What openchoreo/openchoreo shipped
Written by FoxPlug from the repository's own releases; not affiliated with Openchoreo. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/openchoreo/openchoreo; Openchoreo did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of September 28, 2026
What shipped
- V1.3.1 released with fixes for audit log context scoping, service account actor IDs, and helm readable ID claims. Release
- V1.2.7 released with observability service ingress restrictions and single-object report authorization fixes. Release
- Occ releasebinding tree command added to show release binding resource trees with discovery warnings and filtering options. Pull request #4747
- Components with resource dependencies now emit delivery events for accurate Deployment Frequency, Lead Time, and Change Failure Rate calculations. Pull request #4849
- Observer MCP tools now return consistent error messages instead of raw internal service errors to callers. Pull request #4847
- Occ component logs --follow fixed to preserve sub-second precision and eliminate duplicate log entries. Pull request #4840
- Component admission webhook now validates names against DNS-1035 format at creation time to prevent later deployment failures. Pull request #3640
- Generated container specs now include explicit ports blocks so workload endpoints can be targeted by port name. Pull request #4382
- AutoDeploy webhook rejections now emit Kubernetes events so users can discover deployment failures in component status. Pull request #3924
- Observer MCP authorization denial messages updated to match REST handler format in test expectations. Pull request #4865
Why it matters
Three patch releases address audit logging, authorization, and delivery metrics tracking. The new releasebinding tree command and fixes to component validation and logging improve operational visibility and prevent silent failures.
Changelog entry
- V1.3.1: fix(cli) occ auditlogs context scoping and ascending paging; fix service account actor IDs in audit events; fix helm
readable_id_claimconfiguration Release - V1.2.7: fix(helm) restrict observability service ingress; fix single-object report authorization against report's own project Release
- Fix(cli): keep sub-second precision in occ component logs --follow Pull request #4840
- Fix(controller): emit delivery events for components with resource dependencies Pull request #4849
- Feat(cli): add occ releasebinding tree command to show resource trees with discovery warnings Pull request #4747
- Fix: observer MCP tools return consistent error messages instead of raw service errors Pull request #4847
- Fix(controller): validate component names against DNS-1035 format at admission time Pull request #3640
- Fix(controller): add container ports to workload specs for port-by-name targeting Pull request #4382
- Fix: emit Kubernetes events on autoDeploy webhook rejections Pull request #3924
Openchoreo v1.3.1 and v1.2.7 released. Fixes for audit logs, delivery metrics, and component validation. New occ releasebinding tree command for resource exploration.
Openchoreo releases v1.3.1 and v1.2.7 this week with improvements across audit logging, authorization, and delivery metrics. Components with resource dependencies now correctly emit events for DORA calculations. New occ releasebinding tree command enables resource exploration. DNS-1035 validation prevents silent component naming failures.
Week of September 21, 2026
What shipped
- V1.3.0 released with Audit Logs (beta) for recording state-modifying operations across REST API and MCP servers, readable from portal, occ command, or MCP tool. Release
- V1.3.0-rc.1 released with Audit Logs and Cost Insights features. Release
- V1.3.0-rc.2 released as follow-up to rc.1. Release
- Cluster hooks feature added to the project. Pull request #4829
- Audit events from service accounts now record real actor.id instead of unknown. Pull request #4814
- Occ auditlogs command fixed to properly scope context and handle ascending paging. Pull request #4831
- Readable_id_claim made optional in control plane Helm schema to fix upgrade failures. Pull request #4837
- Observability service ingress restricted in release-v1.1 backport while preserving required platform communication. Pull request #4810
- CI workflow split to separate candidate publication from build-and-test validation. Pull request #4812
- Hook enable flag removed. Pull request #4839
Why it matters
V1.3.0 brings audit logging to beta, allowing users to track all state-modifying operations across the platform with multiple access methods. This week includes fixes for service account auditing, Helm schema compatibility, and CLI command scoping to ensure the audit feature works reliably.
