v1.12.0

Caution

There was a bug introduced in v1.12.0 that can cause traffic to be dropped during upgrades - please install v1.12.4

Changes since v1.11

🚨 Breaking or Notable

• Label the webhook service with "app: webhook" label (#14258, @JordanDeBeer)
• auto-tls is now named external-domain-tls (#14472, @ReToCode)
• internal-encryption is now named system-internal-tls (#14472, @ReToCode)
• cluster-local-domain-tls is introduced as a new alpha state flag to control TLS certificates for cluster-local domains (#14472, @ReToCode)
• Traffic from Ingress to Activator/QP uses TLS 1.3 when system-internal-tls is enabled. (#14074, @nak3)
• Validating webhook will now allow adding the NET_BIND_SERVICE or nil capabilities when secure pods defaults feature is enabled (#14445, @kauana)

💫 New Features & Changes

• Allow shareProcessNamespace to be set for a Knative Service (feature flag: kubernetes.podspec-shareprocessnamespace). Disabled by default. (#14454, @rhuss)
• Internal encryption verifies a new SAN kn-user-<ns>. (#14452, @nak3)
• ReadinessProbe with path contains a query string is supported now. (#14273, @nak3)
• Support gRPC probe. (#14134, @seongpyoHong)
• When system-internal-tls is enabled, queue-proxy mounts the certificate secret as projected-volume and automatically reloads the certificates on change. (#14189, @ReToCode)

🐞Bug Fixes

• Activator correctly propagates pod health when triggered by changes other than pod probes. (#14347, @arsenetar)
• Activator no longer cancels all probes when one fails (#14303, @arsenetar)
• Applied an upper bound to the statistics data read from the queue-proxy by the autoscaler. (#14523, @evankanderson)
• Certificate generation errors are bubbled up to its parent Route. (#14496, @gabo1208)
• Fix secure 'secure-pod-defaults' to work with restricted namespaces (#14363, @KauzClay)

Dependencies

Added

• cloud.google.com/go/dataproc/v2: v2.2.0
• github.com/IBM/sarama: v1.40.1
• github.com/alecthomas/kingpin/v2: v2.3.2
• github.com/google/go-pkcs11: c6f7932
• github.com/grafana/regexp: 6b5c0a4
• github.com/hashicorp/errwrap: v1.1.0
• github.com/hashicorp/go-multierror: v1.1.1
• github.com/iancoleman/orderedmap: v0.3.0
• github.com/pierrec/lz4/v4: v4.1.17
• github.com/prashantv/gostub: v1.1.0
• github.com/prometheus/prometheus: v0.47.0
• github.com/stvp/go-udp-testing: 469649b
• github.com/xhit/go-str2duration/v2: v2.1.0
• google.golang.org/genproto/googleapis/bytestream: 8bfb1ae

