What's Changed

• Migrate kind e2e tests from bash_unit to Ginkgo by @thomasferrandiz in #2513
• build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #2533
• build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 by @dependabot[bot] in #2532
• Migrate remaining bash_unit tests to Ginkgo / Go by @thomasferrandiz in #2534
• build(deps): bump k8s dependencies to v0.34.10 by @thomasferrandiz in #2535
• e2e: add dual-stack (IPv4+IPv6) backend test matrix by @thomasferrandiz in #2536
• e2e: add flannel resilience/recovery tests by @thomasferrandiz in #2538
• e2e: add Service and CoreDNS connectivity test by @thomasferrandiz in #2537
• e2e: remove duplicate deletePod helper by @phinze in #2544
• subnet/etcd: unify the two subnet watch loops by @phinze in #2539
• build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #2548
• build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 by @dependabot[bot] in #2555
• Bump default CNI config cniVersion to 1.0.0 by @tsorya in #2526
• build(deps): upgrade github.com/avast/retry-go to v5 by @chimanjain in #2528
• build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2529
• build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #2558
• build(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.9 by @dependabot[bot] in #2552
• build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by @dependabot[bot] in #2559
• docs: prefer release kube-flannel.yml over master copy by @locker95 in #2527
• build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #2562
• Bump Go to 1.26 by @thomasferrandiz in #2563
• vxlan: recover from closed netlink subscription by @dlanov in #2560
• build(deps): bump the etcd group across 1 directory with 4 updates by @dependabot[bot] in #2487
• build(deps): bump the other-go-modules group across 1 directory with 4 updates by @dependabot[bot] in #2561
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.43.0 to 1.45.0 by @dependabot[bot] in #2567
• Bump github/codeql-action from v4.37.3 to v4.38.0 by @thomasferrandiz in #2570
• build(deps): bump the etcd group with 4 updates by @dependabot[bot] in #2578
• build(deps): bump the tencent group with 2 updates by @dependabot[bot] in #2571
• build(deps): bump the other-go-modules group across 1 directory with 2 updates by @dependabot[bot] in #2572
• Make sure GHA bumps are grouped by dependabot by @thomasferrandiz in #2579
• build(deps): bump github/codeql-action/analyze from 4bd7200e1f146b1c937cae12d258b50f41a53cf8 to b96794f015dfd88f77b49b1c93e0fa7110f94c63 by @dependabot[bot] in #2577
• build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.2 by @dependabot[bot] in #2575
• build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 by @dependabot[bot] in #2574
• build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 by @dependabot[bot] in #2573
• build(deps): bump github/codeql-action/init from 4bd7200e1f146b1c937cae12d258b50f41a53cf8 to b96794f015dfd88f77b49b1c93e0fa7110f94c63 by @dependabot[bot] in #2576
• fix: restore v-prefixed Docker Hub image tags by @thomasferrandiz in #2584
• build(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0 by @dependabot[bot] in #2582
• build(deps): bump the tencent group with 2 updates by @dependabot[bot] in #2580
• build: bump alpine base image digests by @thomasferrandiz in #2586
• Prepare for release v0.28.10 by @thomasferrandiz in #2587

New Contributors

• @tsorya made their first contribution in #2526
• @chimanjain made their first contribution in #2528
• @dlanov made their first contribution in #2560

Full Changelog: v0.28.9...v0.28.10

What's Changed

• Add helm chart unittest target and CI job by @mgfritch in #2495
• build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #2493
• build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2498
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #2501
• e2e: replace k3s with kind by @thomasferrandiz in #2506
• chore: bump CodeQL GHA actions by @thomasferrandiz in #2512
• security: fix CVE-2026-46600, CVE-2026-56852, suppress GO-2026-5932 false positive by @thomasferrandiz in #2514
• Pin Dockerfile base images to SHA digests by @thomasferrandiz in #2515
• Add ClusterFuzzLite continuous fuzzing by @thomasferrandiz in #2516
• docs: clarify network policy options in README by @locker95 in #2503
• Fix permissions in fuzzer workflows by @thomasferrandiz in #2517
• build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in #2510
• build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2499
• build(deps): bump Azure/setup-helm from 4.3.1 to 5.0.1 by @dependabot[bot] in #2508
• Add ADOPTERS.md listing organisations using Flannel in production by @pgonin with @Copilot in #2397
• docs: document missing VXLAN backend options by @locker95 in #2504
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2520
• Add readiness (/readyz) and liveness (/healthz) probes to flanneld by @thomasferrandiz in #2523
• build(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in #2519
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #2521
• build(deps): bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2507
• subnet/etcd: recover single-subnet watch from compaction by @phinze in #2524
• Prepare for release v0.28.9 by @thomasferrandiz in #2525

