A corrective and performance-focused release with operator-visible default and constraint changes, deprecated flag removal, and dependency vulnerability fixes. It also expands scanning, output, registry, and MCP capabilities.
Action needed (3)
securityBatch dependency vulnerability fixes
Batch 1 and 2 dependency vulnerability fixes are included in this release.
breakingRegoV1 evaluation and v0 compatibility shim removal
Rego evaluation now uses RegoV1 and drops the v0 compatibility shim in this release.
breakingLoopback-only constraint
A loopback-only constraint is applied in this release.
Check if affected (3)
breakingOpt-in
pprof debug serverApplies if you enable the
pprof debug server.The
pprof debug serveris opt-in in this release.breaking
--frameworksdefault set to allApplies if you do not configure
--frameworks.The default for
--frameworksis all when the flag is not configured.breakingDeprecated flags removal
Applies if you configure
deprecated flags.Deprecated flags are removed, and the scan documentation is updated in this release.