Changed

• cloud.google.com/go/accessapproval: v1.6.0 → v1.7.1
• cloud.google.com/go/accesscontextmanager: v1.7.0 → v1.8.1
• cloud.google.com/go/aiplatform: v1.37.0 → v1.50.0
• cloud.google.com/go/analytics: v0.19.0 → v0.21.3
• cloud.google.com/go/apigateway: v1.5.0 → v1.6.1
• cloud.google.com/go/apigeeconnect: v1.5.0 → v1.6.1
• cloud.google.com/go/apigeeregistry: v0.6.0 → v0.7.1
• cloud.google.com/go/appengine: v1.7.1 → v1.8.1
• cloud.google.com/go/area120: v0.7.1 → v0.8.1
• cloud.google.com/go/artifactregistry: v1.13.0 → v1.14.1
• cloud.google.com/go/asset: v1.13.0 → v1.14.1
• cloud.google.com/go/assuredworkloads: v1.10.0 → v1.11.1
• cloud.google.com/go/automl: v1.12.0 → v1.13.1
• cloud.google.com/go/baremetalsolution: v0.5.0 → v1.2.0
• cloud.google.com/go/batch: v0.7.0 → v1.4.1
• cloud.google.com/go/beyondcorp: v0.5.0 → v1.0.0
• cloud.google.com/go/bigquery: v1.50.0 → v1.55.0
• cloud.google.com/go/billing: v1.13.0 → v1.17.0
• cloud.google.com/go/binaryauthorization: v1.5.0 → v1.7.0
• cloud.google.com/go/certificatemanager: v1.6.0 → v1.7.1
• cloud.google.com/go/channel: v1.12.0 → v1.17.0
• cloud.google.com/go/cloudbuild: v1.9.0 → v1.14.0
• cloud.google.com/go/clouddms: v1.5.0 → v1.7.0
• cloud.google.com/go/cloudtasks: v1.10.0 → v1.12.1
• cloud.google.com/go/compute: v1.19.1 → v1.23.0
• cloud.google.com/go/contactcenterinsights: v1.6.0 → v1.10.0
• cloud.google.com/go/container: v1.15.0 → v1.26.0
• cloud.google.com/go/containeranalysis: v0.9.0 → v0.11.0
• cloud.google.com/go/datacatalog: v1.13.0 → v1.17.1
• cloud.google.com/go/dataflow: v0.8.0 → v0.9.1
• cloud.google.com/go/dataform: v0.7.0 → v0.8.1
• cloud.google.com/go/datafusion: v1.6.0 → v1.7.1
• cloud.google.com/go/datalabeling: v0.7.0 → v0.8.1
• cloud.google.com/go/dataplex: v1.6.0 → v1.9.1
• cloud.google.com/go/dataqna: v0.7.0 → v0.8.1
• cloud.google.com/go/datastore: v1.11.0 → v1.14.0
• cloud.google.com/go/datastream: v1.7.0 → v1.10.0
• cloud.google.com/go/deploy: v1.8.0 → v1.13.0
• cloud.google.com/go/dialogflow: v1.32.0 → v1.43.0
• cloud.google.com/go/dlp: v1.9.0 → v1.10.1
• cloud.google.com/go/documentai: v1.18.0 → v1.22.1
• cloud.google.com/go/domains: v0.8.0 → v0.9.1
• cloud.google.com/go/edgecontainer: v1.0.0 → v1.1.1
• cloud.google.com/go/essentialcontacts: v1.5.0 → v1.6.2
• cloud.google.com/go/eventarc: v1.11.0 → v1.13.0
• cloud.google.com/go/filestore: v1.6.0 → v1.7.1
• cloud.google.com/go/firestore: v1.9.0 → v1.13.0
• cloud.google.com/go/functions: v1.13.0 → v1.15.1
• cloud.google.com/go/gkebackup: v0.4.0 → v1.3.1
• cloud.google.com/go/gkeconnect: v0.7.0 → v0.8.1
• cloud.google.com/go/gkehub: v0.12.0 → v0.14.1
• cloud.google.com/go/gkemulticloud: v0.5.0 → v1.0.0
• cloud.google.com/go/gsuiteaddons: v1.5.0 → v1.6.1
• cloud.google.com/go/iam: v1.0.1 → v1.1.2
• cloud.google.com/go/iap: v1.7.1 → v1.9.0
• cloud.google.com/go/ids: v1.3.0 → v1.4.1
• cloud.google.com/go/iot: v1.6.0 → v1.7.1
• cloud.google.com/go/kms: v1.10.1 → v1.15.2
• cloud.google.com/go/language: v1.9.0 → v1.11.0
• cloud.google.com/go/lifesciences: v0.8.0 → v0.9.1
• cloud.google.com/go/logging: v1.7.0 → v1.8.1
