What stakater/Reloader shipped
Written by FoxPlug from the repository's own releases; not affiliated with Stakater. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/stakater/Reloader; Stakater did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 26, 2026
What shipped
- Go was bumped to 1.26.10 so chains through the compromised eMudhra intermediate CAs fail verification under CVE-2026-111943. Pull request #1258
- The Helm chart was bumped to 2.2.19 with appVersion v1.4.23, which carries the Go 1.26.10 rebuild. Pull request #1261
- The v2 chart was bumped to 3.0.0-beta.5 for v2.0.0-beta.2 and gateway v0.0.29 so chart users get the rebuilt images. Pull request #1263
- Helm chart reloader 3.0.0-beta.5 was released with the Go 1.26.10 base for eMudhra CA distrust. Release
- V2.0.0-beta.2 was released, including rendering of image fields with tpl, prerelease chart publishing and semantic PR title enforcement. Release
- Helm chart chart-v2.2.19 was released with a fix that removes the resume timer before resuming a paused deployment and a Go 1.26.9 update. Release
- V1.4.23 was released, bringing the chart to 2.2.17 at appVersion v1.4.22 with image fields rendered through tpl. Release
- Chart 2.2.19 at appVersion v1.4.23 was merged into the main branch. Release
- The Go 1.26.10 change for eMudhra CA distrust was merged. Release
- The Go 1.26.10 change for the v2 line was merged. Release
Why it matters
Go 1.26.10 makes certificate chains through the compromised eMudhra intermediates fail verification, so builds on the older Go version could stop verifying those chains. The releases this week move both the v1 and v2 lines and their charts onto the rebuilt binaries, and the v2 chart now points at the images that include the fix rather than the previous betas.
Changelog entry
- Bump Go to 1.26.10 for eMudhra CA distrust (CVE-2026-111943). Pull request #1258
- Merged the Go 1.26.10 bump for eMudhra CA distrust. Release
- Merged the Go 1.26.10 bump on the v2 line. Release
- Released v1.4.23. Release
- Bumped Helm chart to 2.2.19 with appVersion v1.4.23. Pull request #1261
- Merged chart 2.2.19 at appVersion v1.4.23. Release
- Released v2.0.0-beta.2. Release
- Bumped the v2 chart to 3.0.0-beta.5 for v2.0.0-beta.2 and gateway v0.0.29. Pull request #1263
- Merged chart 3.0.0-beta.5 for v2.0.0-beta.2 and gateway v0.0.29. Release
- Released Helm chart reloader 3.0.0-beta.5. Release
- Released Helm chart chart-v2.2.19 with the resume timer fix and Go 1.26.9 update. Release
- Opened the Go 1.26.10 bump PR for eMudhra CA distrust on the v2 line. Pull request #1260
New releases this week: Go 1.26.10 rebuilds for the eMudhra CA distrust (CVE-2026-111943) across the v1 and v2 lines. Chart 2.2.19 ships v1.4.23, and chart 3.0.0-beta.5 ships v2.0.0-beta.2 with gateway v0.0.29.
This week the project moved onto Go 1.26.10, which distrusts the compromised eMudhra intermediate CAs under CVE-2026-111943. On the v1 line v1.4.23 ships the rebuild and Helm chart 2.2.19 points at it. On the v2 line v2.0.0-beta.2 and gateway v0.0.29 are rebuilt, and Helm chart 3.0.0-beta.5 now deploys them instead of the earlier betas, so chart users pick up the fix. Chart 2.2.19 also arrived on the main branch, and chart-v2.2.19 adds a fix that removes the resume timer before resuming a paused deployment.
