v3.19.2

⚠ Warning: Operation generate is now required to guard CRD and VAP/VAPB generation. Please update your singleton deployment (e.g. gatekeeper-audit) to include --operation=generate. If you are not using audit, you need to add it to the controller manager deployment. https://open-policy-agent.github.io/gatekeeper/website/docs/operations/#generation

Chores

• bump opa to 1.5.1 and kubectl to 1.33.1 (#4001) #4001 (Jaydip Gabani)
• Prepare v3.19.2 release (#4011) #4011 (github-actions[bot])

v3.19.1

⚠ Warning: Operation generate is now required to guard CRD and VAP/VAPB generation. Please update your singleton deployment (e.g. gatekeeper-audit) to include --operation=generate. If you are not using audit, you need to add it to the controller manager deployment. https://open-policy-agent.github.io/gatekeeper/website/docs/operations/#generation

Bug Fixes

• error on deleting GK resources when delete operation is enabled CP(#3921) (#3929) #3929 (Jaydip Gabani)

Continuous Integration

• bumping k8s version in testing and crd.Dockerfile CP(#3925) (#3933) #3933 (Jaydip Gabani)

Chores

• Prepare v3.19.1 release (#3934) #3934 (github-actions[bot])

v3.18.3

⚠ Warning: Operation generate is now required to guard CRD and VAP/VAPB generation. Please update your singleton deployment (e.g. gatekeeper-audit) to include --operation=generate. If you are not using audit, you need to add it to the controller manager deployment. https://open-policy-agent.github.io/gatekeeper/website/docs/operations/#generation

Bug Fixes

• CP(#3921) CP(#3857) CP(#3802) CP(#3925) (#3930) #3930 (Jaydip Gabani)

Chores

• Prepare v3.18.3 release (#3936) #3936 (github-actions[bot])

v3.20.0-beta.0

Bug Fixes

• updating golang version in subscriber dockerfile (#3876) #3876 (Jaydip Gabani)

Continuous Integration

• cleaning up disk in release workflow to avoid running out of space (#3877) #3877 (Jaydip Gabani)

Chores

• bumping opa to 1.3.0 from 1.2.0 (#3882) #3882 (Jaydip Gabani)
• bump kubectl from v1.32.2 to v1.32.3 (#3890) #3890 (dependabot[bot])
• bump crate-ci/typos from 1.30.3 to 1.31.0 in the all group (#3888) #3888 (dependabot[bot])
• bump distroless/static-debian12 from 95ea148 to 3d0f463 in /test/externaldata/dummy-provider (#3886) #3886 (dependabot[bot])
• bump distroless/static-debian12 from 95ea148 to 3d0f463 (#3889) #3889 (dependabot[bot])
• bumping protobuf and fixing lint memory issue in GH runner (#3893) #3893 (Jaydip Gabani)
• bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#3899) #3899 (dependabot[bot])
• bump the all group with 3 updates (#3894) #3894 (dependabot[bot])
• bump golang from fa1a01d to 75e6700 (#3898) #3898 (dependabot[bot])
• bump golang from fa1a01d to 75e6700 in /test/image (#3897) #3897 (dependabot[bot])
• bump golang from fa1a01d to 75e6700 in /build/tooling (#3896) #3896 (dependabot[bot])
• bump golang from fa1a01d to 75e6700 in /test/externaldata/dummy-provider (#3895) #3895 (dependabot[bot])
• Prepare v3.20.0-beta.0 release (#3904) #3904 (github-actions[bot])

v3.19.0

⚠ Warning: Operation generate is now required to guard CRD and VAP/VAPB generation. Please update your singleton deployment (e.g. gatekeeper-audit) to include --operation=generate. If you are not using audit, you need to add it to the controller manager deployment. https://open-policy-agent.github.io/gatekeeper/website/docs/operations/#generation

Notable Changes

• 🛡️OPA rego v1 syntax is available in Gatekeeper ConstraintTemplates. Find out more here.
• 📤Updated Pub/Sub mechanism to generalized export mechanism to enable additional backends such as disk to export violations.

