v1.2.0

Notable Changes

• Upgrade Go to 1.25.0 (module) / 1.26.2 (builder images)
• Rewrite DNS plugin with native cilium/ebpf
• Add kernel version to telemetry traces
• Generate vmlinux.h in init container for eBPF programs

What's Changed

• Fix Pod IP deletion leak in eBPF FilterMap
• Fix namespace exclude filtering
• CVE mitigations in dependencies and build toolchain
• Bump OpenTelemetry to v1.40.0
• Update AWS SDK v2, netlink, cloud-provider-azure dependencies
• Add eBPF unit tests via BPF_PROG_TEST_RUN
• Build golangci-lint from go.sum for version alignment

New Contributors
Welcome to our 6 new contributors who made their first Retina PR in this release!

@aanchal22 — configurable eBPF filter map size
@bugie — TCX attach support
@Fnuworsu — capture start time fix
@mvanhorn — kernel version telemetry
@rickardsjp — availability zone labels
@uuditmisra — MetricsInterval guard clause

Full Changelog: v1.1.0...v1.2.0

v1.1.0

Notable Changes

• Drop Windows Server 2019 support
• Add kubectl retina bpftrace command for real-time network issue tracing
• Add configurable BPF Ring Buffer support

What's Changed

What's Changed

• 180822f chore(ci): harden CI pipelines and fix devcontainer (#2060)
• 4bac33a chore(deps): bump ajv from 6.12.6 to 6.14.0 in /site in the npm_and_yarn group across 1 directory (#2070)
• 7a623cb chore(deps): bump pwru to v1.0.11 and hubble to v1.18.6 (#2062)
• b41e4ee chore(site): bump dependencies to resolve CVEs (#2063)
• 04dbcd4 chore: Disable MD058, MD059, and MD060 markdown linting rules (#2078)
• 8272d3d deps: bump actions/setup-go from 6.2.0 to 6.3.0 (#2080)
• 2e370b8 deps: bump actions/stale from 10.1.1 to 10.2.0 (#2066)
• 2341ace deps: bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 (#2071)
• 60edb4d deps: bump github.com/aws/aws-sdk-go-v2/credentials from 1.18.10 to 1.19.7 (#2014)
• 5cda78b deps: bump github/codeql-action from 4.32.3 to 4.32.4 (#2072)
• ea0e6fd deps: bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#2074)
• ac63721 deps: bump helm/kind-action from 1.13.0 to 1.14.0 (#2068)
• 9594703 deps: bump rajatjindal/krew-release-bot from 0.0.47 to 0.0.50 (#2073)
• 927be7b feat(cli): Add kubectl retina bpftrace command for real-time network issue tracing (#2061)
• 1936ab6 feat(packetparser): add configurable BPF Ring Buffer support (#1981)
• 6f8096c feat(utils): use structpb.Struct directly for flow extensions (#2015)
• adc6406 feat: expire stale advanced metrics after not being updated for some time (#1921)
• 001c2ba fix(ci): fix markdownlint config not being applied after v22 action bump (#2067)
• b35fd8c fix(ci): install syft in goreleaser workflow for SBOM generation (#2081)
• 714e923 fix(ci): use native arm64 runners for all image builds (#2047)
• 6b7cec7 fix: Add darwin drop reason mapping for GoReleaser builds (#2028)
• e732a63 fix: resolve flaky cache tests and ciliumeventobserver 600s timeout (#2048)
• 9585b8f refactor: Drop Windows Server 2019 support (#2076)

Full Changelog: v1.0.4...v1.1.0

v1.0.4

Changelog

• 6862bf3 chore(deps): bump webpack from 5.96.1 to 5.105.0 in /site in the npm_and_yarn group across 1 directory (#2025)
• 28038c3 fix(ci): use native arm64 runners for shell image build (#2024)
• 1479014 fix(goreleaser): Generate darwin metadata protos for releases (#2019)
• dbe86dd fix: update CRD manifests to match sources of truth (#2026)

v1.0.3

Notable Changes

Changelog

• Add bpftrace to Retina Shell image (#1694)
• Add target pod parameter for capture CLI (#1990)
• Add Hubble E2E test scenarios (#1962)
• Fix CVE-2013-3900 - Updates to Windows image (#1997)
• Fix Release Container Images action for Windows (#2003)
• Fix Hubble not showing services and app names on relay and ui (#1754)
• Fix pktmon etw silent failure (#1983)

