Avoid duplicated InitContainer names generated in velero install CLI. (#10396, @blackpiglet)
Bound WaitRestoreExecHook polling with resourceTimeout to avoid an infinite wait when restore exec hooks never complete. (#10394, @nitishmalang)
fix log format string mismatches that produce wrong or mangled output (#10392, @samay43)
Skip DeleteSnapshot when ProviderSnapshotID is empty (#10381, @kaovilai)
Fail backup validation when built-in data mover is requested but no node-agent pods are running (#10360, @Joeavaikath)
Fix issue #10341, avoid mutating the cached node-agent LoadAffinity so the OS node selector term is not appended repeatedly to data mover pods (#10348, @shubham-pampattiwar)
Fix PodVolumeBackup metadata loss on fs-backup timeout, which caused all fs-backup volumes to become unrestorable (#9999, @shubham-pampattiwar)
Fix repo connection contest of the two repositories with the same storage type (#10377, @Lyndon-Li)
Only sync finished backups from object storage (#10347, @chlins)
Support copying namespace-scoped secrets and configmaps for backup and restore PVC provisioning to enable datamover backup/restore of encrypted CSI volumes (#10335, @shubham-pampattiwar)
Remove PVC and PV inclusion check during creating PVR. (#10319, @blackpiglet)
Fix a potential deadlock when resultsLock is held by the informer but blocked on resChan because the early quit of RestorePodVolumes (#10263, @Lyndon-Li)
Fix restore-wait init container ignoring pod-level securityContext, falling back to hardcoded runAsUser 1000 instead of the workload's own uid/gid, causing fs-backup restores to deadlock at Init:0/1 on owner-restricted volumes (#10224, @kaovilai)
Add use guide for restore fine-grained filters via resource policy (#10164, @adam-jian-zhang)
Add restore.velero.io/must-include-additional-items so RestoreItemActions can opt in to bypassing global restore filters for AdditionalItems (mirrors the backup-side must-include annotation; no default behavior change for existing restores/plugins). Stop force-including VolumeSnapshotContents via resourceMustHave on every restore; CSI VolumeSnapshot/PVC RestoreItemActions now set restore.velero.io/must-include-additional-items so bound snapshot dependencies are restored only when their parent is restored (fixes #9957) (#10101, @adam-jian-zhang)
User guide for backup fine-grained filters via resource policy, and add set based label selectors for fine-grained filters (#10072, @adam-jian-zhang)
Fix issue #10032, prioritize exact namespace match in restore (#10052, @adam-jian-zhang)
Fix issue #9997, cancel ongoing PVB on timeout and wait for all PVBs to terminal state (#10039, @Lyndon-Li)
Add fine-grained filters for restore via resource policy, introduced resourcePolicy field for restoreSpec, which contains ClusterScopedFilterPolicy and NamespacedFilterPolicy section (#10015, @adam-jian-zhang)
Add support for matching PVCs by volume mode and access mode in resource policies, and introduce the --global-backup-volume-policies-configmap server flag to merge cluster-wide backup volume policies into every backup. (#10012, @chlins)
Add fine-grained filters for backup via resource policy, introduced ClusterScopedFilterPolicy and NamespacedFilterPolicy section for resource policy (#10011, @adam-jian-zhang)
Add operation context to user-facing error messages in CR statuses and CLI output (#10474, @chlins)
Fix issue 10454, enforce resource filter policies in memory in stage 1 to fix wildcard namespace bypassing issue (#10473, @adam-jian-zhang)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | patch | `1.18.2` → `1.18.3` | --- ### Release Notes <details> <summary>vmware-tanzu/velero (vmware-tanzu/velero)</summary> ### [`v1.18.3`](https://github.com/velero-io/velero/releases/tag/v1.18.3) [Compare Source](https://github.com/vmware-tanzu/velero/compare/v1.18.2...v1.18.3) #### v1.18.3 ##### Download <https://github.com/vmware-tanzu/velero/releases/tag/v1.18.3> ##### Container Image `velero/velero:v1.18.3` ##### Documentation <https://velero.io/docs/v1.18/> ##### Upgrading <https://velero.io/docs/v1.18/upgrade-to-1.18/> ##### All Changes - Avoid duplicated InitContainer names generated in velero install CLI. ([#10396](https://github.com/vmware-tanzu/velero/issues/10396), [@blackpiglet](https://github.com/blackpiglet)) - Bound WaitRestoreExecHook polling with resourceTimeout to avoid an infinite wait when restore exec hooks never complete. ([#10394](https://github.com/vmware-tanzu/velero/issues/10394), [@nitishmalang](https://github.com/nitishmalang)) - fix log format string mismatches that produce wrong or mangled output ([#10392](https://github.com/vmware-tanzu/velero/issues/10392), [@samay43](https://github.com/samay43)) - Skip DeleteSnapshot when ProviderSnapshotID is empty ([#10381](https://github.com/vmware-tanzu/velero/issues/10381), [@kaovilai](https://github.com/kaovilai)) - Fail backup validation when built-in data mover is requested but no node-agent pods are running ([#10360](https://github.com/vmware-tanzu/velero/issues/10360), [@Joeavaikath](https://github.com/Joeavaikath)) - Fix issue [#10341](https://github.com/vmware-tanzu/velero/issues/10341), avoid mutating the cached node-agent LoadAffinity so the OS node selector term is not appended repeatedly to data mover pods ([#10348](https://github.com/vmware-tanzu/velero/issues/10348), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix PodVolumeBackup metadata loss on fs-backup timeout, which caused all fs-backup volumes to become unrestorable ([#9999](https://github.com/vmware-tanzu/velero/issues/9999), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix repo connection contest of the two repositories with the same storage type ([#10377](https://github.com/vmware-tanzu/velero/issues/10377), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Only sync finished backups from object storage ([#10347](https://github.com/vmware-tanzu/velero/issues/10347), [@chlins](https://github.com/chlins)) - Support copying namespace-scoped secrets and configmaps for backup and restore PVC provisioning to enable datamover backup/restore of encrypted CSI volumes ([#10335](https://github.com/vmware-tanzu/velero/issues/10335), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Remove PVC and PV inclusion check during creating PVR. ([#10319](https://github.com/vmware-tanzu/velero/issues/10319), [@blackpiglet](https://github.com/blackpiglet)) - Fix a potential deadlock when resultsLock is held by the informer but blocked on resChan because the early quit of RestorePodVolumes ([#10263](https://github.com/vmware-tanzu/velero/issues/10263), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix restore-wait init container ignoring pod-level securityContext, falling back to hardcoded runAsUser 1000 instead of the workload's own uid/gid, causing fs-backup restores to deadlock at Init:0/1 on owner-restricted volumes ([#10224](https://github.com/vmware-tanzu/velero/issues/10224), [@kaovilai](https://github.com/kaovilai)) - Add use guide for restore fine-grained filters via resource policy ([#10164](https://github.com/vmware-tanzu/velero/issues/10164), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add restore.velero.io/must-include-additional-items so RestoreItemActions can opt in to bypassing global restore filters for AdditionalItems (mirrors the backup-side must-include annotation; no default behavior change for existing restores/plugins). Stop force-including VolumeSnapshotContents via resourceMustHave on every restore; CSI VolumeSnapshot/PVC RestoreItemActions now set restore.velero.io/must-include-additional-items so bound snapshot dependencies are restored only when their parent is restored (fixes [#9957](https://github.com/vmware-tanzu/velero/issues/9957)) ([#10101](https://github.com/vmware-tanzu/velero/issues/10101), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - User guide for backup fine-grained filters via resource policy, and add set based label selectors for fine-grained filters ([#10072](https://github.com/vmware-tanzu/velero/issues/10072), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - Fix issue [#10032](https://github.com/vmware-tanzu/velero/issues/10032), prioritize exact namespace match in restore ([#10052](https://github.com/vmware-tanzu/velero/issues/10052), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - Fix issue [#9997](https://github.com/vmware-tanzu/velero/issues/9997), cancel ongoing PVB on timeout and wait for all PVBs to terminal state ([#10039](https://github.com/vmware-tanzu/velero/issues/10039), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add fine-grained filters for restore via resource policy, introduced resourcePolicy field for restoreSpec, which contains ClusterScopedFilterPolicy and NamespacedFilterPolicy section ([#10015](https://github.com/vmware-tanzu/velero/issues/10015), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add support for matching PVCs by volume mode and access mode in resource policies, and introduce the `--global-backup-volume-policies-configmap` server flag to merge cluster-wide backup volume policies into every backup. ([#10012](https://github.com/vmware-tanzu/velero/issues/10012), [@chlins](https://github.com/chlins)) - Add fine-grained filters for backup via resource policy, introduced ClusterScopedFilterPolicy and NamespacedFilterPolicy section for resource policy ([#10011](https://github.com/vmware-tanzu/velero/issues/10011), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) - Add operation context to user-facing error messages in CR statuses and CLI output ([#10474](https://github.com/vmware-tanzu/velero/issues/10474), [@chlins](https://github.com/chlins)) - Fix issue 10454, enforce resource filter policies in memory in stage 1 to fix wildcard namespace bypassing issue ([#10473](https://github.com/vmware-tanzu/velero/issues/10473), [@adam-jian-zhang](https://github.com/adam-jian-zhang)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Johnny5 added 1 commit

2026-09-22 02:00:30 +02:00