chore: bump sigs.k8s.io/external-dns from 0.22.0 to 0.23.0

[dependabot]

Bumps sigs.k8s.io/external-dns from 0.22.0 to 0.23.0.

Release notes

Sourced from sigs.k8s.io/external-dns's releases.

v0.23.0

General information

It's recommended to try this version with --dry-run=true first, see upgrade instructions.

Action required before upgrade

• ⚠️ crd Registry now stores DNSRecord objects independantly of source namespace (#6606).
  • Upgrading from v0.22.0: set --crd-registry-namespace accordingly.
• ⚠️ With --txt-encrypt-enabled, Go 1.27 changed gzip output (#6675):
  • ℹ️ External DNS has been updated to avoid mismatch (#6680)
  • ℹ️ Encryption recommendations have been detailed

Important

• ℹ️ --enable-legacy-annotation-prefix allows reading also external-dns.alpha.kubernetes.io/ annotations during migration started since v0.22.0 (#6703).
• ℹ️ --dry-run is now honored by ns1 (#6693) and alibabacloud (#6699).
• ℹ️ On DNSEndpoint, cloudflare providerSpecific names are now prefix-free (#6731).
  • Annotation-style names (external-dns.alpha.kubernetes.io/cloudflare-*, external-dns.kubernetes.io/cloudflare-*) still work but are deprecated.
• ℹ️ In-tree Gandi provider removed (#6654). Use a previous version or a webhook provider.
• ℹ️ For security & reliability, webhook bodies are capped at 32 MiB
  • configurable with --webhook-provider-max-body-size (#6484).

⚠️ Breaking Changes

• [registry] add --crd-registry-namespace by @​mloiseleur in #6606
• remove unmaintained provider gandi by @​ivankatliarchuk in #6654
• [webhook] bound request and response body sizes by @​mloiseleur in #6484

🚀 Features

• [cloudflare] support TLSA records by @​oscrx in #6616
• [docker] FIPS 140-3 image build target and docs by @​ivankatliarchuk in #6657
• [source] migrate gateway sources to indexer-based filtering by @​ivankatliarchuk in #6545

🐛 Bug fixes

• [alibabacloud] deduplicate hosted zones before fetching records by @​pujitha24 in #6711
• [alibabacloud] respect dry-run for record updates and deletes by @​vflaux in #6699
• [annotations] add --enable-legacy-annotation-prefix migration flag by @​pnz1990 in #6703
• [cloudflare] normalize provider-specific property names at ingestion by @​mloiseleur in #6731
• [cloudflare] pin cloudflare-go v7.7.0 by @​mloiseleur in #6660
• [ns1] respect --dry-run flag by @​yohboy in #6693
• [oci] set useragent, record call limit by @​tfountain in #6597
• [pdns] add request timeout and context cancellation for PowerDNS API calls by @​zanarellidev in #6694
• [registry] delete TXT records with their stored value by @​mloiseleur in #6680
• [rfc2136] do not swallow AXFR envelope errors by @​lhp-nemlig in #6652
• [source] collect annotation hostnames before FQDN template by @​zanarellidev in #6644
• [source/crd] apply the annotation filter outside the cache transform by @​mloiseleur in #6730
• [source] evaluate FQDN templates on typed objects like unstructured by @​zanarellidev in #6611

... (truncated)

Changelog

Sourced from sigs.k8s.io/external-dns's changelog.

Release

Release cycle

Currently we don't release regularly. Whenever we think it makes sense to release a new version we do it. You might want to ask in our Slack channel external-dns when the next release will come out.

Staging Release cycle

A new staging image is released weekly and can be found on the official staging registry.

There is a time lag between merging changes into the master branch and the subsequent creation of the staging image.

Example command to fetch 10 most recent staging images:

export EXT_DNS_VERSION="v0.23.0"
curl -sLk https://gcr.io/v2/k8s-staging-external-dns/external-dns/tags/list | jq | grep "$EXT_DNS_VERSION" | tail -n 10

Versioning convention

These are the conventions that we will be using for releases following 0.7.6:

• Patch version should be updated if we need to merge bugfixes, e.g. provider a does need a fix in order make updates working again. I would see updating or improving documentation here.

• Minor version should be updated if new features are implemented in existing providers or new provider get introduced.

• Major version should be upgraded if we introduce breaking changes.

Semantic Versioning Discipline

External-DNS follows semantic versioning principles:

• 0.x → pre-stable, APIs subject to change.
• 1.x → not yet considered.

Versioning & Releases External-DNS opts to stay within 0.x versioning scheme. We strive for stability, but reserve the right to introduce breaking changes in minor version bumps when necessary.

How to release a new image

Prerequisite

We use https://github.com/cli/cli to automate the release process. Please install it according to the official documentation.

You must be an official maintainer of the project to be able to do a release.

Steps

... (truncated)

Commits

• a10c566 fix(cloudflare): normalize provider-specific property names at ingestion (#6731)
• 8a5d50d fix(source/crd): apply the annotation filter outside the cache transform (#6730)
• 2f0f35a chore(deps): bump the dev-dependencies group with 14 updates (#6738)
• 4e17229 docs: add Infoblox UDDI webhook (#6737)
• 5470bfd fix(pdns): add request timeout and context cancellation for PowerDNS API call...
• 0d5a6ac fix(annotations): add --enable-legacy-annotation-prefix migration flag (#6703)
• b6a23ab refactor(provider): drop AWS SDK dependency from ZoneTypeFilter (#6707)
• 8576495 fix(alibabacloud): deduplicate hosted zones before fetching records (#6711)
• 09780a8 docs: document TXT encryption risks and recommendations (#6678)
• 83db989 docs: fix 'pointing the the wrong role' typo in AWS IRSA tutorial (#6726)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)