Releases

Kubeflow 1.10.2 is a maintenance release whose most operator-relevant change is a default switch to Istio CNI paired with a migration to Istio 1.26.1 and merged istio/istio-cni manifests, which can break existing Istio customizations. It also removes static PSS files in favor of dynamic label application, adds KServe path-based routing and Model Registry Helm support, and bundles assorted dependency updates and bug fixes.

• securityIstio upgraded to 1.26.1 with merged istio/istio-cni configuration

  Istio has been bumped to 1.26.1 and the previously separate istio and istio-cni manifests are merged. Verify that any customized Istio overlays or kustomizations remain compatible with the new combined structure.

• breakingIstio CNI is now the default; review manifests before upgrading

  Istio CNI is now the default networking mode. Existing deployments that relied on the previous default should review their Istio manifests before upgrading, as the istio and istio-cni configurations have been merged into a single combined setup under Istio 1.26.1.

• breakingStatic PSS files removed; labels now applied via enable scripts

  Static PSS (Pod Security Standards) files have been removed. Security labels are now applied dynamically via the enable PSS scripts. Any automation or tooling that referenced the static files directly will need to be updated.

Kubeflow v1.10.1 is a patch release focused on component manifest synchronization (KServe, model-registry, spark-operator, Pipelines, Training Operator) and CI/test hardening, with two operator-visible changes: Spark Operator is now enabled by default and Istio sidecar injection moved from annotations to labels. No security fixes are included.

• breakingSpark Operator is now enabled by default

  Spark Operator now ships enabled by default rather than disabled, so clusters upgrading to v1.10.1 will get Spark Operator running unless it is explicitly turned off first. Review your kustomization overlays if you don't want it active.

• breakingIstio sidecar injection now configured via labels, not annotations

  Istio sidecar injection configuration moved from annotations to labels. Manifests or overlays that toggle injection via annotations need updating to use labels instead, or sidecar injection may silently stop applying as expected.

Notation v1.3.2 is a targeted security patch backported to the 1.3 branch, addressing CVE-2025-30204 in the golang-jwt dependency.

• securityPatch CVE-2025-30204 by upgrading to v1.3.2 now

  CVE-2025-30204 is a vulnerability in golang-jwt that can allow attackers to bypass JWT validation. If you're running any 1.3.x release of Notation, upgrade to v1.3.2 immediately — this is the sole reason this patch release exists. If you're on v1.4+, verify your version already includes the fix before assuming you're safe.

• enhancementUse this release as a low-risk upgrade path if you're pinned to 1.3

  Teams that can't yet move to the latest major line can take v1.3.2 without worrying about behavioral changes — the diff is narrow and confined to the JWT dependency bump plus minor cleanups. It's a safe, no-surprises drop-in for any 1.3.x deployment.