Releases: ravirann/lumen
Release list
Lumen v0.18.0 — Stable
Lumen v0.18.0 — stable
Lumen v0.18.0 adds device-resource inspection, YAML draft review, request-path
diagnosis, controlled ephemeral debugging, and bounded incident handoff to the
native Kubernetes workbench. It also includes protected contexts, merged kubeconfig sources, and all native-core improvements
since the last public v0.14.0 release. The older v0.15.0, v0.16.0, v0.16.1, and v0.17.0
candidates remain unpublished; their tags are unchanged.
Highlights
- Inspect Dynamic Resource Allocation claims, templates, device classes, slices,
inventory, and reported health from cluster navigation or pod/node details.
Reads use the selected context and namespace, preserve independent source
failures, and bound pagination and request time. Requiresresource.k8s.io/v1
and a driver that publishes device resources. - Review YAML draft changes against the edit-start snapshot and revert local
edits. Server refreshes preserve the draft and require an explicit reload;
text changes invalidate dry-run validation. Keyboard focus and confirmation
behavior are improved in the shared editor. - Diagnose source egress and destination ingress together across selected
namespaces. Inspect Gateway/HTTPRoute backend relationships, conditions,
Service ports, endpoints, and cross-namespace ReferenceGrants. Partial API
failures and unsupported behavior remain visible as unknown evidence. - Create an unprivileged ephemeral diagnostic container from a pod drawer.
Linux Restricted and Baseline profiles, native context protection, captured
pod identity, and stable retry names guard the operation. Open running
diagnostics through the existing terminal. - Capture a finite excerpt of current or retained previous container logs for
an incident report. Review redaction, edit or exclude the excerpt, and export
evidence with its source and limitations. Event correlation checks resource
UIDs instead of relying only on resource names. - Protect contexts and enforce restrictions in native mutation and terminal
paths. Merge ordered KUBECONFIG sources using first-definition-wins rules,
preserve source-relative paths, and retain owner-file context recovery.
Fixes and safeguards
- Bound incident capture at the native byte reader, including client startup
and identity checks under one deadline. Late responses cannot overwrite a
newer capture selection; exported excerpts remain bounded after redaction. - Keep network conclusions tied to current evidence and the selected protocol
and port. Failed source refreshes cannot retain an earlier positive result. - Preserve ordinary shell access for regular containers named
lumen-debug-*
while retaining identity and lifecycle checks for diagnostic containers. - Include aligned React/React DOM, TypeScript, Zustand, font, base64, and
Kubernetes client dependency updates. Windows compilation and the unchanged
frontend bundle budgets are release gates.
Upgrade notes
- Upgrading from v0.14.0 includes namespace-scoped browsing, connection recovery,
protected YAML validation/apply, improved shell/log lifecycle, and removal of
Copilot/AI entry points. Kubernetes workflows do not require a model service. - Existing AI URLs open workloads; saved AI runbook steps become manual steps.
Local assistant history/preferences are retained but no longer displayed. - Namespace defaults follow kubeconfig (or Kubernetes
default). Choose all
namespaces explicitly when intended. Review merged kubeconfig source
precedence if duplicate names exist across files.
Known limits
Device inspection is read-only and does not install drivers, probe hardware,
measure GPU utilization, or establish a global free-device count. Device health
is reported Kubernetes evidence and can be unknown. YAML revert only discards
local edits; dry-run does not lock the resource against concurrent writers.
Network analysis explains supported configuration; it does not actively probe
connectivity or verify CNI enforcement, Gateway controller behavior, TLS, or DNS.
Ephemeral containers cannot be individually removed or restarted and persist
until their pod is removed. Terminal opening checks pod identity before exec,
but Kubernetes offers no atomic UID precondition for that operation.
Incident excerpts do not establish an exact runtime container instance or
recover discarded log history. Redaction is best effort: review before sharing.
Current controller snapshots do not prove historical rollout causality.
The warning-event stream cannot establish completeness. Existing upstream Rust
maintenance and glib soundness audit warnings remain tracked.
See the operator diagnostics guide
and context protection guide.
Downloads and validation
The release pipeline prepares macOS Apple Silicon/Intel DMGs, Linux x86-64
AppImage/DEB/RPM, Windows x64 NSIS/MSI, updater signatures, and latest.json.
Verify downloaded files against the SHA-256 digests in the release asset list.
This release is designated stable following maintainer-reported feature testing.
CI, security analysis, all four platform builds, and release asset validation
passed for commit 635f2ccfcf668018db2ca474d836cc26947daa39 in the
release workflow.
All 17 asset SHA-256 checksums and seven updater package signatures were
independently verified against the configured updater public key. Feature testing does not establish
fresh-install or upgrade coverage on every operating system.
macOS builds use ad-hoc signatures and are not Developer ID signed or notarized.
Windows installers are not Authenticode signed. Gatekeeper or SmartScreen may
warn. Tauri updater signatures are separate from operating-system code signing.
The stable designation does not imply notarization or OS signing.
Lumen v0.14.0
What's Changed
- [codex] Add GitOps resource recommendations by @i-am-uranium in #94
- [codex] Release v0.14.0 by @i-am-uranium in #95
Full Changelog: v0.13.0...v0.14.0
Contributors
Assets 19
Lumen v0.13.0
What's Changed
- feat: actionable stat cards on WorkloadsView by @i-am-uranium in #89
- fix(ci): force rustup-init stub to self-install on release runners by @i-am-uranium in #90
- fix(tests): de-flake LogsTab deep-link test by @i-am-uranium in #92
- chore: release v0.13.0 by @i-am-uranium in #93
Full Changelog: v0.12.0...v0.13.0