Skip to content

kubetail

vcli/v0.18.0 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 1mo Logging
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

cluster web devops kubernetes logging monitoring
+3 more
observability private real-time

Affected surfaces

deps

Summary

AI summary

Bumped dependencies for CVE fixes, tightened CSRF checks, added timestamp utilities, and improved install script health checks.

Full changelog

What's Changed

  • 🎣 Add arrow key navigation for selected log cells by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1126
  • 🎣 Fix thin-border selection bug and refactor code by @amorey in https://github.com/kubetail-org/kubetail/pull/1139
  • ✨ Address CodeQL alert and bump dependencies for CVEs by @amorey in https://github.com/kubetail-org/kubetail/pull/1140
  • 🎣 Bump kubetail backend probe timeout to 5s by @amorey in https://github.com/kubetail-org/kubetail/pull/1141
  • 🎣 Fix race condition in stream forwarder causing flaky test by @jerome-wilson in https://github.com/kubetail-org/kubetail/pull/1138
  • test(shared): replace time.sleep with channel sync in syncgroup tests by @rwrrioe in https://github.com/kubetail-org/kubetail/pull/1143
  • ✨ Add bats tests and shellcheck for install script. by @KaanSimsek in https://github.com/kubetail-org/kubetail/pull/1144
  • ✨ Rename install-script CI jobs to shell lint/test by @amorey in https://github.com/kubetail-org/kubetail/pull/1145
  • 🐋 Add utilities for configurable timestamp formatting and timezone support by @DavidReque in https://github.com/kubetail-org/kubetail/pull/1146
  • ✨ Improve error handling and remove unnecessary unwraps in cluster agent by @KaanSimsek in https://github.com/kubetail-org/kubetail/pull/1147
  • ✨ Bump dependencies by @amorey in https://github.com/kubetail-org/kubetail/pull/1153
  • 🎣 Allow absent Sec-Fetch-Site in CSRF check by @amorey in https://github.com/kubetail-org/kubetail/pull/1155
  • ✨ Add Python lint job to PR checks by @AhmedRabea2100 in https://github.com/kubetail-org/kubetail/pull/1157
  • 🎣 Tighten Sec-Fetch-Site CSRF check to reject same-site by @amorey in https://github.com/kubetail-org/kubetail/pull/1158
  • ✨ Add install.sh health checks to package-healthcheck cronjob by @smazmi in https://github.com/kubetail-org/kubetail/pull/1151
  • ✨ Add fail-fast: false to matrix jobs in CI workflow by @smazmi in https://github.com/kubetail-org/kubetail/pull/1160
  • ✨ Make PR checks diff-aware by @Tiago-Vier-Preto in https://github.com/kubetail-org/kubetail/pull/1159
  • ✨ Simplify install-sh package healthcheck job to a single shell path by @amorey in https://github.com/kubetail-org/kubetail/pull/1161
  • ✨ Simplify console sidebar UI and bump @kubetail/ui by @amorey in https://github.com/kubetail-org/kubetail/pull/1164
  • ✨ Normalize sidebar label weights and counter alignment by @amorey in https://github.com/kubetail-org/kubetail/pull/1165
  • ✨ Upgrade frontend dependencies and graphql-codegen to v6/v7 by @amorey in https://github.com/kubetail-org/kubetail/pull/1166
  • ✨ Release/0.25.0 by @amorey in https://github.com/kubetail-org/kubetail/pull/1167
  • ✨ Bump quic-go to v0.59.1 (CVE) and pin esbuild override by @amorey in https://github.com/kubetail-org/kubetail/pull/1168
  • ✨ Pin pnpm via packageManager field and use frozen lockfile by @amorey in https://github.com/kubetail-org/kubetail/pull/1169

New Contributors

  • @rwrrioe made their first contribution in https://github.com/kubetail-org/kubetail/pull/1143
  • @KaanSimsek made their first contribution in https://github.com/kubetail-org/kubetail/pull/1144
  • @AhmedRabea2100 made their first contribution in https://github.com/kubetail-org/kubetail/pull/1157
  • @Tiago-Vier-Preto made their first contribution in https://github.com/kubetail-org/kubetail/pull/1159

Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.17.0...cli/v0.18.0

Security Fixes

  • dep: Bump quic-go to v0.59.1 (CVE)
  • Address CodeQL alert and bump dependencies for CVEs
  • Tighten Sec-Fetch-Site CSRF check to reject same-site requests

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track kubetail

Get notified when new releases ship.

Sign up free

About kubetail

Real-time logging dashboard for Kubernetes. View logs in a terminal or a browser. Run anywhere - desktop, cluster, docker.

All releases →

Beta — feedback welcome: [email protected]