Skip to content

chore(deps): update helm release capsule to v0.15.0 - #17

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/capsule-0.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/capsule-0.x

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
capsule (source) minor 0.14.6 → 0.15.0

Release Notes

projectcapsule/capsule (capsule)

v0.15.0

Compare Source

Changelog

⚠️ Security
  • GHSA-p8j8-x28r-3c9v Critical: Authorization bypass via namespaces/status and namespaces/finalize, whose ownership gate lives only in the mutating webhook, enabling system-namespace hijack. However these permissions are not provided to users by default. You are only affected if you provide users with these permissions. @​euriconicacio
  • GHSA-4qv9-xv9f-w5xh High: DRA DeviceClass allow-list bypass: only first device request validated, enabling cross-tenant hardware access @​manus-use
  • GHSA-wpv2-mpqq-vv52 Moderate: Forgeable projectcapsule.dev/managed-by skip label lets a tenant owner bypass all Capsule enforce rules (e.g. enforce.metadata) on namespaced and cluster-scoped objects @​IamwhatIamSY
  • GHSA-jc72-9675-pcmv Moderate: Capsule: uncompiled serviceOptions forbidden deniedRegex panics the Service admission webhook (tenant DoS) @​manus-pi
  • GHSA-793w-c9f9-m6f8 Moderate: Unvalidated Tenant class allowedRegex fields cause regexp.MustCompile panic and persistent tenant admission denial @​manus-pi
✨ New Features
🐛 Bug fixes
🛠 Dependency updates
📖 Documentation updates
🚀 Build process updates

Full Changelog: projectcapsule/capsule@v0.14.6...v0.15.0

Check out what's new in this release

Docker Images

  • ghcr.io/projectcapsule/capsule:0.15.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.15.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.36 >= 1.36.0

Thanks to all the contributors! 🚀 🦄


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 1e0fff70-8652-4a07-848a-e6db28e1148c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

Published Crossplane Package

The following Crossplane package was published as part of this PR:

Package: ghcr.io/hops-ops/tenant-stack:pr-17-9e48ec1767981cb979c6c36978116667405a639b

View Package

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants