Skip to content

Releases: kyma-project/serverless

1.13.1

Choose a tag to compare

@github-actions github-actions released this 09 Oct 07:40

What's Changed

Full Changelog: 1.13.0...1.13.1

1.14.1

Choose a tag to compare

@github-actions github-actions released this 07 Oct 13:02

What's Changed

Full Changelog: 1.14.0...1.14.1

1.14.0

Choose a tag to compare

@github-actions github-actions released this 01 Oct 12:06

Highlights

  • New runtime API (nodejs26, python314). The serverless runtime API was reworked to support the new nodejs26 and python314 runtimes, with documentation updated to match. This standardizes how functions declare and consume runtimes going forward.
  • Removal of nodejs20 and deprecation of nodejs22. The nodejs20 runtime was fully removed from the codebase, CI, Dependabot, YAML configuration, and docs, and its runtime directory was deleted.

Documentation

Improvements

Security & CI

Fixes

Dependency Bumps

Runtimes — Node.js

  • nodejs26(deps): bump kyma-project/restricted-prod/sap.com/node-fips from 26.4.0-dev to 26.5.0-dev in /components/runtimes/nodejs26 in the node group across 1 directory by @dependabot[bot] in #2635
  • nodejs26(deps): bump kyma-project/restricted-prod/sap.com/node-fips from 26.5.0-dev to 26.5.1-dev in /components/runtimes/nodejs26 in the node group by @dependabot[bot] in #2661
  • nodejs26(deps): bump the node group across 1 directory with 2 updates by @dependabot[bot] in #2713
  • npm-nodejs22(deps): bump @opentelemetry/instrumentation-express from 0.67.0 to 0.68.0 in /components/runtimes/nodejs22 in the opentelemetry group across 1 directory by @dependabot[bot] in #2630
  • npm-nodejs22(deps): bump the opentelemetry group in /components/runtimes/nodejs22 with 5 updates by @dependabot[bot] in #2649
  • npm-nodejs24(deps): bump @opentelemetry/instrumentation-express from 0.67.0 to 0.68.0 in /components/runtimes/nodejs24 in the opentelemetry group across 1 directory by @dependabot[bot] in #2633
  • npm-nodejs24(deps): bump the opentelemetry group in /components/runtimes/nodejs24 with 5 updates by @dependabot[bot] in #2652
  • npm-nodejs26(deps): bump the opentelemetry group across 1 directory with 5 updates by @dependabot[bot] in #2653
  • npm-nodejs20(deps): bump @opentelemetry/instrumentation-express from 0.67.0 to 0.68.0 in /components/runtimes/nodejs20 in the opentelemetry group across 1 directory by @dependabot[bot] in #2632
  • npm-nodejs20(deps): bump the opentelemetry group in /components/runtimes/nodejs20 with 5 updates by @dependabot[bot] in #2650

Runtimes — Python

  • pip-python312(deps): bump the opentelemetry group in /components/runtimes/python312 with 5 updates by @dependabot[bot] in #2639
  • pip-python312(deps): bump prometheus-client from 0.25.0 to 0.26.0 in /components/runtimes/python312 by @dependabot[bot] in #2656
  • pip-python312(deps): bump setuptools from 82.0.1 to 83.0.0 in /components/runtimes/python312 by @dependabot[bot] in #2631
  • pip-python314(deps): bump the opentelemetry group in /components/runtimes/python314 with 5 updates by @dependabot[bot] in #2640
  • pip-python314(deps): bump setuptools from 82.0.1 to 83.0.0 in /components/runtimes/python314 by @dependabot[bot] in #2634
  • pip-python314(deps): bump prometheus-client from 0.25.0 to 0.26.0 in /components/runtimes/python314 by @dependabot[bot] in #2657
  • pip-python314(deps): bump gevent from 26.5.0 to 26.7.0 in /components/runtimes/python314 by @dependabot[bot] in #2651

Go modules

  • gomod(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #2628
  • gomod(deps): bump github.com/go-git/go-billy/v5 from 5.9.0 to 5.9.1 by @dependabot[bot] in #2655
  • gomod(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 by @dependabot[bot] in #2654
  • gomod(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 by @dependabot[bot] in #2659
  • gomod(deps): bump the k8s-io group with 5 updates by @dependabot[bot] in #2646
  • gomod(deps): bump the k8s-io group across 1 directory with 5 updates by @dependabot[bot] in #2687
  • gomod(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #2647
  • gomod(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 by @dependabot[bot] in #2686
  • gomod(deps): bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.33.0 by @dependabot[bot] in #2666
  • buildless(deps): bump kyma-project/prod/external/library/golang from 1.26.4-alpine3.23 to 1.26.5-alpine3.23 in /components/buildless-serverless by @dependabot[bot] in #2645
  • operator(deps): bump kyma-project/prod/external/library/golang from 1.26.4-alpine3.23 to 1.26.5-alpine3.23 in /components/operator by @dependabot[bot] in #2644

Base images & batches (halamix2)

Read more

1.13.0

Choose a tag to compare

@github-actions github-actions released this 10 Jul 12:29

Release 1.13.0

Highlights

Improved CI/CD pipeline security by hardening pull_request_target workflows, tightening access controls, and reducing potential secret-exfiltration vectors.

