v2.20.0

Changelog

• a2ee562 Marked kosli approval commands as depricated server/#5125 (#890)
• fea11f0 chore(deps): bump k8s.io/kubernetes in the go-dependencies group (#889)
• 5e3b640 chore: remove windows-arm from release template (#888)

v2.19.0

Changelog

• f72464d Cloud run: update coverage table server/#4986 (#887)
• c2d2453 Update github.com/docker/docker dependency to newer moby modules (#883)
• 8ffb991 chore(deps): bump github.com/open-policy-agent/opa (#886)

v2.18.0

Changelog

• 1696a0c feat(cloudrun): unhide snapshot cloud-run and add coverage table (#4986) (#885)
• baba868 feat(snapshot s3): add --include-regex / --exclude-regex path filters (#882)
• 3bed18a fix(sonar): forward branch name to project_analyses/search (#884)

v2.17.8

Changelog

• 13da1ed Added part two of cloud run job reporting server/#4986 (#867)
• 586ed33 Cloud run: recover missing digests via registry lookup server/#4986 (#879)
• c4843b5 chore(deps): bump k8s.io/kubernetes in the go-dependencies group (#880)
• c64aa90 chore(deps): bump the go-dependencies group with 2 updates (#874)
• 4c7daa9 chore: add release Slack notifications (#881)
• 74cbbca chore: bump Golang to 1.26 (#877)
• 0655b5a chore: gofmt formatting (#872)
• 27cd0d7 docs: add make docs target for generating CLI reference docs (#868)
• b3e90dd feat: add hidden 'kosli attest override' command (#873)
• 9977a31 feat: add quiet flag to logger (#876)
• 80ca0c0 feat: support remote http(s) URLs for --policy in kosli evaluate (#875)
• 1c3c462 fix: bump Go from 1.25.9 to 1.25.10 to resolve Snyk vulnerabilities (#869)
• 60ff5d1 fix: prevent broken doc links from bare URLs in flag descriptions (#870)
• c2eb5d1 fix: use Mintlify MDX components in helm chart docs templates (#871)

v2.17.7

Changelog

• a387e8f Add Cloud Run Job support and clean up cloud-run wire format server/#4986 (#866)

v2.17.6

Changelog

• dfda890 Add Mintlify helm-docs template for k8s-reporter (#854)
• 0a56c39 Fixed bug when snapshot docker encounters an un-inspectable container server/#5597 (#863)
• 870a289 Update helm docs (#855)
• 3f890e7 chore(deps): bump google.golang.org/grpc in the go-dependencies group (#858)
• b1702a3 chore(deps): bump step-security/harden-runner (#859)
• ed4e2a2 chore(deps): bump the go-dependencies group with 5 updates (#865)
• 57afd5e chore: bump MongoDB to 5.0.32 (#850)
• d15f2ef chore: remove live-docs generation from CLI doc command (#862)
• 4a9eb54 chore: remove old Hugo docs generation (#856)
• cbc78dc chore: remove old Hugo docs generation (#856)
• 5215a94 fix: backtick http-proxy example URL to prevent broken doc links (#857)
• ed9e540 test(kube): tolerate IsNotFound on namespace cleanup (#860)

v2.17.5

Changelog

• 105c44c Added initial implementation of kosli snapshot cloud-run server/#4986 (#833)
• 2f6c27c Debug: expose Authorization, proxy, and response on errors (#852)
• 505a147 fix: suppress npm always-auth deprecation warning by upgrading to setup-node@v6 (#847)
• 224fe08 test: pin fingerprint capture cleanliness contract (#846)

v2.17.4

Changelog

• 3013750 chore(deps): bump github.com/open-policy-agent/opa (#844)
• aedfa70 chore(deps): bump kosli-dev/setup-cli-action from 4 to 5 (#841)
• bb9af43 chore(deps): bump the go-dependencies group with 9 updates (#842)
• 804ba44 fix: npm trusted publishing (#843)
• eb93aaa fix: remove version checks on all commands (#840)
• 8c75c0c fix: wire up Node 24 + setup-node for npm trusted publishing (#845)

v2.17.3

Changelog

• fad5e49 Added extra debug when doing kosli attest pullrequest github if the debug flag is set (#839)
• beda1fd Makefile: fixed setup_test_to_use_xxx to only clean up the cli containers and not all containers (#837)

v2.17.2

Changelog

• d4278e2 Allow Claude Code to push feature branches (#830)
• 60431e6 chore(deps): bump the go-dependencies group across 1 directory with 5 updates (#832)
• 5756662 contract testing adr (#808)
• 346ca39 docs: clarify --artifact-type=docker requires registry digest (#834)
• 475dd3d feat(evaluate): add --assert / --no-assert to make evaluate a policy decision point (#829)
• 6e52319 fix(ci): wait for versions json upload before dispatch (#835)
• a1a1f6e fix: update GitHub contract test fixture to a commit the API still associates with a PR (#836)
• 251f3bc fix: use json.Marshal instead of json.MarshalIndent for multipart data_json (#823)
• 2023a6e perf: use json.Marshal instead of json.MarshalIndent for non-multipart request bodies (#825) (#827)