v0.3.10

   🚀 Features

• cli:
  • Add device-code login flow  -  by @mscolnick in #214 (22913)
• helm:
  • Add configurable ServiceAccount for chart pods  -  by @mscolnick in #217 (030de)
• integrations:
  • TCP/TLS connection probe for pyspark  -  by @mscolnick in #216 (8a9b1)
  • Surface safe browse failure diagnostics  -  by @mscolnick in #215 (c2dd5)
  • Default data-source discovery on, warn on conflicts  -  by @mscolnick in #218 (af16a)
• web:
  • Promote data browser entry to a labeled header button  -  by @mscolnick in #220 (f2144)

    View changes on GitHub

v0.3.9

   🐞 Bug Fixes

• cli: Escape TOML paths in deploy config tests  -  by @mscolnick in #211 (32685)

    View changes on GitHub

v0.3.7

   🚀 Features

• cli: Browser-based hub login flow  -  by @mscolnick in #204 (5d4e6)
• compute-kubernetes: Configurable ingress annotations and TLS mode  -  by @mscolnick in #199 (8168b)

   🐞 Bug Fixes

• release: Make CLI publication recoverable  -  by @mscolnick in #198 (33a7c)

    View changes on GitHub

v0.3.6

What's Changed

• test: allow DuckDB worker startup time by @mscolnick in #186
• docs(config): document duckdb-wasm-sql experiment and GitHub App key secret by @mscolnick in #188
• feat(api): log and count rejected 4xx mutations by @mscolnick in #187
• feat(source-control): server-initiated pull sync + drift for git sources by @mscolnick in #185
• perf(runtime): faster provisioning by @mscolnick in #189
• fix(compute): listFiles distinguishes NOT_A_DIRECTORY from empty success by @mscolnick in #190
• Export structured logs over OTLP (MO-7381) by @mscolnick in #193
• feat(source-control): observe change request publish outcomes by @mscolnick in #192
• feat(web): SQL-readiness checklist and query surface gating by @mscolnick in #191
• feat(source-control): pull-mode git sources with materialized .git directory by @mscolnick in #194
• feat(cli): add mohub CLI generated from the API manifest by @mscolnick in #137

Full Changelog: v0.3.4...v0.3.6

v0.3.4

   🚀 Features

• compute-local: Make local sandbox root configurable  -  by @mscolnick in #181 (7abca)
• runtime: Guarded synchronous HTTP broker for DuckDB WASM Iceberg  -  by @mscolnick in #178 (c0953)
• source-control: Publish notebook proposals as GitHub change requests  -  by @mscolnick in #177 (8059c)

   🐞 Bug Fixes

• runtime: Use uv init --bare to avoid generating main.py  -  by @mscolnick in #180 (7146c)

    View changes on GitHub

v0.3.3

   🚀 Features

• dev: Full data browser by default, local MinIO + Iceberg services  -  by @mscolnick in #171 (714e6)
• web: Redesign the object browser as a full-width explorer  -  by @mscolnick in #172 (06e86)

   🐞 Bug Fixes

• runtime: Pass --no-package to uv init for fresh notebook projects  -  by @mscolnick in #170 (d5b3a)
• web: Alias node-sql-parser to its PostgreSQL-only build  -  by @mscolnick in #174 (e0e16)

