Skip to content

v0.5.3

Choose a tag to compare

@github-actions github-actions released this 02 Nov 02:57
· 16 commits to main since this release

🐳 Pull

docker pull ghcr.io/kloudkit/workspace:v0.5.3

📝 What's Changed

Added

  • 🔁 Re-check OIDC sessions with the IdP via WS_AUTH_OIDC_SESSION_REFRESH, so users disabled there lose access (opt-in)

Changed

  • 🚪 End the IdP session on OIDC sign-out, through the IdP's end_session_endpoint
  • 🚫 Tell OIDC access denials apart from failed sign-ins, and offer "Sign in as a different user" when denied
  • 🎨 Make ws-cli output pipe-safe and consistent across every command (#799)
  • 📄 Keep the startup console colored and write workspace.log as plain text (#799)
  • 🐚 Run startup scripts with the terminal's zsh environment (#782)
  • ⚡️ Open new terminals faster by loading fzf-history settings on the first search
  • 🔥 Drop the yarn plugin, and its y alias, from the default WS_ZSH_PLUGINS
  • 🔒️ Refuse changed SSH host keys outside private networks (#801)
  • ⚡️ Expire idle SSH control connections after 10 minutes and detect dead hosts (#801)

Dependencies

  • 🔼 Bump VS Code to 1.144.0 (ws-server#35, ws-server#36)
  • ⬆️ Bump http-proxy-3 to 2.0.1 (ws-server#34)
  • ⬆️ Sweep Renovate updates, including uv 0.13 and the Kubernetes Python client 37 (#800)
  • ⬆️ Bump Node.js to 24.22.2 and sweep Renovate updates, including Go 1.27.3 and Rust 1.99.1 (#801)

Fixed

  • 🔒 Stop forwarding the workspace session cookies to forwarded ports on websocket upgrades (ws-server#34)
  • 🧩 Load TypeScript server plugin extensions on the workspace host (ws-server#35)
  • 📜 Fix ws logs filtering with --level, --tail and --follow (#799)
  • ⏱️ Time out ws info extensions instead of hanging
  • 🏠 Own ~/.ws for kloud when it is a mounted volume (#782)
  • 🧷 Render a & in WS_AUTH_OIDC_FORBIDDEN_MESSAGE literally

📚 Documentation · 🐳 Container image · 📜 Full changelog