chore(main): release 2.57.1

[flant-team-sysdev]

🤖 I have created a release beep boop

2.57.1 (2026-02-20)

Features

• add TypeScript chart rendering support (NELM_FEAT_TYPESCRIPT=true) (#7341) (b336225)
• add warning for dev mode in ci (#7046) (bd3ebd9)
• build, stapel: add a possibility to import from external images (import.from) (#7020) (b109e98)
• build, stapel: unify from and fromImage directives (#7028) (9aa5ca0)
• build: ability to save the render along a custom path (#7176) (7c624ec)
• build: add disable publish tag cache sync option and background cache updater (#6986) (9d7bd6e)
• build: add image manifest & ELF signing, and dm-verity annotations (4cd4702)
• build: add image size and build time to report (58b489b)
• build: add network isolation for Docker backend (9f5b9be)
• build: add SBOM support during build with werf sbom get command (53b515c)
• build: add toYaml func to config parser (1ae722e)
• build: add worktree pool for git patch (#7008) (2875a42)
• build: document network isolation for build containers (372316e)
• build: implement werf stages copy command to import/export stages (all or current build only) (#7209) (937b96a)
• build: remove unused empty string argument in full dockerfile test (49ba648)
• build: skip meta tags publication for read only registry (#7291) (7a80bbf)
• build: support imageSpec stage without registry (#7053) (cad58f0)
• build: support network directive in werf.yaml (7f1adf2)
• build: use build report in commands require build (#7297) (d705476)
• build: warn if registry overflows due to missed cleanup (#6975) (6aa302a)
• cleanup: support kube token and kube token path (#7327) (352b8c3)
• deploy, tracking: add rules for new custom resources (#6982) (fbd2960)
• deploy, tracking: update kubedog to track prometheus resources (#7005) (7ef8f0d)
• deploy: --delete-propagation and werf.io/delete-propagation (806ee13)
• deploy: --set-root-json flag (#7348) (429ea3b)
• deploy: NELM_FEAT_MORE_DETAILED_EXIT_CODE_FOR_PLAN=true to return exit code 3 on "no resource changes, but must install release" if --exit-code (7dede71)
• deploy: plan options --diff-context-lines, --show-insignificant-diffs, --show-sensitive-diffs, --show-verbose-crd-diffs, --show-verbose-diffs (29fad9e)
• deploy: werf.io/delete-dependency-<id> annotation (#7337) (05dfc1d)
• deploy: werf.io/delete-policy, werf.io/ownership, werf.io/deploy-on and more (2348b90)
• deploy: werf.io/log-regex-skip and werf.io/log-regex-skip-for-<container> annotations (293c151)
• deploy: add werf rollback command (4effe69)
• deploy: add werf.io/log-regex-skip annotation (aa327f3)
• deploy: add option "--no-pods-logs" (#6993) (e5a1c57)
• deploy: add resource validation flags (#7343) (223d537)
• deploy: annotation werf.io/delete-policy: before-creation-if-immutable, options --no-final-tracking, --no-remove-manual-changes (dd34dcd)
• deploy: auto delete dependency detection (#7342) (ddb2087)
• deploy: display logs only from 1 replica by default (configured with annotation werf.io/show-logs-only-for-number-of-replicas) (36a29fa)
• deploy: enhanced local resource validation (#7335) (bf1ef99)
• deploy: flag --extra-apiversions (21b9109)
• deploy: flag --kube-auth-password (21b9109)
• deploy: flag --kube-auth-provider-config (21b9109)
• deploy: flag --kube-auth-provider (21b9109)
• deploy: flag --kube-auth-username (21b9109)
• deploy: flag --kube-ca-data (21b9109)
• deploy: flag --kube-cert-data (21b9109)
• deploy: flag --kube-cert (21b9109)
• deploy: flag --kube-context-cluster (21b9109)
• deploy: flag --kube-context-user (21b9109)
• deploy: flag --kube-impersonate-group (21b9109)
• deploy: flag --kube-impersonate-uid (21b9109)
• deploy: flag --kube-impersonate-user (21b9109)
• deploy: flag --kube-key-data (21b9109)
• deploy: flag --kube-key (21b9109)
• deploy: flag --kube-proxy-url (21b9109)
• deploy: flag --kube-request-timeout (21b9109)
• deploy: flag --kube-token-path (21b9109)
• deploy: flag --no-notes (21b9109)
• deploy: flag --provenance-keyring (21b9109)
• deploy: flag --provenance-strategy (21b9109)
• deploy: flag --release-info-annotations (21b9109)
• deploy: flag --release-storage (21b9109)
• deploy: flag --runtime-annotations (21b9109)
• deploy: flag --runtime-labels (21b9109)
• deploy: flag --set-json (21b9109)
• deploy: flag --set-literal (21b9109)
• deploy: flag --templates-allow-dns (21b9109)
• deploy: greatly decrease Kubernetes apiserver load (e56ceed)
• deploy: implement resource validation against api spec (#7328) (b927515)
• deploy: LOTS of new cli flags (21b9109)
• deploy: new werf bundle plan command (cffad6a)
• deploy: new werf lint command (8284016)
• deploy: option --no-remove-manual-changes from the cluster resources (0143305)
• deploy: option --set-runtime-json (a9181f6)
• implement SQL connection handling (430415c)
• sbom: sbom fstec mvp (#29) (a3bd09d)
• sign: add werf verify command (1f495d7)
• support basic auth for remote git in includes and stapel git directive (#7006) (4782d32)

