v0.0.672026-09-18patchbreaking++++++++++++-*****sharesource - !+Migrate from sts_* to explicit config blockadded / breaking
- -Cleanup(http): remove unused code after sse removalremoved
- +Add filtered logs and pipeline contextadded
- +Hide pods_top and nodes_top tools when Metrics API is unavailableadded
- +Rework e2e suite and add full OAuth scenario coverageadded
- +Add vm_create_from_template tooladded
- +Add HCO awareness using MCP toolingadded
- +Add pause and unpause actions to vm_lifecycle tooladded
- +Make RFC 8693 token-type params configurableadded
- +Add MCP server observability testsadded
- +Add MCP client connectivity smoke testsadded
- +Add required rbac into _meta for tools/prompts/resourcesadded
11 more lines
- +Add rbac metadata to toolsetsadded
- *A few minor bugfixesfixed
- *Roundtripper handles subresources/resources without Kind setfixed
- *Mint fresh assertions every timefixed
- *Minikube setup on mac/podman has working dnsfixed
- *Include "resource" in metadatafixed
- ·Evals: Clean up make rules & toolset selectionother
- ·Fulfill jq eval dependencyother
- ·Feat!(http): remove SSE MCP transportother
- ·Option to run /metrics on a different portother
- ·Parallelize AnyTargetHasGVKs()other
30 maintenance lines (dependency bumps, CI, tests, docs)
- ·Bump github.com/tektoncd/pipeline from 1.13.1 to 1.15.0maintenance
- ·Add python dependabot configmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Expand run-server target to accept additional argumentsmaintenance
- ·Bump github.com/spf13/afero from 1.12.0 to 1.15.0maintenance
- ·Narrow kubeconfig injection optionmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12maintenance
- ·Bump golang.org/x/mod from 0.38.0 to 0.39.0 in the golang-x groupmaintenance
- ·Bump golang.org/x/mod from 0.39.0 to 0.40.0 in the golang-x groupmaintenance
- ·Bump helm.sh/helm/v3 from 3.21.3 to 3.21.4maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump github.com/stretchr/testify from 1.11.1 to 1.12.0maintenance
- ·Bump the opentelemetry group across 1 directory with 17 updatesmaintenance
- ·Bump github.com/stretchr/testify from 1.12.0 to 1.12.1maintenance
- ·Bump k8s.io/streaming from 0.36.3 to 0.36.4 in the kubernetes groupmaintenance
- ·Bump the kubernetes group with 7 updatesmaintenance
- ·Bump github.com/tektoncd/pipeline from 1.15.0 to 1.15.1maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump actions/setup-node from 4.2.0 to 7.0.0 in the github-actions groupmaintenance
- ·Bump the opentelemetry group across 1 directory with 17 updatesmaintenance
- ·Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.5maintenance
- ·Bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0maintenance
- ·Bump github.com/tektoncd/pipeline from 1.15.1 to 1.16.0maintenance
- ·Use docker driver for kubevirt evaluation suites and bump kubevirt dependenciesmaintenance
- ·Bump the golang-x group with 4 updatesmaintenance
- ·Bump helm.sh/helm/v3 from 3.21.4 to 3.22.0maintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.7.0 to 1.8.0maintenance
- ·Add argocd eval suitemaintenance
- ·Add Tool RBAC Metadata to Advanced Topics indexmaintenance
53 lines1 removed12 added5 fixed5 other30 maintenancetyped from the source notes
Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta, allowing kubelet, container runtimes, CNI plugins and kube-proxy to run as a non-root user inside a Linux user namespace. The feature gate is now enabled by default, but nodes only run rootless if they are set up that way outside Kubernetes. Kubelet now reports a runningInUserNamespace property on nodes.
platform teams Platform teams can run node components without host root to limit container-breakout impact, but some CNI and CSI drivers may break, so test them first. Administrators can use the new runningInUserNamespace node property to keep root-dependent workloads off rootless nodes.
