2.35.0

What's Changed

• fix(ci): handle release builds in GHA CI workflow by @BradLugo in #1561
• fix(ci): one more place needs release build tag by @dcaravel in #1563
• build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 by @dependabot in #1566
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #1558
• fix(e2e): update fixedBy versions by @RTann in #1567
• build(deps): bump google.golang.org/api from 0.186.0 to 0.188.0 by @dependabot in #1565
• fix(ci): fallback to previous release when attempting unreleased version by @RTann in #1568
• build(deps): bump cloud.google.com/go/storage from 1.42.0 to 1.43.0 by @dependabot in #1569
• fix: add tag resolution for jobs missing it by @dcaravel in #1570
• chore(deps): Bump stackrox version and fix usage of removed package by @mtodor in #1572
• ROX-25321: convert konflux builds to OCI artifacts by @Stringy in #1573
• ROX-22019: Protobuf v2 migration by @mtodor in #1500
• ROX-22019: Set correct stackrox dependency with protobuf V2 by @mtodor in #1576
• build: Add "appstudio" to the PR branch name filter for Konflux CI by @msugakov in #1577
• build(deps): bump google.golang.org/api from 0.188.0 to 0.189.0 by @dependabot in #1578
• build(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.1.0 to 1.4.0 by @dependabot in #1579
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.1 to 2.20.0 by @dependabot in #1580
• ROX-20757 scanner multi arch builds by @Stringy in #1574
• build(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.4.0 to 1.5.1 by @dependabot in #1582
• build(deps): bump github.com/containers/image/v5 from 5.31.1 to 5.32.0 by @dependabot in #1583
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.21.0 by @dependabot in #1584
• chore: Add ^release- branches for on-push Konflux builds by @msugakov in #1586
• chore: Update oci-ta tasks, add Renovate config by @red-hat-konflux in #1575
• build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 by @dependabot in #1590
• build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 by @dependabot in #1591
• build: Add Konflux pipeline activation through a label by @msugakov in #1593
• ROX-25620: Switch to new Konflux task repos by @msugakov in #1588
• chore(deps): update konflux references by @red-hat-konflux in #1592
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to af6f06e by @red-hat-konflux in #1598
• chore(ci): use UBI 8 based rox-ci-image by @RTann in #1589
• build(deps): bump google.golang.org/api from 0.190.0 to 0.192.0 by @dependabot in #1599
• build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 by @dependabot in #1601
• build(deps): bump github.com/containers/image/v5 from 5.32.0 to 5.32.1 by @dependabot in #1600
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to 39cfac4 by @red-hat-konflux in #1603
• chore(deps): update konflux references by @red-hat-konflux in #1602
• chore(deps): update konflux references by @red-hat-konflux in #1604
• ROX-25715: Add Slack notifications for Konflux builds by @tommartensen in #1605
• fix: validate digest prior to layer download by @RTann in #1597
• fix: increase image poll timeout by @RTann in #1609
• chore(deps): update konflux references by @red-hat-konflux in #1611
• ROX-25623: reduce deprecated-image-check by feeding manifest by @tommartensen in #1612
• Update apollo-ci image to 0.4.2 by @dvail in #1606
• chore(deps): update konflux references by @red-hat-konflux in #1615
• build: Upload SAST results by @msugakov in #1614
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to af3f156 by @red-hat-konflux in #1619
• build(deps): bump github.com/prometheus/client_golang from 1.19.1 to 1.20.1 by @dependabot in #1616
• build(deps): bump github.com/containers/image/v5 from 5.32.1 to 5.32.2 by @dependabot in #1617
• build(deps): bump google.golang.org/api from 0.192.0 to 0.193.0 by @dependabot in #1618
• chore(deps): update konflux references by @red-hat-konflux in #1620
• build(deps): bump google.golang.org/api from 0.193.0 to 0.194.0 by @dependabot in #1622
• build(deps): bump github.com/prometheus/client_golang from 1.20.1 to 1.20.2 by @dependabot in #1623
• build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.21.0 to 2.22.0 by @dependabot in #1624
• chore: swap mathutil with builtin by @RTann in #1626
• chore(deps): update konflux references by @red-hat-konflux in #1621
