kyverno: vanhemmat versiot ja versiohistoria

What's Changed
- chore: remove Nirmata refs (Cherry-pick #15114) by @kyverno-bot in #15115
- cli: simplify namespaced policy loading in CLI (Cherry-pick #15118) by @kyverno-bot in #15122
- fix: panic in metrics wrapper when generating response does not provide a result (Cherry-pick #15105) by @kyverno-bot in #15117
- fix: init dclient before using it (Cherry-pick #15172) by @kyverno-bot in #15173
- populate registry consistently (Cherry-pick #14632) by @kyverno-bot in #15184
- fix: eliminate memcache error spam from fake client discovery polling (Cherry-pick #15187) by @kyverno-bot in #15193
- fix: restmapper for fakeclient (cherry-pick #15177) by @realshuting in #15194
- cherry pick #0ffed6f by @fjogeleit in #15206
- fix: CVE-2025-68121 (Cherry-pick #15203) by @kyverno-bot in #15212
- fix: enable signed timestamp verification when TSA cert chain is provided (Cherry-pick #15192) by @kyverno-bot in #15217
- fix: add default message for ValidatingPolicy when message field is empty (Cherry-pick #13630) by @kyverno-bot in #15267
- fix: return errors from syncPolicy to enable workqueue retry (Cherry-pick #15082) by @kyverno-bot in #15268
- fix: skip side effects on dry-run in gpol/mpol (Cherry-pick #15143) by @kyverno-bot in #15270
- fix(ivpol): Unauthorized error when using a private repository (Cherry-pick #15136) by @kyverno-bot in #15271
- fix(charts): add missing endpointslices list permission to cleanup controller role (Cherry-pick #15140) by @kyverno-bot in #15272
- fix(admissionpolicygenerator): enqueue exceptions (Cherry-pick #15038) by @kyverno-bot in #15274
- changed default value and helm values documentation from integer to duration string (Cherry-pick #15124) by @kyverno-bot in #15275
- fix: nil pointer dereference in Certificates branch of manifest valid… (Cherry-pick #15152) by @kyverno-bot in #15276
- Fix Empty list in policy exclusion result in excluding all resources (Cherry-pick #13794) by @kyverno-bot in #15277
- fix: imageVerify Multi-Signature Annotation Validation Bug (Cherry-pick #14500) by @kyverno-bot in #15279
- Fix Chainsaw test for MutatingPolicy add-label-applyconfiguration (Cherry-pick #14587) by @kyverno-bot in #15282
- chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (Cherry-pick #15164) by @kyverno-bot in #15278
- fix(ivpol): use Kyverno namespace secrets in reports scanner (Cherry-pick #15220) by @kyverno-bot in #15287
- chore: run unit tests in verbose mode (cherry-pick #15230) by @eddycharly in #15288
- fix: handler crash for nmpol (Cherry-pick #15133) by @kyverno-bot in #15285
- chore(deps): bump the kubernetes group across 3 directories with 7 updates (Cherry-pick #15183) by @kyverno-bot in #15284
- fix: race conditions in configuration.IsExcluded() and breaker.ReportsBreaker (Cherry-pick #15145) by @kyverno-bot in #15289
- fix: make the mutating policy use its ConditionCompiler to produce the evaluator (Cherry-pick #15242) by @kyverno-bot in #15291
- release: v1.17.1-rc.1 by @eddycharly in #15298
- change indentation of validationActions fields (cherry-pick #15257) by @eddycharly in #15300
- fix: set UseSignedTimestamps when TSACertChain is provided in IVPOL cosign verifier (cherry pick #15305) by @lucchmielowski in #15306
- release: v1.17.1 by @eddycharly in #15308
Full Changelog: v1.17.0...v1.17.1

What's Changed
- Fixed CVEs by bumping go dependencies (#12119)
- Reverted "replace ghcr.io to reg.kyverno.io" (#12125)

❗Important Notice ❗
If you are running 1.12, please upgrade to this version to pick up the fix for the ephemeralreports piling-up issue. Check this post and
understand how to recover from an ETCD outage:Amazon EKS- managing and fixing ETCD database size[updated] If you are seeing consistent creation of ephemeralreports, you can:- disable reporting for admission events, please see this comment
- tune --aggregationWorkers to increase the capacity of consuming ephemeralreports, see this comment. It can be configured directly via the container flag, or through Helm extraArgs.
🐛 Fixed 🐛
- Added condition checking to notary attestation verify chainsaw test (
- Fixed a CLI issue to apply namespace labels in the cluster mode (
- Fixed a gloabl context look up issue to return the error properly (
- Fixed logging verbosity got the background scanner (
- Shutdown the controller properly when the context is canceled (
- Fixed duplicate updaterequest creation for background policies (
🔧 Others 🔧
- Bumped chainsaw (
- Added chainsaw test for controllers leader election (

🐛 Fixed 🐛
- Fixed non-trigger resources to be skipped for background policies regardless of skipBackgroundRequests settings (#9333)
- Fixed the CLI to use "store" for fetching regclient (#9345)

What's Changed
- Reduced verbosity of admission request filter INFO log message (cherry-pick #8712) by @gcp-cherry-pick-bot in #8882
- Close reponse right after succesful request (cherry-pick #8894) by @gcp-cherry-pick-bot in #8896
- chore(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.45.0 to 0.46.0 (cherry pick: #8893) by @vishal-chdhry in #8897
- Add policyKind option to kyverno-policies chart (cherry-pick #8827) by @gcp-cherry-pick-bot in #8923
- [Helm] correct typo in README for Kyverno 1.10+ (cherry-pick #8911) by @gcp-cherry-pick-bot in #8927
- Revert "fix(chart): only create ServiceMonitor if cluster supports it (#7926) (cherry-pick #8913) by @gcp-cherry-pick-bot in #8931
- feat: add checks for max response size in API Call (cherry-pick #8957) by @gcp-cherry-pick-bot in #8971
- fix: update KeysAreMissing() to ignore negations in resource (cherry-pick #8953) by @gcp-cherry-pick-bot in #8982
- fix: block mutation only when failurePolicy is set to fail (cherry-pick #8952) by @gcp-cherry-pick-bot in #8986
- fix: delete VAPs in case Kyverno policies can't be translated (cherry-pick #8887) by @gcp-cherry-pick-bot in #9019
- fix: use v2beta1 version of exceptions in kyverno create CLI (cherry-pick #8908) by @MariamFahmy98 in #9020
- fix: remove the additional dash in kyverno create exception (cherry-pick #8983) by @MariamFahmy98 in #9021
- fix: use the default namespace in case --namespace isn't set in kyverno create exception (cherry-pick #9014) by @MariamFahmy98 in #9022
- Remove var check (cherry-pick #8990) by @gcp-cherry-pick-bot in #9024
- fix: use validate.message in case there is no message associated with the CEL expression (cherry-pick #8883) by @MariamFahmy98 in #9025
- fix: cleanup older policy reports (cherry-pick #9026) by @gcp-cherry-pick-bot in #9035
- Release 1.11.1 by @realshuting in #9039