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
- +Add TargetCompatibilityFilters to kubevirt toolsetadded
- +Add TLS_MIN_VERSION and TLS_CIPHER_SUITES env var supportadded
- +Sync kiali latest changesadded
- +Update tool schemas for Gateway API and Inference API supportadded
- +Update kiali quay repoadded
- +Add PipelineRun troubleshooting toolsadded
- +Add meshCluster parameter for multi-cluster supportadded
- +Allow env var to specify config file pathadded
- +Add vm_troubleshoot tool for automated VM diagnosticsadded
- *Install claude-agent-acp locally instead of globallyfixed
- *Add NetObserv to the validated projects tablefixed
- *Harden OpenShift detection and TLS handlingfixed
7 more lines
- *Add security context to pod manifestfixed
- *Reject unknown wellknown paths in proxyfixed
- *Use const url instead of user provided url in wellknown proxyfixed
- *Handle TLS version format from MCPLOfixed
- ·Cleanup: evals don't point at old configsother
- ·Cleanup: trim down AGENTS.mdother
- ·Feat!(mcp): add 2026-07-28 spec supportother
15 maintenance lines (dependency bumps, CI, tests, docs)
- ·Bump actions/setup-node from 6 to 7 in the github-actions groupmaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.18 to 0.0.19 in the github-actions groupmaintenance
- ·Bump actions/setup-go from 6 to 7 in the github-actions groupmaintenance
- ·Switch PR trigger to pull_request_review + workflow_runmaintenance
- ·Always set read-only to false in evals servermaintenance
- ·Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions groupmaintenance
- ·Bump github.com/go-logr/logr from 1.4.3 to 1.4.4maintenance
- ·Verify that the mcp server works with kuadrant mcp gatewaymaintenance
- ·Cleanup readme generator to reuse mcp importsmaintenance
- ·Refactor to suite specific eval configsmaintenance
- ·Remove stale kubevirt eval configs and fix docsmaintenance
- ·Move weekly evals to matrixmaintenance
- ·Bump the kubernetes group with 8 updatesmaintenance
- ·Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1maintenance
- ·Update mcpchecker evaluation resultsmaintenance
34 lines9 added7 fixed3 other15 maintenancetyped from the source notes
- *Avoid article agreement issue in product name templatesfixed
- *Llm judge config is correct with new APIfixed
- *Bound discovery requests during startupfixed
- ·NETOBSERV-2230 Add netobserv toolsetother
- ·Config option for toolset prefilteringother
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·Update mcpchecker evaluation resultsmaintenance
6 lines3 fixed2 other1 maintenancetyped from the source notes
- !+Target-specific tool filteringadded / breaking
- +Add structuredContent to resources_get and resources_listadded
- +Remove patch version from Kialiadded
- +Add auto-generated validated projects section to READMEadded
- +Logs are exported with otel nowadded
- +Add bind address and warnings when on 0.0.0.0 with no tls/authadded
- *Clarify SSA full-state semantics in resources_create_or_update descriptionfixed
- *Correct core task-definition bugsfixed
- *Extend bind address warning to IPv6 and add testsfixed
- ·Feat(kiali) Refactored metrics paramsother
- ·Feat(kiali) Updated get_logs descriptionother
- ·Cleanup(logs): more contextual loggingother
2 more lines
- ·Cleanup(logs): more contextual logging in kubevirt and mcpother
- ·Cleanup(logs): migrate remaining klog.FromContext to klogutil.FromContextother
22 maintenance lines (dependency bumps, CI, tests, docs)
- ·Add toolset design skillmaintenance
- ·Remove replace directive to restore go installmaintenance
- ·Remove obsolete ServiceAccount example from Entra ID setupmaintenance
- ·Add update-vm-instancetype eval taskmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump golang.org/x/mod from 0.36.0 to 0.37.0 in the golang-x groupmaintenance
- ·Reference workflow event inputs via env varsmaintenance
- ·Add SECURITY.md policymaintenance
