## Changelog * 4817c389 Merge pull request #2561 from Aryan-sharma11/dns-enforcement * 7ab1553d add dns network test * 8a9c4015 fix allow policy bugs * 5f4949b5 Allow rule for dns * c5331a76 add audit support * 536a8274 add DNS enforcement

## Changelog * d957d321 fix icmpv6 protocol rule policy matching (#2497) * 3a06be10 Merge pull request #2496 from AryanBakliwal/fix-sa-token-rotation * 74912957 Merge branch 'main' into fix-sa-token-rotation * 035580c6 Merge pull request #2507 from kubearmor/crifix * 01ea81de handle nri reconnection * 524eeeb1 remove debug print statements * f58b7b04 Mount runtime socket directory instead of file to avoid stale socket issues * d9815ce4 fix gosec unhandled error issue * 4ec8d4f3 retry logic for container runtimes in case of failures * 742d0d98 Update Helm Chart To v1.6.15 (#2510) * abeaefb0 Merge pull request #2509 from rksharma95/update-stable-v1.6.15 * 34ac8a71 update stable to v1.6.15 * 27e61255 Merge pull request #2508 from sanjay-ba/main * d03c37d1 Updated Version for Trivy Security incident fix * f4628e0c refactor(core): use controller-runtime for k8s client

## Changelog * 61977289 Merge pull request #2504 from rksharma95/fix-kernel-header-path * 57166c6e fix kernel headers path detection * 5d622d36 Merge pull request #2265 from GAURAV-DEEP01/test/non-k8s-tests * 594fc9b7 Non-K8s host and KSP test suites

## What's Changed * feat(enforcer): Add Network Policy Enforcer by @AryanBakliwal in https://github.com/kubearmor/KubeArmor/pull/2429 * fix(enforcer): icmpv6 protocol rule with bpflsm enforcer by @rksharma95 in https://github.com/kubearmor/KubeArmor/pull/2494 * fix: verifier bug for kernel 5.4 oracle linux 7.9 by @Aryan-sharma11 in https://github.com/kubearmor/KubeArmor/pull/2492 **Full Changelog**: https://github.com/kubearmor/KubeArmor/compare/v1.6.13...v1.6.14

## Changelog * 014b5811 Merge pull request #2486 from rksharma95/fix-endpoint-update * d0d85a19 fix compilation on kernel 5.4 * fca9e7a3 use fall back bpffs path when default is not mounted * 79392103 fix for oci 7.9 with kernel 5.4 * 3f28c4f4 fix endpoint update * e8111034 Merge pull request #2485 from prateekrai1/main * 3ee460d7 Signed-off-by: Prateek Rai prateekr651@gmail.com feat():2483 - updated the regex to support optional pre-release suffix in workflows * 185c35c4 Merge pull request #2447 from parthivsaikia/feat/use-machine-id * 3a2bd68d feat: use machine-id as nodeID * e352caaf test(policy): move fuzz tests from core to policy and add unit tests (#2196) * 964499dd Helm chart: allow custom kubearmor args and fix k3s/RKE2 containerd socket path (#2443)

## Changelog * 0af7b5f6 final-fix

## Changelog * b1f973a0 force cri

## Changelog * a1c04bc8 refactor code * 2a735cbc use secrets passed to operator for all kubearmor images * 8e3266e5 Merge pull request #2266 from rksharma95/fix-monitor-kernel-5.4 * 67f74bd7 upgrade dependencies to handle vulnerability * 18bc9e3b fix monitor loading issue on kernel 5.4 * 1bd09c7f Add Style Guide for doc.holiday * 18badacf fix(controller): enable AppArmor enforcement when deployed in ns other than kubearmor * 0f5c973f Merge pull request #2217 from AryanBakliwal/usb-tests * f3995650 add tests for USB Device Handler * 4eefe782 Merge pull request #2159 from GAURAV-DEEP01/fix/resource-leak * a5625be4 fix(feeder/ci): prevent resource leaks and fix CI coverage * eb5a937a update stable to v1.6.4 * b3d682e0 remove certificate field * 2059d8d1 fix ci * 5251c9cb fix system monitor compilation on rhel kernels * 46455070 add bundle flag