K8sConsole 1.2.1

Fixed

• Object names . and .. are rejected when building Kubernetes API paths. Before, they could address the parent API path instead of an object. Found by fuzz testing.
• The YAML validator (editor, apply, assistant proposals) reports documents with an alias to a missing anchor as invalid YAML instead of throwing. Found by fuzz testing.

Security

• Releases include signed build provenance (SLSA, verifiable with gh attestation verify) and a CycloneDX SBOM of everything that ships.
• Property-based fuzz tests (fast-check) for API path building, the app:// protocol, the AWS read-only guard, settings and connection input, terminal suggestions and manifest validation.
• CodeQL code scanning, dependency review on pull requests, a production npm audit gate, OpenSSF Scorecard, secret-scanning push protection, and workflow hardening (SHA-pinned actions, least-privilege tokens, no persisted credentials).

Downloads

Platform	File
Linux (Ubuntu 22.04+ / Debian 12+, x86-64)	k8sconsole_1.2.1_amd64.deb: sudo apt install ./k8sconsole_1.2.1_amd64.deb
macOS, Apple Silicon	K8sConsole-1.2.1-mac-arm64.dmg
macOS, Intel	K8sConsole-1.2.1-mac-x64.dmg
Windows 10/11, x64	K8sConsole-1.2.1-win-x64.exe (installer) or .zip (portable)

Checksums are in SHA256SUMS.txt. The software bill of materials is k8sconsole-1.2.1.cdx.json (CycloneDX).

Verify a download was built by this repository's release workflow (signed build provenance):
gh attestation verify <file> --repo AAnkitpatel/k8sconsole

First launch on macOS: this build is not notarized by Apple, so macOS says it "could not verify" the app. Click Done (not Move to Bin), open System Settings → Privacy & Security, scroll down and click Open Anyway. Or run xattr -dr com.apple.quarantine /Applications/K8sConsole.app once.
First launch on Windows: the installer is not code-signed yet. In the SmartScreen prompt choose More info → Run anyway.