v0.11.0

Hades @runkora/hades@0.11.0, SHA-256 b7250e9ff72338e362fb3a338b452f522998fda3a3df68858ccd90700c62f53b. Published to GitHub Packages.

What's Changed

• docs: update the console screenshots in the README by @justinwilkin in #747
• docs: use the full-resolution console screenshots in the README by @justinwilkin in #749
• ci: stop publishing the kora-example image by @justinwilkin in #750
• ci: publish OpenSSF Scorecard results and add the README badge by @justinwilkin in #751
• ci: sign releases keyless with the release workflow identity by @justinwilkin in #752
• fix(frontend): bump vitest and override zod to clear open dependency advisories by @runkora[bot] in #754
• fix(frontend): bump overrides to clear open dependency advisories by @runkora[bot] in #755
• ci: sign the release assets and attach SLSA provenance by @justinwilkin in #756
• ci: attest release provenance with attest-build-provenance by @justinwilkin in #757
• docs: PRD and ADR for declarative resources by @justinwilkin in #758
• feat(agents): soft delete agents and keep their run history by @justinwilkin in #759
• feat(triggers): keep triggers when their source is deleted by @justinwilkin in #760
• feat: declarative resource CRDs and the declared-item contract by @justinwilkin in #761
• feat(inference-gateway): declared virtual models by @justinwilkin in #762
• feat(triggers): declared trigger sources and triggers by @justinwilkin in #764
• feat(agents): declared environments and agents by @justinwilkin in #763
• feat(policy-service): declared roles and tenant budgets by @justinwilkin in #765
• feat(operator): project declared resources into their owning services by @justinwilkin in #766
• feat(dashboard): show declared items as managed in git and lock authoring by @justinwilkin in #767
• docs: guide and local examples for declarative resources by @justinwilkin in #768
• docs: title the user-facing pages runkora by @justinwilkin in #771
• docs: make register-mcp-server example pass restricted admission by @runkora[bot] in #732
• fix(frontend): show the agent's own model, tools and connections read-only by @runkora[bot] in #780
• fix(frontend): show Agents nav entry for per-agent read scopes by @runkora[bot] in #775
• fix(frontend): truncate the Managed by badge on agent cards by @runkora[bot] in #776
• fix(frontend): fill agent overview stat row when usage is hidden by @runkora[bot] in #777
• refactor(operator): generate deep copies and CRDs for the remaining kinds by @runkora[bot] in #778
• fix(frontend): bump @storybook/nextjs to 10.6.3 for Next 16.4 page stories by @runkora[bot] in #782
• fix(sessionmanager): fall back to message when summary has no text block by @runkora[bot] in #784
• docs: drop the private-repository wording from the install and Hades docs by @justinwilkin in #753
• fix(backend): bump cel-go to 0.30.0 to clear GO-2026-6094 by @runkora[bot] in #785
• feat(identity): bind tenants to an ID token claim so tenants can share an email domain by @runkora[bot] in #787
• fix(egressgw): serve signed release-asset reads without connection selection by @runkora[bot] in #792
• fix(triggers): retry trigger token mint before failing a dispatch by @runkora[bot] in #791
• fix(egress): tunnel TLS on non-443 ports by SNI and dialled port by @justinwilkin in #812
• feat(triggers): generic webhook source by @justinwilkin in #807
• feat(frontend): generic webhook source in the trigger console by @justinwilkin in #808
• docs: PRD and ADR for generic webhook sources by @justinwilkin in #810
• docs: add the quickstart and agent factories to the README by @justinwilkin in #821
• fix(make): poll for kora-identity OIDC init in cluster-deploy by @Burke287 in #823
• build(deps): bump the base-images group across 3 directories with 3 updates by @dependabot[bot] in #824
• build(deps): bump the agent-clis group in /backend/cmd/session-manager/agent-clis with 2 updates by @dependabot[bot] in #825
• build(deps): bump the actions group with 4 updates by @dependabot[bot] in #826
• docs: split the deployment guide into task guides by @justinwilkin in #837
• fix(backend): bump go-jose to clear GHSA-mgcc-cww5-fp2q by @runkora[bot] in #829
• fix(frontend): bump qs override to clear GHSA-6pq8-jhm2-2vcw by @runkora[bot] in #830
• docs: update ADR index for egress gateway amendment 6 by @runkora[bot] in #831
• fix(build): hold the session-manager image at Node 24.22.0 for the arm64 release build by @justinwilkin in #839
• fix(build): revert the agent CLI bump that breaks the arm64 session-manager build by @justinwilkin in #845
• build(ci): build arm64 images on native runners instead of under QEMU by @justinwilkin in #846
• fix(ci): clear the target tags when pushing release images by digest by @justinwilkin in #847
• fix(ci): read the platform digest without passing the full bake metadata by @justinwilkin in #848
• fix(ci): fix the image merge digests and the per-target layer cache by @justinwilkin in #849
• fix(frontend): take session tenant from the issued token by @runkora[bot] in #851

New Contributors

• @Burke287 made their first contribution in #823

Full Changelog: v0.10.0...v0.11.0