Release history
kubetail releases
Real-time logging dashboard for Kubernetes. View logs in a terminal or a browser. Run anywhere - desktop, cluster, docker.
All releases
12 shown
- Remove invalid --upload flag from cosign sign in release workflow
- Prevent client‑supplied X-Forwarded-Authorization from shadowing service‑account-token
- Harden CSRF token handling
- Stop trusting X-Forwarded-* headers in same-origin check
- Support forwarded host in same-origin check
- Relax hex requirement for session key-pairs
- Trigger publish workflows only on stable releases
Full changelog
What's Changed
- ✨ Support forwarded host in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1103
- 🎣 Relax hex requirement for session key-pairs by @amorey in https://github.com/kubetail-org/kubetail/pull/1107
- ✨ Trigger publish workflows only on stable releases by @amorey in https://github.com/kubetail-org/kubetail/pull/1110
- ✨ Add CSRF token support to GraphiQL page by @amorey in https://github.com/kubetail-org/kubetail/pull/1111
- 🎣 Fix CSRF rejection of legitimate same-origin POSTs by @amorey in https://github.com/kubetail-org/kubetail/pull/1112
- 🎣 Prevent client-supplied X-Forwarded-Authorization from shadowing service-account-token by @amorey in https://github.com/kubetail-org/kubetail/pull/1113
- 🎣 Harden CSRF token handling by @amorey in https://github.com/kubetail-org/kubetail/pull/1114
- 🎣 Stop trusting X-Forwarded-* headers in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1117
- ✨ Add allowed-origins config for proxied deployments by @amorey in https://github.com/kubetail-org/kubetail/pull/1118
- ✨ Consolidate publish-guru workflow and add pkgcheck by @amorey in https://github.com/kubetail-org/kubetail/pull/1120
- 🎣 Fix context cancellation in mergeLogStreams by @jerome-wilson in https://github.com/kubetail-org/kubetail/pull/1121
- ✨ Add end-to-end test suite by @amorey in https://github.com/kubetail-org/kubetail/pull/1127
- ✨ Put cluster-api behind kube-apiserver aggregation layer by @amorey in https://github.com/kubetail-org/kubetail/pull/1125
- ✨ Simplify e2e suite by dropping env/backend parametrization by @amorey in https://github.com/kubetail-org/kubetail/pull/1129
- ✨ Migrate e2e cluster tool from k3d to kind by @amorey in https://github.com/kubetail-org/kubetail/pull/1130
- ✨ Bump grpc-dispatcher-go to v0.1.6 by @amorey in https://github.com/kubetail-org/kubetail/pull/1132
- 🐋 Add Kubetail API backend to
kubetail logsby @amorey in https://github.com/kubetail-org/kubetail/pull/1133 - 🎣 Remove invalid --upload flag from cosign sign in release workflow by @amorey in https://github.com/kubetail-org/kubetail/pull/1134
- 🎣 Fix kubetail logs backend fallback, filters, and pagination by @amorey in https://github.com/kubetail-org/kubetail/pull/1135
- ✨ Add background update check with notification by @amorey in https://github.com/kubetail-org/kubetail/pull/1137
Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.15.0...cli/v0.17.0
- X-Forwarded-* headers no longer trusted in same-origin validation
- X-Forwarded-Authorization header no longer shadows service-account-token
- WebSocket per-message compression disabled in GraphQL servers
- CSRF token handling hardened with improved validation
- CSRF protection added to dashboard and cluster-api
- CSRF tokens support in GraphiQL
- Allowed-origins configuration for proxied deployments
Full changelog
What's Changed
- ✨ Drop kubetail-bin from publish-guru and trim old ebuilds by @amorey in https://github.com/kubetail-org/kubetail/pull/1100
- ✨ Support forwarded host in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1103
- 🎣 Honor Forwarded proto directive in same-origin scheme check by @amorey in https://github.com/kubetail-org/kubetail/pull/1104
