1.10.0

Highlights

New runtime version

With this update, we added a Node.js 24 runtime, and we deprecated the Node.js v20 runtime. Migrate your Functions to the latest runtime versions. To learn how to do that, check the blog post Changing the function runtime version of a running function.
We plan to definitely remove the Node.js 20 runtime after three months.

Fallback to nearest supported runtime for legacy functions

Functions left behind with unsupported runtimes (Node.js < 20 or Python < 3.8) are in this release started using the closest matching runtime supported by Kyma Serverless. This allows Function runtime pods, that were originally created in legacy serverless mode (and configured with older runtimes), to be scaled and rescheduled during kubernetes worker node maintenance. As a result, Functions may run on a newer runtime than originally configured. Configure your Functions with supported runtime versions. Test for compatibility and update function code if necessary.

Security

• Allow SecurityContext and PodSecurityContext customization by @pPrecel in #2225
• Default FSGroup and SupplementalGroups by @pPrecel in #2228
• Run a runtime container without write access to the root filesystem by @pPrecel in #2214
• Document SecurityContexts by @pPrecel in #2229
• Warn user about security context reconfiguration by @pPrecel in #2235
• Warn user when creating nodejs20 function by @pPrecel in #2257
• Warn about security context modifications by @kwiatekus in #2240

