v0.19.0

Changelog

• f739a12 chore(deps): bump github.com/google/cel-go from 0.23.2 to 0.29.0 (#109)
• d5bb6f4 chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#107)
• 2e34654 chore(deps): bump pymdown-extensions to 11.0.1 and mkdocs-material to 9.7.7 (#110)
• 3efed26 chore(main): release 0.19.0 (#105)
• c414636 feat(availability): configurable terminationGracePeriodSeconds + preStop for server drain (#106)
• d459426 feat: egressPolicy passthrough (#104)

v0.18.1

Changelog

• 0879418 chore(main): release 0.18.1 (#103)
• cb60cc4 fix(chart): allow kubeVersion pre-release suffixes from managed providers (#102)

v0.18.0

Changelog

• b0057e3 chore(deps): bump golang.org/x/net from 0.48.0 to 0.55.0 (#99)
• 66c1ddf chore(main): release 0.18.0 (#95)
• f21a965 feat(crd): perTenantQuota/perTenantLimitRange on K8sExecutionSpec (#94)
• 0528728 feat(instance): add priorityClassName for the product pod (outage guard) (#100)
• d91ccb0 fix: add spec.security.seLinuxRelabel opt-out for relabel init container (#98)

v0.17.2

Changelog

• 03040ec chore(main): release 0.17.2 (#93)
• a609947 fix(operatorhub): add updateGraph semver-mode to submitted ci.yaml (#92)

v0.17.1

Changelog

• 38368d8 chore(main): release 0.17.1 (#91)
• 48f1ccc fix(bundle): declare com.redhat.openshift.versions for OpenShift cert (#90)

v0.17.0

Changelog

• e94bc46 chore(main): release 0.17.0 (#89)
• 3a5d624 feat(chart): world-class Artifact Hub metadata + cosign chart signing (#88)

v0.16.0

Changelog

• 4c33f60 chore(main): release 0.16.0 (#84)
• e5da3ab feat(instance): optional brand theming via spec.branding.cssConfigMapRef
• a3871bf feat: Deployment workload profile, multi-replica preconditions, scale subresource (#81)
• de2005d feat: lease-aware scheduler gating, leader visibility, failover e2e (#82)
• 3f1beac fix(bootstrap): make bootstrap Job reconcile idempotent (no immutable-template churn) (#85)

v0.15.0

Changelog

• c3e4468 chore(main): release 0.15.0 (#80)
• b8b96de feat: spec.adapters.registry -> PAPERCLIP_ADAPTERS (#79)

v0.14.0

Changelog

• 8624cca chore(main): release 0.14.0 (#76)
• 7f65f03 feat(instance): in-cluster Kubernetes execution config + scoped RBAC (#77)
• 2b07483 feat(instance): seed platform instance-admin via init container (#75)
• b36647e test(conformance): fix pre-existing Ready-gate + PVC-fingerprint flakiness (#78)

v0.13.0

Changelog

• f6a4d35 chore(main): release 0.13.0 (#74)
• fee5d7c ci(release): publish a version-pinned install.yaml as a release asset
• a12efd9 feat!: align deployment mode enum with app (local_trusted|authenticated)
• ec38bb9 feat!: emit PAPERCLIP_BIND/PAPERCLIP_BIND_HOST instead of legacy HOST
• 45a4518 feat!: remove fabricated managed-inference config
• afde2f5 feat!: remove managed Redis (app does not consume it)
• c2104a7 feat: add AWS Secrets Manager secrets provider
• 5fdc615 feat: add E2B sandbox API key (spec.adapters.e2b -> E2B_API_KEY)
• 4e067c4 feat: add app-native DB backup config (PAPERCLIP_DB_BACKUP_*)
• b9e3874 fix(controller): only watch Gateway API HTTPRoute when its CRD is installed
• 80092b5 fix(image): default app image to ghcr.io/paperclipai/paperclip
• d753fa9 fix(statefulset): make the app actually boot under restricted security
• 91008c7 style: gofmt import block after redis test removal
• 4b206d7 style: preallocate allowedHostnames slice (lint: prealloc)
• e771875 test(conformance): cover new CEL validation (mode/exposure, removed enum, aws secrets)
• 778522d test(e2e): add full app-boot + feature-render cases on kind
• 90d657a test(e2e): delete Instances before operator undeploy to avoid teardown hang
• 190e1f6 test(e2e): make admin-bootstrap check informational; doc CEO-promotion follow-up
• 81889ec test(e2e): make stsEnvNames retry-safe inside Eventually