Documentation

Improvements

Security & CI

Fixes

Dependency Bumps

Runtimes — Node.js

Runtimes — Python

Go modules

Base images & actions

New Contributors

Full Changelog: 1.12.0...1.13.0

1.12.0

Choose a tag to compare

@github-actions github-actions released this 21 Apr 13:59

What's Changed

Highlights

Removed the legacy Serverless mode entirely, leaving only the buildless architecture.
Cluster Roles are now aggregated into the standard Kubernetes View/Edit/Admin roles, simplifying access management.
Introduced a performance testing framework that established real-world serving limits and throughput baselines for Serverless workloads.

Features

Bug Fixes

Security

Legacy Serverless Removal

  • remove legacy mode CI/CD by @anoipm in #2451
  • skip legacy serverless scenario in operator tests by @anoipm in #2453
  • remove setup-libgit2 action by @anoipm in #2452
  • remove legacy serverless from replace_serverless_chart_images.sh by @anoipm in #2456
  • remove legacy mode from operator tests by @anoipm in #2454
  • remove legacy serverless targets from Makefiles by @anoipm in #2455
  • Remove legacy mode internal legacy by @anoipm in #2460
  • simplify registry configuration to buildless-only by @anoipm in #2458
  • replace legacy controller image with buildless in apply_test by @anoipm in #2461
  • Remove legacy mode from controller configuration by @anoipm in #2462
  • Remove legacy serverless chart by @anoipm in #2464
  • Remove legacy flag methods from flags builder by @anoipm in #2465
  • Update deprecated API field comments to reflect no-op status by @anoipm in #2466
  • Remove unused registry package by @anoipm in #2467
  • Remove legacy DockerRegistry status migration cleanup by @anoipm in #2469
  • Remove legacy serverless component by @anoipm in #2468
  • Remove legacy DockerRegistry from testInstalledServerless fixture by @anoipm in #2470
  • Remove legacy DockerRegistry from e2e Serverless fixture by @anoipm in #2471
  • Remove legacy mode rbac by @anoipm in #2475
  • Remove legacy serverless leftovers by @anoipm in #2477
  • Remove orphaned legacy resources cleanup by @anoipm in #2478
  • Remove orphaned resources RBAC entries by @anoipm in #2479
  • Remove cleanup legacy service account state by @anoipm in #2480
  • Remove legacy BuildReady condition cleanup by @anoipm in #2481
  • Remove unused operator RBAC entries by @anoipm in #2482
  • Remove abandoned serverless-bench tests by @anoipm in #2486
  • Remove install-serverless-local-sources target and related files by @anoipm in #2484
  • Remove legacy mode docs by @anoipm in #2437
  • Remove reference to legacy serverless chart from docs by @anoipm in #2463
  • remove unused local image overrides by @halamix2 in #2498

Internal

Documentation

Full Changelog: 1.11.1...1.12.0

1.11.1

Choose a tag to compare

@github-actions github-actions released this 13 Mar 13:48

What's Changed

  • Cherry-pick: Allow running action manually by @pPrecel in #2362
  • Cherry-pick: Fix node custom registry config by @pPrecel in #2351

Full Changelog: 1.11.0...1.11.1

1.11.0

Choose a tag to compare

@github-actions github-actions released this 09 Mar 16:27

What's Changed

Highlights

Added support for running Serverless in fips=only mode, restricting cipher suites to those permitted under FIPS-140 compliance.

Features

Maintenance

New Contributors

Full Changelog: 1.10.0...1.11.0

1.10.0

Choose a tag to compare

@github-actions github-actions released this 16 Feb 10:59

Highlights

New runtime version

With this update, we added a Node.js 24 runtime, and we deprecated the Node.js v20 runtime. Migrate your Functions to the latest runtime versions. To learn how to do that, check the blog post Changing the function runtime version of a running function.
We plan to definitely remove the Node.js 20 runtime after three months.

Fallback to nearest supported runtime for legacy functions

Functions left behind with unsupported runtimes (Node.js < 20 or Python < 3.8) are in this release started using the closest matching runtime supported by Kyma Serverless. This allows Function runtime pods, that were originally created in legacy serverless mode (and configured with older runtimes), to be scaled and rescheduled during kubernetes worker node maintenance. As a result, Functions may run on a newer runtime than originally configured. Configure your Functions with supported runtime versions. Test for compatibility and update function code if necessary.

