v0.43.0

API Changes

• Add WorkerPool CRD for persistent task execution. WorkerPools manage pre-warmed worker pods via StatefulSet with native PersistentVolumeClaimSpec for storage. Tasks reference a pool via spec.workerPoolRef to execute on persistent infrastructure instead of creating one-shot Jobs. TaskSpec/TaskTemplate gain a spec.worker struct as the canonical inline execution source (type, credentials, image, model, workspaceRef, agentConfigRefs, podOverrides); legacy top-level fields are deprecated but remain functional. Task status.podName is unified for both Job and WorkerPool execution. (#1415, @knechtionscoding @gjkim42)

Features

• Update claude-code image from 2.1.187 to 2.1.198 (#1407, @app/kelos-bot)
• Update cursor image from 2026.06.19-20-24-33-653a7fb to 2026.07.01-41b2de7 (#1409, @app/kelos-bot)
• Update opencode image from 1.17.9 to 1.17.13 (#1411, @app/kelos-bot)
• Update gemini image from 0.47.0 to 0.49.0 (#1410, @app/kelos-bot)
• Update codex image from 0.142.3 to 0.142.5 (#1414, @app/kelos-bot)
• Update codex image from 0.142.0 to 0.142.3 (#1408, @app/kelos-bot)

Bug Fixes

• Plugin content for Task pods is now delivered via a per-task ConfigMap (<taskName>-plugins) mounted into the plugin-setup init container, instead of being inlined base64-encoded into the init container command. This fixes exec /bin/sh: argument list too long failures for AgentConfigs with large plugin content. Plugin payloads over ~900KiB are rejected with a clear error and the Task transitions to Failed. The controller RBAC now requires get/list/watch/create/update on ConfigMaps - re-apply the chart/manifests when upgrading. (#1328, @scottt732)
• Fixed webhook server failing to fetch PR changed files due to insufficient RBAC permissions on secrets and missing fallback to the global GitHub token resolver.
  (#1363, @knechtionscoding)