Skip to content

chore(deps): update helm release capsule to v0.13.1#298

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-ci-dependencies
Open

chore(deps): update helm release capsule to v0.13.1#298
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-ci-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 28, 2026

This PR contains the following updates:

Package Update Change
capsule (source) minor 0.12.40.13.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

projectcapsule/capsule (capsule)

v0.13.1

Compare Source

Changelog

🐛 Bug fixes

Full Changelog: projectcapsule/capsule@v0.13.0...v0.13.1

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.1
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.1

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄

v0.13.0

Compare Source

Changelog

✨ Breaking Changes
  • 0515880: feat: use cert-manager certificates by default. By default, Capsule now uses self-signed cert-manager certificates for its admission webhooks. This used to be an optional setting and has now become the default. If you don’t have cert-manager installed, you must explicitly re-enable the Capsule TLS controller as documented here. (#​1818) (@​oliverbaehler)

Security 🔒

  • Advisory GHSA-qjjm-7j9w-pw72 - High - Users can create cluster scoped resources anywhere in the cluster if they are allowed to create TenantResources. To immediately mitigate this, make sure to use Impersonation for TenantResources.
  • Advisory GHSA-2ww6-hf35-mfjm - Moderate - Users may hijack namespaces via namespaces/status privileges. These privileges must have been explicitly granted by Platform Administrators through RBAC rules to be affected. Requests for the namespaces/status subresource are now sent to the Capsule admission webhook as well.
✨ New Features
🐛 Bug fixes
  • cc4fb45: fix: Improved matchConditions for admission webhooks that intercept all namespaced items, to avoid processing subresource requests and Events, improving performance and reducing log noise. (#​1841) (@​oliverbaehler)
  • cc4fb45: fix: PersistentVolumeClaims support now providing .spec.selector. When .spec.selector is provided we always aggregate a custom matchExpressions for the PersistentVolumeClaims to ensure that only the PersistentVolumeClaims created in the Tenant can mount PersistentVolumes provisioned from/for the same Tenant (#​1841) (@​oliverbaehler)
  • cc4fb45: fix: Regex-Selectors were not considered on classes driven Tenant status reconciles (#​1841) (@​oliverbaehler)
  • cc4fb45: fix: A single Unready namespace could cause the entire Tenant reconcilation to be incomplete. Now unready or terminating namespaces are ignored for further processing ensuring that ready/new namespaces get their required contents (#​1841) (@​oliverbaehler)
  • cc4fb45: fix: When a Tenant is cordoned, namespaces can no longer be deleted. (#​1841) (@​oliverbaehler)
  • cc4fb45: fix: TLS controller correctly patches all the webhooks with the same CA Bundle, to avoid issues with multiple webhooks and ensure that all webhooks are correctly secured, if enabled (#​1841) (@​oliverbaehler)
  • 61429d1: fix(docs): update home in chart.yaml (#​1864) (@​sandert-k8s)
  • 58b25e3: fix(webhook): adapt to controller-runtime breaking change in newwebhookmanagedby (#​1898) (@​Svarrogh1337)
  • c6e109c: fix: release workflows (#​1919) (@​oliverbaehler)
🛠 Dependency updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.12.4...v0.13.0

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.13.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.13.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.35 >= 1.35.0

Thanks to all the contributors! 🚀 🦄


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov
Copy link
Copy Markdown

codecov Bot commented May 28, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot changed the title chore(deps): update helm release capsule to v0.13.0 chore(deps): update helm release capsule to v0.13.1 May 29, 2026
@renovate renovate Bot force-pushed the renovate/all-ci-dependencies branch from b4b8c76 to a76fde5 Compare May 29, 2026 19:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants