushing artifacts. (#4310, @saschagrunert) [SIG Release]
• Krel release-notes now defaults to git graph traversal (--list-v2) instead of GitHub API date-based filtering, fixing cases where PRs were silently skipped due to unexpected committer dates. (#4319, @saschagrunert) [SIG Release]
• Use proper surrogate key for version markers (#4291, @upodroid) [SIG Release]
• Use regional Cloud Build API with pagination in GetJobsByTag (#4306, @xmudrii) [SIG Release]

Other (Cleanup or Flake)

• Removed the --list-v2 flag from krel release-notes and the --required-author flag from release-notes generate. The v2 release notes generation is now the only implementation. (#4343, @saschagrunert) [SIG Release]

Dependencies

Added

• al.essio.dev/pkg/shellescape: v1.6.0
• buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go: 6c6e0d3
• buf.build/go/protovalidate: v0.14.0
• buf.build/go/protoyaml: v0.6.0
• github.com/DataDog/datadog-agent/comp/core/tagger/origindetection: v0.67.0
• github.com/DataDog/datadog-agent/pkg/version: v0.67.0
• github.com/DataDog/dd-trace-go/v2: v2.2.2-rc.1
• github.com/DataDog/go-libddwaf/v4: v4.3.0
• github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp: v1.5.3
• github.com/Masterminds/goutils: v1.1.1
• github.com/Masterminds/sprig/v3: v3.3.0
• github.com/antihax/optional: v1.0.0
• github.com/antlr4-go/antlr/v4: v4.13.1
• github.com/aws/aws-sdk-go-v2/service/signin: v1.0.7
• github.com/cenkalti/backoff/v5: v5.0.3
• github.com/containerd/containerd/v2: v2.1.4
• github.com/containerd/typeurl/v2: v2.2.3
• github.com/decred/dcrd/crypto/blake256: v1.1.0
• github.com/go-openapi/swag/jsonutils/fixtures_test: v0.25.5
• github.com/go-openapi/testify/enable/yaml/v2: v2.4.1
• github.com/go-openapi/testify/v2: v2.4.1
• github.com/google/addlicense: v1.1.1
• github.com/google/cel-go: v0.26.1
• github.com/google/go-github/v73: v73.0.0
• github.com/google/go-github/v84: v84.0.0
• github.com/grafana/regexp: a468a5b
• github.com/hashicorp/go-version: v1.7.0
• github.com/huandu/xstrings: v1.5.0
• github.com/lestrrat-go/httprc/v3: v3.0.0
• github.com/lestrrat-go/jwx/v3: v3.0.10
• github.com/lestrrat-go/option/v2: v2.0.0
• github.com/mitchellh/copystructure: v1.2.0
• github.com/mitchellh/reflectwalk: v1.0.2
• github.com/moby/moby/api: v1.54.0
• github.com/moby/moby/client: v0.3.0
• github.com/natefinch/atomic: v1.0.1
• github.com/oklog/ulid/v2: v2.1.1
• github.com/pborman/getopt: 7148bc3
• github.com/prometheus/otlptranslator: v0.0.2
• github.com/puzpuzpuz/xsync/v3: v3.5.1
• github.com/rogpeppe/fastuuid: v1.2.0
• github.com/saschagrunert/ccli/v3: v3.0.0
• github.com/shirou/gopsutil/v4: v4.25.3
• github.com/shopspring/decimal: v1.4.0
• github.com/sigstore/rekor-tiles: v0.1.11
• github.com/sigstore/rekor-tiles/v2: v2.0.1
• github.com/sigstore/timestamp-authority/v2: v2.0.3
• github.com/stoewer/go-strcase: v1.3.1
• github.com/tink-crypto/tink-go-hcvault/v2: v2.3.0
• github.com/transparency-dev/formats: 404c0d5
• github.com/transparency-dev/tessera: ba6c65c
• github.com/urfave/cli/v3: v3.7.0
• github.com/valyala/fastjson: v1.6.4
• go.etcd.io/gofail: v0.2.0
• go.etcd.io/raft/v3: v3.6.0
• go.opentelemetry.io/collector/featuregate: v1.31.0
• go.opentelemetry.io/collector/internal/telemetry: v0.125.0
• go.opentelemetry.io/contrib/bridges/otelzap: v0.10.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.60.0
• go.opentelemetry.io/otel/log: v0.11.0
• goa.design/goa/v3: v3.23.4
• golang.org/x/tools/go/expect: v0.1.0-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated

Changed

• cel.dev/expr: v0.24.0 → v0.25.1
• chainguard.dev/go-grpc-kit: v0.17.7 → v0.17.15
• chainguard.dev/sdk: v0.1.29 → v0.1.45
• cloud.google.com/go: v0.121.6 → v0.123.0
• cloud.google.com/go/accessapproval: v1.8.6 → v1.8.8
• cloud.google.com/go/accesscontextmanager: [v1.9.6 → v1.9.7](googleapis/google-cloud-go@accesscontextmanager/v1.9.6...accesscontextmanager/v1.9....

