Skip to content

chore(deps): update helm release capsule to v0.14.4 - #11

Merged
patrickleet merged 1 commit into
mainfrom
renovate/capsule-0.x
Sep 11, 2026
Merged

patrickleet merged 1 commit into
mainfrom
renovate/capsule-0.x

Conversation

@renovate

@renovate renovate Bot commented Aug 29, 2026 •

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
capsule (source) minor 0.12.4 → 0.14.4

Release Notes

projectcapsule/capsule (capsule)

v0.14.4

Compare Source

⚠️ Security

  • GHSA-2vqc-26cg-wpxg Moderate: TenantResource template sanitizer misses sprig 'expandenv' (wrong-case deny-list) -> namespaced tenant reads capsule-controller process environment / secrets

Changelog

🐛 Bug fixes
🛡️ Security updates

Full Changelog: projectcapsule/capsule@v0.14.3...v0.14.4

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.4
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.4

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.3

Compare Source

Changelog
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.14.2...v0.14.3

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.3
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.3

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.2

Compare Source

Changelog
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.14.1...v0.14.2

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.2
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.2

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.1

Compare Source

Changelog
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.14.0...v0.14.1

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.1
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.1

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.14.0

Compare Source

Changelog
✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🛡️ Security updates

Full Changelog: projectcapsule/capsule@v0.13.11...v0.14.0

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.14.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.14.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄

v0.13.11

Compare Source

Changelog
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.10...v0.13.11

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.11
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.11

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.10

Compare Source

Changelog
✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.13.9...v0.13.10

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.10
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.10

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.9

Compare Source

Changelog
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.8...v0.13.9

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.9
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.9

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.8

Compare Source

⚠️ Security

  • GHSA-jr6p-8pjj-mfx6 Moderate: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation) - Without impersonation
  • GHSA-68cj-mvg9-rgm2 Moderate: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
Changelog
✨ New Features
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.13.7...v0.13.8

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.8
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.8

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.7

Compare Source

Changelog
⚠️ Security
  • GHSA-gxjc-74v5-3vx3 Moderate: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
  • GHSA-gjw4-3v3v-rqxg High: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement because ForbiddenListSpec.ExactMatch runs sort.SearchStrings (byte order) over a slice sorted case-insensitively
  • GHSA-f94q-w3w8-cj67 Moderate: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.6...v0.13.7

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.7
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.7

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.6

Compare Source

Changelog
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.5...v0.13.6

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.6
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.6

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.5

Compare Source

Changelog
✨ New Features
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.4...v0.13.5

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.5
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.5

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.4

Compare Source

Changelog
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.3...v0.13.4

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.4
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.4

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.3

Compare Source

Changelog
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.13.2...v0.13.3

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.3
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.3

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.2

Compare Source

Changelog
✨ New Features
🐛 Bug fixes
🛠 Dependency updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.13.1...v0.13.2

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.2
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.2

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.1

Compare Source

Changelog
🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.0...v0.13.1

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.1
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.1

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.0

Compare Source

Changelog
✨ Breaking Changes
  • 0515880: feat: use cert-manager certificates by default. By default, Capsule now uses self-signed cert-manager certificates for its admission webhooks. This used to be an optional setting and has now become the default. If you don’t have cert-manager installed, you must explicitly re-enable the Capsule TLS controller as documented here. (#​1818) (@​oliverbaehler)
Security 🔒
  • Advisory GHSA-qjjm-7j9w-pw72 - High - Users can create cluster scoped resources anywhere in the cluster if they are allowed to create TenantResources. To immediately mitigate this, make sure to use Impersonation for TenantResources.
  • Advisory GHSA-2ww6-hf35-mfjm - Moderate - Users may hijack namespaces via namespaces/status privileges. These privileges must have been explicitly granted by Platform Administrators through RBAC rules to be affected. Requests for the namespaces/status subresource are now sent to the Capsule admission webhook as well.
✨ New Features

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Aug 30, 2026 •

Copy link
Copy Markdown

Published Crossplane Package

The following Crossplane package was published as part of this PR:

Package: ghcr.io/hops-ops/tenant-stack:pr-11-8f9ca067cd6bae6a96aa1c23f6f331c6ae7fac83

View Package

@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from 1d31b30 to f7697d2 Compare August 31, 2026 05:27
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.14.2 chore(deps): update helm release capsule to v0.14.3 Aug 31, 2026
@renovate
renovate Bot force-pushed the renovate/capsule-0.x branch from f7697d2 to a2f636f Compare September 3, 2026 20:56
@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.14.3 chore(deps): update helm release capsule to v0.14.4 Sep 3, 2026
@patrickleet
patrickleet merged commit 0542157 into main Sep 11, 2026
8 checks passed
@renovate
renovate Bot deleted the renovate/capsule-0.x branch September 11, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant