What onecli/onecli shipped
Written by FoxPlug from the repository's own releases; not affiliated with Onecli. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/onecli/onecli; Onecli did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- The gateway now relays a CONNECT tunnel when the proxy username is open, so origins see the client's own TLS and browsers work against sites behind bot defences. Pull request #611
- A Helm chart deploys OneCLI on Kubernetes with hosted agents running as native Kubernetes Jobs. Pull request #605
- Pylon integration added with API token and US/EU regions, with setup-guide links on every connect surface and a two-image agent sandbox. Pull request #603
- Circleback integration added, Navan paste cleaning fixed, and agent API-docs hints provided. Pull request #601
- Google Drive per-folder permissions, Navan and Timeless apps, grouped Slack approvals, and OAuth refresh hardening landed. Pull request #599
- The chart publish job now logs in through docker/login-action so cosign can sign the chart. Pull request #609
- Cosign-installer is pinned to an exact v4 tag so the chart job can start. Pull request #607
Why it matters
This week moved OneCLI forward on several fronts. The gateway open tunnel lane makes browsers work against sites with bot defences, while the Helm chart makes Kubernetes self-hosting practical by running hosted agents as Kubernetes Jobs. Several integrations and fixes landed too, including Pylon with region handling, Circleback, Navan and Timeless apps, Google Drive folder permissions, grouped Slack approvals, OAuth refresh hardening, and a sequence of chart publish fixes for cosign signing.
Changelog entry
- V2.12.0: open tunnel lane for browsers, Runs and Network tabs in Activity. Release
- V2.11.2: publish logs the chart job in through docker/login-action so cosign can sign. Release
- V2.11.1: publish pins cosign-installer to an exact v4 tag so the chart job can start. Release
- V2.11.0: Helm chart for Kubernetes self-hosting, agent webhooks, evals and run history. Release
- V2.10.0: Pylon integration, setup-guide links on every connect surface, and a two-image agent sandbox. Release
- V2.9.0: Circleback integration, Navan paste cleaning and agent API-docs hints. Release
- V2.8.0: Google Drive folder permissions, Navan + Timeless apps, grouped Slack approvals, OAuth refresh hardening, egress guard. Release
OneCLI v2.12.0: gateway open tunnel lane lets browsers reach sites behind bot defences. Earlier this week: Helm chart for Kubernetes self-hosting, Pylon and Circleback integrations, Google Drive folder permissions, grouped Slack approvals, and chart publish fixes for cosign signi
OneCLI shipped several releases this week. v2.12.0 adds an open tunnel lane to the gateway so browsers work against sites behind bot defences. v2.11.0 introduced a Helm chart for Kubernetes self-hosting, with hosted agents running as native Kubernetes Jobs. v2.10.0 added the Pylon integration with API token and US/EU region handling, setup-guide links on every connect surface, and a two-image agent sandbox. v2.9.0 brought the Circleback integration, Navan paste cleaning, and agent API-docs hints. v2.8.0 added Google Drive per-folder permissions, Navan and Timeless apps, grouped Slack approvals, OAuth refresh hardening, and an egress guard. Chart publishing was also fixed so cosign can sign the chart.