• cloud.google.com/go/longrunning: v0.4.1 → v0.5.1
• cloud.google.com/go/managedidentities: v1.5.0 → v1.6.1
• cloud.google.com/go/maps: v0.7.0 → v1.4.0
• cloud.google.com/go/mediatranslation: v0.7.0 → v0.8.1
• cloud.google.com/go/memcache: v1.9.0 → v1.10.1
• cloud.google.com/go/metastore: v1.10.0 → v1.12.0
• cloud.google.com/go/monitoring: v1.13.0 → v1.16.0
• cloud.google.com/go/networkconnectivity: v1.11.0 → v1.13.0
• cloud.google.com/go/networkmanagement: v1.6.0 → v1.9.0
• cloud.google.com/go/networksecurity: v0.8.0 → v0.9.1
• cloud.google.com/go/notebooks: v1.8.0 → v1.10.0
• cloud.google.com/go/optimization: v1.3.1 → v1.5.0
• cloud.google.com/go/orchestration: v1.6.0 → v1.8.1
• cloud.google.com/go/orgpolicy: v1.10.0 → v1.11.1
• cloud.google.com/go/osconfig: v1.11.0 → v1.12.1
• cloud.google.com/go/oslogin: v1.9.0 → v1.10.1
• cloud.google.com/go/phishingprotection: v0.7.0 → v0.8.1
• cloud.google.com/go/policytroubleshooter: v1.6.0 → v1.9.0
• cloud.google.com/go/privatecatalog: v0.8.0 → v0.9.1
• cloud.google.com/go/pubsub: v1.30.0 → v1.33.0
• cloud.google.com/go/pubsublite: v1.7.0 → v1.8.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.0 → v2.7.2
• cloud.google.com/go/recommendationengine: v0.7.0 → v0.8.1
• cloud.google.com/go/recommender: v1.9.0 → v1.11.0
• cloud.google.com/go/redis: v1.11.0 → v1.13.1
• cloud.google.com/go/resourcemanager: v1.7.0 → v1.9.1
• cloud.google.com/go/resourcesettings: v1.5.0 → v1.6.1
• cloud.google.com/go/retail: v1.12.0 → v1.14.1
• cloud.google.com/go/run: v0.9.0 → v1.2.0
• cloud.google.com/go/scheduler: v1.9.0 → v1.10.1
• cloud.google.com/go/secretmanager: v1.10.0 → v1.11.1
• cloud.google.com/go/security: v1.13.0 → v1.15.1
• cloud.google.com/go/securitycenter: v1.19.0 → v1.23.0
• cloud.google.com/go/servicedirectory: v1.9.0 → v1.11.0
• cloud.google.com/go/shell: v1.6.0 → v1.7.1
• cloud.google.com/go/spanner: v1.45.0 → v1.49.0
• cloud.google.com/go/speech: v1.15.0 → v1.19.0
• cloud.google.com/go/storage: v1.30.1 → v1.33.0
• cloud.google.com/go/storagetransfer: v1.8.0 → v1.10.0
• cloud.google.com/go/talent: v1.5.0 → v1.6.2
• cloud.google.com/go/texttospeech: v1.6.0 → v1.7.1
• cloud.google.com/go/tpu: v1.5.0 → v1.6.1
• cloud.google.com/go/trace: v1.9.0 → v1.10.1
• cloud.google.com/go/translate: v1.7.0 → v1.9.0
• cloud.google.com/go/video: v1.15.0 → v1.20.0
• cloud.google.com/go/videointelligence: v1.10.0 → v1.11.1
• cloud.google.com/go/vision/v2: v2.7.0 → v2.7.2
• cloud.google.com/go/vmmigration: v1.6.0 → v1.7.1
• cloud.google.com/go/vmwareengine: v0.3.0 → v1.0.0
• cloud.google.com/go/vpcaccess: v1.6.0 → v1.7.1
• cloud.google.com/go/webrisk: v1.8.0 → v1.9.1
• cloud.google.com/go/websecurityscanner: v1.5.0 → v1.6.1
• cloud.google.com/go/workflows: v1.10.0 → v1.12.0
• cloud.google.com/go: v0.110.2 → v0.110.8
• contrib.go.opencensus.io/exporter/prometheus: v0.4.0 → v0.4.2
• github.com/Shopify/sarama: v1.30.0 → v1.19.0
• github.com/alecthomas/jsonschema: f2c9385 → 9eeeec9
• github.com/alecthomas/units: f65c72e → b94a6e3
• github.com/bmizerany/perks: d9a9656 → 03f9df7
• github.com/c2h5oh/datasize: 28bbd47 → 859f65c
• github.com/coreos/go-systemd/v2...