What's Changed

What's Changed

• feat(hubble-test): Add Hubble E2E test scenarios by @mereta in #1962
• fix: hubble not showing services and app names on relay and ui by @nddq in #1754
• deps: bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.3 by @dependabot[bot] in #1985
• chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /test/multicloud/test in the go_modules group across 1 directory by @dependabot[bot] in #1991
• deps: bump github.com/safchain/ethtool from 0.6.2 to 0.7.0 by @dependabot[bot] in #1992
• feat(cli): Target pod for capture by @carlotaarvela in #1990
• deps: bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #1996
• fix: pktmon etw silent failure by @carlotaarvela in #1983
• fix: CVE-2013-3900 - Updates to Windows image by @kamilprz in #1997
• chore(deps): bump lodash from 4.17.21 to 4.17.23 in /site in the npm_and_yarn group across 1 directory by @dependabot[bot] in #2001
• fix: Release Container Images action for Windows by @kamilprz in #2003
• deps: bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #2005
• deps: bump actions/download-artifact from 4 to 7 by @dependabot[bot] in #2004
• deps: bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #2006
• deps: bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 by @dependabot[bot] in #2007
• deps: bump github.com/mdlayher/netlink from 1.7.2 to 1.8.0 by @dependabot[bot] in #2010
• deps: bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #2002
• chore(shell): add bpftrace to shell image by @alexcastilio in #1694

Full Changelog: v1.0.2...v1.0.3

v1.0.2

Changelog

• 8f39ea2 deps: bump actions/upload-artifact from 5.0.0 to 6.0.0 (#1982)
• 6385c40 fix(tests): Fix packetparser tests (#1977)
• 6447b7e fix: add logging to K8sErrorHandler when error is nil (#1972)

What's Changed

• fix: add logging to K8sErrorHandler when error is nil by @alexcastilio in #1972
• fix(tests): Fix packetparser tests by @SRodi in #1977
• deps: bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1982

Full Changelog: v1.0.1...v1.0.2

v1.0.0-rc3cve2

Changelog

• 505ca90 Empty commit for new tag

v1.0.0-rc3cve1

Changelog

• 48781ec deps(cve): Upgrade Windows to Latest Base Version to Resolve CVEs (#1975)
• 5c12b4b deps(fix-cve): Bump GoLang version & deps (#1963)
• e86ef89 feat(cli): CLI image with bash (#1946)
• d03db21 fix(cve): Hubble release version (#1974)
• dbf3648 fix: Clean up before building windows image for git checks (#1950)
• aaa41f7 fix: Cleanup for windows release-images (#1968)
• 46947a5 go mod tidy results
• 33a229f remove merge group requirement from jobs

v1.0.0-rc3cve

Changelog

• 48781ec deps(cve): Upgrade Windows to Latest Base Version to Resolve CVEs (#1975)
• 5c12b4b deps(fix-cve): Bump GoLang version & deps (#1963)
• e86ef89 feat(cli): CLI image with bash (#1946)
• d03db21 fix(cve): Hubble release version (#1974)
• dbf3648 fix: Clean up before building windows image for git checks (#1950)
• aaa41f7 fix: Cleanup for windows release-images (#1968)
• 46947a5 go mod tidy results
• 33a229f remove merge group requirement from jobs

v1.0.1

Changelog

• e938751 deps(cve): Upgrade Windows to Latest Base Version to Resolve CVEs (#1975)
• 3fd973d deps: Updating hubble to mitigate cve (#1973)
• ba289dd fix(cve): Hubble release version (#1974)
• e8f5639 fix: stop endpoint manager in the agent to regen endpoints periodically (#1970)

v1.0.0

Notable Changes

• Bumped base and build images to Azure Linux 3.0 (#1645)
• Improved capture CLI testing (#1693)
• Updated and improved the documentation (#1646 , #1854, #1891, #1965)
• Improved build process (#1720, #1950, #1968)
• Added Inspektor Gadget, mpstat and sysctl to Retina Shell (#1734, #1889, #1901)
• Bumped Go version to 1.24.11 (#1963)
• Introduced CLI image containing Bash (#1946)
• Improved quality of capture CLI (#1749, #1798, #1897, #1905, #1917)
• Packet parser - allow sampling of packets (#1767)
• Packet parser - fix under reporting of TCP flags and packet metrics, improve scalability (#1665)
• Drop reason - Check ftrace_enabled required for fexit programs (#1926)
• Extend Heartbeat telemetry to accept custom label (#1712)
• Conntrack - fix compilation warning and subsequent stack size error (#1927)
• Fixed the helm install command for localCtx (#1807)
• Extended E2E tests with public IP infrastructure (#1797)
• Added trafficDistribution field support for Kubernetes 1.31+ (#1686)
• Fix - node watcher should only reconcile on important events (#1522)
• Fix - enable annotations behaviour (#1806)

