Kubyl v0.3.4

[0.3.4] - 2026-09-28

Bug Fixes

• No panic completing after a multi-byte space in the flow filter (9a4e9dd)
• Check read-only, RBAC and PROD for every cluster in a selection (0b6177e)
• Never let a container file name escape the download folder (31948f9)
• Reject unsafe entry names in drag-out staging and image preview (269b868)
• Keep draining tar stdout when local extraction fails (ece1069)
• Don't truncate container files on a failed write (7ffd036)
• Only resume a partial download of the same remote file (d567a68)
• Don't panic when the preview temp folder can't be created (1e14d37)
• Move blocking local filesystem calls off the UI thread (8ebd388)
• Strip every ESC from bracketed pastes (2e7ae57)
• Cap terminal output batches at 256 KiB (f50456d)
• Clean up privileged node-shell pods on quit, failure and aborted create (4477c91)
• Refuse cmd.exe metacharacters in cloud CLI arguments (ff7ec16)
• Validate the EKS region before building the endpoint host (af33a6b)
• SUC updates only to versions from the fetched channel list (00a50c6)
• Confirm dialog waits for the pre-flight run and follows its results (41137a7)
• A rekey during a write no longer leaves the cluster busy (54d2dce)
• EKS reads describe every update and report describe errors (d96c025)
• No integer overflow on server-supplied versions (331f392)
• CAPI read fails when KubeadmControlPlanes can't be listed (cb98223)
• OpenShift patch clears a stale desiredUpdate.image (f30a054)
• Cache short-lived cloud credentials for part of their life (f40a621)
• Typed confirmation for Scale on PROD from list/palette (9771bb5)
• Mask Secret data in Copy YAML (d88175b)
• Include the cluster id in list RowId (24cfd61)
• Loopback OAuth callback tolerates idle connections and checks state on errors (e76f116)
• Only drop the OIDC refresh token on invalid_grant (0fc8f33)
• Keep a pending or confirmed scale when the details target changes (487534a)
• Report skipped items when part of a bulk action didn't run (430204f)
• Ignore stale kubeconfig reload results (2a076fe)
• Plan and start the kubeconfig watcher off the UI thread (39db6f0)
• Repeat RBAC checks after a reconnect or a failed check (cc93f18)
• Keep PROD and read-only flags while a cluster is disconnected (593ff9f)
• Reject OpenShift tokens the API server treats as anonymous (cc73347)
• Serialize dev file credential store updates (71613b8)
• Confirm Cordon/Uncordon, typed on PROD (5c4b040)
• Key alert selection by (cluster, fingerprint) (9e53a9f)
• Copied helm commands carry --kubeconfig (3c75908)
• Uninstall with CRDs keeps CRDs another CSV owns (aaadab2)
• Clamp sync-window duration and bound the walk (28425ee)
• Confirm Terminate and switching sync policies on (2b7d67e)
• Sign-out cancels a sign-in in progress (acf28cf)
• Record the API forward at once and match ids in forward_stopped (5a10314)
• Iterative glob_match (c83d504)
• Only keep http(s) argocd-cm urls (06bf5c3)
• Drop in-flight API requests on connect/disconnect (c3376a1)
• Check patch RBAC before a Kubernetes-mode delete and bind it to the UID (f9c0f66)
• Fill_between can't index past a shorter baseline (f8d8b6c)
• Short_repo strips credentials up to the last @ before the path (60e271f)
• Never overwrite an unparsable settings.json (01e033a)
• Don't panic when a settings section is not an object (ab9fdca)
• Unique temp file and ordered, serialised settings/state writes (68bdb07)
• Wait for in-flight settings/state writes on quit (392b719)
• Private config dir when there is no platform config dir (fa4c23c)
• Read the wizard's certificate file off the UI thread (7a162fd)
• Exec-plugin consent covers where a relative command points (037df1d)
• Verify existing Secret and bindings before importing a service-account token (0a946d1)
• Don't keep every finished load task in the editor (a8beee0)
• Preview update channel falls back to stable; manifest channel is checked (df5fb5e)
• A panic while applying an update no longer crashes the app (63c23b2)
• Pin the signing identity when verifying a downloaded macOS bundle (94b07e5)
• Step past a full page of already-sent Loki records (ca41ba8)
• Do not request a Loki URL the FlowCollector chose (132bbe8)
• Park an idle web view on about:blank (8a36034)
• Re-create the web view when Private changed during creation (7c89358)
• Do not save accepted certificates in Private mode (12312c2)
• Ask before a page opens the system browser (785f40b)
• Escape quotes and backslashes in LogQL regex values (f7ae474)
• No unchecked arithmetic on Loki/metrics numbers (fe3a5b6)
• Stop the replaced state's relay forward on Rekeyed (851ac58)
• Keep Seen counts exact past 2000 values (22f1283)
• Mask more credential headers (9a53edd)
• Parse E/Ei quantity suffixes (119b1c9)
• Avoid underflow with an oversized recent list (7ec2f4f)
• Treat a pod as unlimited when any container lacks a limit (f74a725)
• Stop port-forwards when their cluster disconnects or is removed (3ecf677)
• Gate the write-script test helper to unix (cbf2158)
• Treat rooted exec commands as absolute on Windows (65b57be)
• Restart alerts state on cluster rekey (5a0431f)
• Bump generation on drop_cluster, stop old forwards on discovery (16deed4)
• Keep previous alerts when every Alertmanager read fails (cd2cf72)
• Do not start a refetch while a read is in flight (ceba62c)
• Keep the silences list and report the error when the read fails (9c38116)
• Skip target check without a namespace, encode path segments (cc77e4b)
• Expire the PrometheusRule lookup cache (9b8a8c0)
• Report failed silence undo, check read-only in recreate_now (a89817d)
• Cache decoded CSV icons (1307025)
• Ignore uninstall submit while one is running (3dd5693)
• Only list CRDs the uninstall will delete (3db69ef)
• Restart an in-flight OperatorHub fetch on rekey (f7e2e04)
• Refresh Secret originals when only the masked render is unchanged (9108163)
• Cap YAML alias expansion (4003566)
• Cap log line length, fetch size and JSON level parsing (52fff30)
• Bound the gone-pod chips in the logs view (d49bb99)
• Bracket IPv6 hosts and use the bind address in active() (7925d52)
• Bind the one-click forward's port off the UI thread, no probe race (2b862e4)
• Enforce read-only on saved and auto-start forwards (775bd0d)
• Re-read the client after resolving a workload selector (43d24ce)
• Pass the new fallback flag in the netflow live test (defff9d)
• Address review feedback on phase 17 fixes (e654b2a)
• Gate the unusable-fallback settings test to unix (4e03162)

Documentation

• Add phase 17 code-review fixes checklist (eb9f538)
• Tick all phase 17 findings and update handoff log (58f3f5e)

Miscellaneous

• Update Flatpak manifest to v0.3.3 (af6b722)