v1.11.2

Changes since v1.11.1

What's Changed

• Rebuild using Go 1.20.10 (to address CVEs) by @ReToCode in #14500
• bump x/net to v0.17 by @nak3 in #14516

Full Changelog: knative-v1.11.1...knative-v1.11.2

v1.10.4

What's Changed

• [release-1.10] Rebuild using Go 1.20.10 (to address CVEs) by @ReToCode in #14501
• [release-1.10] bump x/net to v0.17 by @nak3 in #14517

Full Changelog: knative-v1.10.3...knative-v1.10.4

v1.11.1

Changes since v1.11.0

What's Changed

• fix securityContext for Knative Service Pod (user-container and queue-proxy) by @knative-prow-robot in #14378

Full Changelog: knative-v1.11.0...knative-v1.11.1

v1.10.3

What's Changed

• [release-1.10] fix securityContext for Knative Service Pod (user-container and queue-proxy) by @knative-prow-robot in #14377

Full Changelog: knative-v1.10.2...knative-v1.10.3

v1.11.0

Changes since v1.10

🚨 Breaking or Notable

• We now target v1.25 as our minimum version of Kubernetes
• Activator uses TLS 1.3 as the minimum version when internal encryption is activated for communication with queue-proxy (#13887, @izabelacg)
• Domain mapping controller logic is now merged with the Serving controller. Domainmapping webhook is merged with the Serving webhook. (#14082, @skonto)
• DomainMapping/v1alpha1 is deprecated - use v1beta1 APIs (#14058, @dprotaso)

💫 New Features & Changes

• A new flag is introduced queueproxy.resource-defaults that sets resource requests, limits for Queue Proxy when enabled (applies only to cpu and memory). (#14039, @skonto)
• Activator now has a separate service account, reducing its privileges to the required minimum. (#14133, @davidhadas)
• Queue proxy resources can be configured via annotations at the service level. The resource percentage annotation is now deprecated. (#14038, @skonto)
• Sets DefaultDomain to cluster's domain instead of hardcoded svc.cluster.local (#13964, @kauana)

🐞Bug Fixes

• Autoscaler metric are validated with global autoscaling class if no class annotation is set. (#13978, @xtreme-vikram-yadav)
• Drop cluster-autoscaler.kubernetes.io/safe-to-evict annotations on our control plane to allow nodes to drain (#14035, @dprotaso)
• Fix activator load balancing when using unbounded concurrency and when you have two instances of a revision (#14028, @dprotaso)
• Fix activator load balancing when using containerConcurrency=1 (#14022, @Gekko0114)
• Queue proxy metrics reporting period is now supported for both prometheus and opencensus.
  This allows fine-grained control of how often metrics are exported via a new config map attribute. (#14019, @skonto)
• Tag to digest min TLS version is 1.2 and can be configured higher using the controller environment variable TAG_TO_DIGEST_TLS_MIN_VERSION and supports values "1.2" and "1.3" (#13962, @dprotaso)

