Release v4.18.0

Changelog%0A%0AAll notable changes to this project will be documented in this file. See standard-version for commit guidelines.%0A%0A## 4.18.0 (2026-04-14)%0A%0A%0A### Features%0A%0A* add tini to Dockerfile for cleaning up zombie processes (#969) (5865383)%0A* consolidate k8s service fetching (#966) (11c1e9f)%0A* disable ingress-nginx (#965) (89d7661)%0A* expose raw swagger.json (#955) (b1555fa)%0A* hide knative when k8s version is below 1.33 (#970) (190682c)%0A* k8s v2 endpoints (#968) (8391b9f)%0A* make git username optional (#971) (af8c6ce)%0A* only allow container creation when tekton is enabled (#960) (b255d95)%0A* update manifests for gateway api (#943) (52f9b6e)%0A%0A%0A### Bug Fixes%0A%0A* remove smtp from settings (#956) (0787034)%0A%0A%0A### Others%0A%0A* deps: bump the npm-dependencies group with 6 updates (#957) (02f3def)%0A* post release v4.17 (#974) (77621f3)%0A%0A## 4.17.0 (2026-03-20)%0A%0A%0A### Features%0A%0A* add enabled param to getAllAplCatalogs (#922) (96e3b96)%0A* add permission check for team members to restrict service creation (#926) (6fc8b75)%0A* added caching for the BYO Catalog (#949) (b96f3df)%0A* allow subdirectories for catalogs (#928) (ecceef7)%0A* sealed secret namespace endpoints (#925) (fb028d1)%0A* sparse checkout for chart (#942) (6a2aba7)%0A%0A%0A### Bug Fixes%0A%0A* add AplCatalogChartSpec to support status object (#953) (192eb07)%0A* add teamId validation for cloudtty (#927) (e0ed019)%0A* concurrent git operations (#944) (a5a86fc)%0A* exclude objstorage regions (#950) (1f254a8)%0A* make git password not required (#951) (b46710e)%0A* platform secret path (#934) (98584e3)%0A* remove otomi.git.password from settings endpoint (#940) (54fdf6c)%0A* symlink traversal allows reading arbitrary server files via workload catalog (#933) (08441d1)%0A* user not allowed to perform create on Service.namespace resource (#941) (bb03334)%0A%0A%0A### Others%0A%0A* deps: bump @types/supertest from 6.0.3 to 7.2.0 (#938) (0ac372d)%0A* deps: bump actions/upload-artifact from 6 to 7 (#939) (b558a5d)%0A* deps: bump the npm-dependencies group across 1 directory with 12 updates (#948) (eacd5b2)%0A* deps: bump the npm-dependencies group with 7 updates (#916) (edad590)%0A* deps: bump the npm-dependencies group with 7 updates (#923) (99fb03a)%0A* deps: bump the npm-dependencies group with 7 updates (#952) (10ef130)%0A* deps: bump the npm-dependencies group with 8 updates (#935) (1e4d0bf)%0A* deps: bump the npm-dependencies group with 8 updates (#945) (71a5512)%0A* deps: bump the npm-dependencies group with 9 updates (#929) (7aef155)%0A%0A## 4.16.0 (2026-02-13)%0A%0A%0A### Features%0A%0A* add api auth tests for netpols, kubecfg and dockercfg (#912) (dbefa52)%0A* byo catalog support (#919) (1fe6405)%0A* make api work with external Git source (#915) (ca9eed1)%0A* remove Minio (#909) (7ad3d63)%0A* remove thanos (#908) (acc18c9)%0A* update sealed secret handling to use SealedSecret manifest format (#907) (8097dc4)%0A%0A%0A### Bug Fixes%0A%0A* default environment variable (#914) (e8a4dfc)%0A* delete cloudtty 403 error (#913) (233ba0b)%0A* teamApps setting enabled correctly (#920) (7f454c8)%0A%0A%0A### Others%0A%0A* deps: bump the npm-dependencies group across 1 directory with 18 updates (#911) ([cb0896c](https://github.com/redk...