Bug Fixes

• build error "undefined: tmp_manager.ReleaseProjectDir" (b090ae7)
• build, buildah: prevent history error if user switched from docker to buildah (#6980) (18eea62)
• build, docker, dockerfile: don't post cleanup images (#7313) (f7bf030)
• build, dockerfile, staged: fix staged dockerfile dependencies for COPY --from (#7300) (18e3c64)
• build, docker: fix docker commands do not stop on context cancellation (#7232) (3737404)
• build, docker: robust image ID extraction for buildx across different Docker storage drivers (#7345) (db3c046)
• build, import: avoid following symlinks during checksum calculation to prevent runner stalls (9ee46f2)
• build, import: should not resolve symlinks (c28127a)
• build, stapel, buildah: binary files patch incorrect (#7310) (2eec873)
• build, stapel, git: prevent patch creation error when a submodule commit no longer exists in the remote (3ad251e)
• build, stapel, import, buildah: close file descriptors in checksum calculation loop (#7320) (b4f5124)
• build, stapel, import: correct rsync glob handling for imports and checksums (6208601)
• build, stapel, import: correct rsync glob handling for imports and checksums (6007704)
• build, stapel, import: preserve security capabilities during file import (#7237) (522ebf7)
• build, stapel: exit with error when import nothing (#7166) (6e6f6b4)
• build, stapel: restrict from to reference itself (#7057) (6c09dcf)
• build, stapel: throw error if two import configurations contain everything and glob everything (#7171) (c6ba868)
• build, stapel: warn if import config does nothing (#7225) (2756b18)
• build,stapel: fix fromArtifact error (a0a4745)
• build: add broken image error handling for image-spec stage (#7322) (56fb883)
• build: add custom-tag once (2e23d3f)
• build: add custom-tag once (#7275) (e4953e7)
• build: add from backward compatibility fix (9610260)
• build: add nameless image backward compatibility fix (6c7e6d8)
• build: add proper error message if path matcher has special chars (59e1740)
• build: add prune empty dirs to rsync server (939942b)
• buildah,host-cleanup: do requested changes (fa0830a)
• buildah,host-cleanup: protect temp dangling images from parallel "werf host cleanup" process (#7050) (d953ef2)
• buildah: enable precomputed digests to avoid S3 blob upload conflicts (a458a3d)
• buildah: heredoc in the Dockerfile is not taken into account during the build with staged: true (#7279) (3c73afb)
• build: collision between WERF_REQUIRE_BUILT_IMAGES of build with other commands (201e8d9)
• build: cross validate images' platforms (#7110) (10f0d93)
• build: fix --save-build-report does not work with (9bbdfb7)
• build: fix deferred build log on error in quiet mode (3e546cc)
• build: fix error when syncing submodules in worktree pool (#7023) (062e0e5)
• build: fix image-spec immutability (#7288) (69e7154)
• build: fix path matcher special char error (ad42553)
• build: fix stage selection handling for git stages (2de807e)
• build: highlight an error in parallel mode (a3f509a)
• build: impl requested changes (82c5876)
• build: panic: image "..." not found (#7318) (145064e)
• build: refactor file path parse command, now symlinks considered without resolving (3145852)
