Release 2.0.0

Breaking Changes

• HTTP backend migrated from node-fetch to undici. undici is now the
  underlying fetch implementation. The node-fetch dependency has been
  removed. Code relying on node-fetch-specific Agent/request internals or
  proxy wiring may need updates; the client now configures an undici
  Dispatcher instead of a node-fetch agent. (#2306)
• Dropped Node.js 18 support. Node 18 removed from the test matrix (EOL Apr 30, 2025). (#2815)
• Dropped Node.js 20 support. (#2840)
• Dropped Node.js 23 support. (#2840)
• socks-proxy-agent upgraded 8.x → 10.x and socks added as a direct
  dependency for the undici SOCKS proxy path. (#2820, #2802)
• undici pinned to ^8.0.0. (#2821)

Features

• Add SOCKS proxy support on the undici dispatcher path via a SocksClient connector. (#2802)
• Add support for OIDC custom CA certificates via idp-certificate-authority
  and idp-certificate-authority-data. (#2761)
• Allow port forwarding to a Deployment or Service (previously Pod-only). (#2749)
• Introduce Node.js 26 support / testing. (#2848)
• Generated against Kubernetes API release-1.36 (updated from release-1.34
  via release-1.35 and release-1.36). (#2732, #2734, #2945)

Fixes

• informer: treat TimeoutError as reconnectable, normalize timeout
  errors, and add exponential backoff on reconnect. (#2813)
• Fix custom fetch implementation to use the Node.js https module instead
  of the dispatcher. (#2761)
• Fix ArrayBuffer slice to return only the relevant portion of the buffer. (#2761)
• Fix timeoutSignal being lost after being overridden with controller.signal. (#2665)
• Fix cp from a Pod being broken. (#2664)
• Fix Knative Service YAML parsing by checking API groups. (#2688)
• Don't cast undefined expiration times in exec auth. (#2666)
• Add a File polyfill for Node.js compatibility with undici (interim, prior to
  dropping older Node versions). (#2815)

Tooling / Internal

• Migrated the full test suite from nock to the undici MockAgent; nock
  dependency removed. (#2813, #2306)
• TypeScript upgraded to 6.x; ESLint upgraded to 10.x; typescript-eslint to 8.6x. (#2807, #2765, #2885)
• Pinned all GitHub Actions to SHAs and added the zizmor security linter;
  resolved template-injection and permission-scoping findings. (#2814)
• Enabled npm trusted publishing. (#2726)
• Numerous dependency bumps (undici, ws, openid-client, js-yaml, form-data,
  jsonpath-plus, @types/node, and dev tooling).
  Notes:
• #2815 covers both the Node 18 drop and the File polyfill (same branch).
• #2840 covers both Node 20 and Node 23 drops.
• #2761 covers three entries (OIDC custom CA + the https fetch fix + the ArrayBuffer slice fix).
• #2813 covers the informer reconnect fix and the nock→MockAgent migration.
• The socks direct dependency actually arrived via the SocksClient feature (#2802); the version bump 8→10 was #2820 — I listed both.
• The last "Numerous dependency bumps" line spans many dependabot PRs, so I left it without a single number. Want me to expand it into individual entries with PR numbers, or leave it as a summary?

New Contributors

• @loucadufault made their first contribution in #2675
• @brendandburns with @Copilot made their first contribution in #2761
• @emmayusufu made their first contribution in #2881

Full Changelog: 1.4.0...2.0.0