Flannel Releases

What's Changed Add helm chart unittest target and CI job by @mgfritch in #2495 build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot [bot] in #2493 build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot [bot] in #2498 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot [bot] in #2501 e2e: replace k3s with kind by @thomasferrandiz in #2506 chore: bump CodeQL GHA actions by @thomasferrandiz in #2512 security: fix CVE-2026-46600 , CVE-2026-56852 , suppress GO-2026-5932 false positive by @thomasferrandiz in #2514 Pin Dockerfile base images to SHA digests by @thomasferrandiz in #2515 Add ClusterFuzzLite continuous fuzzing by @thomasferrandiz in #2516 docs: clarify network policy options in README by @locker95 in #2503 Fix permissions in fuzzer workflows by @thomasferrandiz in #2517 build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot [bot] in #2510 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot [bot] in #2499 build(deps): bump Azure/setup-helm from 4.3.1 to 5.0.1 by @dependabot [bot] in #2508 Add ADOPTERS.md listing organisations using Flannel in production by @pgonin with @Copilot in #2397 docs: document missing VXLAN backend options by @locker95 in #2504 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot [bot] in #2520 Add readiness (/readyz) and liveness (/healthz) probes to flanneld by @thomasferrandiz in #2523 build(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot [bot] in #2519 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot [bot] in #2521 build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot [bot] in #2507 subnet/etcd: recover single-subnet watch from compaction by @phinze in #2524 Prepare for release v0.28.9 by @thomasferrandiz in #2525 New Contributors @locker95 made their first contribution in #2503 Full Changelog : v0.28.8...v0.28.9

What's Changed build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot [bot] in #2490 build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot [bot] in #2494 Simplify WriteSubnetFile and make atomic by @brandond in #2497 build(deps): bump the other-go-modules group across 1 directory with 2 updates by @dependabot [bot] in #2489 Prepare release v0.28.8 by @thomasferrandiz in #2505 New Contributors @brandond made their first contribution in #2497 Full Changelog : v0.28.7...v0.28.8

What's Changed fix: use install-conf in chart by @thomasferrandiz in #2484 prepare for release v0.28.7 by @thomasferrandiz in #2485 Full Changelog : v0.28.6...v0.28.7

What's Changed Bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot [bot] in #2463 Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot [bot] in #2465 Bump the other-go-modules group with 2 updates by @dependabot [bot] in #2464 feat: new install_conf cmd to install flannel's config file by @thomasferrandiz in #2466 Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot [bot] in #2468 Bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot [bot] in #2467 Bump the tencent group across 1 directory with 2 updates by @dependabot [bot] in #2461 subnet/etcd: recover subnet watch from compaction by @phinze in #2471 fix: skip invalid CIDRs in subnet file readers by @immanuwell in #2454 etcd: bug fixes suggested by Claude by @thomasferrandiz in #2472 build(deps): bump the etcd group with 4 updates by @dependabot [bot] in #2474 build(deps): bump the tencent group with 2 updates by @dependabot [bot] in #2475 build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot [bot] in #2476 build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot [bot] in #2478 build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot [bot] in #2479 build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot [bot] in #2473 build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot [bot] in #2480 Bump flannel plugin and prepare release v0.28.6 by @thomasferrandiz in #2481 fix: use semver tag type in Docker meta to support release events by @thomasferrandiz with @Copilot in #2483 New Contributors @phinze made their first contribution in #2471 @immanuwell made their first contribution in #2454 Full Changelog : v0.28.5...v0.28.6

