Kyverno

This release patches a certificate validation flaw (CVE-2026-32280), adds CLI offline mock support for HTTP requests and global context entries plus multi-CRD-path test handling, and lets GeneratingPolicy create cluster-scoped resources while Helm gains an optional PrometheusRule template for metrics alerting. These additions mean policies can now be tested without live cluster or network access and can generate resources beyond namespace scope, capabilities not present in prior releases.

Matters for: Platform teams running Kyverno policy tests in CI pipelines without cluster access and those managing multi-tenant Kubernetes clusters that need cluster-scoped resource generation.