| Images | |---------------------------------------------------------------------------| | docker pull docker.io/falcosecurity/falco:0.43.0 | | docker pull public.ecr.aws/falcosecurity/falco:0.43.0 | | docker pull docker.io/falcosecurity/falco-driver-loader:0.43.0 | | docker pull docker.io/falcosecurity/falco-driver-loader:0.43.0-buster | | docker pull docker.io/falcosecurity/falco:0.43.0-debian |

v0.43.0

Released on 2026-01-28

Breaking Changes :warning:

• fix(userspace)!: show source config path only in debug builds [#3787] - @leogr

Minor Changes

• chore: [NOTICE] The GPG key used to sign DEB/RPM packages has been rotated, and all existing packages have been re-signed. New key fingerprint: 478B2FBBC75F4237B731DA4365106822B35B1B1F [#3753] - @leogr
• chore(userspace): deprecate --gvisor-generate-config CLI option [#3784] - @ekoops
• docs: add deprecation notice for legacy eBPF in pkg install dialog [#3786] - @ekoops
• chore(scripts/falcoctl): increase follow interval to 1 week [#3757] - @leogr
• docs: add deprecation notice for legacy eBPF, gVisor and gRPC usage [#3763] - @ekoops
• chore(userspace): deprecate legacy eBPF probe, gVisor engine and gRPC [#3763] - @ekoops
• chore(engine): emit warning when the deprecated evt.latency field family is used in a rule condition or output [#3744] - @irozzo-1A

Bug Fixes

• fix: prevent null pointer crash on popen() failure in output_program [#3722] - @vietcgi
• fix: correct falcoctl.yaml path in debian conffiles [#3745] - @leogr

Non user-facing changes

• revert: chore(.github): temporary action for GPG key rotation [#3766] - @leogr
• chore(cmake): bump falcoctl dependency version to 0.12.2 [#3790] - @ekoops
• chore(cmake): bump falcoctl dependency version to 0.12.1 [#3777] - @ekoops
• chore(cmake): bump container plugin version to 0.6.1 [#3780] - @ekoops
• fix(userspace/engine): missing closing quote in deprecated field warning [#3779] - @leogr
• chore(.github): Put back gpg key rotation workflow [#3772] - @irozzo-1A
• chore(cmake): bump libs/drivers to 0.23.1/9.1.0+driver [#3769] - @ekoops
• chore(cmake): bump container plugin version to 0.6.0 [#3768] - @irozzo-1A
• docs(proposals): add proposal for legacy probe, gVisor engine and gRPC output deprecation [#3755] - @ekoops
• chore(cmake): bump libs/drivers to 0.23.0/9.1.0+driver [#3760] - @ekoops
• update(cmake): update libs and driver to latest master [#3754] - @github-actions[bot]
• fix(metrics): Add null check for state.outputs in metrics collection [#3740] - @adduali1310
• chore(cmake): bump libs to 0.23.0-rc2 [#3759] - @ekoops
• chore(cmake): bump libs/drivers to 0.23.0-rc1/9.1.0-rc1+driver [#3758] - @ekoops
• fix(ci): revert changes to mitigate rate-limitar change [#3752] - @irozzo-1A
• update(cmake): update libs and driver to latest master [#3723] - @github-actions[bot]
• Reduce image size [#3746] - @jfcoz
• docs(RELEASE.md): specify target branch association upon release creation [#3717] - @ekoops
• docs(RELEASE.md): fix rn2md cmd generating changelogs [#3709] - @ekoops
• docs(RELEASE.md): fix PRs filtering expr for checking release notes [#3708] - @ekoops
• docs(RELEASE.md): fix PRs filtering expression text [#3707] - @ekoops

Statistics

| MERGED PRS | NUMBER | |-----------------|--------| | Not user-facing | 21 | | Release note | 11 | | Total | 32 |

Release Manager @ekoops