Merge pull request #490 from fluxcd/release-0.18.0

Release v0.18.0

CHANGELOG.md

@@ -2,9 +2,26 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.18.0
+
+**Release date:** 2021-11-12
+
+This prerelease comes with artifact integrity verification.
+During the acquisition of an artifact, kustomize-controller computes its checksum using SHA-2
+and verifies that it matches the checksum advertised in the `Status` of the Source.
+
+The controller dependencies has been updated to match
+kustomize [v4.4.1](https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.4.1).
+
+Improvements:
+* Verify artifacts integrity
+ [#489](https://github.com/fluxcd/kustomize-controller/pull/489)
+* Update controller to kustomize v4.4.1
+ [#488](https://github.com/fluxcd/kustomize-controller/pull/488)
+
 ## 0.17.0
 
-**Release date:** 2021-10-19
+**Release date:** 2021-11-09
 
 This prerelease comes with support for ignoring changes made to in-cluster resources
 by annotating them with:

config/manager/kustomization.yaml

@@ -5,4 +5,4 @@ resources:
 images:
  - name: fluxcd/kustomize-controller
  newName: fluxcd/kustomize-controller
- newTag: v0.17.0
+ newTag: v0.18.0

go.mod

@@ -8,7 +8,7 @@ require (
  filippo.io/age v1.0.0
  github.com/cyphar/filepath-securejoin v0.2.2
  github.com/drone/envsubst v1.0.3-0.20200804185402-58bc65f69603
- github.com/fluxcd/kustomize-controller/api v0.17.0
+ github.com/fluxcd/kustomize-controller/api v0.18.0
  github.com/fluxcd/pkg/apis/kustomize v0.2.0
  github.com/fluxcd/pkg/apis/meta v0.10.1
  github.com/fluxcd/pkg/runtime v0.12.2