Week of October 19, 2026
What shipped
- The metrics port is now isolated from the pprof and expvar handlers, so debug endpoints no longer share the default mux with metrics. Pull request #1252
- The controller initialization check now honours --resources-to-ignore, so --reload-on-create and --reload-on-delete work instead of being silently skipped. Pull request #1249
- The delete handler now unwraps informer tombstones so delete events are handled instead of being logged as invalid. Pull request #1246
- The pause resume timers are now guarded against concurrent access. Pull request #1243
- The project now builds on go 1.26.9 with some dependencies updated. Pull request #1241
- Helm chart reloader 3.0.0-beta.4 was released. Release
- The chart now ships enterprise console 0.0.42 instead of 0.0.41, with the chart version moved to 3.0.0-beta.4. Pull request #1254
- The chart now bumps the enterprise console to 0.0.41 and gateway to v0.0.28, which the enterprise subchart previously pinned at 0.0.40 and v0.0.27. Pull request #1250
- Helm chart reloader 3.0.0-beta.3 was released. Release
- The chart README, values comment and post install notes now mark the enterprise operator image as optional. Pull request #1247
Why it matters
This week brings four fixes that change behaviour developers can rely on: delete events are handled when informers pass tombstones, reload-on-create and reload-on-delete work together with ignored resource types, debug endpoints no longer sit on the metrics port, and pause resume timers are guarded against concurrent access. Two chart betas also land, keeping the enterprise console and gateway images current and correcting the enterprise documentation.
Changelog entry
- Isolate the metrics port from the pprof and expvar handlers. Pull request #1252
- Honour resources-to-ignore in the controller initialization check so reload-on-create and reload-on-delete apply. Pull request #1249
- Unwrap informer tombstones in the delete handler. Pull request #1246
- Guard the pause resume timers against concurrent access. Pull request #1243
- Update to go 1.26.9 and refresh dependencies. Pull request #1241
- Bump the enterprise console to 0.0.42 and move the chart to 3.0.0-beta.4. Pull request #1254
- Release Helm chart reloader 3.0.0-beta.4. Release
- Bump the enterprise console to 0.0.41 and gateway to v0.0.28. Pull request #1250
- Release Helm chart reloader 3.0.0-beta.3. Release
- Mark the enterprise operator image as optional in the chart README and notes. Pull request #1247
- Ship the docs change marking the enterprise operator image optional. Release
- Ship the chart change bumping the enterprise console to 0.0.42. Release
Reloader fixes this week: delete handler unwraps tombstones, controller init honours resources-to-ignore, metrics port split from pprof and expvar, pause timers guarded. Helm chart 3.0.0-beta.3 and beta.4 out, with enterprise images bumped.
This week Reloader shipped four fixes and two chart betas. The delete handler now unwraps informer tombstones so deletes are handled instead of reported as invalid. The controller initialization check now honours resources-to-ignore, so reload-on-create and reload-on-delete are not silently skipped. The metrics port is separated from the pprof and expvar handlers, and the pause resume timers are guarded against concurrent access. Go was updated to 1.26.9. On the chart side, 3.0.0-beta.3 and 3.0.0-beta.4 are out, bumping the enterprise console and gateway images, and the enterprise operator image is now marked as optional in the README, values and notes.
Week of September 28, 2026
What shipped
- Fixed a bug in ResumeDeployment where the resume timer was not removed from activeTimers if the deployment Get call failed, leaving stale timer entries in the map. Pull request #1220
- Helm chart image fields now support template rendering so wrapper charts can point Reloader at values that packaging platforms rewrite. Pull request #1234
- The same image field template rendering feature from the master branch is now available on the v2 branch. Pull request #1235
- Master branch now enforces PR title prefixes to prevent feature PRs during the feature freeze period. Pull request #1232
- Added semantic PR title prefix enforcement on the v2 development branch with a dedicated workflow check. Pull request #1233
- Helm chart v2.2.18 released with image field template rendering and PR title prefix enforcement. Release
- Reloader 3.0.0-beta.2 released with image field template rendering support on the v2 branch. Release
Why it matters
Master branch is entering feature freeze while v2 becomes the primary development branch. The team has implemented enforcement mechanisms to keep master clean for fixes and chores only, and added template rendering support to the Helm chart so external tools can customize image references during deployment.
Changelog entry
- Fixed ResumeDeployment timer cleanup bug where failed deployment Get calls left stale timers in activeTimers map Pull request #1220
- Helm chart image fields (repository, tag, digest) now support template rendering via tpl function Pull request #1234
- Master branch now enforces semantic PR title prefixes during feature freeze period Pull request #1232
- Added semantic PR title prefix enforcement workflow to v2 development branch Pull request #1233
- Released Helm chart v2.2.18 Release
- Released Reloader 3.0.0-beta.2 Release
Master branch feature freeze is now enforced via PR title rules. Image fields in the Helm chart can now reference template values, letting packaging platforms customize Reloader deployments.
