What metalbear-co/mirrord shipped
Written by FoxPlug from the repository's own releases; not affiliated with Metalbear. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/metalbear-co/mirrord; Metalbear did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Version 3.272.0 adds local fallback collection and mirrord diagnose sip-report for protected macOS binaries that still require Rosetta, and adds the
explain_config_optiontool to mirrord mcp. Release - Version 3.271.0 adds mirrord preview diff to compare manifest files with the live cluster, mirrord preview start --resource to build previews from your manifest files, and experimental Windows support where the layer is injected with stork and installs its hooks before a launched program reaches its entry point. Release
- Version 3.270.0 adds feature.network.incoming.tls_delivery.client_cert_source; with target, a preview session presents the client certificate already inside the target's container, read by the operator from a running pod, so mutual TLS previews no longer need the certificate. Release
- A major Windows refactor replaces dll-syringe with stork, which adds APC and import-table injection next to the existing load-library method, selectable with --injection-method or MIRRORD_INJECTION_METHOD. Pull request #4910
- Adds mirrord preview start --resource and mirrord preview diff, so previews can be built from your manifest files and compared with the live cluster. Pull request #4952
- A developer can reach a serverless target through the sessions-manager hosted by the mirrord operator, authenticated with their kubeconfig, instead of a standalone sessions-manager's URL and token. Pull request #4954
- The CLI gains mirrord operator uninstall. Pull request #4990
- Mirrord operator install gets a prompt and a --context flag. Pull request #4989
- Bun DNS on macOS now works by intercepting the lower level dnssd library calls, which had an async workflow with no readiness control between Apple's DNS responder and the caller. Pull request #5022
- While a session's queue split waits for the target's patched pods, the CLI polls its own queuesplits entry and shows each pod's reason as progress, warning once after 30 seconds, and multi-cluster sessions combine the rows from every workload cluster. Pull request #5033
Why it matters
This week brings three releases with preview tooling, mutual TLS client certificate handling, Windows injection work, and operator install and uninstall commands. Sessions also get clearer feedback while queue splits wait for patched pods, and several fixes target the layer, agent, and Windows exec behavior.
Changelog entry
- Version 3.272.0: local fallback collection and mirrord diagnose sip-report for protected macOS binaries still requiring Rosetta;
explain_config_optionadded to mirrord mcp. Release - Version 3.271.0: mirrord preview diff, mirrord preview start --resource, and experimental Windows layer injection with stork. Release
- Version 3.270.0: feature.network.incoming.tls_delivery.client_cert_source with target, so a preview session presents the client certificate already inside the target's container. Release
- Windows injection now uses stork, with APC and import-table injection alongside load-library, selectable with --injection-method or MIRRORD_INJECTION_METHOD. Pull request #4910
- Client support for reaching serverless targets through the sessions-manager hosted by the mirrord operator, authenticated with your kubeconfig. Pull request #4954
- Added mirrord operator uninstall. Pull request #4990
- Mirrord operator install gained a prompt and a --context flag. Pull request #4989
- Queue split progress now shows each patched pod's readiness reason, warning once after 30 seconds, combining rows from every workload cluster. Pull request #5033
- Bun DNS on macOS now works by intercepting dnssd calls. Pull request #5022
- Mirrord exec on Windows finishes its progress tree before the user's program runs, so the spinner no longer draws over its output. Pull request #5001
- Fixed relative unlinkat so renaming an opened directory and recreating its old name no longer deletes an entry in the replacement directory. Pull request #5042
- Keyless CI is now allowed on supporting Free operators, preserving the CI-key requirement elsewhere. Pull request #5019
Releases 3.270.0 to 3.272.0 shipped. Preview diff and preview start --resource, previews that reuse the target pod's TLS client certificate, experimental Windows injection with stork, serverless targets over the operator's sessions-manager, plus operator install and uninstall in
This week mirrord shipped releases 3.270.0, 3.271.0 and 3.272.0. Preview gained diff and start --resource so you can build previews from manifest files and compare them with the live cluster. Preview sessions can present the TLS client certificate already inside the target's container. Windows support is experimental: injection now uses stork and installs hooks before a launched program reaches its entry point. Serverless targets can be reached through the operator's sessions-manager using your kubeconfig. The CLI also gained operator install with a prompt and --context, and operator uninstall.
Week of September 28, 2026
What shipped
- Version 3.268.0 released with mirrord mcp, an MCP server over stdio, and mirrord operator install command to deploy the operator from helm charts without additional tools. Release
- Added mirrord operator install command to install the operator from the helm chart. Pull request #4963
- MCP server v0 implemented for integration with external agents. Pull request #4979
- PostgreSQL database branches now support
additional_databasesto copy multiple databases from one source server into a single branch. Pull request #4973 - Mirrord session list command now supports --format json output for programmatic access to session information. Pull request #4968
- Added warning when local application listens on a port that the target container does not declare, informing users about
port_mappingconfiguration. Pull request #4971 - Mirrord up now suggests the closest matching name when users provide unknown configuration fields or values. Pull request #4978
- CLI now displays Kubernetes environment information in error messages to help users debug configuration issues. Pull request #4974
- Fixed
sendfile_detouron macOS to properly reset count when nothing is written, preventing data skipping in files larger than 64KiB. Pull request #4984 - End-to-end consumers now survive broker reconnection after operator restart during mirrord sessions. Pull request #4945
Why it matters
Version 3.268.0 brings operator installation and MCP server support, while database branching gains multi-database support. Bug fixes for macOS file handling and improved error messages make the tool more reliable and user-friendly.