What's Changed

• add function eject params validation by @anoipm in #2061
• Fix automated version promotion branch name by @kwiatekus in #2062
• Add missing priority class by @kwiatekus in #2064
• [Hyperspace] 🤖 Add PR Bot Configuration by @hyperspace-insights[bot] in #2072
• Fix serverless controller verification by @pPrecel in #2071
• Add the DeploymentFailure condition by @pPrecel in #2074
• Set custom condition highlights for the DeploymentFailure condition by @pPrecel in #2077
• Document the DeploymentFailure condition by @pPrecel in #2075
• Trigger Serverless CR reconciliation on controller deploy changes by @pPrecel in #2079
• Move logging configuration to manager-toolkit repo by @Cortey in #2078
• Fix wrt. git fetching by @MichalKalke in #2076
• Set const FUNC_PORT to 8080 by @MichalKalke in #2084
• Set const FUNC_PORT to 8080 in python and docs by @MichalKalke in #2086
• Fix deployment verification by @pPrecel in #2087
• Fix for paths with whitespaces in BaseDir by @musztardem in #2089
• bump Go image by @halamix2 in #2094
• Cleanup svs CR from legacy fields by @MichalKalke in #2096
• pip-python312(deps): bump the opentelemetry group in /components/runtimes/python312 with 5 updates by @dependabot[bot] in #2103
• buildless(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/buildless-serverless by @dependabot[bot] in #2102
• Remove docker registry from default serverless CR spec by @kwiatekus in #2109
• Operator logging for Serverless by @Cortey in #2093
• bump Alpine by @halamix2 in #2111
• jobinit(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/jobinit by @dependabot[bot] in #2099
• manager(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/manager by @dependabot[bot] in #2098
• gomod(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.7.0 by @dependabot[bot] in #2100
• operator(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/operator by @dependabot[bot] in #2097
• webhook(deps): bump kyma-project/prod/external/library/golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 in /components/serverless/deploy/webhook by @dependabot[bot] in #2101
• In default buildless mode do not use default registry by @MichalKalke in #2113
• Cleanup dockerRegistry status when buildless enabled by @MichalKalke in #2116
• Describe Buildldess function OOMKilled case by @kwiatekus in #2120
• Extend memory limit for XS resource preset by @kwiatekus in #2121
• pip-python312(deps): bump the opentelemetry group in /components/runtimes/python312 with 5 updates by @dependabot[bot] in #2133
• gomod(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by @dependabot[bot] in #2131
• gomod(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 by @dependabot[bot] in #2129
• gomod(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 by @dependabot[bot] in #2128
• gomod(deps): bump the k8s-io group with 5 updates by @dependabot[bot] in #2127
• Adjust limits for init container memory, clear init volume at the beginning by @MichalKalke in #2134
• make network policies necessary by @halamix2 in #2123
• Fix integration tests by @halamix2 in #2140
• Fix integration tests by @halamix2 in #2141
• Cleanup legacy SA name from fn deployments by @kwiatekus in #2139
• increase liveness probe time to restart by @anoipm in #2149
• add support for default value of serviceAccountName by @anoipm in #2150
• Bump base images by @halamix2 in #2154
• Bump all base images by @halamix2 in #2155
• liveness probe based on metrics by @halamix2 in #2152
• Revert "increase liveness probe time to restart (#2149)" by @halamix2 in #2157
• Change deletion watcher logger name by @pPrecel in #2159
• Use Manager-Toolkit Logging and LogConfig by @Cortey in #2158
• Use the chart package from the manager-toolkit repo by @pPrecel in #2156
• Improve getting last commit by @pPrecel in #2165
• Use nodejs20 in 20.17.0 version by @MichalKalke in #2162
• Bump versions by @halamix2 in #2161
• Ignore missing metrics in health check by @halamix2 in #2168
• Remove outdated code bit by @grego952 in #2167
• Remove the continiusGitCheckout annotation by @pPrecel in #2171
• Update Configuring Serverless by @grego952 in #2178
• Enhance git reference last commit checker by @pPrecel in #2170
• gomod(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in #2186
• gomod(deps): bump github.com/kyma-project/manager-toolkit/installation/chart from 0.0.0-20251228124903-71c93d767d90 to 0.260113.143439-fb9dc47 by @dependabot[bot] in #2191
• gomod(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 by @dependabot[bot] in #2173
• Group manager-toolkit deps by @pPrecel in #2192
• gomod(deps): bump the manager-toolkit group with 2 updates by @dependabot[bot] in #2193
• improve operator logging on start by @anoipm in #2189
• Update controller logging to gracefully restart on format change by @Cortey in #2172
• npm-nodejs22(deps): bump the opentelemetry group in /components/runtimes/nodejs22 with 4 updates by @dependabot[bot] in #2176
• npm-nodejs20(deps): bump the opentelemetry group in /components/runtimes/nodejs20 with 4 updates by @dependabot[bot] in #2175
• gomod(deps): bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5 by @dependabot[bot] in #2187
• gomod(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #2199
• pip-python312(deps): bump prometheus-client from 0.23.1 to 0.24.1 in /components/runtimes/python312 by @dependabot[bot] in #2200
• npm-nodejs22(deps): bump @opentelemetry/instrumentation-express from 0.57.1 to 0.58.0 in /components/runtimes/nodejs22 in the opentelemetry group by @dependabot[bot] in #2201
