v0.129.1

Changelog

• 241f3a5 properly handle app type in api (#724)
• 31b9755 get latest release should not include demoted (#723)
• 9735cf3 Fix panic in dry run (#725)
• 3621830 Attach context (#727)
• 7dd6e8b prevent path traversal (#728)
• ac3f6fb chore: migrate to depot CI, remove dagger and github actions (#729)
• befbd89 chore: add depot ci bootstrap workflow (#730)
• 5838e30 build(deps): bump the go_modules group across 1 directory with 2 updates (#726)
• e7838b0 fix doc formatting for replicated release create (#693)
• 7b1ba8b build(deps): bump github.com/distribution/distribution/v3 (#716)
• a99fb09 fixing pact tests on vandoor main (#722)
• 36a5cff add --wait-for-airgap to release promote (#721)
• 8d0a447 feat: wire up channel releases for KOTS apps (#720)
• eced4e6 feat(lint): discover helm charts from EC Config manifests (#718)
• 3eddaa6 fix(cli): remove spurious 'release' from channel demote/un-demote examples (#719)
• 7e47225 fix(cli): send JSON struct for enterprise portal status update (#714)
• d58f0e8 Support lookup by channel name or ID for channel delete command (#717)
• d99674e feat: ability to create releases without uploading them (#715)
• 804ced5 feat: add --include-installer-images flag to release image ls (#702)
• 8b0ffe4 fix: resolve dependabot security alerts (#698)
• c5723f2 docs(vm): clarify --ssh-public-key creates user from key comment (#708)
• 9e96064 escape json example in CLI docs to fit docs site (#712)
• 9d40c99 build(deps): bump github.com/jackc/pgx/v5 (#699)
• 8dbb87a fix: use EachLike for eventTypes array in notification pact test (#711)
• f472f55 Add CLI support for notification management (#709)
• f33d278 fix: cli stdout warnings corrupt redirected output (#710)
• a36c04a allow passing --network-policy to cluster create (#707)
• f4cbfac allow specifying network policy during network and vm creation (#706)
• 9e4f2f6 feat(vm): add hidden --overlayfs flag to vm create (alpha) (#703)
• 6560b97 feat: add rbac policy management commands (#705)
• 2a597b9 fix: strip k8s version suffix from EC version in DiscoverECVersion (#704)
• aa8a205 fix: add rbac error check to rest of cmx api calls (#700)
• 2dab06a Ep v2 preview (#701)
• 24feb93 feat: auto-detect cmx oidc credentials (#692)
• d48729b Revert "fix: auto-save uncommitted implementation work (gt-pvx safety net)"
• 115ceaf Revert "chore: ignore polecat CLAUDE.md runtime file"
• 6ffbca7 Revert "fix: resolve dependabot security alerts (re-cz1)"
• 887e998 chore: ignore polecat CLAUDE.md runtime file
• aba82c7 fix: auto-save uncommitted implementation work (gt-pvx safety net)
• 50549d4 fix: resolve dependabot security alerts (re-cz1)
• f3f51c0 feat: integrate embedded-cluster CLI lint into release lint pipeline (#696)
• 1d9f263 pass through RBAC errors in vm create (#691)
• 32107d7 build(deps): bump the go_modules group across 1 directory with 6 updates (#690)
• c85fe55 fix: 'replicated lint' removed in favor of 'replicated release lint' (#687)
• 50f0efc network commands should have docs format matching others (#685)
• 4c71d63 fix goreleaser go version, run in PRs (#684)
• 4af1f33 require the GITHUB_TOKEN and OP_SERVICE_ACCOUNT_PRODUCTION env vars before starting release process (#683)
• 98b8644 use go.mod version within dagger for builds (#682)
• 2d2f363 add .claude to gitignore to allow releases without removing directory (#681)
• f427a9b update google.golang.org/grpc (#680)
• a2f5c54 vuln fixes (#679)
