Kyverno v1.18.2 focuses on hardening security through strict namespace enforcement for generated resources and improving the reliability of background reporting. It also addresses critical edge cases in policy validation and enhances the developer experience when using the Kyverno CLI for local testing.

Enhanced Namespace Isolation and Security Hardening — This critical fix ensures that generated resources are strictly confined to their intended namespace boundaries, preventing accidental or malicious resource creation across namespaces. Additionally, several underlying dependencies have been updated to patch known vulnerabilities.

Improved Stability for Background Reporting Watchers — Ensures background scanning remains reliable even when the Kubernetes API server returns 'Gone' (410) errors, which often occurs during long-running watches or resource version expiration. This prevents silent failures in policy compliance reporting.

Corrected Validation Logic for Multi-Image Scenarios — Fixes a bug where validation logic would prematurely stop if an image did not match specific criteria, potentially skipping other necessary security checks. This ensures all required validations are executed as intended.