Release v0.1.2 with native CA and non-interactive login fixes

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to Devboxes are documented here. The project follows [Keep a
 
 ## [Unreleased]
 
+## [0.1.2] - 2026-07-13
+
+### Fixed
+
+- Made `devbox login` honor `DEVBOX_TOKEN` for non-interactive authentication.
+- Made the CLI trust operating-system certificate roots so self-hosted installations can use an administrator-installed private CA.
+
 ## [0.1.1] - 2026-07-13
 
 ### Added
@@ -34,6 +41,7 @@ All notable changes to Devboxes are documented here. The project follows [Keep a
 - Portable Helm chart with values schema, namespace-scoped RBAC, configurable storage, ingress, LoadBalancer or NodePort SSH, ServiceMonitor, and disruption budget.
 - macOS and Linux CLI releases, SHA-256 verification installer, GHCR images, OCI chart publishing, image provenance attestations, and clean Kind install CI.
 
-[Unreleased]: https://github.com/vicotrbb/devboxes/compare/v0.1.1...HEAD
+[Unreleased]: https://github.com/vicotrbb/devboxes/compare/v0.1.2...HEAD
+[0.1.2]: https://github.com/vicotrbb/devboxes/compare/v0.1.1...v0.1.2
 [0.1.1]: https://github.com/vicotrbb/devboxes/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/vicotrbb/devboxes/releases/tag/v0.1.0

README.md

@@ -84,7 +84,7 @@ kubectl -n devboxes create secret generic devboxes-workspace \
   --from-file=SSH_AUTHORIZED_KEYS="$HOME/.ssh/id_ed25519.pub"
 
 helm install devboxes oci://ghcr.io/vicotrbb/charts/devboxes \
-  --version 0.1.1 \
+  --version 0.1.2 \
   --namespace devboxes
 ```
 

charts/devboxes/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: devboxes
 description: Self-hosted, ephemeral development environments on Kubernetes
 type: application
-version: 0.1.1
-appVersion: "0.1.1"
+version: 0.1.2
+appVersion: "0.1.2"
 kubeVersion: ">=1.29.0-0"
 home: https://github.com/vicotrbb/devboxes
 icon: https://raw.githubusercontent.com/vicotrbb/devboxes/main/docs/assets/devboxes-mark.svg
@@ -16,5 +16,7 @@ annotations:
   artifacthub.io/license: Apache-2.0
   artifacthub.io/category: integration-delivery
   artifacthub.io/changes: |
-    - kind: added
-      description: Initial public release
+    - kind: fixed
+      description: Honor DEVBOX_TOKEN during non-interactive CLI login
+    - kind: fixed
+      description: Trust operating-system certificate roots in the CLI

cli/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "devbox-cli"
-version = "0.1.1"
+version = "0.1.2"
 edition = "2024"
 rust-version = "1.96"
 description = "Terminal client for self-hosted Kubernetes development environments"
@@ -19,7 +19,7 @@ anyhow = "1"
 chrono = { version = "0.4", features = ["serde"] }
 clap = { version = "4", features = ["derive"] }
 dirs = "6"
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-native-roots"] }
 rpassword = "7"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

cli/src/main.rs

@@ -149,8 +149,8 @@ async fn login(url: Option<&str>, provided_token: Option<&str>) -> Result<()> {
                 "Devboxes API URL is not configured; pass `--url https://devboxes.example.com` or set DEVBOX_URL"
             )
         })?;
-    let token = match provided_token {
-        Some(token) => token.to_owned(),
+    let token = match resolve_login_token(provided_token, std::env::var("DEVBOX_TOKEN").ok()) {
+        Some(token) => token,
         None => rpassword::prompt_password("Devboxes access token: ")?,
     };
     let resolved = stored.resolve(Some(configured_url), Some(token.clone()))?;
@@ -168,6 +168,16 @@ async fn login(url: Option<&str>, provided_token: Option<&str>) -> Result<()> {
     Ok(())
 }
 
+fn resolve_login_token(
+    provided_token: Option<&str>,
+    environment_token: Option<String>,
+) -> Option<String> {
+    provided_token
+        .map(str::to_owned)
+        .filter(|token| !token.trim().is_empty())
+        .or_else(|| environment_token.filter(|token| !token.trim().is_empty()))
+}
+
 fn validate_name(value: &str) -> std::result::Result<String, String> {
     let valid_length = (1..=40).contains(&value.len());
     let valid_edges = value
@@ -391,7 +401,24 @@ fn human_expiry(box_info: &Devbox) -> String {
 
 #[cfg(test)]
 mod tests {
-    use super::{ssh_arguments, validate_name};
+    use super::{resolve_login_token, ssh_arguments, validate_name};
+
+    #[test]
+    fn login_token_prefers_the_flag_and_supports_the_environment() {
+        assert_eq!(
+            resolve_login_token(Some("flag-token"), Some("environment-token".to_owned())),
+            Some("flag-token".to_owned())
+        );
+        assert_eq!(
+            resolve_login_token(None, Some("environment-token".to_owned())),
+            Some("environment-token".to_owned())
+        );
+        assert_eq!(
+            resolve_login_token(Some(""), Some("environment-token".to_owned())),
+            Some("environment-token".to_owned())
+        );
+        assert_eq!(resolve_login_token(None, Some("  ".to_owned())), None);
+    }
 
     #[test]
     fn devbox_names_match_the_controller_contract() {

controller/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "devboxes-controller"
-version = "0.1.1"
+version = "0.1.2"
 description = "Controller and dashboard for self-hosted Kubernetes development environments"
 readme = "README.md"
 requires-python = ">=3.12"

controller/src/devboxes_controller/__init__.py

@@ -1,3 +1,3 @@
 """Devboxes controller package."""
 
-__version__ = "0.1.1"
+__version__ = "0.1.2"

controller/src/devboxes_controller/templates/docs.html

@@ -5,9 +5,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="color-scheme" content="light">
     <title>Documentation · Devboxes</title>
-    <link rel="icon" href="/static/favicon.svg?v=0.1.1" type="image/svg+xml">
-    <link rel="stylesheet" href="/static/styles.css?v=0.1.1">
-    <script src="/static/docs.js?v=0.1.1" defer></script>
+    <link rel="icon" href="/static/favicon.svg?v=0.1.2" type="image/svg+xml">
+    <link rel="stylesheet" href="/static/styles.css?v=0.1.2">
+    <script src="/static/docs.js?v=0.1.2" defer></script>
   </head>
   <body class="docs-page">
     <a class="skip-link" href="#main-content">Skip to documentation</a>

controller/src/devboxes_controller/templates/index.html

@@ -5,9 +5,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="color-scheme" content="light">
     <title>Devboxes</title>
-    <link rel="icon" href="/static/favicon.svg?v=0.1.1" type="image/svg+xml">
-    <link rel="stylesheet" href="/static/styles.css?v=0.1.1">
-    <script src="/static/app.js?v=0.1.1" defer></script>
+    <link rel="icon" href="/static/favicon.svg?v=0.1.2" type="image/svg+xml">
+    <link rel="stylesheet" href="/static/styles.css?v=0.1.2">
+    <script src="/static/app.js?v=0.1.2" defer></script>
   </head>
   <body>
     <a class="skip-link" href="#main-content">Skip to content</a>

controller/src/devboxes_controller/templates/login.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1">
     <meta name="color-scheme" content="light">
     <title>Sign in · Devboxes</title>
-    <link rel="icon" href="/static/favicon.svg?v=0.1.1" type="image/svg+xml">
-    <link rel="stylesheet" href="/static/styles.css?v=0.1.1">
+    <link rel="icon" href="/static/favicon.svg?v=0.1.2" type="image/svg+xml">
+    <link rel="stylesheet" href="/static/styles.css?v=0.1.2">
   </head>
   <body class="login-page">
     <main class="login-shell">

controller/tests/test_app.py

@@ -32,7 +32,7 @@ def test_browser_login_and_dashboard_session() -> None:
         assert dashboard.headers["x-content-type-options"] == "nosniff"
         assert "Kubernetes connected" in dashboard.text
         assert "cluster default storage" in dashboard.text
-        styles = client.get("/static/styles.css?v=0.1.1")
+        styles = client.get("/static/styles.css?v=0.1.2")
         assert "[hidden]" in styles.text
         assert "display: none !important" in styles.text
         payload = client.get("/api/v1/devboxes").json()

docs/configuration.md

@@ -3,9 +3,9 @@
 Use a values file for durable installations:
 