New Contributors

• @locker95 made their first contribution in #2503

Full Changelog: v0.28.8...v0.28.9

What's Changed

• build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2490
• build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot[bot] in #2494
• Simplify WriteSubnetFile and make atomic by @brandond in #2497
• build(deps): bump the other-go-modules group across 1 directory with 2 updates by @dependabot[bot] in #2489
• Prepare release v0.28.8 by @thomasferrandiz in #2505

New Contributors

• @brandond made their first contribution in #2497

Full Changelog: v0.28.7...v0.28.8

What's Changed

• fix: use install-conf in chart by @thomasferrandiz in #2484
• prepare for release v0.28.7 by @thomasferrandiz in #2485

Full Changelog: v0.28.6...v0.28.7

What's Changed

• Bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #2463
• Bump actions/checkout from 6.0.2 to 7.0.0 by @dependabot[bot] in #2465
• Bump the other-go-modules group with 2 updates by @dependabot[bot] in #2464
• feat: new install_conf cmd to install flannel's config file by @thomasferrandiz in #2466
• Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #2468
• Bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in #2467
• Bump the tencent group across 1 directory with 2 updates by @dependabot[bot] in #2461
• subnet/etcd: recover subnet watch from compaction by @phinze in #2471
• fix: skip invalid CIDRs in subnet file readers by @immanuwell in #2454
• etcd: bug fixes suggested by Claude by @thomasferrandiz in #2472
• build(deps): bump the etcd group with 4 updates by @dependabot[bot] in #2474
• build(deps): bump the tencent group with 2 updates by @dependabot[bot] in #2475
• build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in #2476
• build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2478
• build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #2479
• build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #2473
• build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot[bot] in #2480
• Bump flannel plugin and prepare release v0.28.6 by @thomasferrandiz in #2481
• fix: use semver tag type in Docker meta to support release events by @thomasferrandiz with @Copilot in #2483

New Contributors

• @phinze made their first contribution in #2471
• @immanuwell made their first contribution in #2454

Full Changelog: v0.28.5...v0.28.6

What's Changed

• Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #2421
• Fail early in e2e tests and remove unnecessary step by @thomasferrandiz in #2429
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #2431
• Bump k8s deps to v0.33.11 by @thomasferrandiz in #2432
• Bump the tencent group with 2 updates by @dependabot[bot] in #2430
• fix(vxlan): guard ifaceAddrsV6[0] on IPv4-only setups by @SAY-5 in #2434
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.83 to 1.3.87 in the tencent group by @dependabot[bot] in #2435
• Bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #2436
• Bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #2441
• Bump the etcd group with 4 updates by @dependabot[bot] in #2439
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.87 to 1.3.90 in the tencent group across 1 directory by @dependabot[bot] in #2440
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.90 to 1.3.94 in the tencent group by @dependabot[bot] in #2444
• Bump golang.org/x/sys from 0.43.0 to 0.44.0 in the other-go-modules group across 1 directory by @dependabot[bot] in #2445
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2452
• fix: reap orphaned zombie child processes when running as PID 1 by @pratikjagrut in #2438
• Bump github/codeql-action from 4.35.3 to 4.36.0 by @dependabot[bot] in #2450
• Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2453
• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #2451
• Bump golang.org/x/sys from 0.44.0 to 0.45.0 in the other-go-modules group by @dependabot[bot] in #2449
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.94 to 1.3.105 in the tencent group across 1 directory by @dependabot[bot] in #2448
• Bump the etcd group with 4 updates by @dependabot[bot] in #2455
• Bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common from 1.3.105 to 1.3.108 in the tencent group across 1 directory by @dependabot[bot] in #2456
• Bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #2457
• Bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2458
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2459
• Prepare for release v0.28.5 by @mgfritch in #2460

