Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Sep 3, 2026 Security starboard-exporter v1.2.14

  Changed

  • Align files according to platform standards in #622 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.13...v1.2.14

• Sep 3, 2026 Security starboard-exporter v1.2.13

  Fixed

  • (nancy) Remediate nancy findings in #620 by @heraldbot[bot]

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.12...v1.2.13

• Sep 3, 2026 Security starboard-exporter v1.2.12

  Fixed

  • (nancy) Ignore CVE-2022-3248 in github.com/openshift/api in #621 by @fhielpos

  Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.2.11...v1.2.12

• Sep 3, 2026 Developer Portal backstage v0.218.3

  Fixed

  • (agent-platform) The session chat keeps the keyboard focus — on arrival from a start, across a send, and through an agent’s question in #2240 by @teemow

  Full Changelog: https://github.com/giantswarm/backstage/compare/v0.218.2...v0.218.3

• Sep 3, 2026 Developer Portal backstage v0.218.2

  Fixed

  • (agent-platform) Enter sends, Shift+Enter breaks the line; an agent’s question is answered from the keyboard in #2239 by @teemow

  Full Changelog: https://github.com/giantswarm/backstage/compare/v0.218.1...v0.218.2

• Sep 3, 2026 Others hello-world-app v3.2.0

  Added

  • Add architecture value ("" | amd64 | arm64) to pin the workload to a CPU architecture. Setting arm64 renders both the kubernetes.io/arch node selector and the toleration for the kubernetes.io/arch=arm64:NoSchedule taint that Giant Swarm arm64 node pools carry – both are required, and setting only one fails in a different, non-obvious way, so a single value drives both. Defaults to "", which renders nothing, so output is unchanged for existing users. The scheduling logic lives in the hello-world.podScheduling helper and merges with the explicit nodeSelector/tolerations values.

  Fixed

  • Allow keys in nodeSelector, which the generated schema rejected via additionalProperties: false – any entry failed with “additional properties ‘’ not allowed”. Same class of bug as the affinity/podSecurityContext fix in 3.0.4.
• Sep 3, 2026 Security dex-app v3.0.0

  Changed

  • Breaking: Default oidc.responseTypes to ["code"] only, disabling the insecure OAuth2 implicit flow by default. Any client relying on the implicit or hybrid flow without setting oidc.responseTypes explicitly will stop working. Set oidc.responseTypes explicitly to ["code", "token", "id_token"] to keep them.
  • CI: bump architect orb from 9.4.1 to 10.1.2.
• Sep 3, 2026 Observability observability-bundle v3.4.0

  Changed

  • Values: Update Prometheus Operator CRD and Kube Prometheus Stack to v23.0.0.
• Sep 3, 2026 Developer Portal backstage v0.218.1

  Fixed

  • (deps) Update dependency @giantswarm/k8s-types to v0.7.1 in #2210 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/backstage/compare/v0.218.0...v0.218.1

• Sep 3, 2026 Developer Portal backstage v0.218.0

  Added

  • (agent-platform) GPU capacity lists accelerator nodes only and marks the ones the serving layer will not place a model on in #2236 by @teemow

  Full Changelog: https://github.com/giantswarm/backstage/compare/v0.217.0...v0.218.0

• Newer entries
• Older entries