chore(release): update CHANGELOG and Release Notes for Kubeaid 32.3.0

Author: ashish1099

.release-notes.md

@@ -1,28 +1,37 @@
-## KubeAid Release Version 32.2.0
+## KubeAid Release Version 32.3.0
+
+### Minor Version Upgrades
+
+- f6be3647a chore(minor update): Updated netbird-operator from version 0.7.0 to 0.8.0
 
 ### Features
 
-- b870d0d06 feat(capi-cluster): bump CAPZ to v1.26.0
-- be5962c84 feat(capi-cluster): add AKS (managed control plane) support to the azure chart
-- 2ac01a58d feat(rustfs): add optional backup-cleanup CronJob
-- 33330bcc3 feat(open-xchange): mail filter properties, Keycloak sync, and cleanup
-- c6ec90bd8 feat(capi-cluster): bump CAPA to v2.11.1
-- 61b158655 feat(vuls-dictionary): periodic result cleanup via exporter sidecar
-- 83f1c1ae4 feat(capi-cluster): add EKS (managed control plane) support to the aws chart
+- 1313b0179 feat(backup-exporter): allow reading velero volume policies
+- 44dece32a feat(backup-exporter): scope Velero/Postgres alerts to enabled backups, support VELERO_S3_PREFIX
+- 72161d383 feat(kubeaid-agent): alert on vulnerable images that have an upgrade available
+- bfa2007e0 feat(kubeaid-agent): least-privilege RBAC and a security-posture switch
+- a5e365b67 feat(tetragon): ship a curated TracingPolicy set
 
 ### Bug Fixes
 
-- f2e15b2af fix(prometheus-linuxaid): corrected bugs in btrfs rules alert expression to make it actually alert disk issues
+- 7a9450f3b fix(kubeaid-agent): raise the upgradable threshold off zero
+- ec003252e fix(kubeaid-agent): do not alert on collection failure
+- 1494a15d2 fix(trivy-operator): stop asserting fixability the alert cannot verify
+- 2a19a8b26 fix(prometheus-linuxaid): corrected logics in btrfs alert rules to handle edge cases and fix false positives
+- 8d8f00bf4 fix(capi-cluster): add apiGroup to v1beta2 refs; stop declaring AzureManagedControlPlane.sshPublicKey
+- bbb91f791 fix(trivy-operator): repair CVE alerts that could never fire
 
 ### Configuration Changes
 
-- 55732eaa9 chore(vuls-dictionary): reduce result retention to 7 days
-- 3d765a8a4 chore(vuls-dictionary): bump vuls-exporter to 1.4.1
-- 62cfe7cfa chore: update netbird signal, relay, managament to 0.76.1 and dashboard to v2.90.9
+- 8810ea71a chore: update container image kubeaid-agent to v0.7.0
 
 ### Other Changes
 
-- 02048404e ci: run the helm-unittest container as the runner user
-- b78f146b2 ci: run the capi-cluster helm-unittest suites on PRs, repair the hetzner suite
-- dc3209fd9 docs: document the EKS / AKS managed control planes, fix the Azure key guidance
+- 035094dc4 docs(backup-exporter): add chart README, bump appVersion to v1.2.1
+- 5c4d8509f style(kubeaid-agent): cut the alert comments back
+- 90493f5cc style(trivy-operator): cut the comments back
+- 6c0d08cc5 docs(trivy-operator): correct and restructure the README
+- 9ddfa556d docs(trivy-operator): correct what the backlog alert actually decides
+- 2979ae366 docs(trivy-operator): drop vendor references from the alert comments
+- 24273e8fb refactor(trivy-operator): move image correlation out of PromQL
 

CHANGELOG.md

@@ -2,6 +2,43 @@
 
 All releases and the changes included in them (pulled from git commits added since last release) will be detailed in this file.
 
+## KubeAid Release Version 32.3.0
+
+### Minor Version Upgrades
+
+- f6be3647a chore(minor update): Updated netbird-operator from version 0.7.0 to 0.8.0
+
+### Features
+
+- 1313b0179 feat(backup-exporter): allow reading velero volume policies
+- 44dece32a feat(backup-exporter): scope Velero/Postgres alerts to enabled backups, support VELERO_S3_PREFIX
+- 72161d383 feat(kubeaid-agent): alert on vulnerable images that have an upgrade available
+- bfa2007e0 feat(kubeaid-agent): least-privilege RBAC and a security-posture switch
+- a5e365b67 feat(tetragon): ship a curated TracingPolicy set
+
+### Bug Fixes
+
+- 7a9450f3b fix(kubeaid-agent): raise the upgradable threshold off zero
+- ec003252e fix(kubeaid-agent): do not alert on collection failure
+- 1494a15d2 fix(trivy-operator): stop asserting fixability the alert cannot verify
+- 2a19a8b26 fix(prometheus-linuxaid): corrected logics in btrfs alert rules to handle edge cases and fix false positives
+- 8d8f00bf4 fix(capi-cluster): add apiGroup to v1beta2 refs; stop declaring AzureManagedControlPlane.sshPublicKey
+- bbb91f791 fix(trivy-operator): repair CVE alerts that could never fire
+
+### Configuration Changes
+
+- 8810ea71a chore: update container image kubeaid-agent to v0.7.0
+
+### Other Changes
+
+- 035094dc4 docs(backup-exporter): add chart README, bump appVersion to v1.2.1
+- 5c4d8509f style(kubeaid-agent): cut the alert comments back
+- 90493f5cc style(trivy-operator): cut the comments back
+- 6c0d08cc5 docs(trivy-operator): correct and restructure the README
+- 9ddfa556d docs(trivy-operator): correct what the backlog alert actually decides
+- 2979ae366 docs(trivy-operator): drop vendor references from the alert comments
+- 24273e8fb refactor(trivy-operator): move image correlation out of PromQL
+
 ## KubeAid Release Version 32.2.0
 
 ### Features