- ·Scope publish workflows to first-party tag-push releasesmaintenance
- ·Fix stale docs and drifted Makefile defaultsmaintenance
- ·Drive toolset labels and owner notifications from CODEOWNERSmaintenance
- ·Bump actions/github-script from 8 to 9 in the github-actions groupmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Setup initial e2e testingmaintenance
- ·Skip mcpchecker evaluation on forksmaintenance
- ·Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions groupmaintenance
- ·Set 30m timeout on e2e jobmaintenance
- ·Cleanup e2e frameworkmaintenance
- ·Bump the golang-x group with 2 updatesmaintenance
- ·Bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0maintenance
- ·Use timeline API for mcpchecker SHA pinningmaintenance
- ·Bump helm.sh/helm/v3 from 3.21.2 to 3.21.3maintenance
36 lines6 added3 fixed5 other22 maintenancetyped from the source notes
v0.0.632026-06-23patchbreaking+++++++++*********sharesource - !·Return separate stdout and stderr from PodsExecmaintenance / breaking
- !·Switch to contextual loggingmaintenance / breaking
- +Add product name override mechanism for downstream brandingadded
- +Support for logging to fileadded
- +Add EC key support and Entra ID federated auth styleadded
- +Add tool for QEMU guest agent accessadded
- +Structure context list outputadded
- +Kiali: Added ArgoCD applications into list resourcesadded
- +Add fieldSelector to events_list and namespaces_list toolsadded
- +Add HasGVKs method to Provider interfaceadded
- +Implement HasGVKs for single cluster provideradded
- +Add built-in MCP prompts to the Kiali toolsetadded
17 more lines
- +Add windows-golden-image prompt for automated Windows golden image creationadded
- +Add output schema support for MCP toolsadded
- *Inherit ReadOnly from suite config in reload testfixed
- *Use BaseDefault() in ToolsetsSuite to avoid downstream config leakingfixed
- *Preserve ReadOnly in cfgFromTOML helper for downstream compatibilityfixed
- *Token pass-through modefixed
- *Fix sporadic http test failuresfixed
- *Move to using core instead of kubernetes suitefixed
- *Guard log file close against concurrent writesfixed
- *SIGHUP reloads rather than terminatingfixed
- *Ignore SIGHUP in no-config HTTP modefixed
- *Refresh STS config after reloadfixed
- *Enforce require_tls on token exchange HTTP clientfixed
- ·Adjusted Kiali tests to endpoints.other
- ·Eval(core): check if ssa removes fields when model makes updateother
- ·HTTP: Don't fail for errors during shutdownother
- ·Kiali And Istio versions bump.other
30 maintenance lines (dependency bumps, CI, tests, docs)
- ·Move to using mcpchecker diff action instead of bash scripts for diffmaintenance
- ·Expand downstream test guidance + refactor TOML idiomsmaintenance
- ·Pin gen-crd-api-reference-docs via replace directivemaintenance
- ·Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0maintenance
- ·Polish #1151 follow-up and add structured-output specmaintenance
- ·Bump KubeVirt v1.8.2, CDI v1.65.0, Multus v4.2.4maintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1maintenance
- ·Consolidate http test server shutdownmaintenance
- ·Bump the opentelemetry group with 11 updatesmaintenance
- ·Track Go version from go.mod and gate directive bumpsmaintenance
- ·Bump github.com/tektoncd/pipeline from 1.12.0 to 1.13.0maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump go to 1.26.3maintenance
- ·Bump github.com/containerd/containerd from 1.7.30 to 1.7.32maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump golang.org/x/sync from 0.20.0 to 0.21.0 in the golang-x groupmaintenance
- ·Backend tests json result assertion fixmaintenance
- ·De-flake TestClusterState on slow runnersmaintenance
- ·Bump the kubernetes group with 8 updatesmaintenance
- ·Bump helm.sh/helm/v3 from 3.21.0 to 3.21.1maintenance
- ·De-flake TestPodsExec SPDY stream reset on slow runnersmaintenance
- ·Bump github.com/tektoncd/pipeline from 1.13.0 to 1.13.1maintenance
