v1.98.4

1.98.4 (2026-07-04)

Bug Fixes

• unifi: functional provider via Cloud Connector + writable /tmp (#2467) (df148cf), closes #2455

v1.98.3

1.98.3 (2026-07-04)

Bug Fixes

• crossview: give the dashboard memory burst headroom under auto-vpa (#2472) (14f11a5)

v1.98.2

1.98.2 (2026-07-04)

Bug Fixes

• security: scope tenant Flux-impersonation role to drop pods/exec (C-0002) (#2453) (ef544fe)

v1.98.1

1.98.1 (2026-07-04)

Bug Fixes

• security: harden containers with read-only root filesystems (Kubescape C-0017) (#2455) (a016008), closes opencost/opencost#2655

v1.98.0

1.98.0 (2026-07-04)

Features

• talos: WireGuard server listener on control planes (WS3 phase 1) (#2462) (7b6c79d), closes #9

v1.97.6

1.97.6 (2026-07-04)

Bug Fixes

• actual-budget: allow egress to Enable Banking API (#2469) (398e55a)

v1.97.5

1.97.5 (2026-07-04)

Bug Fixes

• kubescape: disable continuous posture scans on the offline install (#2464) (d27ccf6), closes helm-charts#862 #2463

v1.97.4

1.97.4 (2026-07-04)

Bug Fixes

• kubescape: except GitOps-managed CronJobs from C-0026 posture control (#2434) (ee6e458)

v1.97.3

1.97.3 (2026-07-04)

Bug Fixes

• kubescape: keep scheduled posture scans local so results persist (#2443) (bcd9858), closes #2316 kubescape/helm-charts#862 #857

v1.97.2

1.97.2 (2026-07-04)

Bug Fixes

• velero: run the velero server as non-root (#2436) (8b1433f)