What metalbear-co/mirrord shipped
Generated by FoxPlug from public activity — not affiliated with Metalbear.
Week of September 14, 2026
What shipped
- Release 3.262.0 adds --unmatched and --session-key-field flags to mirrord subscribe for reporting unfiltered queue messages and session identifiers, and introduces an Events tab to mirrord ui that lists HTTP and queue messages intercepted across every cluster session. Release
- The Events tab in mirrord ui shows the operator's interception events for every session in the selected context at once, with a compatibility notice for older operators. Pull request #4881
- mirrord subscribe and mirrord ui now send configured baggage headers with their requests to the operator, allowing them to reach operators behind header filters. Pull request #4883
- PHP Unix socket pathname truncation is fixed by respecting the NUL terminator that socket2 expects, restoring unix_streams matching and remote forwarding. Pull request #4913
- The TLS steal server now verifies certificates against the ServerName from the client's SNI, request URI, or pod IP, resolving verification failures when nginx upstreams send no SNI. Pull request #4900
- mirrord ui no longer hangs when the selected context's Kubernetes credentials have expired, by bounding both kube client builds and operator reads. Pull request #4882
- Release 3.258.0 adds mirrord config set and mirrord config unset commands for updating user-wide configuration, and adds mirror mode to mirrord up for mirroring traffic and queue messages instead of splitting them. Release
- Release 3.260.0 applies global configuration consistently to every mirrord command while preserving explicit project configuration, environment variables, and CLI flags. Release
- mirrord now recognizes the macOS arm64e.x1 Mach-O CPU subtype for SIP binaries, falling back to x86_64 instead of extracting unsupported arm64e.x1 slices. Pull request #4892
- mirrord container now supports Unix sockets by sharing the temporary bridge socket with the app container for outgoing unix stream and SOCK_SEQPACKET sockets. Pull request #4903
Why it matters
This week brings improvements to session introspection, configuration management, and compatibility across platforms and container runtimes. The Events tab and subscribe enhancements let users see what traffic the operator is capturing, while fixes to TLS verification, Unix socket handling, and Kubernetes credential timeouts address real deployment scenarios.
Changelog entry
- Added --unmatched and --session-key-field to mirrord subscribe for reporting queue messages with no matching filter and naming the session each event belongs to Release
- Added Events tab to mirrord ui listing HTTP and queue messages the operator intercepted across every cluster session Release
- Events tab shows operator interception events for every session in the selected context with compatibility notice for older operators Pull request #4881
- Fixed PHP Unix socket pathname truncation by respecting NUL terminator required by socket2 Pull request #4913
- mirrord subscribe and mirrord ui now send configured baggage with requests to the operator Pull request #4883
- Fixed mirrord ui hanging on expired Kubernetes credentials by bounding kube client builds and operator reads Pull request #4882
- TLS steal server now verifies certificates against ServerName from client SNI, request URI, or pod IP Pull request #4900
- mirrord container now supports Unix sockets by sharing temporary bridge socket with app container Pull request #4903
- Added support for macOS arm64e.x1 Mach-O CPU subtype by recognizing and falling back to x86_64 Pull request #4892
3.262.0 ships: Events tab shows HTTP and queue messages intercepted per session. Subscribe adds --unmatched flag and --session-key-field. UI and subscribe now route with configured baggage for filtered operators.
mirrord 3.262.0 is out. New Events tab in the UI displays every HTTP and queue message the operator intercepted, per session. The subscribe command adds --unmatched to report messages that no filter matched, and --session-key-field to name which session each event belongs to. Both UI and subscribe now send configured baggage headers with their operator requests, fixing remote operator access behind header filters.