What's Changed

• [release-1.12] remove duplicate 'additionalPrinterColumns' in domain-mapping resource by @knative-prow-robot in #14653

Full Changelog: knative-v1.12.1...knative-v1.12.2

What's Changed

• Surface cpu and mem requests forbidden errors (and other ones too) in KSVC creation by @knative-prow-robot in #14618

Full Changelog: knative-v1.12.0...knative-v1.12.1

Changes since v1.11.3

What's Changed

• [release-1.11] bump grpc to v1.56.3 (addressing CVE-2023-44487) by @jsanin-vmw in #14579

Full Changelog: knative-v1.11.3...knative-v1.11.4

What's Changed

• [release-1.10] bump grpc to v1.56.3 (addressing CVE-2023-44487) by @jsanin-vmw in #14580

Full Changelog: knative-v1.10.5...knative-v1.10.6

What's Changed

• [release-1.10] Bound buffer for reading stats by @knative-prow-robot in #14541
• [release-1.10] Upgrade to latest dependencies by @knative-automation in #14551

Full Changelog: knative-v1.10.4...knative-v1.10.5

Changes since v1.11.2

What's Changed

• Bound buffer for reading stats by @knative-prow-robot in #14542
• Upgrade to latest dependencies by @knative-automation in #14552

Full Changelog: knative-v1.11.2...knative-v1.11.3

Changes since v1.11

🚨 Breaking or Notable

• Label the webhook service with "app: webhook" label (#14258, @JordanDeBeer)
• auto-tls is now named external-domain-tls (#14472, @ReToCode)
• internal-encryption is now named system-internal-tls (#14472, @ReToCode)
• cluster-local-domain-tls is introduced as a new alpha state flag to control TLS certificates for cluster-local domains (#14472, @ReToCode)
• Traffic from Ingress to Activator/QP uses TLS 1.3 when system-internal-tls is enabled. (#14074, @nak3)
• Validating webhook will now allow adding the NET_BIND_SERVICE or nil capabilities when secure pods defaults feature is enabled (#14445, @kauana)

💫 New Features & Changes

• Allow shareProcessNamespace to be set for a Knative Service (feature flag: kubernetes.podspec-shareprocessnamespace). Disabled by default. (#14454, @rhuss)
• Internal encryption verifies a new SAN kn-user-<ns>. (#14452, @nak3)
• ReadinessProbe with path contains a query string is supported now. (#14273, @nak3)
• Support gRPC probe. (#14134, @seongpyoHong)
• When system-internal-tls is enabled, queue-proxy mounts the certificate secret as projected-volume and automatically reloads the certificates on change. (#14189, @ReToCode)

🐞Bug Fixes

• Activator correctly propagates pod health when triggered by changes other than pod probes. (#14347, @arsenetar)
• Activator no longer cancels all probes when one fails (#14303, @arsenetar)
• Applied an upper bound to the statistics data read from the queue-proxy by the autoscaler. (#14523, @evankanderson)
• Certificate generation errors are bubbled up to its parent Route. (#14496, @gabo1208)
• Fix secure 'secure-pod-defaults' to work with restricted namespaces (#14363, @KauzClay)

Dependencies

Changes since v1.11.1

What's Changed

• Rebuild using Go 1.20.10 (to address CVEs) by @ReToCode in #14500
• bump x/net to v0.17 by @nak3 in #14516

Full Changelog: knative-v1.11.1...knative-v1.11.2

What's Changed

• [release-1.10] Rebuild using Go 1.20.10 (to address CVEs) by @ReToCode in #14501
• [release-1.10] bump x/net to v0.17 by @nak3 in #14517

Full Changelog: knative-v1.10.3...knative-v1.10.4

Changes since v1.11.0

What's Changed

• fix securityContext for Knative Service Pod (user-container and queue-proxy) by @knative-prow-robot in #14378

Full Changelog: knative-v1.11.0...knative-v1.11.1