Breaking Changes

To address CVEs and align with end-of-life policies, KRR no longer supports Python 3.9.
The final release compatible with Python 3.9 is v1.27.0.

What’s Changed

• Added import tests (@moshemorad) — PR #483
• Patched multiple CVEs (@moshemorad) — PR #485
• Removed PyInstaller (@moshemorad) — PR #486
• Fixed OOMKill job issue ([ROB-2447], @Avi-Robusta) — PR #484
• Replaced direct logging usage with a unified logger for consistency (@wiltonsr) — PR #481
• Bumped Enforcer to version 0.3.5 (@moshemorad) — PR #488
• urllib3 CVE patches ([ROB-2885], @Avi-Robusta) — PR #493

New Contributors

• @wiltonsr made their first contribution in PR #481

Full Changelog:
v1.27.0...v1.28.0

What’s New — Grouped Jobs

• Group Kubernetes Jobs by labels via --job-grouping-labels <l1,l2,...> to get one consolidated recommendation per group.
• Limit per group with --job-grouping-limit <N> (default 500).
• Jobs in groups are excluded from the regular Job list; grouping is per-namespace.
• CronJob-owned Jobs are excluded from grouping.

Example:

krr simple --job-grouping-labels app,team --job-grouping-limit 3

What’s Changed

• Remove pyinstaller from pyproject dep (#477) by @moshemorad
• Replace kubectl with alpine version (#479) by @arikalon1
• GroupedJobs + Prometheus credentials auto-refresh by @Avi-Robusta (#478)

Full Changelog: v1.26.3...v1.27.0

What's Changed

Improved aws assume role support

• Prometrix version bump by @Avi-Robusta in #471

Full Changelog: v1.26.2...v1.26.3

What's Changed

• [ROB-2046] Patching CVE's by @Avi-Robusta in #469
• [ROB-2024] Improved aws assume role by @Avi-Robusta in #470

Full Changelog: v1.26.1...v1.26.2

What's Changed

• [ROB-2024] assume cross-account irsa role support in AWS by @Avi-Robusta in #468

Full Changelog: v1.26.0...v1.26.1

What's Changed

• Ability to get the related pod label name via an environment variable. by @StFS in #457
• Add --slacktitle CLI option to be able to provide a custom title in the Slack message output by @StFS in #459
• fix regression where slack channel IDs stopped working by @StFS in #461
• [ROB-1911] close cve in enforcer CVE-2025-6965 by @Avi-Robusta in #464
• [ROB-1923] - amp irsa support by @Avi-Robusta in #465
• Add an env var that allows excluding containers by name by @arikalon1 in #466

New Contributors

• @StFS made their first contribution in #457

Full Changelog: v1.25.1...v1.26.0

What's Changed

• Feature/azureblob-output by @mlhv in #451
• Bugfix added sink_support to push scans by @Avi-Robusta in #455

New Contributors

• @mlhv made their first contribution in #451

Full Changelog: v1.25.0...v1.25.1

What's Changed

• ROB-1486 CVE by @RoiGlinik in #441
• Fix python version and slack bug by @aantn in #447
• bug fix - krr period is 0, for period under 1 day by @arikalon1 in #453

Full Changelog: v1.24.0...v1.25.0

What's Changed

• feat: add new csv-raw export format for calculation by @ClanEver in #422
• Update README.md by @pavangudiwada in #427
• Auto Apply KRR Recommendations by @arikalon1 in #429
• Use fixed logging level on 3rd party loggers to avoid spamming our logs by @arikalon1 in #430
• ROB-1413 remove old enforce to libexpat1 by @RoiGlinik in #432
• ROB-1413 fix cves by @RoiGlinik in #437
• Update README.md by @aantn in #439
• ROB-1415 update prometrix by @RoiGlinik in #438
• fix: update Dockerfile comments to reflect Python 3.12 usage by @patsevanton in #444
• [ROB-1588] Push results to runner on success or failure by @Avi-Robusta in #442

New Contributors

• @ClanEver made their first contribution in #422
• @patsevanton made their first contribution in #444

Full Changelog: v1.23.0...v1.24.0

What's Changed

• Fix bug with AWS Credentials by @aantn in #407
• Docker image copy only relevant files by @moshemorad in #414
• GH actions use workload identity by @moshemorad in #416

Full Changelog: v1.22.0...v1.23.0