- 🎣 Disable WebSocket per-message compression in GraphQL servers by @amorey in https://github.com/kubetail-org/kubetail/pull/1105
- 🐋 Add CSRF protection to dashboard and cluster-api by @amorey in https://github.com/kubetail-org/kubetail/pull/1106
- 🎣 Relax hex requirement for session key-pairs by @amorey in https://github.com/kubetail-org/kubetail/pull/1107
- ✨ Release/0.22.0 by @amorey in https://github.com/kubetail-org/kubetail/pull/1109
- ✨ Trigger publish workflows only on stable releases by @amorey in https://github.com/kubetail-org/kubetail/pull/1110
- ✨ Add CSRF token support to GraphiQL page by @amorey in https://github.com/kubetail-org/kubetail/pull/1111
- 🎣 Fix CSRF rejection of legitimate same-origin POSTs by @amorey in https://github.com/kubetail-org/kubetail/pull/1112
- 🎣 Prevent client-supplied X-Forwarded-Authorization from shadowing service-account-token by @amorey in https://github.com/kubetail-org/kubetail/pull/1113
- 🎣 Harden CSRF token handling by @amorey in https://github.com/kubetail-org/kubetail/pull/1114
- 🎣 Stop trusting X-Forwarded-* headers in same-origin check by @amorey in https://github.com/kubetail-org/kubetail/pull/1117
- ✨ Add allowed-origins config for proxied deployments by @amorey in https://github.com/kubetail-org/kubetail/pull/1118
Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.15.0...cli/v0.16.0
- Sec-Fetch-Site CSRF check enforcement on dashboard dynamic routes
- WebSocket security hardening with same-origin checks
- Cluster-API authentication and transport hardening
- User-selectable timezone for timestamp display
- Log download with TSV, CSV, and text export
- Persistent user preferences with theme integration
Full changelog
What's Changed
- 🎣 Gate WebSocket reconnection with HTTP health check by @jerome-wilson in https://github.com/kubetail-org/kubetail/pull/1094
- 🐋 Add user-selectable timezone for timestamp display by @amorey in https://github.com/kubetail-org/kubetail/pull/1085
- 🐋 Add persistent user preferences with theme integration by @amorey in 🐋 https://github.com/kubetail-org/kubetail/pull/1086
- 🐋 Persist timezone preference across sessions by @amorey in https://github.com/kubetail-org/kubetail/pull/1087
- ✨ Align timestamp copy-as menu with shared format list by @amorey in https://github.com/kubetail-org/kubetail/pull/1089
- 🐋 Enforce Sec-Fetch-Site CSRF check on all dashboard dynamic routes by @amorey in https://github.com/kubetail-org/kubetail/pull/1092
- 🐋 Add log download with TSV/CSV/text export by @amorey in https://github.com/kubetail-org/kubetail/pull/1090
- 🎣 Fix log viewer column widths under-reporting and compounding by @amorey in https://github.com/kubetail-org/kubetail/pull/1095
- ✨ Harden cluster-api authentication and transport by @amorey in https://github.com/kubetail-org/kubetail/pull/1096
- ✨ Harden WebSocket security with same-origin checks by @amorey in https://github.com/kubetail-org/kubetail/pull/1097
- ✨ Harden WebSocket security with same-origin checks by @amorey in https://github.com/kubetail-org/kubetail/pull/1097
Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.14.1...cli/v0.15.0
- CVE-2026-29063
- Security upgrades
- Log viewer multi-cell selection, context menus, and date range filtering
- Forward bearer tokens to resolve permission denied errors in authMode: token
- Add upgrade notification banner and notifications integration
- CVE-2026-29063
- Log viewer multi-cell selection, right-click context menu, and clipboard copy support
- Bearer token forwarding to resolve permission denied errors in authMode
- Upgrade notification banner and notifications integration
- Security upgrades
- kubeContext support in ClusterVersionStatus
- Upgrade notification banner and notifications integration