Changelog entry
- V1.3.0: Audit Logs (beta) for REST API and MCP servers; Cost Insights feature Release
- Feat: add cluster hooks feature Pull request #4829
- Fix: record real actor.id for service accounts in audit events Pull request #4814
- Fix(cli): fix occ auditlogs context scoping and ascending paging Pull request #4831
- Fix(helm): make
readable_id_claimoptional in control plane schema Pull request #4837 - Fix(helm): restrict observability service ingress (backport to release-v1.1) Pull request #4810
- Ci: split publish workflow into separate reusable workflow Pull request #4812
- Chore: pin observability modules on release-v20260924 Pull request #4833
- Fix: remove hook enable flag Pull request #4839
Openchoreo v1.3.0 is here. Audit Logs (beta) now captures every state-modifying operation across REST API and MCP servers—readable from portal, occ command, or MCP tool.
Openchoreo v1.3.0 is available. Audit Logs (beta) brings full visibility into state-modifying operations across the platform. Every change is now recorded in a policy-driven audit trail, accessible through the portal, occ auditlogs command, or as an MCP tool. Fixes include service account auditing, Helm schema compatibility, and CLI improvements.
Week of September 14, 2026
What shipped
- V1.3.0 is now marked as a GA release in the changelog. Pull request #4803
- Delivery Insights read API and logs-adapter events source shipped, letting users query delivery metrics through the observer. Pull request #4248
- Identity provider upgraded from Thunder 0.28.0 to ThunderID 1.0.1. Pull request #4751
- New occ auditlogs CLI command added to query audit logs with filtering support. Pull request #4754
- Audit actor identity claim is now configurable, allowing deployments to use readable identities like email instead of opaque token IDs. Pull request #4758
- Portal assistant auth config now derives from security.subjects configuration instead of requiring hand-written ConfigMaps. Pull request #4777
- SRE agent tooling broadened to include Kubernetes events and managed Resource state, with new extensions mechanism. Pull request #4743
- MCP HTTP servers upgraded to go-sdk v1.7.0 and now use stateless HTTP to support MCP 2026-07-28 protocol. Pull request #4721
- Audit logging now enabled by default in quick-start, k3d and e2e setups when observability plane is installed. Pull request #4763
- V1.2.6 released with WorkflowRun authorization fix and simplified git basic auth handling. Release
Why it matters
V1.3.0 moves to GA with significant new observability and audit capabilities. The Delivery Insights API lets users track deployment metrics, the new audit commands provide better visibility into system actions, and configuration improvements make deployments more flexible. Users upgrading get a modern identity provider, broader agent capabilities, and audit logging that works out of the box.
Changelog entry
- V1.3.0 GA release marking Pull request #4803
- Delivery Insights read API and logs-adapter events source Pull request #4248
- Occ auditlogs command for querying audit logs Pull request #4754
- Configurable audit actor ID claim (defaults to 'sub') Pull request #4758
- Identity provider upgraded to ThunderID 1.0.1 Pull request #4751
- Portal assistant auth config derived from security.subjects Pull request #4777
- SRE agent tooling broadened with Kubernetes events and Resource state Pull request #4743
- MCP HTTP servers upgraded to go-sdk v1.7.0 with stateless HTTP support Pull request #4721
- Audit logging enabled by default in quick-start, k3d and e2e setups with observability Pull request #4763
- V1.2.6 patch release with WorkflowRun authorization fix Release
V1.3.0 is now GA. Delivery Insights, configurable audit actor claims, and improved SRE tooling ship this week.
OpenChoreo v1.3.0 reaches GA with major observability improvements. New Delivery Insights read API and logs-adapter events source let you track deployment metrics. Audit logging works out of the box in local setups. The SRE agent can now see Kubernetes events and Resource state. Identity provider upgraded to ThunderID 1.0.1. Audit actor claims are configurable for better identity tracking.