Features

• feat: gator test --deny-only flag (#3809) (Steeve)
• feat: Update Rego driver to support rego.v1 (#3873)(Charlie Egan]

Bug Fixes

• adding a comment to clean up disk space in runner (CP: 3877) (#3878) #3878 (Jaydip Gabani)
• Add flag to enable/disable referential constraints (#3701) (David Lee)
• bumping frameworks to fix GO-2025-3372 (#3810) (Jaydip Gabani)
• fixing nil pointer error when converting VAPB from v1beta1 to v1 (#3754) (Jaydip Gabani)
• parse namespace from oldObject when processing a DELETE operation (#3837) (Clément Nussbaumer)
• replace plus character with underscore in version label (#3742) (Filippo Rossi)

Documentation

• Add connect to operations (#3785) (Martin Alexander)
• Use markdown emphasize-syntax in demo documentation (#3786) (Sascha)
• addressing deny-only gator flag nits (#3870) (Jaydip Gabani)

Chores

• Prepare v3.19.0 release (#3903) #3903 (github-actions[bot])
• Prepare v3.19.0-rc.1 release (#3879) #3879 (github-actions[bot])
• update curlimages/curl to v8.12.0 (#3817) (Thomas Berreis)
• adding FAQs for multi-engine (#3761) (Jaydip Gabani)
• adding annotation to generate VAPB right away once the waiting window is over to protect against clock skews (#3773) (Jaydip Gabani)
• adding warning for alpha flags (#3764) (Jaydip Gabani)
• bump @babel/helpers from 7.17.8 to 7.26.10 in /website (#3856) (dependabot[bot])
• bump @babel/runtime from 7.18.6 to 7.26.10 in /website (#3855) (dependabot[bot])
• bump @babel/runtime-corejs3 from 7.18.6 to 7.26.10 in /website (#3848) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 (#3866) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 in /test/externaldata/dummy-provider (#3865) (dependabot[bot])
• bump distroless/static-debian12 from 5c7e2b4 to 3f2b64e in /test/externaldata/dummy-provider (#3775) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 3f2b64e (#3774) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 5c7e2b4 in /test/externaldata/dummy-provider (#3721) (dependabot[bot])
• bump frameworks and kube dep to 1.32.3 (#3873) (Jaydip Gabani)
• bump github.com/containerd/containerd from 1.7.25 to 1.7.27 (#3857) (dependabot[bot])
• bump github.com/golang/glog from 1.2.1 to 1.2.4 (#3802) (dependabot[bot])
• bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#3523) (dependabot[bot])
• bump github/codeql-action from 3.28.8 to 3.28.9 in the all group (#3813) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm (#3821) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /build/tooling (#3823) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/externaldata/dummy-provider (#3824) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/image (#3825) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 (#3793) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/externaldata/dummy-provider (#3794) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/image (#3791) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f (#3812) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /build/tooling (#3811) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/externaldata/dummy-provider (#3815) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/image (#3814) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 (#3727) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /build/tooling (#3726) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /test/externaldata/dummy-provider (#3730) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /build/tooling (#3834) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /test/image (#3835) (dependabot[bot])
• bump golang from b970e6d to d7d795d (#3844) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /build/tooling (#3841) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /test/externaldata/dummy-provider (#3843) (dependabot[bot])
• b...

v3.19.0-rc.2

Chores

• clean up disk in release and opa bump (#3876) (#3882) (#3885) #3885 (Jaydip Gabani)
• Prepare v3.19.0-rc.2 release (#3891) #3891 (github-actions[bot])

v3.19.0-rc.1

Notable Changes

• 🛡️OPA rego v1 syntax is available in Gatekeeper ConstraintTemplates. Find out more about OPA rego v1 here.
• 📤Updated Pub/Sub mechanism to generalized export mechanism to enable additional backends such as disk to export violations.

Features

• feat: gator test --deny-only flag (#3809) (Steeve)
• feat: Update Rego driver to support rego.v1 (#3873)(Charlie Egan]

Bug Fixes

• adding a comment to clean up disk space in runner (CP: 3877) (#3878) #3878 (Jaydip Gabani)
• Add flag to enable/disable referential constraints (#3701) (David Lee)
• bumping frameworks to fix GO-2025-3372 (#3810) (Jaydip Gabani)
• fixing nil pointer error when converting VAPB from v1beta1 to v1 (#3754) (Jaydip Gabani)
• parse namespace from oldObject when processing a DELETE operation (#3837) (Clément Nussbaumer)
• replace plus character with underscore in version label (#3742) (Filippo Rossi)

Documentation

• Add connect to operations (#3785) (Martin Alexander)
• Use markdown emphasize-syntax in demo documentation (#3786) (Sascha)
• addressing deny-only gator flag nits (#3870) (Jaydip Gabani)

