chore(deps): bump github.com/devfile/devworkspace-operator from 0.41.0 to 0.42.0

[dependabot]

Bumps github.com/devfile/devworkspace-operator from 0.41.0 to 0.42.0.

Changelog

Sourced from github.com/devfile/devworkspace-operator's changelog.

v0.42.0

Features

Configurable field-level restrictions for container and pod overrides #1653

Cluster administrators can now define deny rules in DevWorkspaceOperatorConfig to block specific fields or field values from being set via the container-overrides and pod-overrides DevWorkspace attributes. Restrictions are specified using the new config.overrides.restrictedContainerOverrideFields and config.overrides.restrictedPodOverrideFields fields.

On Kubernetes, a set of security-sensitive fields is denied out of the box, including privileged containers, running as root, host networking, and hostPath volumes—matching the restrictions that OpenShift enforces natively via SCCs. These defaults can be adjusted from the global DevWorkspaceOperatorConfig object.

apiVersion: controller.devfile.io/v1alpha1
kind: DevWorkspaceOperatorConfig
metadata:
  name: devworkspace-operator-config
  namespace: $OPERATOR_INSTALL_NAMESPACE
config:
  overrides:
    restrictedContainerOverrideFields:
      - securityContext.privileged
      - securityContext.runAsUser
    restrictedPodOverrideFields:
      - hostNetwork

See docs/dwo-configuration.md for configuration details.

Bug Fixes & Improvements

• Fix OpenShift registry image-puller RoleBinding accumulating deleted workspace ServiceAccounts, causing etcd rejections in high-churn namespaces #1640
• Fix project cloning failing when a nested clonePath is used and intermediate parent directories do not exist #1652
• Apply workspace podSecurityContext to PVC cleanup Job pods to match workspace deployment behavior #1638
• Increase default init-persistent-home container memory limit from 128Mi to 256Mi and request from 64Mi to 128Mi to prevent OOM failures with large developer images #1644
• Mount an emptyDir home volume for ephemeral workspaces when a custom init-persistent-home init container is configured and persistUserHome is enabled #1649

Commits

• ea86ff8 [release] Add OLM bundle for v0.42.0 in 0.42.x
• fcd562f [prerelease] Prepare branch for release
• af782ad fix: preserve default proxy settings (#1656)
• e31ead1 feat: add configurable field-level restrictions for container and pod overrid...
• 3bbd19a fix: create parent directories for nested clonePath (#1652)
• cdc8050 Add user home mount for ephemeral storage when init-persistent-home is explic...
• a4b9afd fix: initialization HTTP clients with merged DevWorkspaceOperatorConfig
• 32c3d0a fix(config): bump default persistent home init container memory limits to 256Mi
• 7b6ff69 fix(rbac): implement registry rolebinding finalization for OpenShift
• ec6de18 fix (storage) : use operator podSecurityContext for PVC cleanup job on OpenSh...
• Additional commits viewable in compare view

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a eclipse-che member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.