Repository navigation
Releases: procoduck/shepherd
Releases · procoduck/shepherd
Release list
v0.18.0
Changelog
Fixes
- f6ce7d4 fix(gitsync): delete the pipeline of a file removed from a linked repository (B-GITSYNC-PRUNE) (#349)
- 41b7416 fix(server): stop trusting forwarding headers for the client address (login throttle bypass) (#350)
- cd124f5 fix: public-docs review leftovers (repo-link delete, graph-view chip, chart text) (#348)
Other
v0.17.0
Changelog
Features
- fa95df9 feat(api): Pipeline.follows_wizard and Destination.regenerated_pipelines (#301, #309) (#332)
- fd63cdf feat(graph-view): open Alloy modules as groups with an ELK layout (phase 2) (#342)
- 8c1408d feat(graph-view): reachable, honest read-only graph view for imported pipelines (phase 1) (#341)
Fixes
- 49bc492 fix(build): keep agent worktrees and node_modules out of the image build context (#343)
- dd85f59 fix(graph-view): walkthrough fixes for the read-only graph view (2026-10-14) (#344)
- 58d3022 fix(serve,visual): drop the served header's "prod", single blank lines, honest visual header (#308) (#333)
Other
- 83f13f5 build(deps): bump github.com/go-git/go-git/v6 (#336)
- 8a422d9 build(deps): bump the minor-and-patch group with 5 updates (#335)
- d57e3e2 build(deps): bump the minor-and-patch group with 6 updates (#337)
- c1806a9 build(images): install pnpm from a hash-locked manifest with npm ci (#340)
- 1c79ddc release: v0.17.0 / chart 0.21.0 (#345)
v0.16.0
Changelog
Features
- b8ce639 feat(cli): rerender-destinations --all, the operator-triggered rollout of stored tenants (#261) (#282)
- 638545e feat(destinations): TLS options on wizard writers, material read on the collector (#261) (#280)
- 0c3c659 feat(destinations): render a destination's tenant as X-Scope-OrgID on wizard writers (#261) (#277)
- ed949ef feat: team owners use the visual builder; drafts keep name and matchers (#319) (#324)
Fixes
- 509593d fix(serve): print each pipeline's real revision in the served header (#296) (#323)
- b7fd2a0 fix(serve): serve-format marker so a rolling upgrade cannot pin "(rev 0)" (#296) (#330)
- ac0c659 fix(web): walkthrough lows — overview scopes, form feedback, wizard names, audit names (#325)
- 6919400 fix: name the rejected pipeline, honest wizard cards, atomic org edit, compressed schema (#327)
- b7f27f4 fix: v0.16 walkthrough — editor toolbar at 1024px, rejected-pipeline error, dialogs, wizard reasons, a11y (#329)
- 546ebcc fix: walkthrough lows — hand-edited badge, idle route apply, stubbed sandbox metrics, 1024px layout, accessible names (#326)
Other
v0.15.0
Changelog
Features
- 252cecd feat(chart): Kubernetes floor 1.32 — claim only what the e2e suite proves (#270)
- f251350 feat(destinations): re-render wizard pipelines on destination change; fix the in-use delete guard (#262) (#263)
- 73c6dac feat(destinations): render basic_secret/oauth2_secret auth from the spoke Secret (#229) (#260)
- 3e10234 feat(pipelines): wizard render fingerprint and "Detach from wizard" (#262) (#265)
Fixes
- d91d363 fix(deps): Go 1.27.2 and golang.org/x/net v0.60.0 for GO-2026-6612/6613/6617 (#315)
- b013fd5 fix(destinations): one undecodable destination no longer breaks every wizard render in the org (#261) (#273)
- 8c415b1 fix(destinations): refusals name actions that exist, one click away (M4) (#291)
- 05c4e5d fix(destinations): refuse a destination update that would overwrite a hand-edited wizard pipeline (#262) (#264)