What's Changed Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot [bot] in #2421 Fail early in e2e tests and remove unnecessary step by @thomasferrandiz in #2429 Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot [bot] in #2431 Bump k8s deps to v0.33.11 by @thomasferrandiz in #2432 Bump the tencent group with 2 updates by @dependabot [bot] in #2430 fix(vxlan): guard ifaceAddrsV6[0] on IPv4-only setups by @SAY-5 in #2434 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.83 to 1.3.87 in the tencent group by @dependabot [bot] in #2435 Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot [bot] in #2436 Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot [bot] in #2441 Bump the etcd group with 4 updates by @dependabot [bot] in #2439 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.87 to 1.3.90 in the tencent group across 1 directory by @dependabot [bot] in #2440 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.90 to 1.3.94 in the tencent group by @dependabot [bot] in #2444 Bump golang.org/x/sys from 0.43.0 to 0.44.0 in the other-go-modules group across 1 directory by @dependabot [bot] in #2445 Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot [bot] in #2452 fix: reap orphaned zombie child processes when running as PID 1 by @pratikjagrut in #2438 Bump github/codeql-action from 4.35.3 to 4.36.0 by @dependabot [bot] in #2450 Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot [bot] in #2453 Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot [bot] in #2451 Bump golang.org/x/sys from 0.44.0 to 0.45.0 in the other-go-modules group by @dependabot [bot] in #2449 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.94 to 1.3.105 in the tencent group across 1 directory by @dependabot [bot] in #2448 Bump the etcd group with 4 updates by @dependabot [bot] in #2455 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.105 to 1.3.108 in the tencent group across 1 directory by @dependabot [bot] in #2456 Bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot [bot] in #2457 Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot [bot] in #2458 Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot [bot] in #2459 Prepare for release v0.28.5 by @mgfritch in #2460 New Contributors @SAY-5 made their first contribution in #2434 Full Changelog : v0.28.4...v0.28.5

What's Changed fix go version (don't set patch version) by @thomasferrandiz in #2428 Full Changelog : v0.28.3...v0.28.4

What's Changed Update CONTRIBUTING.md by @pgonin in #2396 Update code-of-conduct.md by @pgonin in #2395 remove docker login steps in build and test workflows by @thomasferrandiz in #2410 Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot [bot] in #2407 Bump actions/configure-pages from 5.0.0 to 6.0.0 by @dependabot [bot] in #2406 fix: honor --stderrthreshold flag when --logtostderr is enabled by @pierluigilenoci in #2405 vxlan: fix v6 direct route deletion to use v6DirectRoute by @cuiweixie in #2403 lease: fix LeaseAttrs.String() after json.Marshal errors by @cuiweixie in #2404 Add GOVERNANCE.md by @pgonin in #2391 Bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot [bot] in #2408 Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot [bot] in #2409 Bump the tencent group with 2 updates by @dependabot [bot] in #2381 Improve the security of Dockerfile by @manuelbuil in #2412 Secure makefile by @manuelbuil in #2414 Verify the kubectl sha256sum by @manuelbuil in #2413 Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot [bot] in #2418 Use dependabot to update images versions on the manifest by @rbrtbnfgl in #2419 Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot [bot] in #2422 Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot [bot] in #2423 Bump go to 1.25 by @thomasferrandiz in #2424 Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot [bot] in #2420 Bump the etcd group across 1 directory with 4 updates by @dependabot [bot] in #2398 Bump the tencent group with 2 updates by @dependabot [bot] in #2417 Bump the other-go-modules group across 1 directory with 3 updates by @dependabot [bot] in #2425 Bump flannel-cni-plugin to v1.9.1-flannel1 by @thomasferrandiz in #2427 Prepare for release v0.28.3 by @thomasferrandiz in #2426 New Contributors @pierluigilenoci made their first contribution in #2405 @cuiweixie made their first contribution in #2403 Full Changelog : v0.28.2...v0.28.3

What's Changed Bump golang.org/x/sys from 0.40.0 to 0.41.0 in the other-go-modules group by @dependabot [bot] in #2352 Bump github/codeql-action from 4.31.11 to 4.32.3 by @dependabot [bot] in #2356 Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot [bot] in #2350 Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot [bot] in #2349 Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot [bot] in #2362 Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot [bot] in #2363 Bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.40.0 by @dependabot [bot] in #2360 Bump the etcd group with 4 updates by @dependabot [bot] in #2355 Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot [bot] in #2364 Add Scorecard workflow for supply-chain security by @thomasferrandiz in #2365 [StepSecurity] Apply security best practices by @step-security-bot in #2366 Add OpenSSF Scorecard badge to README by @pgonin in #2367 Remove old manifests by @manuelbuil in #2368 Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot [bot] in #2357 Add 2025 activity summary report by @Copilot in #2343 Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot [bot] in #2374 Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot [bot] in #2375 Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 by @dependabot [bot] in #2378 Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot [bot] in #2376 Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot [bot] in #2377 Add SECURITY.md security policy by @pgonin in #2371 Add Security policy page to main README page by @pgonin in #2380 Bump the tencent group with 2 updates by @dependabot [bot] in #2339 Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot [bot] in #2383 Bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot [bot] in #2384 Bump actions/upload-artifact from 4.6.1 to 7.0.0 by @dependabot [bot] in #2385 Bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot [bot] in #2386 Bump github/codeql-action from 3.32.5 to 4.32.6 by @dependabot [bot] in #2382 Bump google.golang.org/grpc from 1.71.1 to 1.79.3 by @dependabot [bot] in #2387 Add ROADMAP.md and update README roadmap link by @pgonin in #2393 Bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot [bot] in #2399 fix extensions code exec by @thomasferrandiz in #2400 Prepare update flannel to v0.28.2 by @thomasferrandiz in #2402 New Contributors @step-security-bot made their first contribution in #2366 @Copilot made their first contribution in #2343 Full Changelog : v0.28.1...v0.28.2