Chores

• Prepare v3.19.0-rc.1 release (#3879) #3879 (github-actions[bot])
• update curlimages/curl to v8.12.0 (#3817) (Thomas Berreis)
• adding FAQs for multi-engine (#3761) (Jaydip Gabani)
• adding annotation to generate VAPB right away once the waiting window is over to protect against clock skews (#3773) (Jaydip Gabani)
• adding warning for alpha flags (#3764) (Jaydip Gabani)
• bump @babel/helpers from 7.17.8 to 7.26.10 in /website (#3856) (dependabot[bot])
• bump @babel/runtime from 7.18.6 to 7.26.10 in /website (#3855) (dependabot[bot])
• bump @babel/runtime-corejs3 from 7.18.6 to 7.26.10 in /website (#3848) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 (#3866) (dependabot[bot])
• bump distroless/static-debian12 from 3f2b64e to 95ea148 in /test/externaldata/dummy-provider (#3865) (dependabot[bot])
• bump distroless/static-debian12 from 5c7e2b4 to 3f2b64e in /test/externaldata/dummy-provider (#3775) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 3f2b64e (#3774) (dependabot[bot])
• bump distroless/static-debian12 from f4a57e8 to 5c7e2b4 in /test/externaldata/dummy-provider (#3721) (dependabot[bot])
• bump frameworks and kube dep to 1.32.3 (#3873) (Jaydip Gabani)
• bump github.com/containerd/containerd from 1.7.25 to 1.7.27 (#3857) (dependabot[bot])
• bump github.com/golang/glog from 1.2.1 to 1.2.4 (#3802) (dependabot[bot])
• bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#3523) (dependabot[bot])
• bump github/codeql-action from 3.28.8 to 3.28.9 in the all group (#3813) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm (#3821) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /build/tooling (#3823) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/externaldata/dummy-provider (#3824) (dependabot[bot])
• bump golang from 1.23-bookworm to 1.24-bookworm in /test/image (#3825) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 (#3793) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/externaldata/dummy-provider (#3794) (dependabot[bot])
• bump golang from 2e83858 to 3149bc5 in /test/image (#3791) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f (#3812) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /build/tooling (#3811) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/externaldata/dummy-provider (#3815) (dependabot[bot])
• bump golang from 3149bc5 to 441f59f in /test/image (#3814) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 (#3727) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /build/tooling (#3726) (dependabot[bot])
• bump golang from 3f3b9da to ef30001 in /test/externaldata/dummy-provider (#3730) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /build/tooling (#3834) (dependabot[bot])
• bump golang from 6260304 to b970e6d in /test/image (#3835) (dependabot[bot])
• bump golang from b970e6d to d7d795d (#3844) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /build/tooling (#3841) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /test/externaldata/dummy-provider (#3843) (dependabot[bot])
• bump golang from b970e6d to d7d795d in /test/image (#3852) (dependabot[bot])
• bump golang from d7d795d to fa1a01d (#3867) (dependabot[bot])
• bump golang from d7d795d to fa1a01d in /build/tooling (#3869) (dependabot[bot])
• bump golang from d7d795d to fa1a01d in /test/externaldata/dummy-provider (#3864) ([dependabot[bot]](https:...

v3.17.2

Bug Fixes

• fixing nil pointer error when converting VAPB from v1beta1 to v1 and updating crypto, net (#3754) (#3766) (#3781) #3781 (Jaydip Gabani)

Chores

• Prepare v3.17.2 release (#3799) #3799 (github-actions[bot])

v3.18.2

Bug Fixes

• fixing nil pointer error when converting VAPB from v1beta1 to v1, CP (#3754) (#3765) #3765 (Jaydip Gabani)

Chores

• bumping net, crypto dep, CP (#3766) (#3767) #3767 (Jaydip Gabani)
• Prepare v3.18.2 release (#3768) #3768 (github-actions[bot])

v3.19.0-beta.1

Chores

• bump golang.org/x/crypto from 0.28.0 to 0.31.0 (#3735) #3735 (dependabot[bot])
• update operation generate in deployment yaml and add docs (#3738) #3738 (Jaydip Gabani)
• Patch docs for 3.18.1 release (#3750) #3750 (github-actions[bot])
• Prepare v3.19.0-beta.1 release (#3752) #3752 (github-actions[bot])