[0.2.0-alpha.5] - 2026-05-23

Bug Fixes

• (tunnel) Apply origin CA pool configuration
• Enforce alpha.5 access and route constraints
• Address alpha5 review correctness

[0.2.0-alpha.4] - 2026-05-18

Bug Fixes

• (access) Harden application cleanup diagnostics

Testing

• Verify h2c remote tunnel config

Maintenance

• Bump cloudflared h2c image

[0.2.0-alpha.3] - 2026-05-15

Features

• (access) Split policies from applications

Bug Fixes

• (access) Harden app paths and e2e cleanup
• (access) Address review feedback
• (access) Compare policy links by precedence
• (access) Close migration audit gaps
• (access) Support policy account names
• (access) Address review robustness gaps
• (access) Harden application cleanup
• (access) Polish controller robustness
• (access) Clean up application owner tags
• (e2e) Clean stale access owner tags
• (e2e) Polish access tag cleanup review
• (security) Bump Go to 1.26.3
• (cleanup) Align release readiness docs
• (cleanup) Tighten access app domain matching
• (access) Harden policy token lifecycle
• (access) Address lifecycle review notes

Documentation

• (access) Refresh migration examples
• (access) Update application cleanup guidance

Maintenance

• Update dependencies

[0.2.0-alpha.2] - 2026-04-28

Bug Fixes

• (cloudflared) Run tunnel pods with restricted security
• (controller) Preserve recreated tunnel status
• (controller) Mirror config hash after patch
• (controller) Mirror config hash resource version

Documentation

• Fix remaining DNS contract drift

Maintenance

• Refresh generated and formatted files

[0.2.0-alpha.1] - 2026-04-12

Bug Fixes

• (controller) Correct DNS discovery and route reconciles
• (dns) Honor explicit hostname precedence
• (controller) Clear stale route parent status

Refactoring

• (controller) Remove redundant route status guard

[0.1.0-alpha.20] - 2026-04-10

Bug Fixes

• Correct Artifact Hub shield URL
• (manager) Standardize CLI exit codes

Testing

• Adopt h2c.2 and harden e2e cleanup

Infrastructure

• Scope mise secrets to e2e tasks
• Update golangci-lint for Go 1.26
• Use Go 1.26 in Docker image
• Scope mise runtime defaults to tasks

CI/CD

• Add Renovate for dependency automation
• Migrate release workflow to Node 24 actions
• Gate dev coverage on lint
• Run pull request validation on dev
• Skip mise env loading in automation

Maintenance

• Bump cloudflared fork to v2026.3.0-h2c.1 and document fork dependency
• Migrate cfgate automation to mise

[0.1.0-alpha.19] - 2026-03-15

Features

• (dns) Support A/AAAA record types and subdomain depth warnings
• (dns) Implement NamespaceSelector for route filtering

Bug Fixes

• (access) Order-insensitive comparison for drift detection
• (client) Replace string-based error detection with SDK type assertions
• (dns) Cross-reference TXT ownership during cleanup to prevent cross-resource deletion
• (cloudflare) Include email addresses in approvalGroupsEqual sort key
• Correct buildRulesFromHTTPRoute, convertAccessRules, and CEL test helper
• Block finalizer removal on cleanup failure with retry budgets
• Address PR #47 review findings
• (e2e) Reverse CR deletion order to respect credential dependencies

Testing

• (client) Add MockClient for unit and integration testing
• Add P0 unit tests for status conditions, DNS diff, and access drift
• Add P2 unit tests for cache, predicates, features, and builders (#34, #35)

Documentation

• Rewrite CONTRIBUTING.md to prose reference conventions
• Update TESTING.md for two-tier test strategy
• Add deletion behavior, record types, subdomain warnings, and DNS orphan E2E

Refactoring

• (client) Compose Client interface from 9 domain interfaces (#26)
• (client) Unify param types and extract SDK conversions (#27, #28)

CI/CD

• Bump trivy-action to 0.35.0
• Bump trivy-action to 0.35.0

Maintenance

• Add unit test tasks and fix CONTRIBUTING.md task table
• Fix lint and format issues
• Remove unused ZoneName field from DNSRecord

[0.1.0-alpha.18] - 2026-02-24

Bug Fixes

• Translate h2cOrigin to CF API tunnel configuration
• Add runtime mutual exclusivity guard for h2cOrigin/http2Origin

Testing

• Add E2E tests for h2cOrigin annotation and CEL validation

Maintenance

• Bump default cloudflared image to 2026.2.0-h2c.2

Other

• Merge pull request #3 from cfgate/dev

fix: translate h2cOrigin to CF API tunnel configuration

[0.1.0-alpha.17] - 2026-02-24

Bug Fixes

• Remove v prefix from default cloudflared image tag

[0.1.0-alpha.16] - 2026-02-24

Features

• Default cloudflared image to inherent-design fork