• npm-nodejs20(deps): bump @opentelemetry/instrumentation-express from 0.57.1 to 0.58.0 in /components/runtimes/nodejs20 in the opentelemetry group by @dependabot[bot] in #2202
• Bump base Go image by @halamix2 in #2198
• webhook(deps): bump kyma-project/prod/external/library/golang from 1.25.5-alpine3.23 to 1.25.6-alpine3.23 in /components/serverless/deploy/webhook by @dependabot[bot] in #2207
• operator(deps): bump kyma-project/prod/external/library/golang from 1.25.5-alpine3.23 to 1.25.6-alpine3.23 in /components/operator by @dependabot[bot] in #2203
• jobinit(deps): bump kyma-project/prod/external/library/golang from 1.25.5-alpine3.23 to 1.25.6-alpine3.23 in /components/serverless/deploy/jobinit by @dependabot[bot] in #2204
• manager(deps): bump kyma-project/prod/external/library/golang from 1.25.5-alpine3.23 to 1.25.6-alpine3.23 in /components/serverless/deploy/manager by @dependabot[bot] in #2205
• buildless(deps): bump kyma-project/prod/external/library/golang from 1.25.5-alpine3.23 to 1.25.6-alpine3.23 in /components/buildless-serverless by @dependabot[bot] in #2206
• Create pull workflows per release by @halamix2 in #2195
• disable hyperspace bot by @halamix2 in #2211
• Fallback to supported runtime by @halamix2 in #2208
• Fix Tutorials Prerequisites by @grego952 in #2210
• Connectivity note for git functions by @kwiatekus in #2212
• Emit warning event on replica failure by @pPrecel in #2217
• Run ejected python function in venv by @pPrecel in #2215
• move runtime warning to the running condition by @halamix2 in #2218
• npm-nodejs20(deps): bump the opentelemetry group in /components/runtimes/nodejs20 with 5 updates by @dependabot[bot] in #2223
• npm-nodejs22(deps): bump the opentelemetry group in /components/runtimes/nodejs22 with 5 updates by @dependabot[bot] in #2224
• pip-python312(deps): bump setuptools from 80.9.0 to 80.10.1 in /components/runtimes/python312 by @dependabot[bot] in #2222
• Fix nodejs22 build by @pPrecel in #2226
• Fix configured condition for unsupported runtimes by @halamix2 in #2227
• add listing network policies to collect-cluster-info gh action by @anoipm in #2234
• add network policies for operator by @anoipm in #2196
• improve create-k3d-cluster gh action with properly working network-policies by @anoipm in #2219
• Dynamically update Logging level only by @Cortey in #2230
• Update Busola installation links by @nataliasitko in #2241
• pip-python312(deps): bump setuptools from 80.10.1 to 80.10.2 in /components/runtimes/python312 by @dependabot[bot] in #2239
• gomod(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 by @dependabot[bot] in #2237
• use manager-toolkit common gh actions by @anoipm in #2242
• remove unused gh actions (moved to manager-toolkit) by @anoipm in #2245
• bump base Alpine image by @halamix2 in #2246
• Deprecate Node.js v20 serverless runtime by @pPrecel in #2244
• Add Nodejs24 image by @halamix2 in #2248
• Fix nodejs24 image by @halamix2 in #2254
• better unsupported runtime message by @halamix2 in #2253
• Move runtime deprecation check to the types package by @pPrecel in #2255
• Include release report uploader job into serverless releaser work flow by @kwiatekus in #2247
• Inform user about recomendations by @pPrecel in #2259
• fix broken links by @NHingerl in #2260
• Remove fips from Node images by @halamix2 in #2261
• Configure serverless via CR by @Cortey in #2256
• add Nodejs24 runtime by @halamix2 in #2258
• Bump base images by @halamix2 in #2262
• Make nodejs24 default by @halamix2 in #2263
• bump base golang image by @halamix2 in #2264
• Sync alpine-based nodejs 20, 22, 24 images by @pPrecel in #2265
• Use right node digests by @pPrecel in #2267
• bump base images by @halamix2 in #2268
• gomod(deps): bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 by @dependabot[bot] in #2238
• gomod(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.22.5 by @dependabot[bot] in #2221
• Opt-in for bootstrapper mutations for regulated markets by @kwiatekus in #2269
• Bump base golang to 1.26 by @halamix2 in #2272
• Clean up Serverless docs by @grego952 in #2271
• Use synced nodejs images by @pPrecel in #2266
• Implement the Python 3.14 runtime base by @pPrecel in #2273
• Bump go image by @halamix2 in #2275
• Operator installs *-fips variant images in FIPS mode by @kwiatekus in #2270
• Default to /buildless-module-chart by @kwiatekus in #2277
• Build python3.14 runtime by @pPrecel in #2279
• Sync python 3.14 by @pPrecel in #2276
• npm-nodejs24(deps): bump the opentelemetry group in /components/runtimes/nodejs24 with 4 updates by @dependabot[bot] in #2288
• npm-nodejs20(deps): bump the opentelemetry group in /components/runtimes/nodejs20 with 4 updates by @dependabot[bot] in #2287
• npm-nodejs22(deps): bump the opentelemetry group in /components/runtimes/nodejs22 with 4 updates by @dependabot[bot] in #2286
• gomod(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by @dependabot[bot] in #2283
• gomod(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 by @dependabot[bot] in #2282
• Build request event for the Python 3.14 runtime by @pPrecel in #2274
• Python 3.14 configure dependabot by @pPrecel in #2290
• Python 3.14 context by @pPrecel in #2280
• pip-python312(deps): bump setuptools from 80.10.2 to 82.0.0 in /components/runtimes/python312 by @dependabot[bot] in #2285
• gomod(deps): bump the k8s-io group with 5 updates by @dependabot[bot] in #2281
• Proper error handling for python 3.14 by @pPrecel in #2293

New Contributors

• @hyperspace-insights[bot] made their first contribution in #2072

Full Changelog: 1.9.5...1.10.0