v1.12.6

Changes by Kind

New Features

• The filters field in Triggers is now beta and enabled by default
  • New Event Filters are now only created once, rather than on each event (#7213, @Cali0707)
  • The Any filter now dynamically optimizes the order of nested filters for optimal performance. (#7205, @Cali0707)
  • The all filter now dynamically optimizes its ordering to improve performance (#7300, @Cali0707)
  • The exact filter now uses less memory and is faster! (#7311, @Cali0707)
  • The prefix filter just got a whole lot faster! (#7309, @Cali0707)
  • The suffix filter is now faster! (#7312, @Cali0707)
• OIDC authentication feature
  • Add Audience field in CRDs (#7244, @xiangpingjiang)
  • Expose OIDC audience of a Broker in its status (#7237, @creydr)
  • Expose OIDC audience of an InMemoryChannel in its status (#7371, @creydr)
  • Expose the APIServerSource OIDC service account name in the APIServerSource .status.auth.serviceAccountName (#7330, @Leo6Leo)
  • Expose the PingSource OIDC service account name in the PingSource .status.auth.serviceAccountName (#7344, @Leo6Leo)
  • Expose the SinkBinding OIDC service account name in the SinkBinding .status.auth.serviceAccountName (#7327, @rahulii)
  • Expose the SubscriptionsOIDC service account name in the Subscriptions.status.auth.serviceAccountName (#7338, @xiangpingjiang)
  • Expose the Triggers OIDC service account name in the Triggers .status.auth.serviceAccountName (#7299, @creydr)
  • Mt-broker-ingress: verify the audience of the received JWT if OIDC authentication is enabled (#7336, @creydr)
  • OIDC tokens are now cached to improve performance. (#7335, @Cali0707)
• It is now possible to specify a subset of features in config-features without overriding default values (#7379, @pierDipi)
• PingSource schedule supports optional seconds field

Bug Fixes

• Fix unique name generator for auto-created EventType (#7160, @dsimansk)
• Correctly handle networking errors when ApiServerSource adapter can't retrieve resources when starts. (#7279, @pierDipi)
• Event Types are now only created once when using a MTChannelBasedBroker. (#7161, @Cali0707)
• Set cluster domain suffix in TLS records correctly. (#7145, @creydr)
• 🐛 Memory leak in the not filter was fixed. (#7310, @Cali0707)
• 🐛 The filters field now only overrides the filter field on a trigger if there are filters in the filters field. (#7286, @Cali0707)
• Fixed bug where eventtypes for builtin sources were created and deleted in a loop (#7245, @Cali0707)
• Fix of the rule aggregation of the knative-eventing-namespaced-edit role to only give view permissions on knative eventing resources. (#7124, @creydr)
• Update go x/net dependency to help mitigate CVE-2023-44487 (#7348, @Cali0707)