 ```bash
-helm show values oci://ghcr.io/vicotrbb/charts/devboxes --version 0.1.1 > values.yaml
+helm show values oci://ghcr.io/vicotrbb/charts/devboxes --version 0.1.2 > values.yaml
 helm upgrade --install devboxes oci://ghcr.io/vicotrbb/charts/devboxes \
-  --version 0.1.1 \
+  --version 0.1.2 \
   --namespace devboxes \
   --create-namespace \
   --values values.yaml

docs/golden-path.md

@@ -38,7 +38,7 @@ kubectl create namespace devboxes
 # Create devboxes-auth and devboxes-workspace here, as described below.
 
 helm upgrade --install devboxes oci://ghcr.io/vicotrbb/charts/devboxes \
-  --version 0.1.1 \
+  --version 0.1.2 \
   --namespace devboxes \
   --values values.yaml
 ```

package.json

@@ -1,6 +1,6 @@
 {
   "name": "devboxes-repository-tooling",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "type": "module",
   "description": "JavaScript and documentation quality gates for Devboxes",

scripts/install.sh

@@ -3,7 +3,7 @@ set -eu
 
 release="${DEVBOXES_RELEASE:-devboxes}"
 namespace="${DEVBOXES_NAMESPACE:-devboxes}"
-version="${DEVBOXES_VERSION:-0.1.1}"
+version="${DEVBOXES_VERSION:-0.1.2}"
 repository="${DEVBOXES_CHART_REPOSITORY:-oci://ghcr.io/vicotrbb/charts/devboxes}"
 chart_source="${DEVBOXES_CHART_SOURCE:-auto}"
 controller_secret="${DEVBOXES_CONTROLLER_SECRET:-devboxes-auth}"