v0.10.0

0.10.0 (2026-10-21)

Features

• consensus: apply hardened securityContext defaults to cn pod (#1426) (99a090e)
• upgrade: multi-registry source with pinned selection and reactive failover (#1429) (2a7a115)

Bug Fixes

• build: make Taskfile tool installs idempotent and rebuild on Go bumps (#1424) (efa8167)
• cn/backup-uploader: fix double path (#1432) (8dd97dc)
• upgrade: pin upgrade image when capsule uses softwareVersionSource (#1425) (d6c20d3)

v0.9.0

0.9.0 (2026-10-17)

Features

• bn: add BN helm capsule and examples (#1389) (861d477)
• build: use go 1.27.2 (#1399) (3ccbc4f)
• consensus: make softwareVersion and softwareVersionSource mutually exclusive (#1393) (8e45550)
• rbac: add allowedNamespaces for per-namespace operator RBAC (#1398) (980d9c4)

Bug Fixes

• consensus: silence ExecTransportFailed noise during upgrade pod rollout (#1378) (267a3f3)
• NetworkUpgradePrepare marks Succeeded before prefetch completion (#1385) (1bb876f)

v0.8.0

0.8.0 (2026-09-30)

Features

• api: allow either SoftwareVersion or SoftwareVersionSource on ConsensusNodeContainer (#1377) (3d733e4)
• orbit: feature-gate mechanism + configurable node-name convention (#1362) (d3cb4a8)

Bug Fixes

• consensus-mock: fix RBAC and add consensus-mock for upgrade timing benchmarks (#1337) (40693f4)
• log: improve log messages for clarity and consistency (#1361) (934c275)
• log: quiet idle reconcile logs and clarify NetworkUpgrade CR processing (#1375) (b90349b)

v0.7.3

0.7.3 (2026-09-26)

Bug Fixes

• log: human-readable operator logs with source package/caller (logx v0.9.0) (#1360) (460e275)

v0.7.2

0.7.2 (2026-09-26)

Bug Fixes

• log: honor ConsoleLogging and enable UTC + caller via logx v0.7.0 (#1358) (ec19711)

v0.7.1

0.7.1 (2026-09-25)

Bug Fixes

• api/orbit: add networkgenesis under orbit umbrella (#1344) (9e608b8)
• beacon: guard against hiero-sdk panics + document upload optimizations (#1332) (15d3b03)
• consensus pod stranded offline after a config-only mainnet upgrade (#1342) (301c342)
• uc: archive NetworkUpgrade* CRs per-operation, not per-CR phase (#1350) (c7ec993)
• uc: bound dedup cache to in-flight operations (#1348) (e647184)

v0.7.0

0.7.0 (2026-09-16)

Features

• consensuscapsule: multi-registry image sources with verification + digest pinning (#1316) (171f092)
• registry: build OCIChecker keychain from namespace image-pull secrets (#1314) (7fa8d28)
• registry: build upgrade-path image checker keychain from capsule relevant pull secrets (#1317) (66a6975)

Bug Fixes

• ensure error message is clear about admission policy error on namespace mismatch (#1309) (d70f596)
• handle optimistic-concurrency conflict gracefully (#1310) (d6c9e44)
• make iteration order deterministic (sort List results and map keys) (#1319) (4f59ac0)
• uc: align Execute handoff with HIP-1496 provisioner ownership (#1324) (1e09b85)
• uc: per-operation config CR names for BlockNodesConfig (#1322) (4875466)

v0.6.1

0.6.1 (2026-09-09)

Bug Fixes

• rbac: WebSocket exec into consensus pods forbidden — pods/exec needs the get verb (#1307) (fe62efe)

v0.6.0

0.6.0 (2026-09-03)

Features

• api/desiredState: add docs and missing int tests. add stop debouncer (#1286) (16d20b9)
• api: add DesiredRunState to control process by stop/start CN (#1263) (f495303)
• consensus: require explicit images; drop built-in default image tags (#1279) (86bc88e)

Bug Fixes

• admission: enforce orbit reference and namespace matching via CEL (#1265) (cb0f2f9)
• deps: bump google.golang.org/grpc to 1.83.1 (#1299) (932b38b)
• enforce verified image digests across the upgrade flow (+ opt-in deploy policy) (#1277) (ba5eb6a)
• imagePullSecrets field is declared but never applied to pods/ServiceAccount (#1288) (60c54ac)
• misc: add registry SSRF allow-list, UC symlink/size guards, and beacon TLS verification (#1289) (46a45e9)
• remove redundant spec.hapiAppSecretsName as it always yields duplicate volumeMounts (#1287) (ac782db)

v0.5.0

0.5.0 (2026-08-21)

Features

• archive completed NetworkUpgrade CRs to reduce UC cache-seed latency (#1259) (7d72c8a)
• prefetch upgrade images during prepare phase as best effort optimization (#1260) (b05cf4e)