2025.3

  Release Date: March 20, 2025

System Requirements Update

Ensure your infrastructure meets the latest requirements for optimal performance and security:

Component	Minimum Version	Recommended Version
KOTS	1.117.3	Latest
Kubernetes	1.25	1.31
PostgreSQL	15	16
Redis	6	7
helm	3.13	Latest
ggscout	0.16.0	0.16.0 is the only supported version

Helm & Upgrade Considerations

To ensure compatibility, please review Helm values updates from the previous version.

Upgrading to 2025.3 Air gap deployments

We've updated the path and names of our images in this release. Follow the upgrade instructions to update your tooling for downloading and uploading GitGuardian images to your private registry. Find all image and tag names on the Air Gap Install page.

Feature highlights

• Generic Secret Enricher — ML model that analyzes context to identify secret providers and categories with new filters. Learn more
• Secrets Managers integration — sync incidents with AWS, HashiCorp Vault, Azure, Google, Delinea, and Akeyless via ggscout. Learn more

Secrets Detection Engine

• v2.132 — 5 new detectors (SMB Credentials, Azure Blob Storage, DeepSeek, Netlify v2, 1Password Service Account), 4 improved (Azure Storage Account, Generic Password, Groq, Netlify), 3 new checkers, 2 engine enhancements.
• v2.133 — 5 new detectors (OpenAI Project v2, OpenAI Admin, Netlify v2, 1Password Service Account, DeepSeek), 8 improved (OpenAI Service Account, Rails, GitHub, Groq, Artifactory, Generic Password, Dropbox, FCM).

Enhancements

• Jira ticket templates with Incident ID variable, instant ticket creation. See SaaS release: Feb 27.
• Self-Hosted:
  • ggscout improvements: Vault preflight checks, hardened Helm chart, Replicated Proxy support, embedded cluster deployment, support bundle logs. Learn more.
  • Customizable Public API pagination maximum page size. Learn more.
  • Machine learning activated by default for embedded cluster installations. Learn more.
  • Automatic license synchronization for non-air-gap environments.
  • Added nodeSelector support in Helm jobs for enhanced node scheduling flexibility.

Fixes

• Jira Cloud invalid state after uninstall, Microsoft Teams wrong team display. See SaaS release: Mar 10.
• Self-Hosted:
  • Added custom security contexts support for machine learning pods. Learn more.
  • Fixed Redis TLS connection errors in preflights.