v10.2.0

Changelog

• 1554c90 Add GCR support (#1189)
• 1fdfec7 Managed by Terraform
• 50e4c63 Managed by Terraform
• 7d053a6 Managed by Terraform
• d503363 Managed by Terraform
• aee298e add notice to include registry change and immutable images notice (#1191)
• 0444cf9 unify release process along with others OSS projects (#1192)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/polaris:v10.2.0 --key https://artifacts.fairwinds.com/cosign-p256.pub

10.1.8

Changelog

• a46eeb2 Fix vulnerabilities
• 9dfb426 INS-2239: Fix polaris vulnerabilities (#1187)
• ee9f568 Managed by Terraform
• 27878a4 Revert "Fix vulnerabilities"
• fd862af remove adhoc envsubst process on goreleaser (#1186)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.7

Changelog

• 47c7ded INS-2152: polaris libs bump (#1182)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.6

Changelog

• 2007a2c INS-2026: Bump libs and fix vulnerabilities for polaris (#1176)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.5

Changelog

• f6eed65 Go 1.26
• a5af7bb INS-1950: Go 1.26 and bump libs for polaris (#1172)
• 893e5de Revert "Go 1.26"

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.4

Changelog

• 517c889 INS-1829: Bump libs and fix vulnerabilities (#1171)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.3

Changelog

• e8a1133 INS-1683: polaris: Bump go to 1.25.5 for fixing vulnerability
• e2df222 INS-1683: polaris: Bump go to 1.25.5 for fixing vulnerability (#1162)
• d45d67c Revert "INS-1683: polaris: Bump go to 1.25.5 for fixing vulnerability"

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.2

Changelog

• 21ef1f4 INS-1562: Fix polaris vulnerabilities (#1156)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.1

Changelog

• e51b90e INS-1303: fix CVE-2025-47907
• ec1ba2f INS-1303: fix CVE-2025-47907 (#1141)
• 39fb27c Revert "INS-1303: fix CVE-2025-47907"

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

10.1.0

Changelog

• 264dc51 Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (#1127)
• 45b1f6a Bumped libs (#1139)

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub