Update dependency https://github.com/kube-logging/logging-operator.git to v6.7.0 (main) (!8150) · Merge requests · Sylva-projects / sylva-core

This MR contains the following updates:

Package	Update	Change
https://github.com/kube-logging/logging-operator.git	minor	`6.5.0` -> `6.7.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

kube-logging/logging-operator (https://github.com/kube-logging/logging-operator.git)

`v6.7.0`

Compare Source

What's Changed

New or updated images

component	image
operator	`ghcr.io/kube-logging/logging-operator:6.7.0`
fluentd	`ghcr.io/kube-logging/logging-operator/fluentd:6.7.0-full`
syslog-ng-reloader	`ghcr.io/kube-logging/logging-operator/syslog-ng-reloader:6.7.0`
config-reloader	`ghcr.io/kube-logging/logging-operator/config-reloader:6.7.0`
fluentd-drain-watch	`ghcr.io/kube-logging/logging-operator/fluentd-drain-watch:6.7.0`
buffer-volume-metrics	`ghcr.io/kube-logging/logging-operator/node-exporter:6.7.0`
eventrouter	`ghcr.io/kube-logging/eventrouter:1.0.0`

Install with helm

helm install logging-operator oci://ghcr.io/kube-logging/helm-charts/logging-operator --version=6.7.0

Security

CVE-2026-54680 — Fluentd configuration injection via unescaped CRD/secret values

CRD and secret-provided string values were written into the generated fluent.conf without escaping. A value containing a newline could terminate its directive and inject arbitrary Fluentd configuration (for example a <match> block with @type exec), enabling remote code execution in the aggregator. Parameter values containing newlines are now quoted and escaped, and newlines in structural fields (@type, @id, @label, @log_level, tag, directive and parameter names) are rejected at config-render time.

Affected: ≤ 6.5.2
Hardening shipped in: 6.6.0

Enhancements

feat: support eventrouter 1.0.0 for EventTailer by @csatib02 in #2248

Dependency and image updates

chore(deps): bump net-imap from 0.5.14 to 0.5.15 in /images/fluentd/outputs by @dependabot[bot] in #2249
chore(deps): bump github.com/open-telemetry/opentelemetry-operator from 0.151.0 to 0.152.0 by @dependabot[bot] in #2252

Bug fixes

fix: advisory regression by @csatib02 in #2255

Full Changelog: https://github.com/kube-logging/logging-operator/compare/6.6.0...6.7.0

`v6.6.0`

Compare Source

What's Changed

New or updated images

component	image
operator	`ghcr.io/kube-logging/logging-operator:6.6.0`
fluentd	`ghcr.io/kube-logging/logging-operator/fluentd:6.6.0-full`
syslog-ng-reloader	`ghcr.io/kube-logging/logging-operator/syslog-ng-reloader:6.6.0`
config-reloader	`ghcr.io/kube-logging/logging-operator/config-reloader:6.6.0`
fluentd-drain-watch	`ghcr.io/kube-logging/logging-operator/fluentd-drain-watch:6.6.0`
buffer-volume-metrics	`ghcr.io/kube-logging/logging-operator/node-exporter:6.6.0`

Install with helm

helm install logging-operator oci://ghcr.io/kube-logging/helm-charts/logging-operator --version=6.6.0

Enhancements

fix: add Fluentd configuration template by @KateFiroozi in #2247

New Contributors

@KateFiroozi made their first contribution in #2247

Full Changelog: https://github.com/kube-logging/logging-operator/compare/6.5.2...6.6.0

`v6.5.2`

Compare Source

What's Changed

New or updated images

component	image
operator	`ghcr.io/kube-logging/logging-operator:6.5.2`
fluentd	`ghcr.io/kube-logging/logging-operator/fluentd:6.5.2-full`
syslog-ng-reloader	`ghcr.io/kube-logging/logging-operator/syslog-ng-reloader:6.5.2`
config-reloader	`ghcr.io/kube-logging/logging-operator/config-reloader:6.5.2`
fluentd-drain-watch	`gghcr.io/kube-logging/logging-operator/fluentd-drain-watch:6.5.2`
buffer-volume-metrics	`ghcr.io/kube-logging/logging-operator/node-exporter:6.5.2`