- ·Type-safe composable log attributesmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0maintenance
- ·Bump actions/checkout from 6 to 7 in the github-actions groupmaintenance
- ·Bump helm.sh/helm/v3 from 3.21.1 to 3.21.2maintenance
- ·Finish STS reload follow-ups frommaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Cover output schema typed-nil guard (follow-up tomaintenance
59 lines12 added11 fixed4 other32 maintenancetyped from the source notes
- !*Reject kubeconfig auth mode with require_oauth at startupfixed / breaking
- +Add MCP resourceadded
- *Complete hot-reload surface for HTTP middleware configfixed
- *Propagate certificate_authority to token exchange HTTP clientfixed
- *Fall back to openid-configuration when well-known endpoint returns empty bodyfixed
- *Harden resources surface for hot reloadfixed
8 maintenance lines (dependency bumps, CI, tests, docs)
- ·Bump github.com/google/jsonschema-go from 0.4.2 to 0.4.3maintenance
- ·Bump mcpchecker/mcpchecker from 0.0.16 to 0.0.17 in the github-actions groupmaintenance
- ·Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0maintenance
- ·Bump mcpchecker/mcpchecker from 0.0.17 to 0.0.18 in the github-actions groupmaintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.5.0 to 1.6.0maintenance
- ·Bump github.com/tektoncd/pipeline from 1.11.1 to 1.12.0maintenance
- ·Bump github.com/fsnotify/fsnotify from 1.10.0 to 1.10.1maintenance
- ·Make ReloadConfiguration fully transactionalmaintenance
14 lines1 added5 fixed8 maintenancetyped from the source notes
Kubernetes v1.36: Admission Policies That Can't Be Deleted
Kubernetes v1.36 adds an alpha feature, manifest-based admission control, that lets admission webhooks and CEL-based ValidatingAdmissionPolicies be loaded from files on disk at API server startup via a staticManifestsDir field in the AdmissionConfiguration file. Manifest objects must have names ending in .static.k8s.io, and the files are watched at runtime with atomic swaps, keeping the previous configuration if validation fails. The feature can also be used to write policies that block modification or deletion of API-based admission resources.
platform teams Platform teams can make baseline admission policies active from API server start and protect them from deletion by cluster admins, without depending on API state. Manifest-based configurations are self-contained: they cannot reference API resources, webhooks must be URL-only, and multiple API servers each load their own files with no cross-server sync.
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
v0.0.612026-04-24patchsecurity++++++***********!sharesource - !Enable read-only root filesystem in Helm chart (security)security
- !Make ServiceAccount token auto-mount configurable on Helm chart (security)security
- +Fine-tune HTTP server settingsadded
- +Add backend storage driver supportadded
- +Add Tekton toolset with pipeline and task managementadded
- +Multi-arch kubernetes mcp serveradded
- +Setup tracing in Kiali environmentadded
- +Adding cross-compile hook for gh actionsadded
- +Add mcpchecker diff to compare PR results against baselineadded
- +Add Microsoft Entra ID support with On-Behalf-Of token exchangeadded
- +Add per-session rate limiting via MCP middlewareadded
- +Add Gateway API HTTPRoute supportadded
25 more lines
- +Add skip_jwt_verification to enforce OIDC verificationadded
- +Refactor from v2.25 (code + evals)added
- *Cluster provider validation to include all possible strategiesfixed
- *Bump requires-python, portable sed, and signal forwardingfixed
- *Restore ARCHS variable, simplify multi-arch, and enable s390x/ppc64le container imagesfixed
- *Do not use docker images, add core-eval-testing evalsfixed
- *Replace unsafe type assertions with safe parameter helpersfixed
- *Call resp.Body.Close() instead of referencing method valuefixed
- *Migrate tool handlers to WrapParams sticky-error patternfixed
- *Replace unmaintained bitnami helm chartsfixed