• c957dbe build(deps): bump github.com/docker/cli from 28.5.1+incompatible to 29.2.0+incompatible in the go_modules group across 1 directory (#677)
• 965d864 build(deps): bump the go_modules group across 1 directory with 5 updates (#676)
• 7575a98 build(deps): bump github.com/go-git/go-git/v5 (#672)
• 07dc5aa chore: add network report to help (#671)
• 141693f Fix CLI docs generation (#670)
• 12d08ad update help text for: hide multi-channel license support from CLI (#669)
• 417dc82 Hide multi-channel license support from CLI (#668)
• 071042a unhide release create --required flag, update tests, docs (#667)
• e0650e0 update golang.org/x/crypto v0.45.0 => v0.47.0 (#666)
• 0c61b56 Resolve localhost dns (#665)
• 7e1ddc4 run go fmt (#663)
• 5d5c1eb Release create auto (#662)
• 15d1426 build(deps): bump golang.org/x/crypto (#661)
• c08ce21 update github.com/opencontainers/selinux and github.com/containerd/containerd (#660)
• a2feb60 Treat dest as a dir (#659)
• 0139d79 list hostnames (#658)
• bea5dfa Use replicated config to create release (#657)
• 6449ec7 fix: use github token when getting latest release (#656)
• 027edae Remove show external only flag (#655)
• 8bfe253 Automate docs PR creation in release workflow (#653)
• 1b15fc8 Revert " Automate docs PR creation in release workflow"
• 2352c93 Automate docs PR creation in release workflow
• 28ebc1c Add show-external-only to network summary reports (#651)
• fbc6e8e fix: let api check cluster state (#650)
• 6380c92 Add ignore-default flag to network report (#644)
• a25fbcc test: add config discovery vs autodiscovery test coverage (#639)
• 1f00225 feat(cmx): Add instance type to -owide 'vm ls' (#642)
• dabb89d typo (#641)
• 01fc412 Improve error message for network report summary (#640)
• a5954c4 fix: autodiscovery crashes with mixed resource types (#637)
• 9270622 chore: add arm64 builds (#638)
• 03a1f84 Add HelmChart manifest validation for linter (#636)
• 9c17c20 Add gitignore support to lint command (#634)
• 0371a6a feat: Refactor preflight config to support explicit chart references (#635)
• 78454f4 Defer preflight validation logic to linters (#633)
• 55b38d9 Release Validation 2 (#632)
• 0bc1331 Apply AutoCI security optimization (#606)
• 927a512 Apply AutoCI caching optimization (#607)
• 4cbc64f Update --help for network report (#592)
• 9442fad add output format options to 'replicated release create' (#589)
• 9870941 Show message if no report events are returned (#591)
• d904375 feat: add ability to get network report summaries (#590)
• f2a1ad4 feat(cmx): Add show-terminated and show-reports bools, resources and has_report columns (#587)
• 61882ce chore(cmx): Add current status in not running error (#588)
• 3ac63f7 Add source and destination pod (#586)
• 641f5ad Update ulikunitz/xz to v0.5.15 (#585)
• 578fb7a Do not show created at in the network report (#583)
• 7770e61 Allow ssh/scp while vm is updating (#584)
• c3d0791 build(deps): bump github.com/go-viper/mapstructure/v2 (#582)
• 7509584 Bump helm.sh/helm/v3 in the go_modules group across 1 directory (#568)
• 047fda6 update go-getter (#581)
• 6c6cf9f chore(cmx): Network update short flags, reporting help text changes (#580)
• b7aa736 fix(network-report): Allow specifiying network id as arg0 (#579)
• 857caac fix(network-report): Show dashes for all unpopulated fields (#578)
• 39290dd chore: mark network policies beta and network reporting alpha (#576)
• e064502 Update rm/test help references to use name (#575)
• d39a2c6 feat: add registry name and app IDs support registry commands (#574)
