Added

• Add additional_labels support for Kanidm service (6b50592)

Build

• ci: Automerge patch and minor requests (454f01a)
• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.8 (68ff9cc)
• deps: Update registry.k8s.io/ingress-nginx/kube-webhook-certgen Docker tag to v1.6.6 (0d8b858)
• deps: Update Rust crate nix to 0.31 (5e47878)
• deps: Update Rust crate time to v0.3.46 (865c49b)
• deps: Update Rust crate uuid to v1.20.0 (b758aa3)
• deps: Update Rust crate clap to v4.5.55 (2fa21a6)
• deps: Update Rust crate tonic to v0.14.3 (0df3774)
• deps: Update registry.k8s.io/ingress-nginx/kube-webhook-certgen Docker tag to v1.6.7 (2c29936)
• deps: Update Rust crate clap to v4.5.56 (b7acbb9)
• deps: Update Rust crate kube to v3.0.1 (43e643a)
• deps: Update Rust crate schemars to v1.2.1 (3756a32)
• deps: Update Rust crate clap to v4.5.57 (17f23f2)
• deps: Update Rust crate anyhow to v1.0.101 (0a1fa54)
• deps: Update Rust crate jiff to v0.2.19 (5664ec5)
• deps: Update Rust crate hyper-util to v0.1.20 (833a549)
• deps: Update Rust crate time to v0.3.47 (d34c2df)
• deps: Update Rust crate testcontainers to 0.27 (97d21aa)
• deps: Update Rust crate tempfile to v3.25.0 (5a6af0d)
• deps: Update kanidm to v1.8.6 (4b7a570)
• deps: Update Rust crate clap to v4.5.58 (c15ed1e)

Testing

• ci: Update kind to 1.34.3 (3084e8f)

Fixed

• Allow usage of non 'prometheus' named data sources in grafana (cca7ad7)

Build

• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.6 (e2cbd5a)
• deps: Update Rust crate thiserror to v2.0.18 (10a23a5)
• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.7 (bb0aa0f)

Added

• group: Add account policy support for KanidmGroup (87f8646)

Fixed

• group: Reset account policy attributes when spec value is None (6c0865f)

Build

• deps: Update Rust crate url to v2.5.8 (2f9ca47)
• deps: Update Rust crate serde_json to v1.0.149 (44f9aef)
• deps: Update Rust crate rustls to v0.23.36 (834bcc0)
• deps: Update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.24.0 (c7a612c)
• deps: Update pre-commit hook adrienverge/yamllint to v1.38.0 (f30d8bb)
• deps: Update Rust crate kube to v3 (04a9aae)
• deps: Update Rust crate chrono to v0.4.43 (a072cd5)

Refactor

• Replace chrono with jiff (2e149bc)

Testing

• ci: Update kind to 1.33.7 (04082b5)

Build

• ci: Split publish task to new step (2ceb962)

Build

• ci: Free some space before publish (08f7aa7)

Added

• kanidm: Add statefulSetAnnotations-in-replica-groups (43d25ca)

Fixed

• kanidm: Server role write replica no ui had a typo (327febd)
• person: Generate URL token link using origin if defined (71e4794)

Build

• deps: Update Rust crate tokio-util to v0.7.18 (3f88f52)
• deps: Update Rust crate tokio to v1.49.0 (61947e7)

Added

• oauth2: Add automatic secret rotation for OAuth2 client secrets (9cd936c)
• sa: Add automatic secret rotation for passwords and API tokens (3e54c5a)

Fixed

• chart: Rename prometheus rule and dashboard label to status (28968e2)

Build

• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.5 (68cf566)
• deps: Update Rust crate axum-server to 0.8 (d2ba59e)
• deps: Update Rust crate schemars to v1.2.0 (8fde75f)
• deps: Update Rust crate serde_json to v1.0.148 (c1d0206)
• deps: Update pre-commit hook renovatebot/pre-commit-hooks to v41.173.1 (b0a6f16)
• deps: Update pre-commit hook renovatebot/pre-commit-hooks to v42 (e711c8a)

Testing

• oauth2: Add e2e tests for secret rotation (c6ab2b6)
• sa: Add e2e tests for secret rotation (253b489)

Added

• Disallow upgrade multiple minors at once (331da0f)

Fixed

• sa: Implement mail attribute handle (1aff41b)
• Ensure CHANGELOG commit IDs are correct on release process (925336e)

Build

• deps: Update Rust crate testcontainers to 0.26 (ec1ebac)
• deps: Update Rust crate k8s-openapi to v0.26.1 (778c496)
• deps: Update Rust crate hyper-util to v0.1.19 (3685019)
• deps: Update Rust crate uuid to v1.19.0 (ef9ab5f)
• deps: Update actions/cache action to v5 (11090c7)
• deps: Update kanidm to v1.8.5 (343e840)
• deps: Update Rust crate tracing to v0.1.44 (a098c14)
• deps: Update Rust crate testcontainers to v0.26.2 (9447eb5)
• deps: Update Rust crate axum to v0.8.8 (b8774b3)
• deps: Update dependency kubernetes-sigs/kind to v0.31.0 (9aeadf8)
• deps: Update Rust crate serde_json to v1.0.146 (260e055)
• deps: Update Rust crate tempfile to v3.24.0 (f1c6e08)
• deps: Update Rust crate serde_json to v1.0.147 (b2743b1)
• deps: Update Rust crate testcontainers to v0.26.3 (ac91495)
• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.3 (1f02f77)
• deps: Update ghcr.io/rash-sh/rash Docker tag to v2.17.4 (6535374)

Fixed

• chart: Update metrics naming convention to use _total suffix for counters (910d2b4)
• operator: Add _total suffix to counter metrics (8a45559)

Fixed

• operator: Append '# EOF' marker to OpenMetrics output (c8b67c6)