Dependencies

Added

• cloud.google.com/go/accessapproval: v1.6.0
• cloud.google.com/go/accesscontextmanager: v1.7.0
• cloud.google.com/go/aiplatform: v1.37.0
• cloud.google.com/go/analytics: v0.19.0
• cloud.google.com/go/apigateway: v1.5.0
• cloud.google.com/go/apigeeconnect: v1.5.0
• cloud.google.com/go/apigeeregistry: v0.6.0
• cloud.google.com/go/appengine: v1.7.1
• cloud.google.com/go/area120: v0.7.1
• cloud.google.com/go/artifactregistry: v1.13.0
• cloud.google.com/go/assuredworkloads: v1.10.0
• cloud.google.com/go/automl: v1.12.0
• cloud.google.com/go/baremetalsolution: v0.5.0
• cloud.google.com/go/batch: v0.7.0
• cloud.google.com/go/beyondcorp: v0.5.0
• cloud.google.com/go/billing: v1.13.0
• cloud.google.com/go/binaryauthorization: v1.5.0
• cloud.google.com/go/certificatemanager: v1.6.0
• cloud.google.com/go/channel: v1.12.0
• cloud.google.com/go/cloudbuild: v1.9.0
• cloud.google.com/go/clouddms: v1.5.0
• cloud.google.com/go/cloudtasks: v1.10.0
• cloud.google.com/go/compute/metadata: v0.2.3
• cloud.google.com/go/contactcenterinsights: v1.6.0
• cloud.google.com/go/container: v1.15.0
• cloud.google.com/go/containeranalysis: v0.9.0
• cloud.google.com/go/datacatalog: v1.13.0
• cloud.google.com/go/dataflow: v0.8.0
• cloud.google.com/go/dataform: v0.7.0
• cloud.google.com/go/datafusion: v1.6.0
• cloud.google.com/go/datalabeling: v0.7.0
• cloud.google.com/go/dataplex: v1.6.0
• cloud.google.com/go/dataproc: v1.12.0
• cloud.google.com/go/dataqna: v0.7.0
• cloud.google.com/go/datastream: v1.7.0
• cloud.google.com/go/deploy: v1.8.0
• cloud.google.com/go/dialogflow: v1.32.0
• cloud.google.com/go/dlp: v1.9.0
• cloud.google.com/go/documentai: v1.18.0
• cloud.google.com/go/domains: v0.8.0
• cloud.google.com/go/edgecontainer: v1.0.0
• cloud.google.com/go/errorreporting: v0.3.0
• cloud.google.com/go/essentialcontacts: v1.5.0
• cloud.google.com/go/eventarc: v1.11.0
• cloud.google.com/go/filestore: v1.6.0
• cloud.google.com/go/firestore: v1.9.0
• cloud.google.com/go/functions: v1.13.0
• cloud.google.com/go/gaming: v1.9.0
• cloud.google.com/go/gkebackup: v0.4.0
• cloud.google.com/go/gkeconnect: v0.7.0
• cloud.google.com/go/gkehub: v0.12.0
• cloud.google.com/go/gkemulticloud: v0.5.0
• cloud.google.com/go/gsuiteaddons: v1.5.0
• cloud.google.com/go/iap: v1.7.1
• cloud.google.com/go/ids: v1.3.0
• cloud.google.com/go/iot: v1.6.0
• cloud.google.com/go/kms: v1.10.1
• cloud.google.com/go/language: v1.9.0
• cloud.google.com/go/lifesciences: v0.8.0
• cloud.google.com/go/logging: v1.7.0
• cloud.google.com/go/longrunning: v0.4.1
• cloud.google.com/go/managedidentities: v1.5.0
• cloud.google.com/go/maps: v0.7.0
• cloud.google.com/go/mediatranslation: v0.7.0
• cloud.google.com/go/memcache: v1.9.0
• cloud.google.com/go/metastore: v1.10.0
• cloud.google.com/go/monitoring: v1.13.0
• cloud.google.com/go/networkconnectivity: v1.11.0
• cloud.google.com/go/networkmanagement: v1.6.0
• cloud.google.com/go/networksecurity: v0.8.0
• cloud.google.com/go/notebooks: v1.8.0
• cloud.google.com/go/optimization: v1.3.1
• cloud.google.com/go/orchestration: v1.6.0
• cloud.google.com/go/orgpolicy: v1.10.0
• cloud.google.com/go/osconfig: v1.11.0
• cloud.google.com/go/oslogin: v1.9.0
• cloud.google.com/go/phishingprotection: v0.7.0
• cloud.google.com/go/policytroubleshooter: v1.6.0
• cloud.google.com/go/privatecatalog: v0.8.0
• cloud.google.com/go/pubsublite: v1.7.0
• cloud.google.com/go/recaptchaenterprise/v2: v2.7.0
• cloud.google.com/go/recommendationengine: v0.7.0
• cloud.google.com/go/recommender: v1.9.0
• cloud.google.com/go/redis: v1.11.0
• cloud.google.com/go/resourcemanager: v1.7.0
• cloud.google.com/go/resourcesettings: v1.5.0
• cloud.google.com/go/retail: v1.12.0
• cloud.google.com/go/run: v0.9.0
• cloud.google.com/go/scheduler: v1.9.0
• cloud.google.com/go/secretmanager: v1.10.0
• cloud.google.com/go/securitycenter: v1.19.0
• cloud.google.com/go/servicedirectory: v1.9.0
• cloud.google.com/go/shell: v1.6.0
• cloud.google.com/go/spanner: v1.45.0
• cloud.google.com/go/speech: v1.15.0
• cloud.google.com/go/storagetransfer: v1.8.0
• cloud.google.com/go/talent: v1.5.0
• cloud.google.com/go/texttospeech: v1.6.0
• cloud.google.com/go/tpu: v1.5.0
• cloud.google.com/go/trace: v1.9.0
• cloud.google.com/go/translate: v1.7.0
• cloud.google.com/go/video: v1.15.0
• cloud.google.com/go/videointelligence: v1.10.0
• cloud.google.com/go/vision/v2: v2.7.0
• cloud.google.com/go/vmmigration: v1.6.0
• cloud.google.com/go/vmwareengine: v0.3.0
• cloud.google.com/go/vpcaccess: v1.6.0
• cloud.google.com/go/webrisk: v1.8.0
• cloud.google.com/go/websecurityscanner: v1.5.0
• cloud.google.com/go/workflows: v1.10.0
• github.com/cenkalti/backoff/v4: v4.1.3
• github.com/go-logr/stdr: v1.2.2
• github.com/google/s2a-go: v0.1.4
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.11.3
• go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.10.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.10.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.10.0
• google.golang.org/genproto/googleapis/api: 1aefcd6
• google.golang.org/genproto/googleapis/rpc: 9506855
• k8s.io/kms: v0.26.5

Changed

• cloud.google.com/go/asset: v1.5.0 → v1.13.0
• cloud.google.com/go/bigquery: v1.8.0 → v1.50.0
• cloud.google.com/go/compute: v1.10.0 → v1.19.1
• cloud.google.com/go/datastore: v1.1.0 → v1.11.0
• cloud.google.com/go/iam: v0.3.0 → v1.0.1
• cloud.google.com/go/pubsub: v1.3.1 → v1.30.0
• cloud.google.com/go/security: v1.5.0 → v1.13.0
• cloud.google.com/go/storage: v1.22.1 → v1.30.1
• cloud.google.com/go: v0.102.1 → v0.110.2
• github.com/antlr/antlr4/runtime/Go/antlr: f25a4f6 → v1.4.10
• github.com/census-instrumentation/opencensus-proto: v0.3.0 → v0.4.1
• github.com/cespare/xxhash/v2: v2.1.2 → v2.2.0
• github.com/cncf/udpa/go: 04548b0 → c52dc94
• github.com/cncf/xds/go: cb28da3 → e9ce688
• github.com/envoyproxy/go-control-plane: 49ff273 → 9239064
• github.com/envoyproxy/protoc-gen-validate: v0.1.0 → v0.10.1
• github.com/felixge/httpsnoop: v1.0.1 → v1.0.3
• github.com/fsnotify/fsnotify: v1.4.9 → v1.6.0
• github.com/go-kit/log: v0.1.0 → v0.2.0
• github.com/go-logfmt/logfmt: v0.5.0 → v0.5.1
• github.com/golang/glog: v1.0.0 → v1.1.0
• github.com/golang/mock: v1.6.0 → v1.4.4
• github.com/golang/protobuf: v1.5.2 → v1.5.3
• github.com/google/cel-go: v0.12.5 → v0.12.6
• github.com/google/martian/v3: v3.2.1 → v3.0.0
• github.com/google/pprof: 4bb14d4 → 1a94d86
• g...