- 811be16 fix(dev-kind): give the Alloy agents a ServiceAccount and the RBAC real collectors need (#288)
- e582663 fix(fleet): APPLIED is presented only for the config being served (#286)
- af7cb10 fix(mgmtapi,web): refuse form input that only failed later (M6) (#292)
- efda548 fix(pipelines): PreviewMatches finds the collector of a git-sourced pipeline (#14) (#266)
- a367e66 fix(pipelines): refuse stale saves (expected_revision); UI follows per-pipeline can_edit (#317)
- 895a25c fix(pipelines,wizards): show role-excluded collectors on the pipeline page (M2) (#313)
- 431c0f8 fix(reconcile,wizards): surface pipelines excluded by role enforcement (#290)
- 741e306 fix(ui): consistency nits from the walkthrough (#253) (#275)
- bbc9f5e fix(validate): report pipeline diagnostics in the user's coordinates (F2) (#316)
- 210a397 fix(web): 2026-10-09 re-check UI — team builder message, clickable list rows, matcher labels (#321)
- 75a6d6e fix(web): editor shows what the builder just saved; diagnostics never outrun the document (#295)
- 012be42 fix(web): pipelines page polish — heading, enable/delete, owning team, revisions (#252) (#272)
- 38aaaf7 fix(web): show form errors inline and validate matchers before adding (#249) (#276)
- a071e21 fix(web): viewer's visual-builder canvas and inspector are read-only (#256)
- eda0c28 fix(web): visual builder toolbar, minimap, drawer tabs, load time and landing messages (#251) (#278)
- 7492543 fix(web,auth): return to the requested page after sign-in; navigation polish (#274)
- c6434a5 fix(wizards): Database Metrics reads the DSN from a Kubernetes Secret on the collector (#293)
- 28a6a5f fix(wizards): name zero-match previews; tighten scrape_url; retryable Review; quoted file source (#312)
- 6ab9fbb fix(wizards): render log and blackbox stages a running Alloy accepts; load every golden in a real alloy run (#287)
- 2d2fbcb fix(wizards): scrape targets and log globs that collect; show refused previews on Review (#289)
- fcb8b17 fix(wizards,mcp,web): match-preview follow-ups from the #312/#313 review (#314)
- 186ebea fix: walkthrough 2026-10-09 lows — builder dirty guard, never-connected collectors, Self Monitoring Auto role, in-app 404 (#318)
Other
v0.14.0
Changelog
Fixes
- bde911d fix(agentapi): an unset sweeper threshold disables the sweep, not "older than now" (#230)
- fced6e4 fix(agentapi): derive "inactive" from last_seen at read time (#240)
- 3043832 fix(agentapi): silence after FAILED is not recovery, even on a new config (F1) (#197)
- 683cdaf fix(chart): app Services, PDB and NetworkPolicies select only server pods (#239)
- 49ae7ad fix(dev): seed renders demo-visual from its graph instead of a stale stored copy (#232)
- 1f1ef3f fix(dev-kind): seed execs into a server pod; status checks readiness and agents (#236)
- 855446c fix(gitsync): one replica runs each sync pass (#210) (#220)
- dbfa8ba fix(merge): drop the generation timestamp from the served header (#231)
- 8f27bc3 fix(mgmtapi): audit every write procedure, and keep it that way (#199) (#215)
- c3e6aa8 fix(pipelines): restore says when it changes enabled, and audits the flip (#200) (#216)
- f16cf85 fix(validate): Stage 2 refuses list-shape wiring alloy validate accepts (#241)
- 08a1758 fix(validate): report skipped stages instead of a bare valid=true (#209) (#235)
- c5abcbb fix(visual): an edit made while the draft banner shows becomes the draft (#202) (#222)
- 9c76261 fix(visual): graph diff matches nodes by component + label, not id (#203) (#224)