- *Enforce all Validate() checks on SIGHUP reloadfixed
- *Resolve default container for multi-container pods (KEP-2227)fixed
- *Auto-select kubeconfig context when current-context is emptyfixed
- *Validate token exchange fields at config loadfixed
- *Normalize whitespace for token exchange fields before validationfixed
- *Validate confirmation fields at config loadfixed
- *Address HTTPRoute follow-ups fromfixed
- *Fix kubevirt eval task namespace races and setup failuresfixed
- *Fix kubernetes/scale-deployment cleanup scriptfixed
- *Restore default passthrough of Authorization header to clusterfixed
- *Restore Derived() require_oauth guard and broaden raw-token coveragefixed
- *Rename tasksets: kubernetes to corefixed
- *Use dynamic toolset name in tests to avoid downstream conflictsfixed
- *Propagate config reload to HTTP authorization middlewarefixed
- ·Entra ID / OBO test follow-ups and dead code cleanupother
29 maintenance lines (dependency bumps, CI, tests, docs)
- ·Add integration tests for prompt target parameter in multi-clustermaintenance
- ·Migrate llmJudge to builtin.llm-agent formatmaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.12 to 0.0.14maintenance
- ·Resolve config in constructor following Kiali patternmaintenance
- ·Add bypass coverage and fallback config validationmaintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.42.0 to 1.43.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.42.0 to 1.43.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/prometheus from 0.64.0 to 0.65.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.43.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.42.0 to 1.43.0maintenance
- ·Resolve kiali toolset name dynamically in require_tls testsmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0maintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.4.1 to 1.5.0maintenance
- ·Bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0maintenance
- ·Bump helm.sh/helm/v3 from 3.20.1 to 3.20.2maintenance
- ·Bump softprops/action-gh-release from 2 to 3maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.14 to 0.0.15maintenance
- ·Tool override tests are compatible with downstream changesmaintenance
- ·Deduplicate OIDC config fetches and simplify token exchangemaintenance
- ·Add helm option to mcpchecker runnermaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.15 to 0.0.16maintenance
- ·Bump golang.org/x/time from 0.14.0 to 0.15.0maintenance
- ·Bump k8s.io/kubectl from 0.35.3 to 0.35.4maintenance
- ·Bump k8s.io/apiextensions-apiserver from 0.35.3 to 0.35.4maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Bump github.com/tektoncd/pipeline from 1.11.0 to 1.11.1maintenance
- ·Group dependabot updates for k8s, otel, and golang.org/xmaintenance
66 lines2 security12 added22 fixed1 other29 maintenancetyped from the source notes
v0.0.602026-04-01patchbreakingsecurity+++*************!!sharesource - !·Provider.GetTargets is now optionally user-scoped (#843) — The GetTargets method signature has changed to optionally accept user-scoping. If you have custom code that calls provider.GetTargets, you will need to update the call sites to match the new signature.other / breaking
- !·Provider.GetTargets is optionally user scoped nowmaintenance / breaking
- !Harden well-known OAuth proxy securitysecurity
- !Add require_tls config to enforce HTTPS connectionssecurity
- +Validate chart references and add allowed_registries configadded
- +Add MCPB bundle distributionadded
- +Add confirmation rules systemadded
- +Add tool description overridesadded
- *Limit response body size to prevent unbounded memory consumptionfixed
- *Add v prefix to OCI identifier in MCP registry publishfixed
- *Return error when response exceeds maximum allowed sizefixed
- *Metrics endpoints do not required oauthfixed
11 more lines
- *Normalize scheme, host, and path in allowlist matchingfixed
- *Enable core toolset for tekton eval suitefixed