v1.9.4

Changes since v1.9.3

• Drop the cluster-autoscaler.kubernetes.io/safe-to-evict: "false" annotation on our deployments (#13984, @dprotaso)

v1.10.2

Changes since v1.10.1

• Drop the cluster-autoscaler.kubernetes.io/safe-to-evict: "false" annotation on our deployments (#13984, @dprotaso)
• Fix activator load balancing (#14052, @dprotaso)

v1.10.1

Changes since v1.10.0

• Tag to digest minimum TLS version was reverted back to 1.2. (#13963, @dprotaso)
  • Higher TLS versions can be configured using the controller environment variable TAG_TO_DIGEST_TLS_MIN_VERSION and supports values "1.2" and "1.3"

v1.10.0

Changes since v1.9

Note: some container image registries support only TLS v1.2 (quay.io) so we reverted the change min TLS 1.3 change in v1.10.1 and made it configurable

🚨 Breaking or Notable

• Container-freezer has been sunset in Knative v1.10. (#13830, @psschwei)
• Controller uses TLS 1.3 as the minimum version when communicating with image registries for tag to digest resolution (#13886, @izabelacg)

💫 New Features & Changes

• Adds support for downwardAPI sources in projected volumes on Knative Services (#13896, @KauzClay)
• Controllers now have liveness and readiness probes (#13563, @skonto)
• With enabling internal-encryption, activator pods needed to be restarted when certificates are updated. The restart is not necessary anymore. (#13854, @nak3)
• ImagePullSecrets with references to unknown service accounts won't error out anymore but fail silently like Kubernetes. (#13701, @Bisht13)

🐞Bug Fixes

• Fixes issue where certificates would not get renewed when using auto-tls. (#13666, @KauzClay)
• Fix queue proxy not draining connections on shutdown (#13815, @dprotaso)

Dependencies

Added

• cloud.google.com/go/asset: v1.5.0
• cloud.google.com/go/iam: v0.3.0
• cloud.google.com/go/security: v1.5.0
• github.com/Azure/go-ansiterm: d185dfc
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6
• github.com/buger/jsonparser: v1.1.1
• github.com/flowstack/go-jsonschema: v0.1.1
• github.com/googleapis/enterprise-certificate-proxy: v0.1.0
• github.com/googleapis/go-type-adapters: v1.0.0
• github.com/moby/term: 9d4ed18
• github.com/morikuni/aec: v1.0.0

