Skip to content

chore(deps): update helm release capsule to v0.14.4 - #124

Open
renovate[bot] wants to merge 1 commit into
devfrom
renovate/capsule-0.x
Open

chore(deps): update helm release capsule to v0.14.4#124
renovate[bot] wants to merge 1 commit into
devfrom
renovate/capsule-0.x

Conversation

@renovate

@renovate renovate Bot commented Oct 20, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
capsule (source) minor 0.10.9 → 0.14.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

projectcapsule/capsule (capsule)

v0.14.4

Compare Source

⚠️ Security

  • GHSA-2vqc-26cg-wpxg Moderate: TenantResource template sanitizer misses sprig 'expandenv' (wrong-case deny-list) -> namespaced tenant reads capsule-controller process environment / secrets

Changelog

🐛 Bug fixes
🛡️ Security updates

Full Changelog: projectcapsule/capsule@v0.14.3...v0.14.4

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.4
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.4

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.3

Compare Source

Changelog

🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.14.2...v0.14.3

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.3
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.3

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.2

Compare Source

Changelog
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.14.1...v0.14.2

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.2
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.2

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.1

Compare Source

Changelog
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.14.0...v0.14.1

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.1
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.1

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.0

Compare Source

Changelog
✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🛡️ Security updates

Full Changelog: projectcapsule/capsule@v0.13.11...v0.14.0

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.13.11

Compare Source

Changelog

✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.10...v0.13.11

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.11
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.11

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.10

Compare Source

Changelog

✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.13.9...v0.13.10

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.10
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.10

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.9

Compare Source

Changelog

🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.8...v0.13.9

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.9
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.9

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.8

Compare Source

⚠️ Security

  • GHSA-jr6p-8pjj-mfx6 Moderate: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) - Without impersonation
  • GHSA-68cj-mvg9-rgm2 Moderate: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Changelog

✨ New Features
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.13.7...v0.13.8

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.8
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.8

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.7

Compare Source

Changelog

⚠️ Security
  • GHSA-gxjc-74v5-3vx3 Moderate: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
  • GHSA-gjw4-3v3v-rqxg High: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement because ForbiddenListSpec.ExactMatch runs sort.SearchStrings (byte order) over a slice sorted case-insensitively
  • GHSA-f94q-w3w8-cj67 Moderate: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.6...v0.13.7

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.7
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.7

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.6

Compare Source

Changelog

🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.5...v0.13.6

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.6
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.6

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.5

Compare Source

Changelog

✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.4...v0.13.5

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.5
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.5

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.4

Compare Source

Changelog

🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.3...v0.13.4

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.4
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.4

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.3

Compare Source

Changelog

🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.13.2...v0.13.3

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.3
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.3

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.2

Compare Source

Changelog

✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.13.1...v0.13.2

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.2
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.2

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.1

Compare Source

Changelog

🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.0...v0.13.1

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.1
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.1

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.0

Compare Source

Changelog

✨ Breaking Changes
  • 0515880: feat: use cert-manager certificates by default. By default, Capsule now uses self-signed cert-manager certificates for its admission webhooks. This used to be an optional setting and has now become the default. If you don’t have cert-manager installed, you must explicitly re-enable the Capsule TLS controller as documented here. (#​1818) (@​oliverbaehler)

Security 🔒

  • Advisory GHSA-qjjm-7j9w-pw72 - High - Users can create cluster scoped resources anywhere in the cluster if they are allowed to create TenantResources. To immediately mitigate this, make sure to use Impersonation for TenantResources.
  • Advisory GHSA-2ww6-hf35-mfjm - Moderate - Users may hijack namespaces via namespaces/status privileges. These privileges must have been explicitly granted by Platform Administrators through RBAC rules to be affected. Requests for the namespaces/status subresource are now sent to the Capsule admission webhook as well.
✨ New Features

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.11.0 chore(deps): update helm release capsule to v0.11.1 Oct 23, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch 2 times, most recently from ecdb986 to 6d67f21 Compare October 26, 2025 17:09
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.11.1 chore(deps): update helm release capsule to v0.11.2 Oct 26, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 6d67f21 to 71d0b17 Compare December 8, 2025 15:43
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.11.2 chore(deps): update helm release capsule to v0.12.0 Dec 8, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 71d0b17 to c0642ab Compare December 9, 2025 08:31
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.12.0 chore(deps): update helm release capsule to v0.12.1 Dec 9, 2025
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.12.1 chore(deps): update helm release capsule to v0.12.2 Dec 10, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from c0642ab to 8f54bf8 Compare December 10, 2025 18:09
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.12.2 chore(deps): update helm release capsule to v0.12.3 Dec 11, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 8f54bf8 to 8a502b1 Compare December 11, 2025 19:53
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 8a502b1 to 1dd2df3 Compare December 19, 2025 15:39
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.12.3 chore(deps): update helm release capsule to v0.12.4 Dec 19, 2025
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 1dd2df3 to a47dcd5 Compare May 28, 2026 11:53
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.12.4 chore(deps): update helm release capsule to v0.13.0 May 28, 2026
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.0 chore(deps): update helm release capsule to v0.13.1 May 29, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from a47dcd5 to 26ce1f9 Compare May 29, 2026 14:55
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.1 chore(deps): update helm release capsule to v0.13.2 Jun 3, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 26ce1f9 to cf94d3d Compare June 3, 2026 19:42
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.2 chore(deps): update helm release capsule to v0.13.3 Jun 4, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch 2 times, most recently from b539d01 to fddc105 Compare June 5, 2026 14:40
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.3 chore(deps): update helm release capsule to v0.13.4 Jun 5, 2026
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.4 chore(deps): update helm release capsule to v0.13.5 Jun 10, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from fddc105 to ce14436 Compare June 10, 2026 00:52
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from ce14436 to 20c0122 Compare June 17, 2026 10:00
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.5 chore(deps): update helm release capsule to v0.13.6 Jun 17, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 20c0122 to c49f9f5 Compare June 24, 2026 13:52
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.6 chore(deps): update helm release capsule to v0.13.7 Jun 24, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from c49f9f5 to de6ad6c Compare July 3, 2026 13:34
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.7 chore(deps): update helm release capsule to v0.13.8 Jul 3, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from de6ad6c to 99be200 Compare July 6, 2026 18:32
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.8 chore(deps): update helm release capsule to v0.13.9 Jul 6, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 99be200 to 2699fa3 Compare July 23, 2026 00:59
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.9 chore(deps): update helm release capsule to v0.13.10 Jul 23, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 2699fa3 to 61b4e38 Compare July 28, 2026 18:47
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.10 chore(deps): update helm release capsule to v0.13.11 Jul 28, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 61b4e38 to b171ed9 Compare August 21, 2026 18:01
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.11 chore(deps): update helm release capsule to v0.14.0 Aug 21, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from b171ed9 to a06a8b5 Compare August 25, 2026 15:00
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.14.0 chore(deps): update helm release capsule to v0.14.2 Aug 25, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from a06a8b5 to 5bcd03a Compare August 31, 2026 04:45
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.14.2 chore(deps): update helm release capsule to v0.14.3 Aug 31, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 5bcd03a to aeb70db Compare September 3, 2026 22:02
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.14.3 chore(deps): update helm release capsule to v0.14.4 Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants