chore(main): release 1.22.0

[flant-team-sysdev]

🤖 I have created a release beep boop

1.22.0 (2026-02-04)

Features

• --delete-propagation and werf.io/delete-propagation (79e448e)
• --force-adoption to disable release annotations checks (1489430)
• --force-adoption to disable release annotations checks (b1dd851)
• --no-install-crds for release install/plan (bd48547)
• --no-install-crds for release install/plan (efc22bc)
• --print-values option for release get (8dc76ed)
• --print-values option for release get (f41f615)
• --release-info-annotation and --release-labels for rollback (3ea8ef4)
• --release-info-annotations for release install, exposed in release get (63fe2a3)
• --release-info-annotations for release install, exposed in release get (e563a61)
• --release-labels option for release install (1f23ad6)
• --release-labels option for release install (9b20bc0)
• --timeout option for release install/rollback/uninstall/plan (1fc9599)
• --timeout option for release install/rollback/uninstall/plan (d563296)
• NELM_FEAT_MORE_DETAILED_EXIT_CODE_FOR_PLAN=true to return exit code 3 on "no resource changes, but must install release" if --exit-code (#515) (d24f926)
• NELM_FEAT_PREVIEW_V2 feature gate (d6940c9)
• NELM_FEAT_PREVIEW_V2 feature gate (f7ad0ab)
• release plan install options --diff-context-lines, --show-insignificant-diffs, --show-sensitive-diffs, --show-verbose-crd-diffs, --show-verbose-diffs (7010f57)
• release plan install options --diff-context-lines, --show-insignificant-diffs, --show-sensitive-diffs, --show-verbose-crd-diffs, --show-verbose-diffs (fc1dd5d)
• werf.io/log-regex-skip and werf.io/log-regex-skip-for-<container> annotations (#506) (ced6487)
• ability to use werf.io/delete-policy: before-creation-if-immutable annotation in case of field is immutable error (e6b648f)
• action/release: ignore pod's logs using NoLogs option (77e7fb1)
• add werf.io/log-regex-skip annotation (dcb42eb)
• add werf.io/log-regex-skip annotation (3da6610)
• Add TypeScript chart rendering support (00ef36a)
• allow specifying remote charts in cli commands (11f3763)
• allow specifying remote charts in cli commands (b21329c)
• annotation werf.io/delete-dependency-<id> (#539) (a0009f4)
• change some cli options (a15a563)
• change some cli options (6e9cabe)
• chart repo connection flags --chart-repo-basic-password, --chart-repo-basic-username, --chart-repo-ca, --chart-repo-cert, --chart-repo-key, --chart-repo-pass-creds, --chart-repo-request-timeout, --chart-repo-url (e6d1d7c)
• cli: release install, release rollback and release uninstall should have --no-pod-logs option (#386) (b186537)
• deploy, tracking: update kubedog to track prometheus resources (f9e6ed7)
• deploy, tracking: update kubedog to track prometheus resources (5e7dc4a)
• display logs only from 1 replica by default (configured with annotation werf.io/show-logs-only-for-number-of-replicas) (f591234)
• display logs only from 1 replica by default (configured with annotation werf.io/show-logs-only-for-number-of-replicas) (47072bf)
• enable colors by default in some popular CI systems (65e0c00)
• enable colors by default in some popular CI systems (d3aa7b8)
• enhanced local resource validation (#545) (53505d1)
• expose release labels in release get (9b116db)
• expose release labels in release get (471c999)
• flag --extra-apiversions for "lint/render" (e6d1d7c)
• flags --no-notes for "install/rollback" (e6d1d7c)
• flags --save-graph-to, --release-info-annotations, --release-labels for "plan" (e6d1d7c)
• flags --set-json, --set-literal, --provenance-keyring, --provenance-strategy, --templates-allow-dns, --runtime-labels, --release-storage-sql-connection (e6d1d7c)
• greatly decrease Kubernetes apiserver load (27131de)
• greatly decrease Kubernetes apiserver load (7afe7ad)
• implement resource validation against api spec (#530) (870efeb)
• include_debug/tpl_debug/printf_debug/dump_debug and detailed template errors (f186a9c)
• include_debug/tpl_debug/printf_debug/dump_debug and detailed template errors (ee22873)
• k8s connection flags --kube-auth-password, --kube-auth-provider, --kube-auth-provider-config, --kube-auth-username, --kube-ca-data, --kube-cert, --kube-cert-data, --kube-context-cluster, --kube-context-user, --kube-impersonate-group, --kube-impersonate-uid, --kube-impersonate-user, --kube-key, --kube-key-data, --kube-proxy-url, --kube-request-timeout, --kube-token-path (e6d1d7c)
• lots of new cli flags (e6d1d7c)
• major refactor, werf.io/delete-policy, werf.io/ownership, werf.io/deploy-on and more (ea080f9)
• major refactor, werf.io/delete-policy, werf.io/ownership, werf.io/deploy-on and more (07d21f7)
• native release list command (8abc171)
• native release list command (ff9e1f0)
• native release uninstall command (f796320)
• native release uninstall command (4d85484)
• option --no-final-tracking (439cd63)
• option --no-remove-manual-changes from the cluster resources (ce489f3)
• option --set-runtime-json (948a502)
• priority sorting, improved formatting and grouping for commands lists in --help (2dda467)
• priority sorting, improved formatting and grouping for commands lists in --help (a5732c8)
• recreate non-hook Jobs on field is immutable by default (4b2521f)
• remove mentions about Nelm being experimental and update README.md (9ab91b5)
• remove mentions about Nelm being experimental and update README.md (164d465)
• webhook configuration deploy dependency (#538) (dcb818b)
• werf.io/sensitive-paths annotation and WERF_FEAT_FIELD_SENSITIVE featgate (#364) (e3f9798)

Bug Fixes

• nelm version shows 0.0.0 (e211254)
• nelm version shows 0.0.0 (5d79185)
• panic: interface conversion: plan.OperationConfig (df9709c)
• plan panic and json diffs instead of yaml (3e18ab2)
• plan panic and json diffs instead of yaml (737cd51)
• plan shows nothing if only tracking ops in plan (bd36c0e)
• release plan shows insignificant changes for no reason (89d78e7)
• release plan shows insignificant changes for no reason (66d500b)
• add info about options allowed values to --help (e7dd0a2)
• add standalone pod tracking (87958aa)
• add standalone pod tracking (5c956f6)
• adjust service account managed fields (#527) (7412d98)
• allow werf.io/sensitive: false for Secrets (7b9851d)
• allow werf.io/sensitive: false for Secrets (53665fd)
• bad handling of context cancellation in install (fbdbc62)
• broken diffs with object: in plan (97fceea)
• Buildah reexec sets wrong HOME dir (fba7623)
• Buildah reexec sets wrong HOME dir (4eb656e)
• calling invalid cli commands sometimes returns 0 exit code (c9f7802)
• calling invalid cli commands sometimes returns 0 exit code (571a87c)
• canceled operations not displayed in the end of deployment (7ffed4a)
• chart dir path and revision options/arguments to some commands ignored (9cbacc0)
• chart dir path and revision options/arguments to some commands ignored (591b60f)
• colorize warnings and errors (721f562)
• colorize warnings and errors (84cf471)
• correct release planning (b34f6c1)
• default kubeconfig not used on empty string kubeconfigpath action option (0d0703c)
• default kubeconfig not used on empty string kubeconfigpath action option (ffc2132)
• deploy/delete deps try to connect to later stages (#557) (3823686)
• disallow unknown NELM_FEAT_.* env vars (fa3f110)
• disallow unknown NELM_FEAT_.* env vars (7e25a16)
• docker hub creds might leak in pod events (#510) (8f8d7b4)
• empty Release.Info.First(Last)Deployed (cf23ebb)
• env vars ignored for required cli options (d061795)
• env vars ignored for required cli options (658820a)
• error "werf.io/show-logs-only-for-containers", expected integer value (fd0bd74)
• error "werf.io/show-logs-only-for-containers", expected integer value (209bd1c)
• error too many arguments in call to chartutil.ToRenderValues (cd349f3)
• error unable to acquire lock if install to new namespace (79a51d5)
• error undefined: helmdownloader.VerificationStrategyString (a5299cb)
• error if $KUBECONFIG has multiple files; major rework of K8s client setup (9af65c2)
• error if $KUBECONFIG has multiple files; major rework of K8s client setup (5291873)
• extra and some secret values wrongly propagated to subcharts (5824cfb)
• extra and some secret values wrongly propagated to subcharts (8ffa419)
• failures in init containers of Jobs ignored (68bf839)
• few fixes for typescript in charts (#550) (d6b4b29)
• fix links in release message (ea1fde8)
• fix links in release message (3691943)
• force adoption always on (#534) (5d5a6ee)
• git-go security vulnerability (3562493)
• git-go security vulnerability (80ae9d3)
• helm debug logs printed on info level (44e28e5)
• helm debug logs printed on info level (f738a22)
• hide libraries logs unless log level is debug (02d488a)
• hide libraries logs unless log level is debug (69dc532)
• hooks cleaned up too early (#503) (f9986dd)
• improve blind apply reason in plan (a5ff9d3)
• improve context cancellation handling (7f0e4ec)
• improve context cancellation handling (b2b5b93)
• improve diffs in plan output (90fd841)
• improve log color detection (e827543)
• improve log color detection (9728f02)
• improve output of experimental release list (902b6d9)
• improve values handling; add more trace logs (07c94d4)
• improve values handling; add more trace logs (358855f)
• inherit deckhouse-controller managed fields (0116483)
• invalid helm.sh/hook causes panic in render (802708f)
• leaking goroutines during tracking (949cb20)
• leaking goroutines during tracking (1c1be03)
• logs from libraries still showed by default (e34e422)
• logs from libraries still showed by default (c6b3928)
• logs stop showing after 4 hours (#508) (9d31303)
• major slowdown if node_modules in chart with TS enabled (#558) (295d3e5)
• make info log level less verbose (8d05159)
• make info log level less verbose (0de72ff)
• new patcher for Secret, which coverts stringData to data (9435670)
• new patcher for Secret, which coverts stringData to data (40e0b36)
• new release created even if no changes (15db0fe)
• no Auth Provider found for name "" (f4ca24c)
• no logs displayed (99efbcc)
• no logs displayed (39a92da)
• non-successful release revisions since last successful never cleaned up (d7b0cca)
• non-successful release revisions since last successful never cleaned up (9dc59d8)
• null or empty fields might fail resource deploys (f990fc1)
• panic "rules file not valid" (cba3115)
• panic "rules file not valid" (075b8e0)
• panic "validate rules file" (6bb4e3b)
• panic unknown VerificationStrategyString value (f4ca24c)
• panic if apiserver connection lost (#507) (d9db36b)
• panic if failure/rollback plan fails (778fa3f)
• panic in release plan install (f682b8d)
• panic in pre/post-delete hooks tracking (#518) (f01de36)
• panics if logboek context not initialized (0e0ea90)
• possible panic in tracking flux canary resource (7b20f46)
• possible panic in tracking flux canary resource (c6861bf)
• release namespace deletes after stopping being part of a release (a96c342)
• release namespace deletes after stopping being part of a release (2bba22b)
• remove null keys from manifests now only on NELM_FEAT_CLEAN_NULL_FIELDS=true (f1c9a36)
• revert: inherit deckhouse-controller managed fields (c3dd378)
• show stack traces with NELM_FEAT_PERIODIC_STACK_TRACES=true (7fe26b4)
• show stack traces with NELM_FEAT_PERIODIC_STACK_TRACES=true (20310db)
• show verbose diffs by default like before (5d32927)
• trigger test release (91799da)
• trigger test release (d0fe732)
• trigger test release /2 (077682e)
• unnecessary resource/release updates (138faeb)
• version 0.0.0 (16455d7)
• webhooks not readying (55c46af)
• wrong nelm version output (363ab28)
• wrong nelm version output (176ba60)

---

This PR was generated with Release Please. See documentation.

[bito-code-review]

Review Skipped - Label Excluded

Bito didn't auto-review this change because the PR contains excluded label: autorelease: pending.
No action is needed if you didn't intend for the agent to review it. To trigger a review manually, type /review in a comment and save.

You can change this by removing the label from Filters → Exclude Labels setting here, or from the labels_excluded field in the .bito.yaml file (if repo-level configurations are enabled), or contact your workspace admin at ilya.lesikov@flant.com.