shivering-isles/infrastructure-gitops
Watch
2
0
Fork
You've already forked infrastructure-gitops
 0
Code Issues 1 Pull requests 39 Releases Packages 7 Activity

chore(deps): update dependency vmware-tanzu/velero to v1.18.4 #338

Open
botaniker wants to merge 1 commit from renovate/vmware-tanzu-velero-1.x into main
pull from: renovate/vmware-tanzu-velero-1.x
merge into: shivering-isles:main
Conversation 0 Commits 1 Files changed 1 +1 -1
botaniker commented 2026-09-22 06:07:55 +00:00
Member
Copy link

This PR contains the following updates:

Package Update Change OpenSSF
vmware-tanzu/velero patch v1.18.2 → v1.18.4 OpenSSF Scorecard

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

vmware-tanzu/velero (vmware-tanzu/velero)

v1.18.4

Compare Source

v1.18.4
Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.18.4

Container Image

velero/velero:v1.18.4

Documentation

https://velero.io/docs/v1.18/

Upgrading

https://velero.io/docs/v1.18/upgrade-to-1.18/

All Changes
  • Fix backup queue permanently stuck when a dequeued backup completes during the patch (#​10539, @​pujitha24)

v1.18.3

Compare Source

v1.18.3
Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.18.3

Container Image

velero/velero:v1.18.3

Documentation

https://velero.io/docs/v1.18/

Upgrading

https://velero.io/docs/v1.18/upgrade-to-1.18/

All Changes
  • Avoid duplicated InitContainer names generated in velero install CLI. (#​10396, @​blackpiglet)
  • Bound WaitRestoreExecHook polling with resourceTimeout to avoid an infinite wait when restore exec hooks never complete. (#​10394, @​nitishmalang)
  • fix log format string mismatches that produce wrong or mangled output (#​10392, @​samay43)
  • Skip DeleteSnapshot when ProviderSnapshotID is empty (#​10381, @​kaovilai)
  • Fail backup validation when built-in data mover is requested but no node-agent pods are running (#​10360, @​Joeavaikath)
  • Fix issue #​10341, avoid mutating the cached node-agent LoadAffinity so the OS node selector term is not appended repeatedly to data mover pods (#​10348, @​shubham-pampattiwar)
  • Fix PodVolumeBackup metadata loss on fs-backup timeout, which caused all fs-backup volumes to become unrestorable (#​9999, @​shubham-pampattiwar)
  • Fix repo connection contest of the two repositories with the same storage type (#​10377, @​Lyndon-Li)
  • Only sync finished backups from object storage (#​10347, @​chlins)
  • Support copying namespace-scoped secrets and configmaps for backup and restore PVC provisioning to enable datamover backup/restore of encrypted CSI volumes (#​10335, @​shubham-pampattiwar)
  • Remove PVC and PV inclusion check during creating PVR. (#​10319, @​blackpiglet)
  • Fix a potential deadlock when resultsLock is held by the informer but blocked on resChan because the early quit of RestorePodVolumes (#​10263, @​Lyndon-Li)
  • Fix restore-wait init container ignoring pod-level securityContext, falling back to hardcoded runAsUser 1000 instead of the workload's own uid/gid, causing fs-backup restores to deadlock at Init:0/1 on owner-restricted volumes (#​10224, @​kaovilai)
  • Add use guide for restore fine-grained filters via resource policy (#​10164, @​adam-jian-zhang)
  • Add restore.velero.io/must-include-additional-items so RestoreItemActions can opt in to bypassing global restore filters for AdditionalItems (mirrors the backup-side must-include annotation; no default behavior change for existing restores/plugins). Stop force-including VolumeSnapshotContents via resourceMustHave on every restore; CSI VolumeSnapshot/PVC RestoreItemActions now set restore.velero.io/must-include-additional-items so bound snapshot dependencies are restored only when their parent is restored (fixes #​9957) (#​10101, @​adam-jian-zhang)
  • User guide for backup fine-grained filters via resource policy, and add set based label selectors for fine-grained filters (#​10072, @​adam-jian-zhang)
  • Fix issue #​10032, prioritize exact namespace match in restore (#​10052, @​adam-jian-zhang)
  • Fix issue #​9997, cancel ongoing PVB on timeout and wait for all PVBs to terminal state (#​10039, @​Lyndon-Li)
  • Add fine-grained filters for restore via resource policy, introduced resourcePolicy field for restoreSpec, which contains ClusterScopedFilterPolicy and NamespacedFilterPolicy section (#​10015, @​adam-jian-zhang)
  • Add support for matching PVCs by volume mode and access mode in resource policies, and introduce the --global-backup-volume-policies-configmap server flag to merge cluster-wide backup volume policies into every backup. (#​10012, @​chlins)
  • Add fine-grained filters for backup via resource policy, introduced ClusterScopedFilterPolicy and NamespacedFilterPolicy section for resource policy (#​10011, @​adam-jian-zhang)
  • Add operation context to user-facing error messages in CR statuses and CLI output (#​10474, @​chlins)
  • Fix issue 10454, enforce resource filter policies in memory in stage 1 to fix wildcard namespace bypassing issue (#​10473, @​adam-jian-zhang)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.