• 031698e chore: unhide network commands (#573)
• edf2516 Fix typo in makefile (#572)
• c2793ff Clean up old pact versions on publish (#571)
• e2e8103 adjust pact registry tests (#570)
• 14bd7c1 chore(cmx): Add script examples to VM endpoint commands (#569)
• fb02dfd Improve spacing network report output (#567)
• dd18907 Bump github.com/cloudflare/circl (#566)
• 82eee87 update a wide range of dependencies (#565)
• 4829fe0 Bump helm.sh/helm/v3 in the go_modules group across 1 directory (#533)
• 80eb14e chore: add beta disclaimer to vm commands (#563)
• b71ee25 Update help text for vm port (#562)
• 88fd6cb Adds container image listing for releases (#561)
• 2da9e23 fix: Update golang.org/x/net to v0.38.0 to fix CVE-2025-22872 (#560)
• 80de1ee fix(cmx): Use pointer for collect-report bool (#559)
• 10b82d8 feat(cmx): Refactor network update, add collect-report bool (#558)
• c0bf68a chore(cmx): Make last scheduling status header only -o wide (#557)
• 1a811b7 bump go release version (#556)
• 2f9f924 chore: update Go and Dagger dependencies (#555)
• 7b9d840 chore(cmx): add last scheduling status to cluster and vm table and wide outputs (#553)
• 6d1bfe6 upgrades helm dep (#554)
• 62917d9 Divolgin/sc 125919/install and run pktstat bpf to collect network (#552)
• 4da0b04 fix(cmx): return proper error on vm deadline and print vm info (#551)
• 119f87f Add last_scheduling_status to JSON output for VMs, clusters, and networks (#550)
• a3a287e chore(cmx): Add VMStatusVerifying to vm types (#549)
• 786909d feature(cmx): add ability to set custom username (#547)
• 43335c6 Fix: Make vm port ls and cluster port ls output single-spaced (#546)
• 71a4527 chore(cmx): Make 'disk_gib' viewable in 'vm ls -o json' (#545)
• 37463a0 feat(vm): add replicated vm scp-endpoint command to print the scp endpoint of a vm (#538)
• efe7636 feature: Update port expose help text to prioritize Embedded Cluster port 30000 (#544)
• b84e27c Support lookup by name or ID for all VM, cluster, and network commands (#543)
• 4e2766d Add SSH public key option to VM create command (#539)
• 2493001 Add support for SSH endpoint lookup by VM name (#540)
• cefdfe3 feature: Add note about default 1-hour TTL to help text (#542)
• 280fb7c Fix port examples in vm and cluster port expose commands to use 30000 (#541)
• af0ede9 Include chart version when pulling Helm charts (#537)
• 4540925 Fix docs for app commands (#536)
• 72a9c80 Optionally send optional values (#534)
• d3f0778 Deprecate replicated vm ssh (#532)
• 6ee577b add replicated vm ssh-endpoint command to print the ssh endpoint of a vm (#531)
• 82bdf60 feat(ec): api change to multi-node enabled (#530)
• f6a468f Add InstanceType field to VM struct (#529)
• a7ba04e Update Go Dependencies & Dagger Config/Engine (#527)
• 8ecbfb8 feat(ec): add option to disable multi-node clusters (#526)
• 7814732 Update release instructions (#524)
• 628ba74 Pin action runner to ubuntu-24.04 since 20.04 is EOLing (#525)
• 7fc2cd0 Allow 403 errors in the fast lookup path to fall through to listing in GetOrCreateChannelByName (#523)
• 014845a feat(vm_ssh): support custom identity-file in 'vm ssh' command (#522)
• 07cae9b fix:disable vm port expose for wildcard (#521)
• 5c8b056 Consistent -o and remove duplicate default (#520)
• 4adf95f Print to stderr to not break json (#519)
• af2aea0 feature(cmx): Add 'network update policy' (#517)
• 66007fc Mention that channel names are case sensitive (#516)
• 6d7cb6f chore(cmx): accept -o for --output (#515)
• 57ba785 Update all tools to use Go 1.23 (#514)
• bf840e1 make update checks quicker (#513)
• cd0c779 Add ssh and scp subcommand (#512)
• b6caaab Bump troubleshoot v0.93.0 -> v0.117.0 (#511)
• f5cfc7e Bump go-getter v1.7.5 -> v1.7.6 (#510)
• ff543f7 feature(cmx): add network column to 'vm ls' and 'cluster ls' (#509)
• 654f64f Bump github.com/moby/moby in the go_modules group across 1 directory (#485)
• a507ca6 Add autocompletion for CMX distribution, version and instance type (#508)
• bc9f91b Add network rm (#507)
• ea83702 Add CMX Update Network outbound behind feature flag (#506)
• 6b23806 Fix timeout error check (#505)
• 9c41130 Don't include the auto-gen footer in docs (#504)
• 41d66a5 Add network update outbound (#503)
• ac15738 Integration tests (#502)
• f9992ff fix https://github.com/replicatedhq/replicated/security/dependabot/53 (#501)
• c888a22 Add network create cli support (#499)
• efbe1e7 Bump golang.org/x/net to 0.34.0 (#498)
• 3572373 Add support for aliases when generating doc markdown (#500)
• 24c4b04 Generate CLI docs (#497)
• b6205f4 Add support for demote/un-demote of chan releases (#496)
• ac60876 Add support for install types when creating and updating customers (#494)
• d19a5d7 Fix docs for release download command (#495)
• ec00ac7 Unhide release inspect command (#493)
• db7b825 Hide enterprise and unhide channel commands (#492)
• 7c54d29 Add help text for "replicated default" command (#491)
• f4f6807 Hide --chart flag (#490)
• a2e5013 bump go-git from v5.12.0 to v5.13.0 (#488)
• 16c6676 Support creating addons as part of 'cluster create' command (#487)
• 82f48c4 Add dev mode flag for creating and updating customers (#486)
• f34298c Update to golang.org/x/crypto v0.31.0 (#484)
• 8a8e8e3 add common aliases (#471)
• 296a36d chore(cmx): remove postgres cluster addon (#481)
• c3913a2 chore(cmx): update cluster subcommand example to use nodegroup ls (#480)
• 33c0af9 Don't list all customers and channel for the customer inspect command (#479)
• 872cc54 chore(cmx): remove reference to non-existent subcommands (#478)
• 26de7a1 Adding network ls command implementation (#476)
• 40319e8 Joshd/sc 115395/make tunnels work on cmx vms (#473)
• c1b51df Change native to platform (#472)
• 5957df4 Remove ./bin/replicated from build container (#470)
• eeb86c5 Fix self-upgrade (#469)
• d96876a Use GORELEASER_PREVIOUS_TAG (#468)
• bde6660 Use last release tag and branch (#467)
• 475a8e6 Fix syntax error (#466)
• 93fe3e9 Use branches to make releases (#465)
• 0ca15fb Use correct output flag in customer inspect (#464)
• 6321493 fix cost for vms (#462)
• e9d0bcf Add local dir to gitignore (#461)
• 03bda80 Set GORELEASER_CURRENT_TAG for goreleaser (#460)
• dbbc2a7 releasing doc (#445)
• 0ec9c84 Check app has been specified in all commands that use it (#458)
• d39df83 main is spelled differently (#457)
• a526240 return ssh port and endpoint for direct connection (#451)
• 164dfb6 fix min max node count (#455)
• 8c3246c Add noargs settings (#454)
• 0831ec0 update integration tests for other app commands (#456)
• 3c30ab8 Add integration tests to the CLI (#452)
• 8850489 Fix for git tree dirty (#450)
• 5ca3bfa Additional cache busting (#449)
• 79e3f61 Trim additional outputs (#448)
• 1cd4a3d trim space from commit (#447)
• 56d7445 Specify amd64 platform at build (#446)
• cc024dd Better help text for enterprise portal commands (#428)
• 4f9a108 Cleanup from first release with dagger (#440)
• 73811c8 Remove release workflow (#444)
• 93299b0 add docker back to goreleaser (#443)