- *Prevent panic on non-bool type assertion in tool handlersfixed
- *Stop leaking internal details in well-known error responsesfixed
- *Close old managers before replacing on resetfixed
- *Replace blunt .0 removal with targeted regex in configmap templatefixed
- *Handle negative integers in configmap .0 cleanup regexfixed
- *Add provider prefixes to model specificationsfixed
- *Exclude /stats endpoint from OAuth protectionfixed
- *Add multi-cluster target parameter to promptsfixed
- *Guard managers with RW mutex to avoid concurrent map…fixed
24 maintenance lines (dependency bumps, CI, tests, docs)
- ·Consolidate API path prefix handling in round-trippermaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.10 to 0.0.11maintenance
- ·Bump k8s.io/api from 0.35.2 to 0.35.3maintenance
- ·Bump k8s.io/metrics from 0.35.2 to 0.35.3maintenance
- ·Bump k8s.io/apiextensions-apiserver from 0.35.2 to 0.35.3maintenance
- ·Bump k8s.io/cli-runtime from 0.35.2 to 0.35.3maintenance
- ·Bump k8s.io/kubectl from 0.35.2 to 0.35.3maintenance
- ·Clean up multi-target naming and tests after PRmaintenance
- ·Add unit tests for simplify functionmaintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Add suite:config to all config tasks, add nodes-top.yamlmaintenance
- ·Bump azure/setup-helm from 4 to 5maintenance
- ·Bump mcpchecker/mcpchecker from 0.0.11 to 0.0.12maintenance
- ·Bump google.golang.org/grpc from 1.79.2 to 1.79.3maintenance
- ·Add structured output support and MCP spec compliancemaintenance
- ·Replace WriteString(Sprintf) with Fprintf (QF1012)maintenance
- ·Add contributor guidelinesmaintenance
- ·Add GitHub Actions labeler for kubevirt toolset PRsmaintenance
- ·Extend labeler with kiali and tekton toolsetsmaintenance
- ·Replace deprecated openai-agent with openai-acpmaintenance
- ·Add provider reset connection cleanup testsmaintenance
- ·Add require_tls validation and enforcement testsmaintenance
- ·Consolidate OAuth-exempt endpoint tests into single testmaintenance
- ·Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4maintenance
47 lines2 security4 added15 fixed1 other25 maintenancetyped from the source notes
- -Cleanup(kubevirt): Remove snapshot patch in snapshot-vm and restore-vm tasksremoved
- +Support initContainers overrideadded
- +Support elicitation from tool callsadded
- +Add URL-mode elicitation supportadded
- +Refactor helm evals using kube extensionsadded
- +Expand Makefile with mcpchecker supportadded
- +Convert kubevirt tasks to mcpchecker/v1alpha2 apiadded
- +Add Tekton Pipelines eval tasksadded
- *Add missing suite labels to kubevirt tasksfixed
- *Honor OTel endpoint from TOML configfixed
- *Init request w/o client info does not panicfixed
- *Tool call without arguments does not panicfixed
9 more lines
- *Wrappers only applied once in .Derivedfixed
- *Verify CI setup for gevals suite kialifixed
- *Publish container images to ghcr.io for MCP Registry compatibilityfixed
- *Remove helm toolset from default enabled toolsetsfixed
- *Normalize trimmed paths in validation before usefixed
- *Creating shared http client and close connections on the clientfixed
- *Adapt config provider tests for downstream default overridesfixed
- *Avoid startup deadlock when the Kubernetes API is served behind a path prefixfixed
- ·Revert "chore(test): Increase timeout on namespaces test (#910)"other
38 maintenance lines (dependency bumps, CI, tests, docs)
- ·Bump k8s.io/api from 0.35.1 to 0.35.2maintenance
- ·Bump k8s.io/kubectl from 0.35.1 to 0.35.2maintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.3.1 to 1.4.0maintenance
- ·Bump k8s.io/apiextensions-apiserver from 0.35.1 to 0.35.2maintenance
- ·Migrate claude code agent to acpmaintenance
- ·Add dedicated KubeVirt toolset documentationmaintenance
- ·Address PR #815 review commentsmaintenance
- ·Add regression test for nil ClientInfo panicmaintenance
- ·Add comprehensive test suites for telemetry and metricsmaintenance