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to 260b28e by @red-hat-konflux in #1627
• rhel: update sec data location by @RTann in #1625
• e2e: account for RHSA-2024:6162 by @RTann in #1632
• build(deps): bump google.golang.org/api from 0.194.0 to 0.196.0 by @dependabot in #1629
• ROX-25723: add ecosystem preflight check by @tommartensen in #1633
• chore: go1.22.5 by @RTann in #1634
• chore: go 1.22 konflux by @RTann in #1636
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to d6f57d9 by @red-hat-konflux in #1631
• chore(deps): update konflux references by @red-hat-konflux in #1630
• chore(deps): update konflux references by @red-hat-konflux in #1637
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to a390d28 by @red-hat-konflux in #1641
• build(deps): bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3 by @dependabot in #1638
• chore(deps): update konflux references by @red-hat-konflux in #1642
• build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.1 by @dependabot in #1639
• build(deps): bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4 by @dependabot in #1646
• chore: remove github.com/golang/protobuf direct dep by @RTann in #1635
• ROX-25565: Fail Konflux builds if required ARGs aren't provided by @msugakov in #1644
• chore(deps): update konflux references by @red-hat-konflux in #1647
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to c91de17 by @red-hat-konflux in #1648
• chore(deps): update konflux references by @red-hat-konflux in #1650
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to e0e457b by @red-hat-konflux in #1653
• fix(e2e): Bump fixed by due to RHSA-2024:6783 by @jvdm in #1649
• fix e2e test compile error by @RTann in #1654
• build(deps): bump google.golang.org/grpc from 1.66.1 to 1.67.0 by @dependabot in #1652
• build(deps): bump golang.org/x/sys from 0.24.0 to 0.25.0 by @dependabot in #1640
• build(deps): bump google.golang.org/api from 0.196.0 to 0.199.0 by @dependabot in #1655
• build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1 by @dependabot in #1658
• build(deps): bump github.com/PuerkitoBio/goquery from 1.9.2 to 1.9.3 by @dependabot in #1660
• chore: track cups vulns by @RTann in #1657
• chore(deps): update konflux references by @red-hat-konflux in #1656
• chore(deps): update quay.io/redhat-appstudio/build-trusted-artifacts:latest docker digest to 62bb855 by @red-hat-konflux in #1661
• chore: Update konflux pipelines by @msugakov in #1663
• ROX-25690: Use versioned offline defs in offline bundles by @jvdm in #1643
• build(deps): bump cloud.google.com/go/storage from 1.43.0 to 1.44.0 by @dependabot in #1664
• build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 by @dependabot in #1666
• build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1 by @dependabot in #1665
• Add CVE-2024-47850 to manual entries by @dcaravel in #1668
• build: Drop clamav-scan resource requests by @msugakov in #1669
• chore(deps): update konflux references by @red-hat-konflux in #1662
• chore: update cups vulns yet again by @RTann in #1670
• ROX-26528: add rpms-signature-scan task to Konflux pipelines by @tommartensen in #1671
• build(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #1672
• build(deps): bump google.golang.org/api from 0.199.0 to 0.201.0 by @dependabot in #1673
• update ubuntu support by @RTann in #1675
• chore(deps): update konflux references by @red-hat-konflux in #1674
• e2e: Red Hat CVE-2024-47177 rescore by @RTann in #1676
• chore(deps): update konflux references by @red-hat-konflux in #1678
• chore(deps): update konflux references by @red-hat-konflux in #1680
• ROX-24468: Link source container to the index image by @msugakov in #1679
• build(deps): bump cloud.google.com/go/storage from 1.44.0 to 1.45.0 by @dependabot in #1681
• build(deps): bump google.golang.org/api from 0.201.0 to 0.202.0 by @dependabot in #1682
• build: Switch git-url from repo_url to source_url by @msugakov in #1685
• chore(deps): update konflux references by @red-hat-konflux in #1686
• Generate new genesis dump for 2.35.0 by @jvdm in #1687

New Contributors

• @mtodor made their first contribution in #1572
• @Stringy made their first contribution in #1573
• @dvail made their first contribution in #1606

Full Changelog: 2.34.2...2.35.0