A maintenance release with operator-relevant fixes and behavior changes, plus security work in the 1.18 release line. It includes namespace-boundary enforcement for generators and security dependency updates.
Action needed (1)
securitySecurity dependency updates
Security dependency updates from #16340 are backported to
release-1..18
Check if affected (1)
securityNamespace-boundary enforcement in
generator.apply() Applies if you use
generator..apply() generator.now enforces the namespace boundary for gpol and mpol generators. The GHSA-79gf-7frw-68m9 fix is backported toapply() release-1..18