- ·Add regression test for double transport wrapping in .Derivedmaintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.40.0 to 1.41.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.40.0 to 1.41.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.40.0 to 1.41.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/prometheus from 0.62.0 to 0.63.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.41.0maintenance
- ·Chore(formatting) fix incorrect formattingmaintenance
- ·Add formatting check to build workflowmaintenance
- ·Add derived client connection cleanup testsmaintenance
- ·Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3maintenance
- ·Reorganize validation documentationmaintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.41.0 to 1.42.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.41.0 to 1.42.0maintenance
- ·Bump golang.org/x/oauth2 from 0.35.0 to 0.36.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.41.0 to 1.42.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/prometheus from 0.63.0 to 0.64.0maintenance
- ·Update mcpchecker evaluation resultsmaintenance
- ·Use typed errors in schema validatormaintenance
- ·Bump golang.org/x/sync from 0.19.0 to 0.20.0maintenance
- ·Bump github.com/google/gnostic-models from 0.7.0 to 0.7.1maintenance
- ·Bump k8s.io/klog/v2 from 2.130.1 to 2.140.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.41.0 to 1.42.0maintenance
- ·Standardize registry patterns across the codebasemaintenance
- ·Increase timeout on namespaces testmaintenance
- ·Rename remaining gevals references to mcpcheckermaintenance
- ·Bump helm.sh/helm/v3 from 3.20.0 to 3.20.1maintenance
- ·Expose BaseConfig to tool and prompt handlersmaintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1maintenance
- ·Update mcpchecker evaluation resultsmaintenance
59 lines1 removed7 added12 fixed1 other38 maintenancetyped from the source notes
v0.0.582026-02-27patchbreaking+++++++++*********sharesource - !·Rename metrics from mcp_ to k8s_mcp_ prefixmaintenance / breaking
- !*Resources_create_or_update removes status updatesfixed / breaking
- !·Remove mark3labs/mcp-go dependency from test infrastructuremaintenance / breaking
- +Add prompt documentation generation to update-readme-toolsadded
- +Add secondary network interface support to vm_createadded
- +Add troubleshoot action to vm_lifecycle tooladded
- +Add default server instructions for MCP Tool Searchadded
- +Add evals for 'config' toolsetadded
- +Add kubevirt tasks for vmsnapshot and vmrestoreadded
- +Update evals for latest mcpchecker enhancementadded
- +Add grace period seconds to delete optionsadded
- +Adding evals for helm toolsetadded
27 more lines
- +Update mcpchecker to use labelsadded
- +Propagate user agent to api serveradded
- +Make Service targetPort Configurableadded
- +Add structured content supportadded
- +Add _meta field support for tool definitionsadded
- +Centralize K8s error logging in MCP tool handleradded
- +Add pre-execution validation layeradded
- +Add helm docs ci check and regenerate docsadded
- +Clone vm eval task and tooladded
- +Add kubevirt toolset support to mcpchecker workflowadded
- *Remove version field from OCI package for MCP registry compliancefixed
- *Mcpchecker action yaml syntaxfixed
- *Ensure InputSchema.Properties is initialized for all toolsfixed
- *Use root context $ in tpl() inside with blocksfixed
- *Use namespace label in recording rules for multi-tenant RBACfixed
- *Update mcpchecker to use latest versionfixed
- *Kubernetes-mcp-server is incompatible with llama.cpp (JSON-Schema)fixed
- *Remove hardcoded portfixed
- *Use name helper for container name to respect nameOverridefixed
- *Resolve race conditions in tests and MCP serverfixed
- *Sort Toolsets() output for deterministic orderingfixed
- *Resources_create_or_update forces SSAfixed
- *Improve eval task prompts for reliabilityfixed