Release v4.17.0

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.17.0 (2026-03-20)

Features

• add enabled param to getAllAplCatalogs (#922) (96e3b96)
• add permission check for team members to restrict service creation (#926) (6fc8b75)
• added caching for the BYO Catalog (#949) (b96f3df)
• allow subdirectories for catalogs (#928) (ecceef7)
• sealed secret namespace endpoints (#925) (fb028d1)
• sparse checkout for chart (#942) (6a2aba7)

Bug Fixes

• add AplCatalogChartSpec to support status object (#953) (192eb07)
• add teamId validation for cloudtty (#927) (e0ed019)
• concurrent git operations (#944) (a5a86fc)
• exclude objstorage regions (#950) (1f254a8)
• make git password not required (#951) (b46710e)
• platform secret path (#934) (98584e3)
• remove otomi.git.password from settings endpoint (#940) (54fdf6c)
• symlink traversal allows reading arbitrary server files via workload catalog (#933) (08441d1)
• user not allowed to perform create on Service.namespace resource (#941) (bb03334)

Release v4.16.0

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.16.0 (2026-02-13)

Features

• add api auth tests for netpols, kubecfg and dockercfg (#912) (dbefa52)
• byo catalog support (#919) (1fe6405)
• make api work with external Git source (#915) (ca9eed1)
• remove Minio (#909) (7ad3d63)
• remove thanos (#908) (acc18c9)
• update sealed secret handling to use SealedSecret manifest format (#907) (8097dc4)

Bug Fixes

• default environment variable (#914) (e8a4dfc)
• delete cloudtty 403 error (#913) (233ba0b)
• teamApps setting enabled correctly (#920) (7f454c8)

Release v4.14.7

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.7 (2026-02-09)

Bug Fixes

• delete cloudtty 403 error (#913) (d836af3)

Release v4.15.0

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.15.0 (2026-02-02)

Features

• add optional status field to model and initialize in requests (#885) (6c14fde)
• add TRUST_PROXY configuration for client IP detection (#884) (fefb72b)
• remove tempo (#904) (ba3999c)
• set default workload reviwion to main branch instead of HEAD (#906) (4f72314)

Bug Fixes

• apps enabled status (#897) (d280dcf)
• authors.md (#898) (b1f2c79)
• broken object storage wizard when cluster name is not of type string (#889) (61d54c3)
• destructure input data before merge (#891) (c868b03)
• dev env auth error handling (#903) (f770ce9)
• disabled ai pages for now (#893) (43d248a)
• exclude admin team from filter app secrets (#890) (109ed4a)
• getApps endpoint and limits data (#892) (de548da)
• missing acl schema (#888) (8967d63)
• sealed secret response data (#896) (8885ae3)
• symlink prevention with test (#895) (cfda1a9)

Others

• deps: bump express-rate-limit from 7.5.1 to 8.2.1 (#883) (5ccf09b)
• deps: bump globals from 16.5.0 to 17.0.0 (#901) (7544221)
• deps: bump jose from 5.10.0 to 6.1.3 (#881) (f4fc88d)
• deps: bump the npm-dependencies group across 1 directory with 15 updates (#894) (3a18608)
• deps: bump the npm-dependencies group with 6 updates (#899) (2b1e39e)

Release v4.14.6

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.6 (2026-01-15)

Bug Fixes

• apps enabled status (#897) (4172472)

Release v4.14.5

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.5 (2026-01-14)

Bug Fixes

• sealed secret response data (#896) (24ddb0a)

Release v4.14.4

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.4 (2026-01-12)

Bug Fixes

• destructure input data before merge (#891) (39c9d99)
• getApps endpoint and limits data (#892) (51cf309)

Release v4.14.3

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.3 (2026-01-08)

Bug Fixes

• exclude admin team from filter app secrets (#890) (ea40d9b)

Release v4.14.2

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.14.2 (2026-01-06)

Features

• add TRUST_PROXY configuration for client IP detection (#884) (55e43e6)