    View changes on GitHub

v0.3.2

   🚀 Features

• admin:
  • Super-admin user suspension and deprovisioning  -  by @mscolnick in #132 (a0ba7)
• compute:
  • Pass gpu key from compute profiles through to Modal  -  by @mscolnick in #155 (5d695)
• compute-modal:
  • Support named Modal environment  -  by @mscolnick in #160 (cad9e)
• data-browser:
  • Read-only catalog browsing over integrations  -  by @mscolnick in #134 (ef7a9)
  • Row-level table preview over integrations  -  by @mscolnick in #138 (806fa)
  • Raw S3 object browsing over integrations  -  by @mscolnick in #142 (23f14)
  • S3 object browser  -  by @mscolnick in #147 (c571f)
  • Generalize object browser to GCS and Azure Blob  -  by @mscolnick in #156 (e880c)
  • Add SQL workspace with editor and query execution  -  by @mscolnick in #161 (f1d70)
• data-preview:
  • DuckDB-Wasm engine for row-level table preview  -  by @mscolnick in #144 (5be18)
• data-query:
  • Experimental SQL execution over integrations  -  by @mscolnick in #153 (00885)
• dev:
  • Improve local development experience  -  by @mscolnick in #148 (a1860)
• git-sync:
  • Support marimo markdown notebooks as entry_notebook  -  by @mscolnick in #162 (84c15)
• integrations:
  • Probe object-store connectivity in test endpoint  -  by @mscolnick in #166 (da9e4)
• lint:
  • Add anti-slop custom oxlint plugin  -  by @mscolnick in #140 (ab468)
• notifications:
  • Outbound SMTP, Slack, and signed webhook notifications  -  by @mscolnick in #133 (6d6a1)
  • Project-scoped alerts  -  by @mscolnick in #141 (1dbb5)
• runtime:
  • Infer launch strategy per source, honor PEP 723 inline metadata  -  by @mscolnick in #167 (100eb)

   🐞 Bug Fixes

• api: Cap AI request bodies and harden zip archive extraction  -  by @mscolnick in #146 (c218c)
• auth-oidc: Let trusted-issuer cover email_verified omission for domain allowlist  -  by @mscolnick in #154 (458eb)
• ci: Bump nanoid override to 3.3.18  -  by @mscolnick in #159 (02729)
• config: Fold and validate backend selectors  -  by @mscolnick in #127 (a2487)
• core: Preserve deleted notebooks during commits  -  by @mscolnick in #136 (646de)
• data-browser: Harden S3 object browser and add metrics  -  by @mscolnick in #149 (680ae)
• duckdb-wasm-runtime: Resolve the Node worker file by existence  -  by @mscolnick in #164 (76db0)
• marimo-sandbox: Keep the venv on PATH in login shells  -  by @mscolnick in #165 (d240a)
• object-browser-commons: Clear request timeout once response streams  -  by @mscolnick in #168 (64c3d)

    View changes on GitHub

v0.3.1

   🚀 Features

• Configurable sandbox startup timeout  -  by @mscolnick in #105 (2624b)
• core,api,web: Accept repository URLs for git sync and link GitLab hosts  -  by @mscolnick in #95 (cc9a3)
• errors: Typed error handling end-to-end  -  by @mscolnick in #104 (248a5)

   🐞 Bug Fixes

• api:
  • Retry and log sandbox proxy upstream failures  -  by @mscolnick in #98 (93058)
• auth-oidc:
  • Retry OIDC discovery after a failed attempt  -  by @mscolnick in #107 (289de)
• client:
  • Forward request bodies in Firefox  -  by @mscolnick in #97 (f3e31)
• compute-local:
  • Inject marimo flags when setup commands prefix uv run  -  by @mscolnick in #99 (8a257)
• compute-modal:
  • Pin an idle main process so the image entrypoint cannot boot marimo  -  by @mscolnick in #106 (7d201)
• core:
  • Grace mid-provision starting sessions in reconciliation Rule 2  -  by @mscolnick in #108 (2834f)
• cron:
  • Guard maintenance cycle against overlap  -  by @mscolnick in #110 (ffafc)
• deps:
  • Bump nanoid to 3.3.17 to clear audit:prod CI  -  by @mscolnick in #100 (5195e)
• dev:
  • Avoid startup race between vp pack --watch and node --watch  -  by @mscolnick in #96 (7a3de)
• runtime:
  • Don't snapshot a sandbox whose capture failed  -  by @mscolnick in #111 (2e4c9)
  • Heartbeat no longer revives starting sessions; skip terminal editor holders  -  by @mscolnick in #115 (a9d14)

   🏎 Performance

• compute-kubernetes: Faster sandbox startup + per-phase boot diagnostics  -  by @mscolnick in #114 (e656d)

