v0.32.3

[0.32.3] — 2026-10-25

Other

• Bring the web UI to parity with the CLI (4d0c26c)
• Return 404 for unknown env-group services and allow any-env audit lookups (a049913)
• Bring the CLI to parity with the web UI (bc0f83b)
• Publish Windows CLI binaries and detect Git Bash in install-cli.sh (5f989d3)

v0.32.2

[0.32.2] — 2026-10-24

🐛 Bug Fixes

• Fix GitHub App manifest and single-node buildkitd scheduling (d3d9ae7)

v0.32.1

[0.32.1] — 2026-10-22

Other

• Detect .NET projects and build them with buildpacks (b0ca608)

v0.32.0

[0.32.0] — 2026-10-15

Other

• Clear git env before the pre-push hook runs Go tests (9b40974)
• Trust X-Forwarded-For only from the Traefik ingress pods (1bb221e)
• Scope kuso-server RBAC, isolate the activator and verify release bundles (40ff8af)
• Keep production credentials and images out of non-production envs (d5e65fc)
• Stop one client IP locking out logins and stop leaking JWTs to addon UIs (f9fd55f)
• Keep fresh log lines on prune and stop one long line failing a batch (3f09a36)

🐛 Bug Fixes

• Fix backup retention, sibling restores and instance PG connection setup (ba1ca3c)
• Fix cancel, rollback, image sweep and clone gaps in the build pipeline (20980b8)

Upgrade notes

Manual RBAC apply required

The self-updater can't apply these; on every cluster run kubectl apply -f <file> as cluster-admin after upgrading:

• ClusterRole/kuso-activator (deploy/kuso-activator.yaml) changed and grants what kuso-server doesn't hold: apps/deployments:patch.

v0.31.0

[0.31.0] — 2026-10-08

Other

• Stop one app's load from taking down the shared ingress (90f4a0a)

Upgrade notes

Manual RBAC apply required

The self-updater can't apply these; on every cluster run kubectl apply -f <file> as cluster-admin after upgrading:

• ClusterRole/kuso-operator (deploy/operator.yaml) changed; it is excluded from the upgrade bundle.

v0.30.0

[0.30.0] — 2026-10-08

Other

• Make autoscaling speed configurable per service (427130e)

v0.29.0

[0.29.0] — 2026-10-08

Other

• Sweep orphaned registry repos and keep audit rows without a user (8dbaa93)
• Clear notifications without a confirmation step (6890bee)
• Run the sandbox on port 80 and restart pods on a new image (4177cf2)
• Print http links for hosts served without TLS (e75980e)
• Deploy GitHub repos without a GitHub App (c2dc92d)
• Allow the GitHub App manifest form through the CSP (c1ac4f3)

✨ Features

• Add a Docker sandbox for end-to-end testing (8a98b41)

🐛 Bug Fixes

• Fix findings from the 2026-10-07 platform review (0b1098b)

Upgrade notes

Manual RBAC apply required

The self-updater can't apply these; on every cluster run kubectl apply -f <file> as cluster-admin after upgrading:

• ClusterRole/kuso-operator (deploy/operator.yaml) changed; it is excluded from the upgrade bundle.
• ClusterRole/kuso-pkg-probe (deploy/pkg-probe.yaml) changed and grants what kuso-server doesn't hold: core/pods/eviction:create.
• ClusterRole/kuso-server (deploy/server-go.yaml) changed and grants what kuso-server doesn't hold: postgresql.cnpg.io/clusters:get, storage.k8s.io/storageclasses:get, storage.k8s.io/storageclasses:list.
• ClusterRole/kuso-server-managed-ns (deploy/server-go.yaml) changed and grants what kuso-server doesn't hold: core/pods/exec:create, core/pods/portforward:create, core/secrets:create, core/secrets:delete, core/secrets:patch, core/secrets:update (+18 more).
• Role/kuso-registry-gc (deploy/registry.yaml) changed and grants what kuso-server doesn't hold: apps/deployments/scale:get, apps/deployments/scale:patch, apps/deployments/scale:update.

This release restarts workloads

The pod template changed for the shapes below. When the operator rolls, every env/addon of that shape restarts at about the same time (envs with a ReadWriteOnce volume use Recreate, so they go down for the restart). Upgrade in a quiet window.

• kusoenvironment p-web-rwo Deployment/p-web-rwo:

@@ -17,6 +17,2 @@
     imagePullPolicy: IfNotPresent
-    lifecycle:
-      preStop:
-        sleep:
-          seconds: 5
     name: app

v0.28.2

[0.28.2] — 2026-10-03

Other

• Reject malformed refs and allow rebuilding an already-built commit (0487b74)

v0.28.1

[0.28.1] — 2026-10-03

🐛 Bug Fixes

• Fix deploy lifecycle defects found by the e2e run (81e340a)

v0.28.0

[0.28.0] — 2026-10-03

✨ Features

• Add uptime checks with Discord down and recovered alerts (c6fc977)