What's Changed Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot [bot] in #2341 Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot [bot] in #2342 Fix blackhole creation test logic in AddBlackholeV4Route and AddBlackholeV6Route by @axeal in #2329 Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the other-go-modules group by @dependabot [bot] in #2340 Bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot [bot] in #2344 Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot [bot] in #2345 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 in the other-go-modules group by @dependabot [bot] in #2347 Prepare update flannel to v0.28.1 by @rbrtbnfgl in #2351 New Contributors @axeal made their first contribution in #2329 Full Changelog : v0.28.0...v0.28.1

What's Changed Bump the tencent group across 1 directory with 2 updates by @dependabot [bot] in #2282 Added TAG to fix bin version by @rbrtbnfgl in #2297 Bump docker image versions by @thomasferrandiz in #2299 ip: improve primary address selection to account for address flags by @lilioid in #2295 Additional check on podCIDR by @rbrtbnfgl in #2306 fix GHA path in dependabot.yaml by @thomasferrandiz in #2304 Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot [bot] in #2312 Bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot [bot] in #2308 Bump actions/configure-pages from 4.0.0 to 5.0.0 by @dependabot [bot] in #2309 Bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot [bot] in #2310 Bump github/codeql-action from 3.28.13 to 4.31.6 by @dependabot [bot] in #2311 Update community meeting frequency to monthly by @pgonin in #2313 Fix spelling by @fguendling in #2302 Bump actions/upload-pages-artifact from 3.0.1 to 4.0.0 by @dependabot [bot] in #2317 Bump docker/login-action from 3.4.0 to 3.6.0 by @dependabot [bot] in #2318 Bump docker/metadata-action from 5.7.0 to 5.10.0 by @dependabot [bot] in #2316 Bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot [bot] in #2315 Bump golangci/golangci-lint-action from 6.1.1 to 9.2.0 by @dependabot [bot] in #2314 doc: add external routing configuration notice of public IPv6 prefixes by @lilioid in #2290 Bump to go 1.24 and k8s deps to v0.32.10 by @thomasferrandiz in #2320 Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot [bot] in #2303 Bump the etcd group with 4 updates by @dependabot [bot] in #2284 Bump the tencent group with 2 updates by @dependabot [bot] in #2296 Bump the other-go-modules group across 1 directory with 4 updates by @dependabot [bot] in #2298 Bump github/codeql-action from 4.31.7 to 4.31.8 by @dependabot [bot] in #2326 Bump docker/build-push-action from 5.4.0 to 6.18.0 by @dependabot [bot] in #2327 Bump actions/attest-build-provenance from 2.2.3 to 3.0.0 by @dependabot [bot] in #2325 Bump aquasecurity/trivy-action from 0.30.0 to 0.33.1 by @dependabot [bot] in #2324 Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.11 to 1.3.12 in the tencent group by @dependabot [bot] in #2322 Bump actions/setup-go from 5.4.0 to 6.1.0 by @dependabot [bot] in #2323 Added check for nftables before checking br_netfilter module by @rbrtbnfgl in #2321 Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot [bot] in #2335 Bump the tencent group with 2 updates by @dependabot [bot] in #2333 Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot [bot] in #2336 Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @dependabot [bot] in #2334 Bump the etcd group with 4 updates by @dependabot [bot] in #2332 Bump the tencent group with 2 updates by @dependabot [bot] in #2337 New Contributors @lilioid made their first contribution in #2295 @pgonin made their first contribution in #2313 @fguendling made their first contribution in #2302 Full Changelog : v0.27.4...v0.28.0