v0.15.0

Changelog

Features

• 252cecd feat(chart): Kubernetes floor 1.32 — claim only what the e2e suite proves (#270)
• f251350 feat(destinations): re-render wizard pipelines on destination change; fix the in-use delete guard (#262) (#263)
• 73c6dac feat(destinations): render basic_secret/oauth2_secret auth from the spoke Secret (#229) (#260)
• 3e10234 feat(pipelines): wizard render fingerprint and "Detach from wizard" (#262) (#265)

Fixes

• d91d363 fix(deps): Go 1.27.2 and golang.org/x/net v0.60.0 for GO-2026-6612/6613/6617 (#315)
• b013fd5 fix(destinations): one undecodable destination no longer breaks every wizard render in the org (#261) (#273)
• 8c415b1 fix(destinations): refusals name actions that exist, one click away (M4) (#291)
• 05c4e5d fix(destinations): refuse a destination update that would overwrite a hand-edited wizard pipeline (#262) (#264)
• 811be16 fix(dev-kind): give the Alloy agents a ServiceAccount and the RBAC real collectors need (#288)
• e582663 fix(fleet): APPLIED is presented only for the config being served (#286)
• af7cb10 fix(mgmtapi,web): refuse form input that only failed later (M6) (#292)
• efda548 fix(pipelines): PreviewMatches finds the collector of a git-sourced pipeline (#14) (#266)
• a367e66 fix(pipelines): refuse stale saves (expected_revision); UI follows per-pipeline can_edit (#317)
• 895a25c fix(pipelines,wizards): show role-excluded collectors on the pipeline page (M2) (#313)
• 431c0f8 fix(reconcile,wizards): surface pipelines excluded by role enforcement (#290)
• 741e306 fix(ui): consistency nits from the walkthrough (#253) (#275)
• bbc9f5e fix(validate): report pipeline diagnostics in the user's coordinates (F2) (#316)
• 210a397 fix(web): 2026-10-09 re-check UI — team builder message, clickable list rows, matcher labels (#321)
• 75a6d6e fix(web): editor shows what the builder just saved; diagnostics never outrun the document (#295)
• 012be42 fix(web): pipelines page polish — heading, enable/delete, owning team, revisions (#252) (#272)
• 38aaaf7 fix(web): show form errors inline and validate matchers before adding (#249) (#276)
• a071e21 fix(web): viewer's visual-builder canvas and inspector are read-only (#256)
• eda0c28 fix(web): visual builder toolbar, minimap, drawer tabs, load time and landing messages (#251) (#278)
• 7492543 fix(web,auth): return to the requested page after sign-in; navigation polish (#274)
• c6434a5 fix(wizards): Database Metrics reads the DSN from a Kubernetes Secret on the collector (#293)
• 28a6a5f fix(wizards): name zero-match previews; tighten scrape_url; retryable Review; quoted file source (#312)
• 6ab9fbb fix(wizards): render log and blackbox stages a running Alloy accepts; load every golden in a real alloy run (#287)
• 2d2fbcb fix(wizards): scrape targets and log globs that collect; show refused previews on Review (#289)
• fcb8b17 fix(wizards,mcp,web): match-preview follow-ups from the #312/#313 review (#314)
• 186ebea fix: walkthrough 2026-10-09 lows — builder dirty guard, never-connected collectors, Self Monitoring Auto role, in-app 404 (#318)

Other

• 3627c44 build(deps): bump anchore/sbom-action/download-syft (#269)
• bc4bf53 build(deps): bump github.com/go-git/go-billy/v6 (#268)
• 7272cf6 build(deps): bump the minor-and-patch group with 6 updates (#284)
• 8d1722d release: v0.15.0 / chart 0.19.0 (#320)