- *Improve test accuracy and naming after BaseDefault refactorfixed
- *TestReloadUpdatesToolsets was reloading a different server than the one under testfixed
- *Improve mcpchecker workflow reliabilityfixed
- *Remove pr target from mcpchecker action as secrets won't be included properlyfixed
40 maintenance lines (dependency bumps, CI, tests, docs)
- ·Upload results.json from weekly run to repomaintenance
- ·Add check to verify README.md MCP tools are up-to-datemaintenance
- ·Bump actions/download-artifact from 6 to 7maintenance
- ·Using a more generic way to list toolsetsmaintenance
- ·Remove unused tool-scoped authorization middlewaremaintenance
- ·Bump mcpchecker/mcpchecker from 0.0.3 to 0.0.4maintenance
- ·Run goimportsmaintenance
- ·Bump go from 1.25.0 to 1.25.6maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.39.0 to 1.40.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.39.0 to 1.40.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.39.0 to 1.40.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0maintenance
- ·Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.39.0 to 1.40.0maintenance
- ·Bump mcpchecker/mcpchecker from 0.0.4 to 0.0.5maintenance
- ·Skip CLI tests if there is an overridemaintenance
- ·Make mcp registration/deregistration consistentmaintenance
- ·Add helm chart validation to CI pipelinemaintenance
- ·Bump golang.org/x/oauth2 from 0.34.0 to 0.35.0maintenance
- ·Bump mcpchecker/mcpchecker from 0.0.5 to 0.0.6maintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.2.0 to 1.3.0maintenance
- ·Bump mcpchecker from 0.0.6 to 0.0.7maintenance
- ·Bump k8s.io/apiextensions-apiserver from 0.35.0 to 0.35.1maintenance
- ·Bump k8s.io/cli-runtime from 0.35.0 to 0.35.1maintenance
- ·Bump k8s.io/metrics from 0.35.0 to 0.35.1maintenance
- ·Bump k8s.io/kubectl from 0.35.0 to 0.35.1maintenance
- ·Bump golangci-lint from v2.8.0 to v2.9.0maintenance
- ·Improve user agent handling and test infrastructuremaintenance
- ·Update mcpchecker action to 0.0.9maintenance
- ·Simplify structured content API with auto-serializationmaintenance
- ·Add configuration reference and reorganize documentationmaintenance
- ·Simplify PrometheusRule by removing redundant recording rulesmaintenance
- ·Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1maintenance
- ·Add cross-cluster deployment guide and improve in-cluster error UXmaintenance
- ·Add test for resources_create_or_update SSA forcemaintenance
- ·Improve configuration and documentation coveragemaintenance
- ·Extract BaseDefault() and decouple tests from downstream overridesmaintenance
- ·Add slack channel link to READMEmaintenance
- ·Bump mcpchecker action to 0.0.10maintenance
- ·Bump actions/download-artifact from 7 to 8maintenance
- ·Add CNCF Slack invitation link to community sectionmaintenance
79 lines19 added18 fixed42 maintenancetyped from the source notes
20 older releases
| v0.0.57 | 2026-01-27 | patch | security +++++++++~********! 62 lines |
| v0.0.56 | 2025-12-23 | patch | breaking ++++++++++-***** 61 lines |
| v0.0.55 | 2025-12-03 | patch | breaking ++++++++++++++**** 56 lines |
| v0.0.54 | 2025-11-12 | patch | +++++++++~~******* 56 lines |
| v0.0.53 | 2025-10-10 | patch | security +++~~! 19 lines |
| v0.0.52 | 2025-09-25 | patch | ++* 10 lines |
| v0.0.51 | 2025-09-17 | patch | ++* 12 lines |
| v0.0.50 | 2025-09-11 | patch | ++* 27 lines |
| v0.0.49 | 2025-08-08 | patch | ++++++ 14 lines |
| v0.0.48 | 2025-08-05 | patch | ** 11 lines |
| v0.0.47 | 2025-07-31 | patch | +++* 22 lines |
| v0.0.46 | 2025-07-23 | patch | ++** 8 lines |
| v0.0.45 | 2025-07-17 | patch | ++++ 20 lines |
| v0.0.44 | 2025-07-02 | patch | ++ 8 lines |
| v0.0.43 | 2025-06-20 | patch | +* 16 lines |
| v0.0.42 | 2025-06-16 | patch | + 1 lines |
| v0.0.41 | 2025-06-13 | patch | + 1 lines |
| v0.0.40 | 2025-06-12 | patch | breaking +++ 7 lines |
| v0.0.39 | 2025-06-05 | patch | breaking + 3 lines |
| v0.0.38 | 2025-05-30 | patch | ++ 2 lines |