What meshery/meshery shipped

This week: model export rejects path traversal in version fields, workspace mappings stop duplicating, and connections keep created_at and owner. mesheryctl token view no longer hangs and system logs exits unless -f is passed.

Changes this week cover correctness in several places. Model export now rejects version fields that contain path traversal, so exported files stay in the export directory. Workspace environment, view and team assignments are deduplicated and no longer leave mappings behind after removal. Connections keep their created_at and owner when updated, and an unknown connection ID returns 404 instead of creating a record. Performance profiles keep their created_at when edited. In mesheryctl, token view no longer blocks on an empty prompt, design delete -f sends the deploy payload the server expects, and system logs on Docker exits unless -f is passed. In the UI, publish schema load failures, failed profile deletes and failed SMP mesh list loads now show an error.

This week in Meshery: Next.js upgraded for two security advisories, mesheryctl dashboard and system check response body leaks fixed, adapter selection and schema dropdown repaired in the UI, broken docs anchors corrected, and 23 doc links fixed.

This week's Meshery changes focus on reliability and docs. Next.js was upgraded from 16.4.0 to 16.4.3 to address two published security advisories. In mesheryctl, HTTP response body leaks were closed in the system dashboard keep-connection loop and in system check adapter health checks, model export no longer doubles its flag validation error, and environment list unit tests are re-enabled with a corrected mock query URL. In the UI, adapter selection in MesheryPlayComponent works again, the schema version dropdown in LegacyRJSFModal renders correctly, and Notification Center file links no longer leak Blob object URLs. Docs fixes include 23 corrected in-page anchors and an updated Helm Snapshot page for the renamed helm-kanvas-snapshot plugin.

Meshery v1.0.74 is out, with the release workflow fixed so stable builds run again. This week also brought a fix for remote provider connection responses, stricter mesheryctl page checks, better Kubernetes dry-run validation, and a docs pass over guides checked against current co

Meshery v1.0.74 is released. The stable release workflow builds again after the token permission fix, and v1.0.74 carries the server change that accepts both remote provider connection response shapes. Also this week: mesheryctl perf profile and perf result reject page values below 1, Kubernetes dry-run validation resolves resource endpoints through discovery and handles in-design namespaces, and three new how-to guides cover deploying designs, sharing clusters and running mesheryctl in CI. The installation, configuration, performance, telemetry, troubleshooting and CLI guides were checked against current code and rewritten where stale, and two broken links in GOVERNANCE.md are fixed.

This week: fixes for the Meshery Server connection chip, Performance Profile run URLs with no Kubernetes contexts, and workspace edit/delete actions. Archived adapters including AWS App Mesh and NGINX Service Mesh were removed.

This week in Meshery: we fixed several user-facing issues, including clicking the Meshery Server connection chip, malformed Performance Profile run URLs when no Kubernetes contexts are selected, and workspace Edit and Delete actions resolving the wrong workspace. The AWS App Mesh and NGINX Service Mesh adapters were removed from the UI and mesheryctl. We also updated the playground cleanup workflow, published Allure results after E2E failures, and corrected contributor documentation paths for the CLI and docs setup.

Meshery v1.0.71 is out. The NGINX Service Mesh adapter is removed from server, install and docs, and leftover meshery-osm references are gone from mesheryctl. mesheryctl workspace and environment create now report marshal failures correctly, and UI fixes raise the design action d

Meshery v1.0.71 is out. This release removes the NGINX Service Mesh adapter from the server, installation and documentation, and drops leftover meshery-osm references from mesheryctl adapter URLs, Docker image list and test fixtures. mesheryctl workspace create and environment create now report marshal failures with the correct error, and several UI fixes land: the design action dropdown renders above the sticky toolbar, the visibility badge no longer overlaps the owner name on small screens, and dynamic key delete icons are readable. AGENTS.md now points UI contributors to Sistent DESIGN.md, and security-insights.yml follows the new schema.

This week: fixed key seeding race conditions, improved DeleteContext error handling, preserved deep-link mode on login, and added authorization test coverage.

Meshery shipped critical stability fixes this week: resolved a race condition in SeedKeys that dropped the final key during boot, improved error handling in DeleteContext to prevent silent failures, preserved query parameters on post-login redirects to maintain deep-linking, and added test coverage for authorization enforcement.

This week: fixed mesheryctl flag documentation, removed obsolete Jekyll references, and aligned security reporting contacts across Meshery docs.

Meshery shipped documentation improvements this week including corrected mesheryctl command flag syntax, removal of obsolete Jekyll references from CLI guides, and unified security vulnerability reporting contacts across all materials to ensure developers have accurate information.

Meshery v1.0.70 ships CLI documentation fixes, E2E test improvements, and tooltip behavior refinements. Better docs, better tests, better experience.

Meshery v1.0.70 is out. This release includes critical documentation corrections for mesheryctl, alignment of model generation tests with current implementation, fixes to clipboard tooltip behavior in the Remote Provider Info tab, and improved HTTP error handling in GitHub API calls. We also fixed a CI workflow bug that prevented welcome messages for first-time contributors.