falcosecurity-libs 0.25.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

![MIN_DRIVER_API](https://img.shields.io/badge/MIN_DRIVER_API-10.0.0-yellow)
![MIN_DRIVER_SCHEMA](https://img.shields.io/badge/MIN_DRIVER_SCHEMA-4.3.0-yellow)
v0.25.0
Released on 2026-05-12
Breaking Changes :warning:

chore(userspace)!: sinsp_evt::render_fd{,_json} are now private [#2979] - @ekoops
perf(userspace/libsinsp)!: change sanitize_string() API signature [#2978] - @ekoops
fix!: honor sanitization request for C strings [#2973] - @ekoops
fix(userspace)!: honor sanitization request while extracting strings [#2971] - @ekoops
fix!: additional invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2968] - @ekoops
fix!: additional invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2966] - @ekoops

Major Changes

feat(libsinsp): support list modifiers for string operators (oneof/anyof/allof) [#2984] - @therealbobo

Bug Fixes

fix: invalid or non-printable UTF-8 sequences are now replaced with the U+FFFD replacement characters [#2964] - @ekoops

Non user-facing changes

fix(userspace/libpman): avoid redefining _GNU_SOURCE [#2991] - @ekoops
Track and handle O_CLOEXEC fds [#2958] - @gnosek
ci(.github): replace /area CI with /area automation in PR template [#2988] - @ekoops
fix(driver/modern_bpf): consolidate capture_settings lookups to fix clang-20 regression [#2987] - @yasiribmcon
refactor(userspace/libsinsp): remove default_re2_deleter and ensure_unique_ptr_allocated_deleter [#2986] - @therealbobo
fix(plugin): Use UTF-8 paths on Windows [#2841] - @geraldcombs
ci(release-body): switch back to rez0n/actions-github-release [#2981] - @ekoops
ci: add /area drivers to both PR template and update-syscalls job [#2982] - @ekoops
update(driver): update syscalls tables and driver report. [#2980] - @github-actions[bot]
build: add generic Zig cross-compilation toolchain and refactor external project support [#2974] - @irozzo-1A
cleanup(libsinsp): represent filtercheck args with std::optional [#2976] - @therealbobo
fix(userspace/libsinsp): fix sinsp_threadinfo::get_path_for_dir_fd() [#2977] - @ekoops
perf: use separate storage for extract_single_{,c}string() [#2975] - @ekoops
feat(libsinsp): getopt transfomer [#2842] - @therealbobo
refactor(userspace/libsinsp/sinsp_filtercheck_*): replace RETURN_EXTRACT_* macros with methods [#2972] - @ekoops
fix(libsinsp): use reentrant fget*ent functions [#2967] - @gnosek
fix(libscap): report unsupported configure settings as SCAP_NOT_SUPPORTED [#2954] - @deepskyblue86

Statistics



MERGED PRS
NUMBER




Not user-facing
17


Release note
12


Total
29



Release Manager @ekoops

View the full release notes at https://github.com/falcosecurity/libs/releases/tag/0.25.0.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.