v0.20.1

Changes by Kind

Bug or Regression

• Use proper surrogate key for version markers (#4291, @upodroid) [SIG Release]

v0.20.0

Changes by Kind

Feature

• Add distroless-iptables to use Go 1.26.0 (#4278, @cpanato) [SIG Release]
• Golang: Build 1.26.0 images (#4271, @cpanato) [SIG Release]
• Increase HTTP retry resilience with 30s timeout, 5 retries, and exponential backoff. (#4273, @saschagrunert) [SIG Release]
• Replace SendGrid with Gmail OAuth for krel announce send. No setup required — a browser opens for Google authorization on each run. Use --no-browser for headless environments. (#4268, @saschagrunert) [SIG Release]

v0.19.0

Changes by Kind

Feature

• Adds ca-certificates to debian-base image (#4052, @hakman) [SIG Release]
• Configurable cross-platform builds for kube-cross image (#4228, @akhilerm) [SIG Release]
• Feat: add includeLabels option to release-notes (#4089, @jackfrancis) [SIG Release]
• Update cosign image and deps (#3940, @cpanato) [SIG Release]
• Use origin PR info for release notes instead of cherry-pick PRs generated by k8s-infra-cherrypick-robot. (#3971, @IrvingMg) [SIG Release]

Documentation

• Updated cri-tools README.md. (#3988, @saschagrunert) [SIG Release]

Failing Test

• K8s-cloud-builder: pinned docker-ce-cli to version 24.0.x for API 1.43 compatibility (#4183, @saschagrunert) [SIG Release]
• The releng-ci image now ships with ko v0.18.1 goreleaser to v2.13.3 (#4234, @puerco) [SIG Release]

Bug or Regression

• Fix duplicate short hand, remove duplicated flags and mark deprecated the create-website-pr (#4123, @cpanato) [SIG Release]
• Fix release notes to include the revert PR instead of the reverted one. (#3974, @IrvingMg) [SIG Release]
• Images: use GOTOOLCHAIN=auto for automatic version selection (#4215, @BenTheElder) [SIG Release]
• Pin docker-ce-cli to version 24.0.x in k8s-ci-builder image for API 1.43 compatibility with CI DinD environments (#4185, @saschagrunert) [SIG Release]
• Schedule-builder: Use the upcoming_releases dates for building the release schedule (#3982, @xmudrii) [SIG Release]

Other (Cleanup or Flake)

• Bump golangci-lint and allow release-assets.githubusercontent.com (#4079, @cpanato) [SIG Release]
• Bumped go-github to v75 to harmonize with release-sdk (#4169, @puerco) [SIG Release]
• Clean up ci and apply best practices (#4041, @cpanato) [SIG Release]
• Rebuild debian-base to bookworm-v1.0.7 (#4251, @PushkarJ) [SIG Release]
• Remove the dependency on conntrack and conntrack-tools for the kubelet package. (#4106, @travier) [SIG Release]
• Removed usage of deprecated gopkg.in/yaml.v2. (#4105, @saschagrunert) [SIG Release]
• The distroless iptables binary will no longer have conntrack binary (#4223, @aroradaman) [SIG Release]
• The distroless iptables binary will no longer have ebtales binary (#4226, @aroradaman) [SIG Release]
• Update cosign to v2.6.0 (#4132, @cpanato) [SIG Release]
• Update dep-golang github issue template (#4021, @cpanato) [SIG Release]
• Update deprecated cloudbuild field (#4081, @cpanato) [SIG Release]
• Update setcap image to use bookworm-v1.0.7 (#4252, @PushkarJ) [SIG Release]
• Use go1.25 and update golanci-lint (#4133, @cpanato) [SIG Release]
• CIBucketLegacy const has been removed as the bucket is no longer used and has been replaced by gs://k8s-release-dev (#4170, @ameukam) [SIG Release]

v0.18.0

v0.18.0

v0.17.12

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.17.12

Bug or Regression

• Fixed release notes index to not refer gs:// links to the production bucket. (#3838, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.17.11

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.17.11

Feature

• Build Go 1.23.3 and 1.22.9 images (#3820, @cpanato) [SIG Release]
• Bump distroless-iptables to use go1.22.9 and go1.23.3 (#3829, @cpanato) [SIG Release]
• Update go-runner go mod to minimum go1.22 and bump image version (#3816, @cpanato) [SIG Release]

