kyaml/v0.21.0

#5679: implements to replacements value in the structured data
#5959: update go 1.24.6
#5961: refactor: nested format string
#5962: chore: update dependencies from security alert
#5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc

kustomize/v5.8.0

Highlights

implements to replacements value in the structured data

Now, We can edit yaml/json in yaml manifests with replacements transformer.
See #5679

For example

## source
apiVersion: v1
kind: ConfigMap
metadata:
  name: source-configmap
data:
  HOSTNAME: www.example.com
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: target-configmap
data:
  config.json: |-
    {"config": {
      "id": "42",
      "hostname": "REPLACE_TARGET_HOSTNAME"
    }}

## replacement
replacements:
- source:
    kind: ConfigMap
    name: source-configmap
    fieldPath: data.HOSTNAME
  targets:
  - select:
      kind: ConfigMap
      name: target-configmap
    fieldPaths:
    - data.config\.json.config.hostname

fix: Propagate Namespace correctly to Helm

The long-standing bug where kustomize's namespace transformer did not pass namespaces to helmCharts has been fixed.
See #5940

For example

## define namespace
namespace: any-namespace

helmCharts:
- name: minecraft
  repo: https://kubernetes-charts.storage.googleapis.com
  version: v1.2.0
  # namespace: any-namespace   ## propagates without additional namespace specific
  valuesFile: values.yaml

Feature

#5679: implements to replacements value in the structured data
#5863: Add regex support for Replacement selectors
#5930: feat: add PatchArgs API type to populate patch options

fix

#5940: fix: Propagate Namespace correctly to Helm
#5971: fix: performance recession when propagating namespace to helm
#5942: fix fnplugin storagemounts validation
#5958: fix: make AbsorbAll conflict error more verbose
#5961: refactor: nested format string
#5967: Fix infinite loop in HTTP client by validating URLs before requests
#5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc
#5991: Fix duplicate key error when adding multiple labels with --without-selector

Dependencies

#5962: chore: update dependencies from security alert
#5959: update go 1.24.6

chore

#6007: Update kyaml to v0.21.0
#6008: Update cmd/config to v0.21.0
#6009: Update api to v0.21.0

cmd/config/v0.21.0

#5959: update go 1.24.6
#5962: chore: update dependencies from security alert
#6007: Update kyaml to v0.21.0

api/v0.21.0

#5679: implements to replacements value in the structured data
#5863: Add regex support for Replacement selectors
#5930: feat: add PatchArgs API type to populate patch options
#5940: fix: Propagate Namespace correctly to Helm
#5942: fix fnplugin storagemounts validation
#5958: fix: make AbsorbAll conflict error more verbose
#5959: update go 1.24.6
#5961: refactor: nested format string
#5962: chore: update dependencies from security alert
#5967: Fix infinite loop in HTTP client by validating URLs before requests
#5971: fix: performance recession when propagating namespace to helm
#6007: Update kyaml to v0.21.0

kyaml/v0.20.1

"Release kyaml/v0.20.1 on branch release-kyaml-v0.20.1"

kustomize/v5.7.1

This release introduces code to replace the shlex library used for parsing arguments in the exec plugin.
If any existing manifests become corrupted, please file an issue. discussion: kubernetes/kubernetes#132593 (comment)

Dependencies

#5943: drop shlex dependency

Chore

#5948: Update kyaml to v0.20.1
#5949: Update cmd/config to v0.20.1
#5950: Update api to v0.20.1

cmd/config/v0.20.1

#5948: Update kyaml to v0.20.1

api/v0.20.1

#5943: drop shlex dependency
#5948: Update kyaml to v0.20.1

kyaml/v0.20.0

#5316: feat: add exec-plugin argument and environment support
#5873: Bump to github.com/spf13/viper v1.20.0
#5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

kustomize/v5.7.0

Feature

#5630: Add static value source for replacement
#5921: feat: Add images suport for Image Volumes
#5771: fix: Allow patches with empty files with multiple newlines or comments
#5865: feat(helm): allow the use of devel alias for helmcharts

fix

#5846: fix: Get version from the BuildInfo.Main.Version if not found in deps and build flag
#5859: fix: Don't panic on multiple $patch: delete strategic merge patches in a single patch file
#5877: fix: make private one field in replacements transformer struct that had a missing JSON tag

Dependencies

#5847: replace deplecated package github.com/google/shlex with github.com/carapace-sh/carapace-shlex
#5873: Bump to github.com/spf13/viper v1.20.0
#5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

chore

#5882: Set Git messages to English for TestRemoteLoad_LocalProtocol
#5934: Update kyaml to v0.20.0
#5935: Update cmd/config to v0.20.0
#5936: Update api to v0.20.0