- f2ead33 fix(web): Reconciliation no longer says "In sync" for a FAILED collector (#198) (#214)
- a04e086 fix(web): destinations — auth mode labels, secret-mode explanation, Edit action (#228)
- c947810 fix(web): hide nav a role cannot use, say so on denied URLs, read-only visual builder for viewers (#223)
- cc942e7 fix(web): let an app admin set the tenant ID of an org created without one (#204) (#219)
- f309ca5 fix(web): only the newest validation's answer lands in the text editor (#201) (#221)
- 93f13df fix(web): pipelines enable toggle — anchored knob, switch semantics (#208) (#218)
- 46244e1 fix(web): team picker offers only org members; audit resource id readable (#212) (#227)
- da6a0ad fix: Connect dialogs and tenant routes polish (#205) (#217)
- 7dec90d fix: walkthrough polish — CLI help, dev seed schema, Admin → Users (#212) (#225)
v0.13.0
v0.12.0
Changelog
Features
- b453e53 feat(chart): receiver tier, off by default (#109, receiver tier PR 2) (#170)
- 023ea2a feat(chart): tenant-route apply RBAC and config, receiver-gated (tenant-route apply PR 3) (#177)
- eb41ad2 feat(cli): shepherd receiver render (#109, receiver tier PR 1) (#169)
- af492fd feat(fleet): Connect a cluster — k8s-monitoring values, proven by G10 (#112) (#182)
- 9502491 feat(receiver): require a gateway podSelector; docs page and the R3 sign-off packet (#109 PR 4) (#172)
- 165f262 feat(routeapply): tenant-route reconciler with a client-go applier (tenant-route apply PR 2) (#176)
- f287c7e feat(tenant-routes): Connect an app — onboarding snippets for a route (#111) (#181)
- dda8b82 feat(tenant-routes): apply status on the row and the API (tenant-route apply PR 1) (#175)
- 9210adb feat(web): tenant routes show whether each route is in the cluster (tenant-route apply PR 4) (#178)
- 6f09f37 feat: matching toggles, matcher suggestions and docs (#139 item 8) (#165)
Fixes
v0.11.0
Changelog
Features
- 5fb48ab feat(fleet): attribute-based pipeline matching, PR-1..9 of #139's staged plan (#144)
- a035e18 feat(fleet): reconciliation surface — declared vs served vs observed (#110) (#140)
- fb5f80f feat(fleet): reserve built-in matcher keys against collector labels (#139) (#142)
Fixes
Other
- 5e604d8 build(deps): bump ginkgo, gomega, alertmanager (grpc held for GO-2026-6443) (#153)
- ecec677 build(deps): bump github/codeql-action/upload-sarif (#149)
- 1a5a52e build(deps): bump the minor-and-patch group in /web with 13 updates (#148)
- d997d42 build(deps): bump the minor-and-patch group with 2 updates (#147)
- 4261b96 build(images): migrate dev/e2e postgres to 18-alpine (set PGDATA) (#154)
- 1c05e52 feat!: remove the /api REST shim (deprecated in v0.9.0) (#162)
v0.10.0
v0.9.0
Changelog
Features
- 836f9e4 feat(auth): collector OIDC mode 2 — trust the IdP for org assignment (#129)
- 23bd393 feat(fleet): manage collector inventory labels (#122)
- c0eea65 feat(metrics): publish a shepherd_build_info gauge (#123)
- 528a77e feat(mgmtapi): deprecate the /api REST shim with in-band headers (#125)
- d1bedbc feat(mgmtapi): per-service-account request rate limit (R6) (#130)
- c9c5718 feat(pipelines): Format and Validate buttons in the editor (#124)
- d994f8c feat(release): ship shepherd-mcp in the release archives (W11) (#132)
- b2feff0 feat(sso): show the collector-OIDC gate on the SSO page (#126)
- c6a417d feat(web): service accounts admin UI (#128)
- b5af7bd feat(web): tenant routes admin UI (#127)