This PR contains the following updates: | Package | Update | Change | OpenSSF | |---|---|---|---| | [vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | patch | `v1.18.2` → `v1.18.4` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/vmware-tanzu/velero/badge)](https://securityscorecards.dev/viewer/?uri=github.com/vmware-tanzu/velero) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/30) for more information. --- ### Release Notes <details> <summary>vmware-tanzu/velero (vmware-tanzu/velero)</summary> ### [`v1.18.4`](https://github.com/velero-io/velero/releases/tag/v1.18.4) [Compare Source](https://github.com/vmware-tanzu/velero/compare/v1.18.3...v1.18.4-rc.1) ##### v1.18.4 ##### Download <https://github.com/vmware-tanzu/velero/releases/tag/v1.18.4> ##### Container Image `velero/velero:v1.18.4` ##### Documentation <https://velero.io/docs/v1.18/> ##### Upgrading <https://velero.io/docs/v1.18/upgrade-to-1.18/> ##### All Changes - Fix backup queue permanently stuck when a dequeued backup completes during the patch ([#&#8203;10539](https://github.com/vmware-tanzu/velero/issues/10539), [@&#8203;pujitha24](https://github.com/pujitha24)) ### [`v1.18.3`](https://github.com/velero-io/velero/releases/tag/v1.18.3) [Compare Source](https://github.com/vmware-tanzu/velero/compare/v1.18.2...v1.18.3) ##### v1.18.3 ##### Download <https://github.com/vmware-tanzu/velero/releases/tag/v1.18.3> ##### Container Image `velero/velero:v1.18.3` ##### Documentation <https://velero.io/docs/v1.18/> ##### Upgrading <https://velero.io/docs/v1.18/upgrade-to-1.18/> ##### All Changes - Avoid duplicated InitContainer names generated in velero install CLI. ([#&#8203;10396](https://github.com/vmware-tanzu/velero/issues/10396), [@&#8203;blackpiglet](https://github.com/blackpiglet)) - Bound WaitRestoreExecHook polling with resourceTimeout to avoid an infinite wait when restore exec hooks never complete. ([#&#8203;10394](https://github.com/vmware-tanzu/velero/issues/10394), [@&#8203;nitishmalang](https://github.com/nitishmalang)) - fix log format string mismatches that produce wrong or mangled output ([#&#8203;10392](https://github.com/vmware-tanzu/velero/issues/10392), [@&#8203;samay43](https://github.com/samay43)) - Skip DeleteSnapshot when ProviderSnapshotID is empty ([#&#8203;10381](https://github.com/vmware-tanzu/velero/issues/10381), [@&#8203;kaovilai](https://github.com/kaovilai)) - Fail backup validation when built-in data mover is requested but no node-agent pods are running ([#&#8203;10360](https://github.com/vmware-tanzu/velero/issues/10360), [@&#8203;Joeavaikath](https://github.com/Joeavaikath)) - Fix issue [#&#8203;10341](https://github.com/vmware-tanzu/velero/issues/10341), avoid mutating the cached node-agent LoadAffinity so the OS node selector term is not appended repeatedly to data mover pods ([#&#8203;10348](https://github.com/vmware-tanzu/velero/issues/10348), [@&#8203;shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix PodVolumeBackup metadata loss on fs-backup timeout, which caused all fs-backup volumes to become unrestorable ([#&#8203;9999](https://github.com/vmware-tanzu/velero/issues/9999), [@&#8203;shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix repo connection contest of the two repositories with the same storage type ([#&#8203;10377](https://github.com/vmware-tanzu/velero/issues/10377), [@&#8203;Lyndon-Li](https://github.com/Lyndon-Li)) - Only sync finished backups from object storage ([#&#8203;10347](https://github.com/vmware-tanzu/velero/issues/10347), [@&#8203;chlins](https://github.com/chlins)) - Support copying namespace-scoped secrets and configmaps for backup and restore PVC provisioning to enable datamover backup/restore of encrypted CSI volumes ([#&#8203;10335](https://github.com/vmware-tanzu/velero/issues/10335), [@&#8203;shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Remove PVC and PV inclusion check during creating PVR. ([#&#8203;10319](https://github.com/vmware-tanzu/velero/issues/10319), [@&#8203;blackpiglet](https://github.com/blackpiglet)) - Fix a potential deadlock when resultsLock is held by the informer but blocked on resChan because the early quit of RestorePodVolumes ([#&#8203;10263](https://github.com/vmware-tanzu/velero/issues/10263), [@&#8203;Lyndon-Li](https://github.com/Lyndon-Li)) - Fix restore-wait init container ignoring pod-level securityContext, falling back to hardcoded runAsUser 1000 instead of the workload's own uid/gid, causing fs-backup restores to deadlock at Init:0/1 on owner-restricted volumes ([#&#8203;10224](https://github.com/vmware-tanzu/velero/issues/10224), [@&#8203;kaovilai](https://github.com/kaovilai)) - Add use guide for restore fine-grained filters via resource policy ([#&#8203;10164](https://github.com/vmware-tanzu/velero/issues/10164), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add restore.velero.io/must-include-additional-items so RestoreItemActions can opt in to bypassing global restore filters for AdditionalItems (mirrors the backup-side must-include annotation; no default behavior change for existing restores/plugins). Stop force-including VolumeSnapshotContents via resourceMustHave on every restore; CSI VolumeSnapshot/PVC RestoreItemActions now set restore.velero.io/must-include-additional-items so bound snapshot dependencies are restored only when their parent is restored (fixes [#&#8203;9957](https://github.com/vmware-tanzu/velero/issues/9957)) ([#&#8203;10101](https://github.com/vmware-tanzu/velero/issues/10101), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - User guide for backup fine-grained filters via resource policy, and add set based label selectors for fine-grained filters ([#&#8203;10072](https://github.com/vmware-tanzu/velero/issues/10072), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - Fix issue [#&#8203;10032](https://github.com/vmware-tanzu/velero/issues/10032), prioritize exact namespace match in restore ([#&#8203;10052](https://github.com/vmware-tanzu/velero/issues/10052), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - Fix issue [#&#8203;9997](https://github.com/vmware-tanzu/velero/issues/9997), cancel ongoing PVB on timeout and wait for all PVBs to terminal state ([#&#8203;10039](https://github.com/vmware-tanzu/velero/issues/10039), [@&#8203;Lyndon-Li](https://github.com/Lyndon-Li)) - Add fine-grained filters for restore via resource policy, introduced resourcePolicy field for restoreSpec, which contains ClusterScopedFilterPolicy and NamespacedFilterPolicy section ([#&#8203;10015](https://github.com/vmware-tanzu/velero/issues/10015), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add support for matching PVCs by volume mode and access mode in resource policies, and introduce the `--global-backup-volume-policies-configmap` server flag to merge cluster-wide backup volume policies into every backup. ([#&#8203;10012](https://github.com/vmware-tanzu/velero/issues/10012), [@&#8203;chlins](https://github.com/chlins)) - Add fine-grained filters for backup via resource policy, introduced ClusterScopedFilterPolicy and NamespacedFilterPolicy section for resource policy ([#&#8203;10011](https://github.com/vmware-tanzu/velero/issues/10011), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add operation context to user-facing error messages in CR statuses and CLI output ([#&#8203;10474](https://github.com/vmware-tanzu/velero/issues/10474), [@&#8203;chlins](https://github.com/chlins)) - Fix issue 10454, enforce resource filter policies in memory in stage 1 to fix wildcard namespace bypassing issue ([#&#8203;10473](https://github.com/vmware-tanzu/velero/issues/10473), [@&#8203;adam-jian-zhang](https://github.com/adam-jian-zhang)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). The local configuration can be found in the [SI Renovate Bot repository](https://git.shivering-isles.com/shivering-isles/infrastructure-gitops/src/branch/main/apps/k8s01/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41MC4yIiwidXBkYXRlZEluVmVyIjoiNDQuNTAuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
botaniker force-pushed renovate/vmware-tanzu-velero-1.x from cc72991bd7 to 6e5a7b9b5f
All checks were successful
gitops-images Pipeline completed successfully
Details
go-lint Pipeline completed successfully
Details
gitops-pr-validation Pipeline completed successfully
Details
2026-09-28 06:51:37 +00:00 Compare
botaniker changed title from chore(deps): update dependency vmware-tanzu/velero to v1.18.3 to chore(deps): update dependency vmware-tanzu/velero to v1.18.4 2026-09-28 06:51:40 +00:00
All checks were successful
gitops-images Pipeline completed successfully
Required
Details
go-lint Pipeline completed successfully
Details
gitops-pr-validation Pipeline completed successfully
Required
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/vmware-tanzu-velero-1.x:renovate/vmware-tanzu-velero-1.x
git switch renovate/vmware-tanzu-velero-1.x
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
sheogorath
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
shivering-isles/infrastructure-gitops!338
No description provided.