v0.1.0-rc.4

What Changed 👀

🐛 Bug Fixes

• fix(chart): generate the identity TOTP key by default @Bugs5382 (#148)

📄 Documentation

• docs(install): say the arm64 images start at v0.1.0-rc.3 @Bugs5382 (#146)

Extra

Full Changelog: v0.1.0-rc.3...v0.1.0-rc.4

v0.1.0-rc.3

What Changed 👀

🚀 Features

• feat(charts): global image tag and CPU architecture for every workload @Bugs5382 (#137)

🐛 Bug Fixes

• fix(migrate): import into a vault at migrations 4 to 6 @Bugs5382 (#142)
• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#139)
• fix(migrate): the mapping check refuses a type change missing a required field @Bugs5382 (#131)

🔐 Security

• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#139)

🧩 Dependency Updates

• fix(deps): bump Go to 1.26.10 for GO-2026-6809 @Bugs5382 (#139)

Extra

Full Changelog: v0.1.0-rc.2...v0.1.0-rc.3

v0.1.0-rc.2

What Changed 👀

🧩 Dependency Updates

• chore(deps): bump the callee proto pins @github-actions[bot] (#120)

Extra

Full Changelog: v0.1.0-rc.1...v0.1.0-rc.2

v0.1.0-rc.1

What Changed 👀

🚀 Features

• feat(migrate): add a wait command for an init container's dependency gate @Bugs5382 (#105)
• feat(release): pin the sneakers-migrate image for the appliance's Import page @Bugs5382 (#88)
• feat(release): pin each service image's source commit in the manifest @Bugs5382 (#85)
• feat(migrate): the move onto the appliance: a mapping file, a sign-in reset and parity @Bugs5382 (#86)
• feat(charts): add small-box and large-box sizing examples @Bugs5382 (#45)
• feat(migrate): add sneakers-migrate export, import and verify @Bugs5382 (#35)
• feat(charts): add the web staff and admin apps @Bugs5382 (#36)
• feat(charts): port the Helm charts and the release manifest @Bugs5382 (#10)

🐛 Bug Fixes

• fix(migrate): let wait gate on the cluster's DNS alone @Bugs5382 (#115)
• fix(charts): stop the bundled PostgreSQL with a fast shutdown and its checkpoint @Bugs5382 (#113)
• fix(charts): size the probes for a small box and keep startup on the process @Bugs5382 (#109)
• fix(migrate): say the first admin's one-time password is set, in either mode @Bugs5382 (#100)
• fix(migrate): let verify pass with second factors enrolled after the import @Bugs5382 (#98)
• fix(migrate): wait for each service on the first connection @Bugs5382 (#95)
• fix(charts): mount the gateway's service account so diagnostics read Kubernetes @Bugs5382 (#92)
• fix(release): pin the gateway and MCP mains with the machine API fix @Bugs5382 (#87)
• fix(release): pin the appliance platform and load optional ConfigMaps @Bugs5382 (#81)
• fix(release): pin k0s's own images for an airgapped node @Bugs5382 (#84)
• fix(chart): one global workload token issuer, and k0s's documented @Bugs5382 (#71)
• fix(deps): go 1.26.9 and x/net for GO-2026-6617 @Bugs5382 (#62)
• fix(release): v0.1.0 wave 1 chart fixes (MCP_URL, author credit, mcp test, mfaMaxAge, cert-manager) @Bugs5382 (#58)
• fix(charts): probe the services' livez and readyz in the smoke test @Bugs5382 (#47)
• fix(charts): let the gateway's diagnostics read the MCP server's build @Bugs5382 (#40)
• fix(charts): probe liveness on the process and readiness on dependencies @Bugs5382 (#39)
• fix(release): limit the bundled Kratos, Hydra, Valkey and PostgreSQL to their callers @Bugs5382 (#33)
• fix(release): let each service's port take only its real callers @Bugs5382 (#32)

⚠️ Changes

• refactor(charts): drop the AUTH_BACKEND setting @Bugs5382 (#18)

🗑 Removed

• refactor(charts): drop the AUTH_BACKEND setting @Bugs5382 (#18)

📄 Documentation

• docs(compliance): add CRYPTO.md and an export compliance note @Bugs5382 (#83)
• docs(release): describe the production environment @Bugs5382 (#82)
• docs(release): add the manual checks for a release candidate @Bugs5382 (#29)

🧩 Dependency Updates

• chore(deps): bump the callee proto pins @github-actions[bot] (#56)

Extra

Full Changelog: 5661e2d...v0.1.0-rc.1