v0.5.0

What's Changed

• feat(sso): honour KyIdentity back-channel logout by @Yoshiofthewire in #92
• Bump golang.org/x/net to v0.62.0 (GO-2026-6860) by @Yoshiofthewire in #93
• Sync ky-ui 0.4.3: field and status contrast by @Yoshiofthewire in #95
• Refine KyDNS administration for suite cohesion by @Yoshiofthewire in #94
• docs: add OctoCounts badge to the License section by @Yoshiofthewire in #96
• ui: label SSO button "Continue with Single Sign On" by @Yoshiofthewire in #98
• ci: go and browser legs under test, Playwright image, fresh race runs by @Yoshiofthewire in #97

Full Changelog: v0.4.3.2...v0.5.0

v0.4.3.2

What's Changed

• replication: rename a replica (#67); drop the Services-tab Health column by @Yoshiofthewire in #78
• docs: private KyRecovery on Unraid, the permanent key pin, and hand-set KyIdentity sign-in by @Yoshiofthewire in #79
• Add OpenSSF Best Practices and Scorecard badges by @Yoshiofthewire in #80
• Enforce OIDC signing-key floors and support strong TLS by @Yoshiofthewire in #81
• Finish Services health UI cleanup by @Yoshiofthewire in #82
• Add the Appearance page and suite shell (ky-ui 0.4.0) by @Yoshiofthewire in #83
• Apply the saved theme before first paint again by @Yoshiofthewire in #84
• test: gate releases on backup and restore proofs by @Yoshiofthewire in #85
• Fit the phone dashboard: one nav row, legible charts, even stats by @Yoshiofthewire in #86
• Test dashboard browser workflows before publishing by @Yoshiofthewire in #87
• chore(deps): bump @playwright/test from 1.63.0 to 1.64.1 in /browser by @dependabot[bot] in #88
• chore(deps): bump modernc.org/sqlite from 1.60.1 to 1.61.0 in the go group by @dependabot[bot] in #89
• chore(ci): bump the actions group with 2 updates by @dependabot[bot] in #90
• ci: separate browser install and test budgets by @Yoshiofthewire in #91

Full Changelog: v0.4.3.1...v0.4.3.2

v0.4.3.1

What's Changed

• Release Dependabot changes daily as vX.Y.Z.N by @Yoshiofthewire in #74
• build: Go 1.27.3 for GO-2026-6809 by @Yoshiofthewire in #75
• Retire the legacy SSO issuer cleanup and scrub doc hostnames by @Yoshiofthewire in #76
• Silver criteria: repeatable build check, release verification, coding standard, assurance case by @Yoshiofthewire in #77

Full Changelog: v0.4.3...v0.4.3.1

v0.4.3

What's Changed

• docs: verify release packages against the exact release.yml signer by @Yoshiofthewire in #58
• docs: clarify standalone installation and test coverage by @Yoshiofthewire in #59
• Correct LAN network creation and admin CLI documentation by @Yoshiofthewire in #60
• Shorten README and organize documentation by topic by @Yoshiofthewire in #61
• feat: MCP endpoint for AI agents by @Yoshiofthewire in #62
• docs: name the vulnerability reporting channels in SECURITY.md by @Yoshiofthewire in #63
• Remove the personal urlxl host from SSO defaults and packaging by @Yoshiofthewire in #64
• Treat a DNSSEC-bogus SERVFAIL as final instead of trying the next upstream by @Yoshiofthewire in #66
• Fix KyDNS bugs found while filming the launch videos by @Yoshiofthewire in #68
• chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by @dependabot[bot] in #65
• Name the chown fix when the data directory belongs to another user by @Yoshiofthewire in #69
• Label the login button "Sign in with SSO" by @Yoshiofthewire in #70
• fix(ci): stamp main images with a describe version, not the raw sha by @Yoshiofthewire in #71
• chore(deps): bump the go group with 2 updates by @dependabot[bot] in #72
• chore(ci): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 in the actions group by @dependabot[bot] in #73

