v0.18.0

Features

• operator: Admin, waf sidecar, mounts and pod labels in the gateway pod (#223)
• operator: Opt in per route rule (#224)
• operator: Admin services, --waf-images and the e2e (#225)

v0.17.0

Features

• store: Llm label rows and migration 3 (#216)
• l7: Parse get /llm/export (#217)
• cli: Ml.llm.persist and get /llm/export (#218)
• ui: Llm label source and export link (#219)

v0.16.1

RFCs

• 0024 llm labels in the postgresql store (#212)
• 0025 operator gateways with the console, a waf sidecar and mounts (#213)

Docs

• Cargo install in the README install section (#205)
• Cargo install feature list in the README (#206)
• Plainer wording on the docs site (#207)
• Cargo install on the landing page, admin-ui example in the index (#208)
• Sdk install and usage for python, javascript and go (#210)
• A README for each published crate (#209)

v0.16.0

Features

• engine: Rfc 0023 sampling gate with per-client dedupe (#197)
• l7: Rfc 0023 sampler, redaction, provider wire format and admin calls (#198)
• cli: Rfc 0023 llm labels worker, config, admin api and docs (#199)
• ui: Rfc 0023 llm labels page with the sampling switch (#200)

RFCs

• 0023 llm labels for sampled traffic (#193)
• 0023 use cases and future suggestions (#195)

Docs

• Readable how it works chart in the README (#194)

Build and CI

• Publish the crates to crates.io (#202)

v0.15.1

Fixes

• ui: Fill the overview graph's polling gaps from the gateway history (#190)

Docs

• l7: Route the challenge verify path when only some paths reach dvarapala (#189)

v0.15.0

Features

• engine: Rfc 0022 history ring and minute roll-up (#180)
• store: Rfc 0022 traffic history table, writes, sums and retention (#181)
• l7: Rfc 0022 history admin call (#182)
• cli: Rfc 0022 history section, sampling task, GET /history and the postgres writer (#183)
• ui: Rfc 0022 overview graph from the history, range picker (#184)

RFCs

• 0022 traffic history for the console (#178)

v0.14.1

Fixes

• ui: Keep console details open across a refetch (#176)

Docs

• Which build features each published artifact has, list values in environment variables, validation ranges, what rate_limit.enabled = false turns off, forward mode's ignored sections
• The scoring model: requirements, features, training, expected results
• The SDKs' accepted keys and Rust embedding, operator gateway limits, cluster store availability

v0.14.0

Features

• l7: Rfc 0021 matched rules table and the mode switch call (#171)
• cli: Rfc 0021 config view, waf view, mode switch and admin metrics (#172)
• Console config, waf, mode switch and health pages (rfc 0021) (#173)

RFCs

• 0021 console config, WAF, mode switch and health pages (#168)

v0.13.0

Features

• Rfc 0019 operator, policy rendering, route rewrite webhook and gateway controller (#155)
• cli: Config_watch, the operator image and manifest, kind e2e (#156)
• l7: Trust an email sent without email_verified when asked (#159)
• cli: Admin.oidc.require_email_verified (#160)

Fixes

• Ship root CAs in the container image (#152)

RFCs

• 0020 trust the issuer's email for console login (#153)

Build and CI

• Node 26 test glob, renovate rules for kube and the xdp nightly (#164)

v0.12.0

Features

• l7: Sessions, oidc login and csrf for the admin console (#142)
• Admin web console in ui/ (#143)
• cli: Serve the admin console with token and oidc login (#144)
• l7: Waf stage that asks an spop agent such as coraza-spoa (#147)
• cli: [waf] section, per-route waf switch and the coraza-spoa examples (#148)

RFCs

• 0018 admin web ui with oidc login (#139)
• 0019 kubernetes operator with route rewrite to a gateway (#140)
• 0017 waf with a coraza-spoa sidecar (#138)