chore: Release 25.7.0-rc1 (#621)

Signed-off-by: Nick Larsen <nick.larsen@stackable.tech>

Author: NickLarsenNZ

CHANGELOG.md

@@ -4,6 +4,8 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [25.7.0-rc1] - 2025-07-18
+
 ### Added
 
 - Add format-specific annotations to override secret file names ([#572]). The following new

Cargo.lock

@@ -4,7 +4,7 @@ default-members = ["rust/operator-binary"]
 resolver = "2"
 
 [workspace.package]
-version = "0.0.0-dev"
+version = "25.7.0-rc1"
 authors = ["Stackable GmbH <info@stackable.tech>"]
 license = "OSL-3.0"
 edition = "2021"

Cargo.nix

@@ -1,8 +1,8 @@
 ---
 apiVersion: v2
 name: secret-operator
-version: "0.0.0-dev"
-appVersion: "0.0.0-dev"
+version: "25.7.0-rc1"
+appVersion: "25.7.0-rc1"
 description: The Stackable Operator for Stackable Secret Operator
 home: https://github.com/stackabletech/secret-operator
 maintainers:

Cargo.toml

@@ -22,10 +22,10 @@ spec:
           description: Auto-generated derived type for SecretClassSpec via `CustomResource`
           properties:
             spec:
-              description: A [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass) is a cluster-global Kubernetes resource that defines a category of secrets that the Secret Operator knows how to provision.
+              description: A [SecretClass](https://docs.stackable.tech/home/25.7/secret-operator/secretclass) is a cluster-global Kubernetes resource that defines a category of secrets that the Secret Operator knows how to provision.
               properties:
                 backend:
-                  description: Each SecretClass is associated with a single [backend](https://docs.stackable.tech/home/nightly/secret-operator/secretclass#backend), which dictates the mechanism for issuing that kind of Secret.
+                  description: Each SecretClass is associated with a single [backend](https://docs.stackable.tech/home/25.7/secret-operator/secretclass#backend), which dictates the mechanism for issuing that kind of Secret.
                   oneOf:
                     - required:
                         - k8sSearch
@@ -38,7 +38,7 @@ spec:
                   properties:
                     autoTls:
                       description: |-
-                        The [`autoTls` backend](https://docs.stackable.tech/home/nightly/secret-operator/secretclass#backend-autotls) issues a TLS certificate signed by the Secret Operator. The certificate authority can be provided by the administrator, or managed automatically by the Secret Operator.
+                        The [`autoTls` backend](https://docs.stackable.tech/home/25.7/secret-operator/secretclass#backend-autotls) issues a TLS certificate signed by the Secret Operator. The certificate authority can be provided by the administrator, or managed automatically by the Secret Operator.
 
                         A new certificate and key pair will be generated and signed for each Pod, keys or certificates are never reused.
                       properties:
@@ -147,7 +147,7 @@ spec:
 
                         A new certificate will be requested the first time it is used by a Pod, it will be reused after that (subject to cert-manager renewal rules).
 
-                        [1]: https://docs.stackable.tech/home/nightly/secret-operator/secretclass#backend-certmanager
+                        [1]: https://docs.stackable.tech/home/25.7/secret-operator/secretclass#backend-certmanager
                       properties:
                         defaultCertificateLifetime:
                           default: 1d
@@ -201,7 +201,7 @@ spec:
                         - issuer
                       type: object
                     k8sSearch:
-                      description: The [`k8sSearch` backend](https://docs.stackable.tech/home/nightly/secret-operator/secretclass#backend-k8ssearch) can be used to mount Secrets across namespaces into Pods.
+                      description: The [`k8sSearch` backend](https://docs.stackable.tech/home/25.7/secret-operator/secretclass#backend-k8ssearch) can be used to mount Secrets across namespaces into Pods.
                       properties:
                         searchNamespace:
                           description: Configures the namespace searched for Secret objects.
@@ -231,7 +231,7 @@ spec:
                         - searchNamespace
                       type: object
                     kerberosKeytab:
-                      description: The [`kerberosKeytab` backend](https://docs.stackable.tech/home/nightly/secret-operator/secretclass#backend-kerberoskeytab) creates a Kerberos keytab file for a selected realm. The Kerberos KDC and administrator credentials must be provided by the administrator.
+                      description: The [`kerberosKeytab` backend](https://docs.stackable.tech/home/25.7/secret-operator/secretclass#backend-kerberoskeytab) creates a Kerberos keytab file for a selected realm. The Kerberos KDC and administrator credentials must be provided by the administrator.
                       properties:
                         admin:
                           description: Kerberos admin configuration settings.
@@ -380,12 +380,12 @@ spec:
           properties:
             spec:
               description: |-
-                A [TrustStore](https://docs.stackable.tech/home/nightly/secret-operator/truststore) requests information about how to validate secrets issued by a [SecretClass](https://docs.stackable.tech/home/nightly/secret-operator/secretclass).
+                A [TrustStore](https://docs.stackable.tech/home/25.7/secret-operator/truststore) requests information about how to validate secrets issued by a [SecretClass](https://docs.stackable.tech/home/25.7/secret-operator/secretclass).
 
                 The requested information is written to a ConfigMap with the same name as the TrustStore.
               properties:
                 format:
-                  description: The [format](https://docs.stackable.tech/home/nightly/secret-operator/secretclass#format) that the data should be converted into.
+                  description: The [format](https://docs.stackable.tech/home/25.7/secret-operator/secretclass#format) that the data should be converted into.
                   enum:
                     - tls-pem
                     - tls-pkcs12

deploy/helm/secret-operator/Chart.yaml

@@ -1,3 +1,4 @@
 ---
 name: home
-version: "nightly"
+version: "25.7"
+prerelease: false

deploy/helm/secret-operator/crds/crds.yaml

@@ -7,8 +7,8 @@ releases:
     description: Integration test
     products:
       commons:
-        operatorVersion: 0.0.0-dev
+        operatorVersion: 25.7.0-rc1
       secret:
-        operatorVersion: 0.0.0-dev
+        operatorVersion: 25.7.0-rc1
       listener:
-        operatorVersion: 0.0.0-dev
+        operatorVersion: 25.7.0-rc1