Security

  • Allow SecurityContext and PodSecurityContext customization by @pPrecel in #2225
  • Default FSGroup and SupplementalGroups by @pPrecel in #2228
  • Run a runtime container without write access to the root filesystem by @pPrecel in #2214
  • Document SecurityContexts by @pPrecel in #2229
  • Warn user about security context reconfiguration by @pPrecel in #2235
  • Warn user when creating nodejs20 function by @pPrecel in #2257
  • Warn about security context modifications by @kwiatekus in #2240

What's Changed

  • add function eject params validation by @anoipm in #2061
  • Fix automated version promotion branch name by @kwiatekus in #2062
  • Add missing priority class by @kwiatekus in #2064
  • [Hyperspace] 🤖 Add PR Bot Configuration by @hyperspace-insights[bot] in #2072
  • Fix serverless controller verification by @pPrecel in #2071
  • Add the DeploymentFailure condition by @pPrecel in #2074
  • Set custom condition highlights for the DeploymentFailure condition by @pPrecel in #2077
  • Document the DeploymentFailure condition by @pPrecel in #2075
  • Trigger Serverless CR reconciliation on controller deploy changes by @pPrecel in #2079
  • Move logging configuration to manager-toolkit repo by @Cortey in #2078
  • Fix wrt. git fetching by @MichalKalke in #2076
  • Set const FUNC_PORT to 8080 by @MichalKalke in #2084
  • Set const FUNC_PORT to 8080 in python and docs by @MichalKalke in #2086
  • Fix deployment verification by @pPrecel in #2087
  • Fix for paths with whitespaces in BaseDir by @musztardem in #2089
  • bump Go image by @halamix2 in #2094
  • Cleanup svs CR from legacy fields by @MichalKalke in #2096
  • pip-python312(deps): bump the opentelemetry group in /components/runtimes/python312 with 5 updates by @dependabot[bot] in #2103
  • buildless(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/buildless-serverless by @dependabot[bot] in #2102
  • Remove docker registry from default serverless CR spec by @kwiatekus in #2109
  • Operator logging for Serverless by @Cortey in #2093
  • bump Alpine by @halamix2 in #2111
  • jobinit(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/jobinit by @dependabot[bot] in #2099
  • manager(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/manager by @dependabot[bot] in #2098
  • gomod(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.7.0 by @dependabot[bot] in #2100
  • operator(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/operator by @dependabot[bot] in #2097
  • webhook(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/webhook by @dependabot[bot] in #2101
  • In default buildless mode do not use default registry by @MichalKalke in #2113
  • Cleanup dockerRegistry status when buildless enabled by @MichalKalke in #2116
  • Describe Buildldess function OOMKilled case by @kwiatekus in #2120
  • Extend memory limit for XS resource preset by @kwiatekus in #2121
  • pip-python312(deps): bump the opentelemetry group in /components/runtimes/python312 with 5 updates by @dependabot[bot] in #2133
  • gomod(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by @dependabot[bot] in #2131
  • gomod(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 by @dependabot[bot] in #2129
  • gomod(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #2128
  • gomod(deps): bump the k8s-io group with 5 updates by @dependabot[bot] in #2127
  • Adjust limits for init container memory, clear init volume at the beginning by @MichalKalke in #2134
  • make network policies necessary by @halamix2 in #2123
  • Fix integration tests by @halamix2 in #2140
  • Fix integration tests by @halamix2 in #2141
  • Cleanup legacy SA name from fn deployments by @kwiatekus in #2139
  • increase liveness probe time to restart by @anoipm in #2149
  • add support for default value of serviceAccountName by @anoipm in #2150
  • Bump base images by @halamix2 in #2154
  • Bump all base images by @halamix2 in #2155
  • liveness probe based on metrics by @halamix2 in #2152
  • Revert "increase liveness probe time to restart (#2149)" by @halamix2 in #2157
  • Change deletion watcher logger name by @pPrecel in #2159
  • Use Manager-Toolkit Logging and LogConfig by @Cortey in #2158
  • Use the chart package from the manager-toolkit repo by @pPrecel in #2156
  • Improve getting last commit by @pPrecel in #2165
  • Use nodejs20 in 20.17.0 version by @MichalKalke in #2162
  • Bump versions by @halamix2 in #2161
  • Ignore missing metrics in health check by @halamix2 in #2168
  • Remove outdated code bit by @grego952 in #2167
  • Remove the continiusGitCheckout annotation by @pPrecel in #2171
  • Update Configuring Serverless by @grego952 in #2178
  • Enhance git reference last commit checker by @pPrecel in #2170
  • gomod(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in #2186
  • gomod(deps): bump github.com/kyma-project/manager-toolkit/installation/chart from 0.0.0-20251228124903-71c93d767d90 to 0.260113.143439-fb9dc47 by @dependabot[bot] in #2191
  • gomod(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #2173
  • Group manager-toolkit deps by @pPrecel in #2192
  • gomod(deps): bump the manager-toolkit group with 2 updates by...
Read more

1.9.6

Choose a tag to compare

@github-actions github-actions released this 13 Feb 07:23

What's Changed

Full Changelog: 1.9.5...1.9.6

1.9.5

Choose a tag to compare

@github-actions github-actions released this 18 Dec 16:06
upgrade dependencies