What microsoft/retina shipped
Generated by FoxPlug from public activity — not affiliated with Retina.
Week of September 14, 2026
What shipped
- Restricted pprof endpoints to loopback interface to prevent unauthorized access to CPU profiles and memory dumps from remote peers. Pull request #2718
- Fixed Capture resources to resolve podSelector and podNames targets to their own namespace instead of the hardcoded default namespace. Pull request #2758
- Enabled E2E job as a mandatory PR check by fixing conditions to properly skip actual test execution when prerequisites are unavailable. Pull request #2775
- Removed test file that was inadvertently added by a previous pull request. Pull request #2764
- Reverted CI pipeline configuration to run on OneBranch pool to support execution from forked repositories. Pull request #2765
Why it matters
This week's changes address security, namespace scoping, and CI/CD reliability. The pprof restriction prevents unauthorized access to sensitive debugging information, while the Capture namespace fix ensures resources correctly target pods in their intended namespaces. These fixes improve both security posture and correctness of pod targeting.
Changelog entry
- fix(server): restrict pprof endpoints to loopback - prevents unauthorized remote access to CPU profiles and memory dumps Pull request #2718
- fix(capture): scope podSelector/podNames targets to the Capture's own namespace Pull request #2758
- fix(ci): report e2e status when prerequisites are skipped - enables E2E as mandatory PR check Pull request #2775
- fix(revert): run the ADO CI pipeline on the OneBranch pool to support forked repositories Pull request #2765
- fix(test-file): remove test file from Hubble CLI PR Pull request #2764
This week: secured pprof endpoints to loopback, fixed Capture namespace scoping for pod selection, improved E2E CI checks, and restored forked repo CI support.
Retina improvements this week focus on security and correctness. We restricted pprof endpoints to loopback to prevent unauthorized access to debugging data, fixed Capture resources to properly scope pod selection to their own namespace, enhanced E2E testing in CI, and restored support for running CI pipelines from forked repositories.