v4.16.1

Changelog

• b1448f8 feat: update golang to latest (#880)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.16.1 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.16.0

Changelog

• 7b4c069 feat: mark containers whose requests/limits already match the VPA recommendation (#321) (#878)
• de70ae1 feat: update dependencies (#879)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.16.0 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.15.3

Changelog

• 60cf82f Do not panic on a VPA that has no targetRef (#876)
• 68af75d Managed by Terraform

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.3 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.15.2

Changelog

• 010694f Managed by Terraform
• 16e02e7 Managed by Terraform
• 3be8f9e Managed by Terraform
• 07b6882 fix goreleaser signing on release (#859)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.2 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.15.1

Changelog

• 3be8f9e Managed by Terraform
• 93e16c3 fix goreleaser signing on release

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.1 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.15.0

Changelog

• d668d78 INS-2242: Fix goldilocks vulnerabilities (#849)
• 41c6607 Managed by Terraform
• 6e94e03 Managed by Terraform
• 86aaec6 Managed by Terraform
• ab42299 add notice to include registry change and immutable images notice on the readme (#851)
• b4d579c fix: honor -stderrthreshold when -logtostderr is set (#850)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign-p256.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.0 --key https://artifacts.fairwinds.com/cosign-p256.pub

v4.14.18

Changelog

• 2a4b04e Fixed user on deployment (#844)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

sha256sum -c goldilocks_v4.14.18_checksums.txt --ignore-missing
cosign verify-blob goldilocks_v4.14.18_checksums.txt --signature=goldilocks_v4.14.18_checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4 --key https://artifacts.fairwinds.com/cosign.pub

v4.14.10

Changelog

• b7efe33 INS-1938: Upgrade goldilocks with go 1.26 (#831)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

sha256sum -c goldilocks_v4.14.10_checksums.txt --ignore-missing
cosign verify-blob goldilocks_v4.14.10_checksums.txt --signature=goldilocks_v4.14.10_checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4 --key https://artifacts.fairwinds.com/cosign.pub

v4.14.9

Changelog

• 4108c88 fix: correct memory unit formatting in dashboard (#821)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

sha256sum -c goldilocks_v4.14.9_checksums.txt --ignore-missing
cosign verify-blob goldilocks_v4.14.9_checksums.txt --signature=goldilocks_v4.14.9_checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4 --key https://artifacts.fairwinds.com/cosign.pub

v4.14.8

Changelog

• ddf3750 INS-1682: goldilocks: Bump go to 1.25.5 for fixing vulnerability (#813)

You can verify the signatures of both the checksums.txt file and the published docker images using cosign.

sha256sum -c goldilocks_v4.14.8_checksums.txt --ignore-missing
cosign verify-blob goldilocks_v4.14.8_checksums.txt --signature=goldilocks_v4.14.8_checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub

cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4 --key https://artifacts.fairwinds.com/cosign.pub