New Contributors

• @SAY-5 made their first contribution in #2434

Full Changelog: v0.28.4...v0.28.5

What's Changed

• fix go version (don't set patch version) by @thomasferrandiz in #2428

Full Changelog: v0.28.3...v0.28.4

What's Changed

• Update CONTRIBUTING.md by @pgonin in #2396
• Update code-of-conduct.md by @pgonin in #2395
• remove docker login steps in build and test workflows by @thomasferrandiz in #2410
• Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #2407
• Bump actions/configure-pages from 5.0.0 to 6.0.0 by @dependabot[bot] in #2406
• fix: honor --stderrthreshold flag when --logtostderr is enabled by @pierluigilenoci in #2405
• vxlan: fix v6 direct route deletion to use v6DirectRoute by @cuiweixie in #2403
• lease: fix LeaseAttrs.String() after json.Marshal errors by @cuiweixie in #2404
• Add GOVERNANCE.md by @pgonin in #2391
• Bump actions/deploy-pages from 4.0.5 to 5.0.0 by @dependabot[bot] in #2408
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #2409
• Bump the tencent group with 2 updates by @dependabot[bot] in #2381
• Improve the security of Dockerfile by @manuelbuil in #2412
• Secure makefile by @manuelbuil in #2414
• Verify the kubectl sha256sum by @manuelbuil in #2413
• Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2418
• Use dependabot to update images versions on the manifest by @rbrtbnfgl in #2419
• Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #2422
• Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 by @dependabot[bot] in #2423
• Bump go to 1.25 by @thomasferrandiz in #2424
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #2420
• Bump the etcd group across 1 directory with 4 updates by @dependabot[bot] in #2398
• Bump the tencent group with 2 updates by @dependabot[bot] in #2417
• Bump the other-go-modules group across 1 directory with 3 updates by @dependabot[bot] in #2425
• Bump flannel-cni-plugin to v1.9.1-flannel1 by @thomasferrandiz in #2427
• Prepare for release v0.28.3 by @thomasferrandiz in #2426

New Contributors

• @pierluigilenoci made their first contribution in #2405
• @cuiweixie made their first contribution in #2403

Full Changelog: v0.28.2...v0.28.3

What's Changed

• Bump golang.org/x/sys from 0.40.0 to 0.41.0 in the other-go-modules group by @dependabot[bot] in #2352
• Bump github/codeql-action from 4.31.11 to 4.32.3 by @dependabot[bot] in #2356
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2350
• Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #2349
• Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in #2362
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #2363
• Bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.40.0 by @dependabot[bot] in #2360
• Bump the etcd group with 4 updates by @dependabot[bot] in #2355
• Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #2364
• Add Scorecard workflow for supply-chain security by @thomasferrandiz in #2365
• [StepSecurity] Apply security best practices by @step-security-bot in #2366
• Add OpenSSF Scorecard badge to README by @pgonin in #2367
• Remove old manifests by @manuelbuil in #2368
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #2357
• Add 2025 activity summary report by @Copilot in #2343
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2374
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2375
• Bump aquasecurity/trivy-action from 0.33.1 to 0.35.0 by @dependabot[bot] in #2378
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #2376
• Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #2377
• Add SECURITY.md security policy by @pgonin in #2371
• Add Security policy page to main README page by @pgonin in #2380
• Bump the tencent group with 2 updates by @dependabot[bot] in #2339
• Bump actions/checkout from 4.2.2 to 6.0.2 by @dependabot[bot] in #2383
• Bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #2384
• Bump actions/upload-artifact from 4.6.1 to 7.0.0 by @dependabot[bot] in #2385
• Bump ossf/scorecard-action from 2.4.1 to 2.4.3 by @dependabot[bot] in #2386
• Bump github/codeql-action from 3.32.5 to 4.32.6 by @dependabot[bot] in #2382
• Bump google.golang.org/grpc from 1.71.1 to 1.79.3 by @dependabot[bot] in #2387
• Add ROADMAP.md and update README roadmap link by @pgonin in #2393
• Bump github/codeql-action from 4.32.6 to 4.34.1 by @dependabot[bot] in #2399
• fix extensions code exec by @thomasferrandiz in #2400
• Prepare update flannel to v0.28.2 by @thomasferrandiz in #2402

New Contributors

• @step-security-bot made their first contribution in #2366
• @Copilot made their first contribution in #2343

Full Changelog: v0.28.1...v0.28.2

What's Changed

• Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #2341
• Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #2342
• Fix blackhole creation test logic in AddBlackholeV4Route and AddBlackholeV6Route by @axeal in #2329
• Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the other-go-modules group by @dependabot[bot] in #2340
• Bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #2344
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #2345
• Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 in the other-go-modules group by @dependabot[bot] in #2347
• Prepare update flannel to v0.28.1 by @rbrtbnfgl in #2351

New Contributors

• @axeal made their first contribution in #2329

Full Changelog: v0.28.0...v0.28.1