AI-analyzed release notes for CNCF graduated and incubating projects.
A maintenance release with operator-facing behavior fixes across backup handling, VMI updates, storage migration, and monitoring. It also updates the quiescing status indication used by KubeVirt.
Action needed (1)
breakingThe QuiesceFailed indication replaced by QuiesceTimeout
The QuiesceFailed indication was replaced with QuiesceTimeout.
A maintenance release with a disclosed security fix, an indication rename for Windows VSS handling, and correctness, behavior, and observability updates. Most changes require no operator action beyond upgrading.
Action needed (1)
securityhighCVE-2025-47913 remediation
The release adds a replace directive that points golang/x/crypto to the patched openshift/golang-crypto module to remediate CVE-2025-47913.
Check if affected (2)
breakingQuiesceFailed indication renamed to QuiesceTimeout
Applies if you use Windows VSS.
The release replaces the QuiesceFailed indication with QuiesceTimeout and adds a 60-second Velero pre-backup hook timeout to better handle Windows VSS limitations.
breakingDefaultVirtWebhookClient{QPS,Burst} values aligned
Applicability is not stated in the release notes.
The release aligns the DefaultVirtWebhookClient{QPS,Burst} values with DefaultVirtWebhookClient{QPS,Burst} to help avoid saturating the webhook client during mass eviction events.
