Release 2.0.0

What's Changed

• chore(release): bump the chart version to 2.0.0 by @zhujian7 in #276
• docs: design chart vendoring on tags and release branches by @zhujian7 in #277
• fix(charts): move the operator preload tags with the chart appVersion by @zhujian7 in #278
• fix(charts): stage test/e2e/images.txt in the vendor commit by @zhujian7 in #279
• ci: keep queued vendor-chart runs in FIFO order by @zhujian7 in #280
• ci: stop rewriting the shared README tables by @zhujian7 in #281
• ci: list the preload file only when the target has it by @zhujian7 in #282
• ci: keep the Git tag's v in image tags and chart appVersion by @zhujian7 in #283
• build(deps): bump the react group in /web with 2 updates by @dependabot[bot] in #284
• build(deps): bump cronstrue from 3.32.0 to 3.36.0 in /web by @dependabot[bot] in #286
• build(deps-dev): bump jsdom from 30.1.2 to 30.1.3 in /web by @dependabot[bot] in #285
• ci: cherry-pick merged PRs to a named branch by comment by @zhujian7 in #287
• fix(deploy): patch CVEs in runtime images by @zhujian7 in #290

Full Changelog: v1.0.0...v2.0.0

v1.0.0

CubePilot is the intelligent assistant of the CubeStack platform: a per-user agent instance (Pod + PVC) managed by the Instance Manager, and a conversational portal whose agent runs kubectl under least privilege with simple HITL approval.

Highlights

• Control-plane objects — AgentTemplate, AgentInstance, Skill, TaskTemplate, Task, and TaskRun as cluster-scoped CRDs.
• Per-user instances — a self-healing Runtime Pod with a dedicated PVC, so sessions and memory survive instance rebuilds; pods run non-root with seccomp, ALL capabilities dropped, and an egress allowlist.
• Tool execution & approvals — generic kubectl execution with schema discovery, and confirm-on-write approvals addressed by approval id, with the gateway as the source of truth.
• Skill market — publish, install, and hot-reload skills from the portal, with per-instance skill and config injection.
• Scheduled inspection — preset task templates (including daily inspection) driven by the CRD scheduler, with recorded TaskRuns and reports.
• Portal — chat over SSE (floating window + dedicated tab) plus config, skill, and task pages.

Changes since v0.1.0

Features

• Answer in the language the user asked in
• Show the agent's between-tool narration
• Clear a conversation from the client
• Answer an ask_user question with the human's own text
• More preset task templates, with the skills they need
• Cluster-scoped read for the assistant identity
• Keep the pod's platform config owned and convergent
• Configurable log level platform-wide
• Pin the workspace PVC StorageClass

Fixes

• Revoke the per-user identity and stop trusting leftover bindings
• Re-attach to a parked turn so an answer's output reaches the tab
• Fix a panic on the first "allow always" when Data is nil

Install

helm install cubepilot oci://harbor.isuanova.com/suanova/cubepilot-chart --version 1.0.0

Artifacts

• Images: harbor.isuanova.com/suanova/cubepilot-{openclaw,operator,api,web}:1.0.0
• Chart: oci://harbor.isuanova.com/suanova/cubepilot-chart:1.0.0

Patch releases for the 1.0 line land on the release-1.0 branch.

Full Changelog: v0.1.0...v1.0.0

v0.1.0

Full Changelog: https://github.com/suanova/cubepilot/commits/v0.1.0