This week we've implemented branch governance for the transition to v2 development. Master is now in feature freeze with enforced PR title prefixes to ensure only fixes and chores are merged. Simultaneously, we've enhanced the Helm chart to support template rendering in image fields, enabling wrapper charts and packaging platforms to dynamically reference Reloader images.
Week of September 21, 2026
What shipped
- Released v2.0.0-beta.1 with support for user namespaces, a new --ignore-annotation flag to override reloader.stakater.com/ignore, and alignment fixes for the ResourceMap key. Release
- Helm chart reloader 3.0.0-beta.1 published with the same features as the v2.0.0-beta.1 release. Release
- Fixed CI gate to allow prerelease chart versions, enabling publication of chart 3.0.0-beta.1 with appVersion v2.0.0-beta.1. Pull request #1230
- Fixed enterprise build dispatch to trigger on prerelease versions instead of skipping them. Pull request #1229
- Corrected chart README documentation for enterprise mode and bumped vulnerable dependencies. Pull request #1227
- Brought v2 to feature parity with master by porting fixes for pause period validation, annotation refresh logic, and missing chart options. Pull request #1223
- Bumped enterprise subchart to 0.1.3 to include gateway leader election namespace support and stop publishing untagged images. Pull request #1226
Why it matters
V2.0.0-beta.1 represents a major controller runtime rewrite now catching up to feature parity with the stable branch. The prerelease fixes unblock enterprise builds and chart publication while resolving documentation gaps that could cause silent failures in production setups.
Changelog entry
- V2.0.0-beta.1: add user namespace support, --ignore-annotation flag, and configMaps ResourceMap alignment Release
- Helm chart reloader 3.0.0-beta.1 with same feature updates Release
- CI: allow prerelease chart versions in publish workflow Pull request #1230
- CI: dispatch enterprise build for prerelease versions Pull request #1229
- Docs: fix chart README enterprise mode section and bump vulnerable dependencies Pull request #1227
- Chart: bump enterprise subchart to 0.1.3 Pull request #1226
- Fix: port pause period validation, annotation refresh, and chart options from master to v2 Pull request #1223
V2.0.0-beta.1 and chart 3.0.0-beta.1 are out. New --ignore-annotation flag, user namespace support, enterprise dispatch fixed, and full feature parity with master.
We've released v2.0.0-beta.1 and Helm chart 3.0.0-beta.1. This prerelease brings the v2 controller runtime rewrite to feature parity with master, including pause period validation fixes, a new --ignore-annotation flag, user namespace support, and corrected enterprise mode documentation. Enterprise build dispatch now properly triggers on prerelease versions.
More from stakater/Reloader on GitHub
Merged pull requests
- ci: allow prerelease chart versions, and publish chart 3.0.0-beta.1 (#1230, merged September 23, 2026 by msafwankarim) (source)
- docs: fix chart README enterprise mode, and bump vulnerable dependencies (#1227, merged September 22, 2026 by msafwankarim) (source)
- fix: bring v2 to feature parity with master (#1223, merged September 21, 2026 by msafwankarim) (source)
- Fix version and edition injection, DeploymentConfig RBAC, and the enterprise subchart path (#1224, merged September 18, 2026 by msafwankarim) (source)
- chore: cleanup left over lease (#1213, merged September 9, 2026 by msafwankarim) (source)
- Move leases RBAC to *-metadata-reader role when HA is enabled (#1106, merged September 9, 2026 by Eykha) (source)
- feat: expose client-go leader election timings as flags and Helm values (#1206, merged September 2, 2026 by dcoppa) (source)
- setup for reloader chart 3.0.0-beta.1 (#1198, merged August 28, 2026 by msafwankarim) (source)
- fix: reject non-positive pause-period durations (#1208, merged August 28, 2026 by nikolauspschuetz) (source)
- fix: failing link check v2 (#1210, merged August 28, 2026 by msafwankarim) (source)
- ignore forbidden slack link from link check (#1209, merged August 28, 2026 by msafwankarim) (source)