[github-actions]

🤖 I have created a release beep boop

0.1.0 (2026-10-05)

⚠ BREAKING CHANGES

• krm_foyer_upstream_watches_open has an identity label (user or shared); a query on the bare name now sums both.

Features

• a working demo: task demo, the hello example and the browser helper (#17) (8891215)
• bound requests and responses, end open watches with their session, and serve metrics (#22) (2a6f43c)
• build streams on krm-stream 0.5.0, which maps the API server's answers and leaves retries to the browser (#25) (cdf1e23)
• build streams on krm-stream 0.6.0, which refuses redirects and stops reopening early-ending watches (#26) (c746c0c)
• install krm-foyer with a Helm chart, which the e2e suite now installs through (#30) (9571a03)
• interruption pages for browser navigations (#12) (243da5c)
• live notes with krm-stream: user-authenticated streams, closed with their session (#23) (5bf5dfb)
• OIDC login with PKCE, state and nonce, and /k8s behind sessions (#11) (a514dc8)
• proxy /k8s with the user's token, path checking and upstream response rules (#9) (3355231)
• server-side sessions with CSRF and same-origin checks (#10) (047f10c)
• share one watch per scope among every user's streams, with the API server asked about each user (#28) (4b95da1)
• upgrade krm-stream, enforce shared rate limits, and reconcile docs (#31) (50e79c6)

Bug Fixes

• keep issuer error text out of the logs, compare e2e bodies, and keep sessions free of HTTP (#16) (da7efd8)
• resend only krm-foyer's own CSRF refusals, log ID tokens by cause, and encrypt every hop of the demo (#21) (d7bd208)
• stop promptly with streams open, let concurrent logins finish, and harden the chart (#34) (15b3268)

Documentation

• clarify live-resource architecture and frontend integrations (#32) (11c7ecd)
• defer proxy subresources, qualify revocation, and specify decompression (be2b463)
• restructure around a vision and roadmap, and start without an allowlist (#7) (702aa65)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: fc0cc784-eedf-4a7a-831c-0d976324f84e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🤖 Created releases:

• v0.1.0

🌻