v0.0.556

Version 0.0.556 (September 8, 2026)

• Added a read-only Kubernetes connector (infra, enterprise): workloads, nodes, events, networking, storage, discovered CRDs, metrics-server usage and pod logs are cataloged as tables, authenticated with a service-account bearer token and a cluster-wide read-only RBAC manifest. The connect form can now render a numbered setup guide with copy buttons above the fields, and hides the "Require user authentication" toggle for connectors without a per-user auth variant (#1087)
• Postgres data sources gain an sslmode setting, so providers that reject unencrypted logins (such as AWS RDS with IAM auth) can be connected with require or stricter; the default prefer leaves existing connections unchanged (#1089)
• Dashboards can be renamed from the dashboard pane by the report owner, and the toolbar is decluttered: Data, Schedule, Export, Full screen, Open in new tab and Rename move into a ⋯ menu while Refresh, Download, View as and Share stay visible (#1085)
• Fixed the single-provider SSO auto-start firing on every sign-in visit, which made sign-out on an sso_only instance land straight back in the app. It now runs only for the embedded /authorize flow or when a login_hint is present (#1091)