Install with helm

helm install logging-operator oci://ghcr.io/kube-logging/helm-charts/logging-operator --version=6.5.2

Dependency and image updates

chore(deps): bump faraday from 2.14.1 to 2.14.2 in /images/fluentd/outputs by @dependabot[bot] in #2236
chore(deps): bump jwt from 3.1.2 to 3.2.0 in /images/fluentd/outputs by @dependabot[bot] in #2237
chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @renovate[bot] in #2241
chore(deps): update module github.com/containerd/containerd to v1.7.32 [security] by @renovate[bot] in #2240
chore(deps): update module golang.org/x/net to v0.55.0 [security] by @renovate[bot] in #2242
chore(deps): update module golang.org/x/sys to v0.44.0 [security] by @renovate[bot] in #2243
chore(deps): update all dependencies by @renovate[bot] in #2235

Full Changelog: https://github.com/kube-logging/logging-operator/compare/6.5.1...6.5.2

`v6.5.1`

Compare Source

What's Changed

New or updated images

component	image
operator	`ghcr.io/kube-logging/logging-operator:6.5.1`
fluentd	`ghcr.io/kube-logging/logging-operator/fluentd:6.5.1-full`
syslog-ng-reloader	`ghcr.io/kube-logging/logging-operator/syslog-ng-reloader:6.5.1`
config-reloader	`ghcr.io/kube-logging/logging-operator/config-reloader:6.5.1`
fluentd-drain-watch	`gghcr.io/kube-logging/logging-operator/fluentd-drain-watch:6.5.1`
buffer-volume-metrics	`ghcr.io/kube-logging/logging-operator/node-exporter:6.5.1`
axosyslog	`ghcr.io/axoflow/axosyslog:4.25.0`
fluentbit-version	`ghcr.io/fluent/fluent-bit:5.0.5`

Install with helm

helm install logging-operator oci://ghcr.io/kube-logging/helm-charts/logging-operator --version=6.5.1

Dependency and image updates

chore(deps): bump net-imap from 0.5.12 to 0.5.14 in /images/fluentd/outputs by @dependabot[bot] in #2231
chore(deps): bump nokogiri from 1.19.1 to 1.19.3 in /images/fluentd/outputs by @dependabot[bot] in #2233
chore(deps): update module golang.org/x/net to v0.53.0 [security] by @renovate[bot] in #2234
chore(deps): update all dependencies by @renovate[bot] in #2227

Bug fixes

fix: honor stderrthreshold by disabling logtostderr default by @pierluigilenoci in #2230
fix: preserve associated aggregator on multiple detached configs by @csatib02 in #2232

New Contributors

@pierluigilenoci made their first contribution in #2230

Full Changelog: https://github.com/kube-logging/logging-operator/compare/6.5.0...6.5.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot Sylva instance.

CI configuration couldn't be handle by MR description. A dedicated comment has been posted to control it.

If no checkbox is checked, a default pipeline will be enabled (capm3, or capo if capo label is set)

Edited Jun 16, 2026 by Sylva Renovate bot

Update dependency https://github.com/kube-logging/logging-operator.git to v6.7.0 (main)

Release Notes

v6.7.0

What's Changed

New or updated images

Install with helm

Security

Enhancements

Dependency and image updates

Bug fixes

v6.6.0

What's Changed

New or updated images

Install with helm

Enhancements

New Contributors

v6.5.2

What's Changed

New or updated images

Install with helm

Dependency and image updates

v6.5.1

What's Changed

New or updated images

Install with helm

Dependency and image updates

Bug fixes

New Contributors

Configuration

Merge request reports

`v6.7.0`

`v6.6.0`

`v6.5.2`

`v6.5.1`