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• refactor: move module path to github.com/Busness-app by @Yoshiofthewire in #25
• feat(web): add theme picker and refresh app chrome by @Yoshiofthewire in #26
• feat(backup): add KyRecovery deposits and restore by @Yoshiofthewire in #27
• fix(backup): bind the VACUUM INTO path and mark capsule downloads no-store by @Yoshiofthewire in #28
• feat(backup): config, compose and runbook for the suite backup spec by @Yoshiofthewire in #29
• feat(backup): bring KyRecovery integration to the suite spec on ky-primitives/recoveryclient by @Yoshiofthewire in #30
• Validate restored backups with recoveryclient v0.5.1 by @Yoshiofthewire in #31
• build(deps): bump the go-minor-patch group with 8 updates by @dependabot[bot] in #32
• rename: move module and image namespace to Busnes-app by @Yoshiofthewire in #33
• rename: review follow-ups (attestation identity, CI coordinate check, recorded history) by @Yoshiofthewire in #34
• build(deps): bump the go-minor-patch group with 3 updates by @dependabot[bot] in #35
• Adopt Busnes theme defaults and shared product icons by @Yoshiofthewire in #36
• ui: clarify KyDNS selected navigation by @Yoshiofthewire in #38
• build(deps): bump modernc.org/sqlite from 1.58.0 to 1.59.0 in the go-minor-patch group by @dependabot[bot] in #37
• use versioned ky-ui tokens in KyDNS by @Yoshiofthewire in #39
• Adopt shared UI foundation and verify responsive KyDNS by @Yoshiofthewire in #40
• Add shared health endpoint for kyPulse monitoring by @Yoshiofthewire in #41
• build(deps): bump modernc.org/sqlite from 1.59.0 to 1.60.0 in the go-minor-patch group by @dependabot[bot] in #42
• build(deps): bump modernc.org/sqlite from 1.60.0 to 1.60.1 in the go-minor-patch group by @dependabot[bot] in #43
• ci: add OpenSSF Scorecard workflow by @Yoshiofthewire in #45
• fix: raise go.mod floor to 1.26.9 by @Yoshiofthewire in #44
• ci: bump Node 22 to 26 by @Yoshiofthewire in #46
• chore: standard Go bump method by @Yoshiofthewire in #47
• chore(deps): bump the go group with 2 updates by @dependabot[bot] in #48
• chore(ci): bump actions/setup-node from 7.0.0 to 7.1.0 in the actions group by @dependabot[bot] in #49
• feat: apply-setup for KyQuickStart installs by @Yoshiofthewire in #50
• fix(dns): close lease-name hijack, rebuild race and filter bypasses by @Yoshiofthewire in #51
• fix(dhcp): refuse unsolicited leases, foreign and relayed requests, contain panics by @Yoshiofthewire in #52
• chore: pin supply chain, run Docker as nonroot, admin-proxy docs and repo hygiene by @Yoshiofthewire in #53
• fix(auth): close SSO takeover, setup and session holes; gate the admin UI by @Yoshiofthewire in #54
• fix(replica): validate snapshots before writing; refuse truncated imports by @Yoshiofthewire in #55
• chore(deps): bump the go group with 3 updates by @dependabot[bot] in #56
• chore(ci): bump ossf/scorecard-action from 2.4.4 to 2.5.0 in the actions group by @dependabot[bot] in #57

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• fix(ci,release): publish versioned images from the right owner by @Yoshiofthewire in #24

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• feat: configure the file-owned settings from the environment by @Yoshiofthewire in #13
• feat(web): pair a replica with its primary from the browser by @Yoshiofthewire in #14
• fix(dnsserver): strip the IPv6 zone so link-local peers match views by @Yoshiofthewire in #15
• build(deps): bump software.sslmate.com/src/go-pkcs12 from 0.7.1 to 0.7.2 by @dependabot[bot] in #16
• build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the go-minor-patch group by @dependabot[bot] in #17
• Worktree dhcp part1 by @Yoshiofthewire in #18
• Built-in DHCPv4 server, part 2: reservations, the DHCP tab, and a scoped replica exemption by @Yoshiofthewire in #19
• build(deps): bump the go-minor-patch group with 2 updates by @dependabot[bot] in #21
• build(deps): bump golang from 1.26-alpine to 1.27-alpine by @dependabot[bot] in #20
• Add FUNDING.yml by @Yoshiofthewire in #22
• fix(auth,web,dhcpd): verify OIDC nonce and gate RELEASEs by @Yoshiofthewire in #23

Full Changelog: v0.3.1...v0.4.0

v0.3.1

What's Changed

• Ship KyDNS as a Debian package, not just a container image by @Yoshiofthewire in #6
• package: ship an rpm alongside the deb by @Yoshiofthewire in #7
• fix(package): print the deb's data notice only on a real removal by @Yoshiofthewire in #8
• ci: let dependabot watch go, actions, and docker weekly by @Yoshiofthewire in #9
• build(deps): bump the actions group with 7 updates by @dependabot[bot] in #10
• harden pairing and the logout cookie, fix the Pi image, ship 0.3.0 by @Yoshiofthewire in #11
• Pin the Raspberry Pi base, stamp one version, validate the primary by @Yoshiofthewire in #12

New Contributors

• @dependabot[bot] made their first contribution in #10

Full Changelog: v0.3.0...v0.3.1