Changed

• cloud.google.com/go/compute: v1.5.0 → v1.10.0
• cloud.google.com/go/pubsub: v1.5.0 → v1.3.1
• cloud.google.com/go/storage: v1.18.2 → v1.22.1
• cloud.google.com/go: v0.100.2 → v0.102.1
• github.com/Azure/azure-sdk-for-go: v62.0.0+incompatible → v67.0.0+incompatible
• github.com/Azure/go-autorest/autorest/adal: v0.9.20 → v0.9.21
• github.com/Azure/go-autorest/autorest/azure/cli: v0.4.5 → v0.4.6
• github.com/Azure/go-autorest/autorest: v0.11.27 → v0.11.28
• github.com/BurntSushi/toml: v0.4.1 → v0.3.1
• github.com/Microsoft/go-winio: v0.5.2 → v0.6.0
• github.com/aws/aws-sdk-go-v2/config: v1.14.0 → v1.17.8
• github.com/aws/aws-sdk-go-v2/credentials: v1.9.0 → v1.12.21
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.11.0 → v1.12.17
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.5 → v1.1.23
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.3.0 → v2.4.17
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.6 → v1.3.24
• github.com/aws/aws-sdk-go-v2/service/ecr: v1.15.0 → v1.17.18
• github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.12.0 → v1.13.17
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.8.0 → v1.9.17
• github.com/aws/aws-sdk-go-v2/service/sso: v1.10.0 → v1.11.23
• github.com/aws/aws-sdk-go-v2/service/sts: v1.15.0 → v1.16.19
• github.com/aws/aws-sdk-go-v2: v1.14.0 → v1.16.16
• github.com/aws/smithy-go: v1.11.0 → v1.13.3
• github.com/awslabs/amazon-ecr-credential-helper/ecr-login: 396b203 → a250ad2
• github.com/chrismellard/docker-credential-acr-env: fe33c00 → e883f69
• github.com/containerd/stargz-snapshotter/estargz: v0.11.1 → v0.12.1
• github.com/cpuguy83/go-md2man/v2: v2.0.1 → v2.0.2
• github.com/danieljoos/wincred: v1.1.0 → v1.1.2
• github.com/docker/cli: v20.10.12+incompatible → v20.10.20+incompatible
• github.com/docker/distribution: v2.8.0+incompatible → v2.8.1+incompatible
• github.com/docker/docker-credential-helpers: v0.6.4 → v0.7.0
• github.com/docker/docker: v20.10.12+incompatible → v20.10.20+incompatible
• github.com/docker/go-units: v0.4.0 → v0.5.0
• github.com/emicklei/go-restful/v3: v3.8.0 → v3.9.0
• github.com/fsnotify/fsnotify: v1.5.1 → v1.4.9
• github.com/getkin/kin-openapi: v0.76.0 → v0.61.0
• github.com/go-openapi/jsonreference: v0.19.5 → v0.20.0
• github.com/go-openapi/swag: v0.19.15 → v0.22.3
• github.com/golang-jwt/jwt/v4: v4.3.0 → v4.4.2
• github.com/golangci/lint-1: 297bf36 → d2cdd8c
• github.com/google/gnostic: v0.5.7-v3refs → v0.6.9
• github.com/google/go-cmp: v0.5.8 → v0.5.9
• github.com/google/go-containerregistry/pkg/authn/k8schain: 570ba6c → 3624968
• github.com/google/go-containerregistry/pkg/authn/kubernetes: 892d7a8 → 3624968
• github.com/google/go-containerregistry: 892d7a8 → v0.13.0
• github.com/googleapis/gax-go/v2: v2.1.1 → v2.4.0
• github.com/gregjones/httpcache: 901d907 → 9cad4c3
• github.com/inconshreveable/mousetrap: v1.0.0 → v1.0.1
• github.com/kisielk/errcheck: v1.6.0 → v1.5.0
• github.com/klauspost/compress: v1.14.4 → v1.15.11
• github.com/magiconair/properties: v1.8.5 → v1.8.4
• github.com/mattn/go-colorable: v0.1.11 → v0.1.8
• github.com/mattn/go-isatty: v0.0.14 → v0.0.12
• github.com/mitchellh/mapstructure: v1.4.2 → v1.4.1
• github.com/opencontainers/image-spec: 8b9d41f → v1.1.0-rc2
• github.com/pelletier/go-toml: v1.9.4 → v1.8.1
• github.com/rogpeppe/go-internal: v1.6.2 → v1.3.0
• github.com/sirupsen/logrus: v1.8.1 → v1.9.0
• github.com/spf13/afero: v1.6.0 → v1.4.1
• github.com/spf13/cast: v1.4.1 → v1.3.1
• github.com/spf13/cobra: v1.4.0 → v1.6.0
• github.com/spf13/viper:...