v5.5.1

5.5.1 (2026-05-29)

Bug Fixes

• handle empty arrays with set -u in pattern.sh (#91) (8e728e4)

v5.5.0

5.5.0 (2026-05-28)

Features

• enable firmware reference values in bare metal profiles (#90) (5fb705e), closes #30

v5.4.0

5.4.0 (2026-05-28)

Features

• add firmware reference values workflow for bare metal attestation (#89) (7958b00), closes #30

v5.3.2

5.3.2 (2026-05-28)

Bug Fixes

• remove extraSecrets mySecret blocking KBS deployment (#88) (e69084c), closes #85 #85

v5.3.1

5.3.1 (2026-05-27)

Bug Fixes

• ignore CRD label differences for Kyverno (#86) (4419a55)

v5.3.0

5.3.0 (2026-05-27)

Features

• consolidate trustee and kyverno overrides via extraValueFiles (#85) (c9cb2cb)

v5.2.1

5.2.1 (2026-05-06)

Bug Fixes

• update dependencies to resolve security vulnerabilities (#83) (1c8287f)

v5.2.0

5.2.0 (2026-05-06)

Features

• add nvidia gpu support to coco pattern (#82) (8487fb1)

v5.1.0

5.1.0 (2026-05-05)

Features

• add bare metal support for Intel TDX and AMD SEV-SNP (#73) (42ca9ab), closes #75 #75 #75 #75 validatedpatterns/trustee-chart#21

v5.0.0

5.0.0 (2026-04-22)

• feat!: add Kyverno-based cc_init_data injection for OSC 1.12 / Trustee 1.1 (2132197)

Bug Fixes

• differentiate kata vs kata-cc runtime classes by platform (8618f9d)
• disable Kyverno reportsController to match disabled policyreport CRDs (2e3dcd0)
• exclude policyreport CRDs from Kyverno to avoid ACM conflict (8575f32)
• minor fixes (507771a)
• point insecure-policy deployment to debug-initdata (43d8314)
• remove fixed runAsUser from hello-openshift Deployments (cd6a60a)
• switch initdata injection from MutatingPolicy to ClusterPolicy (d3ef527)
• use kata-remote runtime class for cloud peer-pods (a41a649)
• use released trustee chart v0.3.* instead of git branch (717c854)

Features

• convert bare Pods to Deployments, retarget Kyverno to Deployments (e75c6e2)

BREAKING CHANGES

• Requires Kyverno and OSC 1.12 / Trustee 1.1.0

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com