    View changes on GitHub

v0.3.0

   🚀 Features

• api:
  • Super-admin audit logs  -  by @mscolnick in #80 (2fc78)
• api,web:
  • Per-version output snapshots, staleness note, HTML download  -  by @mscolnick in #85 (47ed6)
  • Super-admin area with users directory and deployment config  -  by @mscolnick in #90 (0d250)
• auth:
  • Expand OIDC claims with group policies and email verification  -  by @mscolnick in #89 (195ba)
• authz:
  • Add project manager role between editor and admin  -  by @mscolnick in #91 (cde05)
• compute:
  • Per-user VAST home dirs for exclusive CoreWeave editors  -  by @mscolnick in #82 (e4231)
• core:
  • Handle invalid stored files safely, sanitize error logs  -  by @mscolnick in #75 (9d596)
• server:
  • Add OpenTelemetry tracing driven by OTEL env vars  -  by @mscolnick in #83 (a04e1)
  • OTLP + Prometheus metrics export and richer OTEL resources  -  by @mscolnick in #86 (ba64d)
• server,core:
  • Bridge Metrics port to OTEL and correlate logs with traces  -  by @mscolnick in #88 (8772e)
• web:
  • Sandbox-free snapshot page for notebook outputs  -  by @mscolnick in #84 (dde65)

   🐞 Bug Fixes

• server:
  • Revalidate SPA shell, immutably cache fingerprinted assets  -  by @mscolnick in #77 (61305)
• web:
  • Footer version link + super-admin policy details  -  by @mscolnick in #76 (a16a8)
  • Make the base-image picker readable  -  by @mscolnick in #78 (e02c8)

    View changes on GitHub

v0.2.0

   🚀 Features

• auth:
  • Default OIDC login to account picker  -  by @mscolnick in #42 (358ed)
  • Preserve deep links through sign-in via sanitized redirect_url  -  by @mscolnick in #50 (a7e56)
  • Config-driven SUPER_ADMIN role via MARIMOHUB_SUPER_ADMINS  -  by @mscolnick in #55 (104ce)
• compute:
  • Add Podman support via compute-container package  -  by @mscolnick in #39 (ba60c)
  • Add configurable compute profiles  -  by @mscolnick in #41 (28b8a)
  • Per-notebook profile override and session indicators  -  by @mscolnick in #44 (aa7ca)
  • Support ServiceAccount-vended CAIOS credentials in sandboxes  -  by @mscolnick in #52 (8d08d)
  • Preflight Docker/Podman availability with actionable errors  -  by @mscolnick in #72 (8527a)
• docs:
  • Spec-driven integration docs with per-kind brand metadata  -  by @mscolnick in #65 (9e1d9)
• integrations:
  • Project-scoped data-source integrations platform  -  by @mscolnick in #51 (cb044)
  • Org-wide integrations inherited by every project  -  by @mscolnick in #59 (d3ed1)
  • Import (copy) an integration from another project  -  by @mscolnick in #60 (116fb)
  • 15 more kinds and marimo data-source discovery  -  by @mscolnick in #66 (95b4d)
• runtime:
  • Inject marimo.toml defaults into kernel sessions  -  by @mscolnick in #46 (209c0)
  • Add marimohub metadata to fresh project init  -  by @mscolnick in #47 (f5a89)
  • Always disable marimo sharing options in sessions  -  by @mscolnick in #49 (f35e6)
  • Redirect marimo XDG cache/state dirs via fallback session env  -  by @mscolnick in #54 (292b7)
  • Exclusive editor sandboxes with owner takeover  -  by @mscolnick in #58 (709f8)
• sandbox:
  • Add data/DB libraries to marimo-sandbox image  -  by @mscolnick in #53 (05343)
• schemas:
  • Committed bucket/integration specs with oasdiff breaking-change CI  -  by @mscolnick in #63 (a6847)
• storage:
  • Add Azure Blob Storage backend  -  by @mscolnick in #40 (e99de)
• web:
  • Redesign project members dialog with your-access panel  -  by @mscolnick in #43 (19a36)
  • Match embedded marimo app theme to marimohub  -  by @mscolnick in #45 (44bd7)
  • Stale-version warnings and GitHub metadata for git-synced notebooks  -  by @mscolnick in #56 (a9184)

   🏎 Performance

• runtime: Cut sandbox startup round-trips and split the create metric  -  by @mscolnick in #57 (8a359)

    View changes on GitHub