Repository navigation
v0.5.3
🐳 Pull
docker pull ghcr.io/kloudkit/workspace:v0.5.3📝 What's Changed
Added
- 🔁 Re-check OIDC sessions with the IdP via
WS_AUTH_OIDC_SESSION_REFRESH, so users disabled there lose access (opt-in)
Changed
- 🚪 End the IdP session on OIDC sign-out, through the IdP's
end_session_endpoint - 🚫 Tell OIDC access denials apart from failed sign-ins, and offer "Sign in as a different user" when denied
- 🎨 Make ws-cli output pipe-safe and consistent across every command (#799)
- 📄 Keep the startup console colored and write
workspace.logas plain text (#799) - 🐚 Run startup scripts with the terminal's zsh environment (#782)
- ⚡️ Open new terminals faster by loading
fzf-historysettings on the first search - 🔥 Drop the
yarnplugin, and itsyalias, from the defaultWS_ZSH_PLUGINS - 🔒️ Refuse changed SSH host keys outside private networks (#801)
- ⚡️ Expire idle SSH control connections after 10 minutes and detect dead hosts (#801)
Dependencies
- 🔼 Bump VS Code to 1.144.0 (ws-server#35, ws-server#36)
- ⬆️ Bump http-proxy-3 to 2.0.1 (ws-server#34)
- ⬆️ Sweep Renovate updates, including uv 0.13 and the Kubernetes Python client 37 (#800)
- ⬆️ Bump Node.js to 24.22.2 and sweep Renovate updates, including Go 1.27.3 and Rust 1.99.1 (#801)
Fixed
- 🔒 Stop forwarding the workspace session cookies to forwarded ports on websocket upgrades (ws-server#34)
- 🧩 Load TypeScript server plugin extensions on the workspace host (ws-server#35)
- 📜 Fix
ws logsfiltering with--level,--tailand--follow(#799) - ⏱️ Time out
ws info extensionsinstead of hanging - 🏠 Own
~/.wsforkloudwhen it is a mounted volume (#782) - 🧷 Render a
&inWS_AUTH_OIDC_FORBIDDEN_MESSAGEliterally
📚 Documentation · 🐳 Container image · 📜 Full changelog