What's Changed

What's Changed

• deps: bump github.com/cloudflare/circl from 1.3.8 to 1.6.1 in the go_modules group by @dependabot[bot] in #1676
• deps: bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #1716
• chore(site): add build doc step for PR by @nddq in #1646
• deps(build): bump base and build images to azure linux 3.0 by @nddq in #1645
• deps: bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group by @dependabot[bot] in #1719
• chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 in /site in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1697
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.29.17 by @dependabot[bot] in #1717
• deps: bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.7.0 to 0.8.3 by @dependabot[bot] in #1689
• deps: bump google.golang.org/grpc from 1.72.0 to 1.73.0 by @dependabot[bot] in #1661
• chore(shell): add option to Unconfined AppArmor and SecComp profiles by @alexcastilio in #1715
• deps: bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 by @dependabot[bot] in #1725
• deps: bump github.com/jellydator/ttlcache/v3 from 3.3.0 to 3.4.0 by @dependabot[bot] in #1724
• deps: bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.8.3 to 0.8.4 by @dependabot[bot] in #1722
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.3 to 1.82.0 by @dependabot[bot] in #1723
• chore(cli): refactor CLI to allow better testing interface + add tests by @alexcastilio in #1693
• refactor: add dockerfile for windows build and make build-binaries by @carlotaarvela in #1720
• chore(pfl): Extend Heartbeat telemetry to accept custom label. by @mereta in #1712
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.82.0 to 1.83.0 by @dependabot[bot] in #1733
• deps: bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @dependabot[bot] in #1729
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.8.0 to 1.8.1 by @dependabot[bot] in #1730
• deps: bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in #1735
• deps: bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.8.4 to 0.8.5 by @dependabot[bot] in #1736
• deps: bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #1739
• deps: bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #1738
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.0 to 1.18.1 by @dependabot[bot] in #1744
• feat(hubble): Add trafficDistribution field support for Kubernetes 1.31+ by @younsl in #1686
• deps: bump sigs.k8s.io/cloud-provider-azure/pkg/azclient from 0.8.5 to 0.8.6 by @dependabot[bot] in #1746
• fix(packetparser): Fix under reporting of TCP flags and packet metrics, improve scalability by @mmckeen in #1665
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #1755
• deps: bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @dependabot[bot] in #1756
• deps: bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in #1757
• chore(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.27.0 in /hack/tools/kapinger in the go_modules group across 1 directory by @dependabot[bot] in #1758
• chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.27.0 in /test/multicloud/test in the go_modules group across 1 directory by @dependabot[bot] in #1759
• deps: bump google.golang.org/grpc from 1.73.0 to 1.74.0 by @dependabot[bot] in #1750
• deps: bump helm.sh/helm/v3 from 3.17.3 to 3.18.4 in the go_modules group by @dependabot[bot] in #1737
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.83.0 to 1.84.0 by @dependabot[bot] in #1747
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.84.0 to 1.84.1 by @dependabot[bot] in #1765
• deps: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.70 to 1.17.71 by @dependabot[bot] in #1764
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.17 to 1.29.18 by @dependabot[bot] in #1761
• deps: bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #1770
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.1 to 1.6.2 by @dependabot[bot] in #1773
• deps: bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in #1774
• fix: pcap file name formatting by @kamilprz in #1749
• chore(deps): migrate to golangci-lint v2 by @nddq in #1494
• fix: node watcher should only reconcile on important events by @nddq in #1522
• deps: bump github.com/aws/aws-sdk-go-v2 from 1.36.6 to 1.37.0 by @dependabot[bot] in #1780
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.18 to 1.30.0 by @dependabot[bot] in #1778
• fix: fix zap.Any logging issues causing unsupported value type errors by @agrawaliti in #1783
• chore: add eventwriter dispatch workflow by @matmerr in #1789
• fix(publicip): Add infrastructure for creating Public IP's by @mereta in #1797
• chore(cli): add inspektor gadget to retina shell by @alexcastilio in #1734
• fix(cve): Upgrading base golang image to fix CVE's by @mereta in #1794
• fix(capture): ignore known copy failure and fix iptables issue by @kamilprz in #1798
• fix(localctx+win): Fix the helm insatll command for localCtx by @anubhabMajumdar in #1807
• fix: enable annotations by @alexcastilio in #1806
• deps: bump google.golang.org/grpc from 1.74.0 to 1.74.2 by @dependabot[bot] ...