Bug or Regression

• Fixed release notes index generation producing wrong URLs. (#3834, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.1
• golang.org/x/crypto: v0.28.0 → v0.29.0
• golang.org/x/net: v0.30.0 → v0.31.0
• golang.org/x/oauth2: v0.23.0 → v0.24.0
• golang.org/x/sync: v0.8.0 → v0.9.0
• golang.org/x/sys: v0.26.0 → v0.27.0
• golang.org/x/term: v0.25.0 → v0.26.0
• golang.org/x/text: v0.19.0 → v0.20.0

Removed

Nothing has changed.

v0.17.10

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.17.10

Feature

• Build Go 1.23.2 and 1.22.8 images (#3779, @haitch) [SIG Release]
• Bump distroless-iptables to use go 1.23.2/1.22.8 (#3797, @haitch) [SIG Release]
• Update k8s-cloud-builder and k8s-ci-builder for Kubernetes 1.32 to Go 1.23.2 (#3799, @xmudrii) [SIG Release]
• Update k8s-cloud-builder and k8s-ci-builder to Go 1.23.2/1.22.8 (#3807, @haitch) [SIG Release]

Bug or Regression

• Fixed a bug where krel announce would spit out the release announcement as the raw bytes (#3803, @puerco) [SIG Release]

Other (Cleanup or Flake)

• Don't set KUBE_PARALLEL_BUILD_MEMORY any more. (#3795, @saschagrunert) [SIG Release]
• Use only public URLs for release notes index (#3793, @saschagrunert) [Sig Release]

Dependencies

Added

Nothing has changed.

Changed

• github.com/BurntSushi/toml: v0.3.1 → v1.2.1
• github.com/yuin/goldmark: v1.7.4 → v1.7.8
• golang.org/x/tools: v0.25.0 → v0.26.0
• k8s.io/api: v0.28.3 → v0.28.4
• k8s.io/client-go: v0.28.3 → v0.28.4
• sigs.k8s.io/release-utils: v0.8.5 → v0.8.4

Removed

Nothing has changed.

v0.17.9

Changes by Kind

Please note that you can also download the artifacts for this release from our Google Cloud Bucket:
https://console.cloud.google.com/storage/browser/k8s-artifacts-sig-release/kubernetes/release/v0.17.9

Feature

• Added krel push --repo-root CLI flag. (#3768, @saschagrunert) [SIG Release]
• Build Go 1.23.1 and 1.22.7 images (#3758, @haitch) [SIG Release]
• Bump distroless-iptables to use go 1.23.1/1.22.7 (#3773, @haitch) [SIG Release]
• Introduced new krel validate command for validating committed release note edits. (#3765, @npolshakova) [SIG Release]

Dependencies

Added

• cel.dev/expr: v0.15.0
• github.com/containerd/errdefs: v0.1.0
• github.com/containerd/platforms: v0.2.1
• github.com/planetscale/vtprotobuf: 0393e58

Changed

• github.com/Microsoft/go-winio: v0.6.1 → v0.6.2
• github.com/cenkalti/backoff/v4: v4.2.1 → v4.3.0
• github.com/cespare/xxhash/v2: v2.2.0 → v2.3.0
• github.com/cncf/xds/go: 0fa0005 → 555b57e
• github.com/containerd/containerd: v1.7.14 → v1.7.21
• github.com/envoyproxy/go-control-plane: v0.12.0 → 1eb8caa
• github.com/golang/glog: v1.2.0 → v1.2.1
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.19.1 → v2.20.0
• github.com/klauspost/compress: v1.17.8 → v1.17.9
• github.com/open-policy-agent/opa: v0.63.0 → v0.68.0
• github.com/prometheus/client_golang: v1.19.0 → v1.20.2
• github.com/prometheus/client_model: v0.6.0 → v0.6.1
• github.com/prometheus/common: v0.51.1 → v0.55.0
• github.com/prometheus/procfs: v0.12.0 → v0.15.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.49.0 → v0.53.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.22.0 → v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.22.0 → v1.28.0
• go.opentelemetry.io/otel/metric: v1.24.0 → v1.28.0
• go.opentelemetry.io/otel/sdk: v1.24.0 → v1.28.0
• go.opentelemetry.io/otel/trace: v1.24.0 → v1.28.0
• go.opentelemetry.io/otel: v1.24.0 → v1.28.0
• go.opentelemetry.io/proto/otlp: v1.0.0 → v1.3.1
• golang.org/x/crypto: v0.27.0 → v0.28.0
• golang.org/x/net: v0.29.0 → v0.30.0
• golang.org/x/sys: v0.25.0 → v0.26.0
• golang.org/x/term: v0.24.0 → v0.25.0
• golang.org/x/text: v0.18.0 → v0.19.0
• golang.org/x/time: v0.5.0 → v0.6.0
• google.golang.org/genproto/googleapis/api: c811ad7 → f6361c8
• google.golang.org/genproto/googleapis/rpc: 94a12d6 → f6361c8
• google.golang.org/grpc: v1.62.1 → v1.66.0

Removed

• github.com/Microsoft/hcsshim: v0.11.4