• build: reject stage that is no longer available (dc0c5f4)
• build: sanitize docker credentials from buildkit and docker errors (#7299) (ae50410)
• build: test custom-tag case (63168e7)
• build: test custom-tag once (699fd4d)
• build: use blocking execution for parallel (#7231) (42def11)
• build: use map access for bridge network IP address (8f0efe9)
• build: use registry-mirrors from docker daemon.json (#7329) (0fdeb86)
• bundles: fix load chart dir error (#6981) (bac1cd5)
• ci-env: fix destination for source script (f9af22e)
• ci-env: optimize docker config copying to prevent inodes overflow (#7305) (d5005c1)
• ci: comment out cr in daily tests (#13) (7e185c1)
• ci: skip buildah tests for main (#11) (9db3359)
• ci: stabilize integration tests and multi-arch build (#17) (4c0b2a3)
• cleanup: fix cleanup meta check condition (89b05d2)
• cleanup: normalize 404 error message on tag deletion (#7332) (72deb33)
• cleanup: warn when cleanup metadata push hits immutable repo (87c2705)
• config: align .Files.Glob behavior with helm (7959568)
• deploy: --dir breaks --values (fa3a865)
• deploy: --timeout and CTRL-C not stopping deployment correctly (143ce54)
• deploy: panic: interface conversion: plan.OperationConfig (c7ee56b)
• deploy: plan panic and json diffs instead of yaml (c8d8187)
• deploy: plan shows nothing if only tracking ops in plan (d982297)
• deploy: add standalone pod tracking (#7316) (418e21a)
• deploy: adjust service account managed fields (#7319) (751a900)
• deploy: broken diffs with object: in plan (8a5c7ec)
• deploy: bundle render/apply requires git (6828274)
• deploy: canceled operations not displayed in the end of deployment (551eacb)
• deploy: deploy command always create .dot file (a0d8512)
• deploy: dismiss reads release name and namespace from git even if they specified via flags (660908e)
• deploy: docker hub creds might leak in pod events (62adcb4)
• deploy: empty Release.Info.First(Last)Deployed (946c269)
• deploy: error "werf.io/show-logs-only-for-containers", expected integer value (1132a12)
• deploy: error no Auth Provider found for name "" (ff71d70)
• deploy: error unable to acquire lock if install to new namespace (92b1106)
• deploy: error if only one of --release/--namespace set for dismiss and git found (016b07f)
• deploy: failures in init containers of jobs ignored (5cbbe69)
• deploy: force adoption always on (8154022)
• deploy: Helm release annotation updates trigger new release (ff71d70)
• deploy: hooks cleaned up too early (42c57b4)
• deploy: improve diffs in plan output (471a4d1)
• deploy: invalid helm.sh/hook causes panic in render (a65bd52)
• deploy: logs stop showing after 4 hours (e33523b)
• deploy: new release created even if no changes (bdfd07d)
• deploy: non-successful release revisions since last successful never cleaned up (81faa1f)
• deploy: null or empty fields might fail resource deploys (e213f40)
• deploy: panic unknown VerificationStrategyString value (ff71d70)
• deploy: panic if apiserver connection lost (7358731)
• deploy: panic if failure/autorollback plan fails, refactor (bd2c90a)
• deploy: panic in plan (6c98d43)
• deploy: panic in pre/post-delete hooks tracking (839074f)
• deploy: release namespace deletes after stopping being part of a release (9374700)
• deploy: remove null keys from manifests now only on NELM_FEAT_CLEAN_NULL_FIELDS=true (dc41572)
• deploy: resources updated for no reason (ff71d70)
• deploy: service and some secret values wrongly propagated to subcharts (5e75e9c)
• deploy: show verbose diffs by default like before (97d8c28)
• deploy: show verbose diffs by default like before /2 (29fd2b0)
• deploy: unnecessary resource/release updates (493659f)
• deploy: webhooks not readying (63dfd5e)
• error too many arguments in call to chartutil.ToRenderValues (f63e7c8)
• handle panic properly (fddd12f)
• host-cleanup, docker: protect "tempID:latest" docker tag from parallel "werf host cleanup" process (#7049) (f465863)
• host-cleanup: clarify cleanupReport using (5e161d0)
• host-cleanup: clean up context archives (b65a557)
• host-cleanup: decrease retention period of dangling images (b0aedf9)
• host-cleanup: doesn't print warnings while detaching process (0ec9e0f)
• host-cleanup: don't keep images which contain in their tags projectName or "werf-stages-storage/" (aa0db91)
• host-cleanup: don't use "file age" as metric for tmp data cleaning (d970341)
• host-cleanup: require backend storage path (ab9a8f7)
• host-cleanup: respect --dry-run option for gitdata gc (8e3ae09)
• host-cleanup: respect host locks for containers cleanup (18ae7f9)
• host-cleanup: respect host locks for images cleanup (a64d4ff)
• host-cleanup: use different keeping strategies for different kind of tmp data (#7219) (4ca0b9e)
• host-cleanup: use signal err for tmp cleaning (afaa1f4)
• include context.Cause in error handling (#7022) (1ba2129)
• includes, giterminism: fix includePaths handling (#7321) (b71c543)
• includes: clarify usage of relative and absolute includesLockPath (8535d8e)
• includes: fix --allow-includes-update does not use actual HEAD (also related to stapel git.branch) (9a58246)
• includes: fix includes and lock configs path resolution for custom project dir (#7117) (6dee249)
• includes: prevent double projectDir in includes path resolution (af64a6d)
• includes: respect flag and env for werf includes update (839ee1b)
• includes: respect projectDir in lock file creation (61ae7e7)
• kube: correctly resolve client config per context (5f12fed)
• pass ctx down (#7073) (76efdce)
• sbom, docker: tar sbom artifact correctly (1338c2d)
• sbom: add cross-project merge support (#37) (e8dd798)
• sbom: relocate syft image from GitHub to Docker Hub (10d38e2)
• stapel, git: fix file ownership setup for scratch (rel sudo: unknown uid 0) (#7094) (23f8cf7)
• stapel,git: handle broken symlinks in chown xargs command (3936931)
• test: fix stapel import test (4cf84ea)
• use a consistent werf tmp dir (#7095) (fd88fa5)

Miscellaneous Chores

• release: force 2.57.1 (9400070)
• release: force release 2.47.5 (8399ed0)
• release: force v2.53.1 (067637d)
• release: force v2.53.4 (1f114ec)
• release: force v2.55.2 (c1f60fc)
• release: force v2.55.3 (4705747)
• release: test mac signing (e970b7e)
• release: test mac signing (281b0d8)

Code Refactoring

• build, buildah: up MaxPullPushRetries (3->10) and PullPushRetryDelay (2->5) (5c49239)

---

This PR was generated with Release Please. See documentation.

[flant-team-sysdev]

🤖 Created releases:

• v2.57.1

🌻