Release checklist for v0.37.0

[cfryanr]

Release checklist

• Ensure that Pinniped's dependencies have been upgraded, to the extent desired by the team (refer to the diff output from the latest run of the all-golang-deps-updated CI job)
  • If you are updating golang in Pinniped, be sure to update golang in CI as well. Do a search-and-replace to update the version number everywhere in the pinniped ci branch.
  • If the Fosite library is being updated and the format of the content of the Supervisor's storage Secrets are changed, or if any change to our own code changes the format of the content of the Supervisor's session storage Secrets, then be sure to update the accessTokenStorageVersion, authorizeCodeStorageVersion, oidcStorageVersion, pkceStorageVersion, refreshTokenStorageVersion, variables in files such as internal/fositestorage/accesstoken/accesstoken.go. Failing tests should signal the need to update these values.
  • For go.mod direct dependencies that are v2 or above, such as github.com/google/go-github/vXX, check to see if there is a new major version available. Try using hack/update-go-mod/update-majors.sh.
    • Created upgrade go-github dep to v68 #2184
  • Evaluate all replace directives in the go.mod file. Are they up to date versions? Can any replace directives be removed?
• Ensure that Pinniped's codegen is up-to-date with the latest Kubernetes releases by making sure this file is updated compared to the latest releases listed here for active branches and here for non-active branches
• Ensure that the k8s-code-generator CI job definitions are up-to-date with the latest Go, K8s, and controller-gen versions
  • Also added to upgrade go-github dep to v68 #2184
• All relevant feature and docs PRs are merged
• The main pipeline is green, up to and including the ready-to-release job. Check that the expected git commit has passed the ready-to-release job.
• Optional: a blog post for the release is written and submitted as a PR but not merged yet
• All merged user stories are accepted (manually tested)
• Only after all stories are accepted, manually trigger the release job to create a draft GitHub release
• Manually edit the draft release notes on the GitHub release to describe the contents of the release, using the format which was automatically added to the draft release
• Publish (i.e. make public) the draft release
• After making the release public, the jobs in the main pipeline beyond the release job should auto-trigger, so check to make sure that they passed
• Edit the blog post's date to make it match the actual release date, and merge the blog post PR to make it live on the website
• Publicize the release via tweets, etc.
• Close this issue

[cfryanr]

DRAFT release notes below

---

Changes

This release makes a small improvement to audit logging. It also includes other enhancements and upgrades project dependencies.

Minor Changes

• The remoteAddr key in the Supervisor's HTTP Request Received audit log event has been removed and replaced with a new key called sourceIPs. The value of sourceIPs is always an array of string IP addresses, and the last item in the list is always the address that was previously shown as the remoteAddr. Other items in the list can come from the X-Forwarded-For and X-Real-Ip request headers. See sourceIPs in https://kubernetes.io/docs/reference/config-api/apiserver-audit.v1 for details. (change remoteAddr to sourceIPs in Supervisor audit log for incoming http requests #2174)
• Updates the Kubernetes libraries to v0.31.4 and updates most other project dependencies. Note that the Kubernetes libraries were not upgraded to v0.32.0 due to a bug in one of those packages (see Counter.WithContext: data race kubernetes/kubernetes#128548). (Bump dependencies #2182, Bump dependencies #2181, Bump dependencies #2179, Bump dependencies #2176, Bump dependencies #2173, Bump dependencies #2171, Bump dependencies #2170, Bump dependencies #2169, upgrade fosite to v0.49.0 and handle its API changes #2158, Bump dependencies #2156, Bump dependencies #2155, upgrade go-github dep to v68 #2184)
• Some documentation and developer tooling improvements. (Doc updates #2177, upgrade golangci-lint to v1.63.4 #2175, temporarily avoid upgrades to kube v0.32.0 without using replace directives for direct deps #2166, Pin k8s.io libs to 1.31.4 #2163)
• Introduces new build tags to optionally override some min and max TLS settings, which may be useful to those who build their own custom Pinniped container images. See PR description for details. (Introduce new build tags to optionally override some min and max TLS settings #2162)

Diffs

A complete list of changes (41 commits, 43 changed files with 614 additions and 322 deletions) can be found here.