Release 1.10.0

Features

• chart Set allowPrivilegeEscalation: false
  The container ports needed to be changed to 8080 and 8443 for this purpose. Service ports remain unchanged.
  The capability NET_BIND_SERVICE is still needed. Otherwise the nginx process can not even be started due to the file capability on /usr/sbin/nginx in the image.
  There is no change in the image.

Release 1.9.1

Bug Fixes

• Fix signing images in Update Images workflow

Release 1.9.0

Features

• image Sign image with cosign

Release 1.8.0

Features

• image Use numeric USER value to be compatible with Kubernetes PodSecurityContext#runAsNonRoot

Bug Fixes

• chart Add NET_BIND_SERVICE capability to be able to start nginx binary with cap_net_bind_service

Release 1.7.0

Features

• Attach sbom and provenance to images
• Provide helm chart
• Provide new image tags just with major image version and full image version
  These new image tags are based on nginx-stable.

Release 1.6.0

Features

• Support read-only root filesystem

Release 1.5.2

Bug Fixes

• Use gomplate from maintained base image
  Fixes usage of outdated gomplate build

Release 1.5.1

Bug Fixes

• Move base element always to the top of the head section
  This avoids issues with Parcel as Parcel places style sheet links always at the top of the head section. See parcel-bundler/parcel#4882

Release 1.5.0

Features

• Add option to configure server-side HTTP connection keepalive timeout

Release 1.4.0

Features

• Build images for linux/arm/v7 and linux/arm64 (#9, @schmidp)