- Cross-tab theme synchronization
Full changelog
What's Changed
- 🎣 Forward bearer tokens to resolve permission denied errors in authMode: token by @amorey in https://github.com/kubetail-org/kubetail/pull/1000
- ✨ Replace flushSync workaround with native useFlushSync option by @suresh-jakhar in https://github.com/kubetail-org/kubetail/pull/1005
- ✨ Bump @tanstack/react-virtual to 3.13.21 by @ndpvt-web in https://github.com/kubetail-org/kubetail/pull/1006
- 🐋 Add upgrade notification banner and notifications integration by @DavidReque in https://github.com/kubetail-org/kubetail/pull/998
- ✨Remove unnecessary explicit WorkloadItem type annotations by @DavidReque in https://github.com/kubetail-org/kubetail/pull/1007
- 🐋 Add kubeContext support to ClusterVersionStatus by @DavidReque in https://github.com/kubetail-org/kubetail/pull/1008
- 🐋 Upgrade megaphone to fix write on closed channel panic by @amorey in https://github.com/kubetail-org/kubetail/pull/1013
- 🐋 Security upgrades by @amorey in https://github.com/kubetail-org/kubetail/pull/1015
- ✨ Switch to ubuntu-slim for small CI/CD tasks by @Roshan1299 in https://github.com/kubetail-org/kubetail/pull/1022
- 🐋 Add RISC-V runners to PR checks by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1023
- 🎣 Sync theme changes across tabs by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1031
- ✨ Add tests for theme changes across tabs by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1035
- ✨ Use Go vendoring to speed up PR checks by @wiliyam in https://github.com/kubetail-org/kubetail/pull/1034
- Fix: Upgrade dashboard-ui to Vite 8 by @gabrnavarro in https://github.com/kubetail-org/kubetail/pull/1042
- 🎣 Improve graceful shutdown behavior of cluster API server by @amorey in https://github.com/kubetail-org/kubetail/pull/1046
- Improve graceful shutdown behavior of dashboard server by @amorey in https://github.com/kubetail-org/kubetail/pull/1047
- ✨ Simplify ConnectionManager shutdown to synchronous Close by @amorey in https://github.com/kubetail-org/kubetail/pull/1050
- 🎣 Re-pin auto-scroll on scroll container resize by @amorey in https://github.com/kubetail-org/kubetail/pull/1052
- ✨ Move RISC-V tests to post-merge workflow by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1053
- ✨ ci: add riscv64 cli-builds and docker-builds to post-merge checks by @ZhangDT-sky in https://github.com/kubetail-org/kubetail/pull/1056
- 🐋 Add log row selection and clipboard copy support by @amorey in https://github.com/kubetail-org/kubetail/pull/1057
- 🐋 Add right-click context menu to log viewer cells by @amorey in https://github.com/kubetail-org/kubetail/pull/1058
New Contributors
- @suresh-jakhar made their first contribution in https://github.com/kubetail-org/kubetail/pull/1005
- @ndpvt-web made their first contribution in https://github.com/kubetail-org/kubetail/pull/1006
- @Roshan1299 made their first contribution in https://github.com/kubetail-org/kubetail/pull/1022
- @ZhangDT-sky made their first contribution in https://github.com/kubetail-org/kubetail/pull/1023
- @wiliyam made their first contribution in https://github.com/kubetail-org/kubetail/pull/1034
- @gabrnavarro made their first contribution in https://github.com/kubetail-org/kubetail/pull/1042
Full Changelog: https://github.com/kubetail-org/kubetail/compare/cli/v0.12.1...cli/v0.13.0
- CVE-2026-29063
- Upgrade notification banner
- CVE-2026-24051
- Custom dashboard columns configuration
- CVE-2025-58181
- CVE-2025-64702
- CLI configuration file support
- Kubernetes authentication caching
- Alpine Linux packages
- CLI configuration file support
- Alpine Linux packages
- CVE-2025-58181
- CVE-2025-64702
- Docker image support
- In-cluster CLI authentication flag