Changelog entry
- Added mirrord mcp, an MCP server over stdio with
validate_configtool for checking configuration against installed schema. Release - Added mirrord operator install command to install operator from helm chart. Release
- Added
additional_databasesto PostgreSQL db branches for copying multiple databases from one source into one branch. Pull request #4973 - Added JSON output format to mirrord session list command. Pull request #4968
- Added warning when local app listens on port different from target container declaration. Pull request #4971
- Improved mirrord up to suggest closest name matches for unknown fields and values. Pull request #4978
- Changed CLI to display Kubernetes environment info in error messages before help section. Pull request #4974
- Fixed
sendfile_detouron macOS resetting count when nothing is written, preventing byte skipping. Pull request #4984 - Improved error messaging by naming the agent port-forward step in Kubernetes and CLI errors. Pull request #4983
- Changed agent to log missing
pidfd_openas warning instead of error. Pull request #4977 - Fixed e2e consumers to survive broker reconnect after operator restart. Pull request #4945
- Changed UI daemon to start only for DB branching and detach from Ctrl+C in mirrord up. Pull request #4980
Mirrord 3.268.0: operator install command, MCP server support, PostgreSQL multi-database branches, improved error messages with Kubernetes info, and macOS sendfile fix.
Mirrord 3.268.0 is out. Simplified operator deployment with mirrord operator install, launched MCP server for external integration, expanded PostgreSQL branching to copy multiple databases, added JSON output to session list, and improved debugging with Kubernetes environment details in error messages.
Week of September 14, 2026
What shipped
- Release 3.262.0 adds --unmatched and --session-key-field flags to mirrord subscribe for reporting unfiltered queue messages and session identifiers, and introduces an Events tab to mirrord ui that lists HTTP and queue messages intercepted across every cluster session. Release
- The Events tab in mirrord ui shows the operator's interception events for every session in the selected context at once, with a compatibility notice for older operators. Pull request #4881
- Mirrord subscribe and mirrord ui now send configured baggage headers with their requests to the operator, allowing them to reach operators behind header filters. Pull request #4883
- PHP Unix socket pathname truncation is fixed by respecting the NUL terminator that socket2 expects, restoring
unix_streamsmatching and remote forwarding. Pull request #4913 - The TLS steal server now verifies certificates against the ServerName from the client's SNI, request URI, or pod IP, resolving verification failures when nginx upstreams send no SNI. Pull request #4900
- Mirrord ui no longer hangs when the selected context's Kubernetes credentials have expired, by bounding both kube client builds and operator reads. Pull request #4882
- Release 3.258.0 adds mirrord config set and mirrord config unset commands for updating user-wide configuration, and adds mirror mode to mirrord up for mirroring traffic and queue messages instead of splitting them. Release
- Release 3.260.0 applies global configuration consistently to every mirrord command while preserving explicit project configuration, environment variables, and CLI flags. Release
- Mirrord now recognizes the macOS arm64e.x1 Mach-O CPU subtype for SIP binaries, falling back to
x86_64instead of extracting unsupported arm64e.x1 slices. Pull request #4892
Why it matters
This week brings improvements to session introspection, configuration management, and compatibility across platforms and container runtimes. The Events tab and subscribe enhancements let users see what traffic the operator is capturing, while fixes to TLS verification, Unix socket handling, and Kubernetes credential timeouts address real deployment scenarios.
Changelog entry
- Added --unmatched and --session-key-field to mirrord subscribe for reporting queue messages with no matching filter and naming the session each event belongs to Release
- Added Events tab to mirrord ui listing HTTP and queue messages the operator intercepted across every cluster session Release
- Events tab shows operator interception events for every session in the selected context with compatibility notice for older operators Pull request #4881
- Fixed PHP Unix socket pathname truncation by respecting NUL terminator required by socket2 Pull request #4913
- Mirrord subscribe and mirrord ui now send configured baggage with requests to the operator Pull request #4883
- Fixed mirrord ui hanging on expired Kubernetes credentials by bounding kube client builds and operator reads Pull request #4882
- TLS steal server now verifies certificates against ServerName from client SNI, request URI, or pod IP Pull request #4900
- Mirrord container now supports Unix sockets by sharing temporary bridge socket with app container Pull request #4903
- Added support for macOS arm64e.x1 Mach-O CPU subtype by recognizing and falling back to
x86_64Pull request #4892
3.262.0 ships: Events tab shows HTTP and queue messages intercepted per session. Subscribe adds --unmatched flag and --session-key-field. UI and subscribe now route with configured baggage for filtered operators.
Mirrord 3.262.0 is out. New Events tab in the UI displays every HTTP and queue message the operator intercepted, per session. The subscribe command adds --unmatched to report messages that no filter matched, and --session-key-field to name which session each event belongs to. Both UI and subscribe now send configured baggage headers with their operator requests, fixing remote operator access behind header filters.