Repository navigation
Alien v3.3.27
Immutable
release. Only release title and notes can be modified.
Bug Fixes
- update all non-major dependencies (#795) (deps)(d941adc)
- isolate collector pod selectors (ALIEN-1082) (#785) (helm)(91f98fc)
- keep waiting on transient deployment read errors (#783)(2906ebe)
- check the release channel before building (#786)(918143a)
- list failed preflight checks in CLI errors (#788)(f6e7484)
- retry a deployment checkpoint after a transient manager error (#801)(60ec149)
- honor telemetry off in the manager's log config (#802)(cd0ad7b)
- show what the server accepted when deleting a deployment (#804)(67d43b5)
- accept vault --deployment after the subcommand (#807)(76bc4d4)
- accept reasoning effort none when translating to Messages (#806)(8c0d831)
- track partial Azure creates without sweeping retained resources (ALIEN-1128) (#809) (terraform)(ba986a4)
- tie Remote Operator RBAC to runtime needs and enabled operations (ALIEN-1132) (#811) (helm)(52b6c7f)
- run the sandbox image as root after the base image (#781)(60f5032)
- scope the AWS sandbox roll token to the deployment's image (#782)(00d3ab4)
- regenerate the manager TypeScript SDK with speakeasy run (#814)(ba7d35a)
- restrict standalone Operator RBAC and retain product cleanup (ALIEN-1155) (#818) (helm)(2bc1781)
- name each failed resource in CLI deployment errors (#805)(871c472)
- resolve a deployment group by name in the manager's list filter (#812)(4be7004)
- pass alien dev deploy inputs to the local deployment (#815)(3d27610)
- destroy local deployments by name in alien dev destroy (#813)(374b82d)
- don't repeat a stack-wide grant for a linked resource (#803)(eb0bcb1)
- close idle inbound connections (#822) (manager)(122514e)
- read stack state stored before the lifecycle rename (ALIEN-1184) (#828) (sandbox)(16cce6b)
- keep the API's error on a 503 from command operations (ALIEN-1183) (#827) (platform-sdk)(2df2ed6)
- finish AWS worker delete after GetFunction is denied (ALIEN-1190) (#830) (infra)(403b9af)
- only the Operator may hold a deployment's tunnel (#832) (manager)(0ced619)
- reuse custom role IDs through every deleted state (ALIEN-1202) (#838) (gcp)(3e86acd)
- wait for exact redeploy operation (#689)(d08ffa6)
- delete only a deployment's own custom roles (ALIEN-1203) (#839) (gcp)(f2f2a80)
- depend on zod by range in the published packages (#816)(23c0d0a)
- enable ABAC on AWS buckets (ALIEN-1205) (#842) (storage)(c9fe488)
- revert bucket ABAC enablement (ALIEN-1205) (#846) (storage)(4a60145)
- create the python-bindings sandbox without a tenant key (ALIEN-1215) (#849) (examples)(ee35854)
- honor env and cwd in sandbox commands (ALIEN-1214) (#848) (local)(410d789)
- support AWS setup role trusts and custom domains (#854)(310ea0e)
- repair local releases and runtime lifecycle (#861)(8a744cf)
- staging validation fixes for remote bindings and setup (#865)(ab22b8c)
- acknowledge completed pull execution receipts (#873)(a8e8b20)
- accept manager version bumps and render the new release's changelog (#876) (release)(5b5250f)
- resolve loaded images by their manifest digest on the containerd image store (#871) (local)(2fe3f20)
- refuse new stacks with shared endpoint hostnames, add deployments delete --forget (#875)(a295ea6)
- apply a release that supersedes an in-flight update (#878)(844ed11)
- keep deployer secrets working for stored values and pre-vault deployments (#872)(1c8baef)
- place compute pools in offered zones and refuse setup re-registration that changes management permissions (#877)(d79abb9)
- restore completed receipt release API mode (#881)(3d430de)
CI
- generate Renovate lockfiles in Renovate's commit (#784)(e85d1c3)
- keep GitHub Actions out of the Renovate batch (#792)(9b5f47e)
- share development and CI tool version pins (ALIEN-1211) (#845)(43d439e)
- cut Rust CI compile time with unwind, no debug info and mold (#868)(dc2c5a4)
- run the Kind lifecycle tests after merge, and report failures on main (#869)(1107170)
- run the Rust and TypeScript jobs on 8-vCPU runners (#870)(db6036c)
Features
- add a typed custom plugin example (ALIEN-1111) (#787) (operations)(6755ccf)
- ship a general agent toolchain in the default sandbox base (#780) (sandbox)(76bda4e)
- share offline operation permission compiler (ALIEN-1112) (#791) (permissions)(ba059dc)
- enable remote-sandbox sends one custom image for every matching cloud (#767) (cli)(7ff7d92)
- require generated plugin metadata (ALIEN-1134) (#810) (operations)(0866130)
- expose sandbox preview in the Python and Node SDKs (#797)(01a324f)
- create Remote Sandbox keys, print Remote Sandbox requests, search their logs (#819) (cli)(372e228)
- add access-requests revoke and the revoked grant state (ALIEN-1135) (#820) (cli)(47ec725)
- allow same-architecture AWS machine changes at runtime (#823) (preflights)(dc3cb25)
- run software in customer Kubernetes clusters and air-gapped sites from a self-hosted manager (#774)(301cffe)
- add alien projects delete (#817)(9a2573b)
- let Alien generate secret stack input values (#825)(9401b2d)
- enforce egress with a privileged agent (ALIEN-1188) (#840) (sandbox)(f69f757)
- change an AWS machine type within one architecture at runtime (#833)(caa6947)
- send queue batches with per-message outcomes (#835)(121b657)
- add remote KV and Queue bindings with batch send (#834)(33f3a3a)
- vault-native deployer secrets (ALIEN-1192) (#837)(a82cd38)
- let cloud Containers and Daemons read their deployer secrets (#859)(fffface)
- support setup-only private endpoint access (#844)(684ffd9)
- expose command retry keys in Platform SDK (ALIEN-1222) (#874)(bbee474)
Miscellaneous
- update rust crate aegis to v0.9.20 (#742) (deps)(9573131)
- update rust crate tower-http to v0.7.1 (#553) (deps)(2787a2d)
- refresh the platform API spec for pending prepared releases (#879)(aa4f7be)
- build the official CLI from the current platform revision (#882)(9839365)
- release v3.3.27 (#884)(74ee4aa)