Skip to content

Add changelogs for v0.37.* and v0.38.0 - #1658

Merged
Andrei Kvapil (kvaps) merged 1 commit into
mainfrom
changelogs-0.38
Nov 26, 2025
Merged

Add changelogs for v0.37.* and v0.38.0#1658
Andrei Kvapil (kvaps) merged 1 commit into
mainfrom
changelogs-0.38

Conversation

@kvaps

@kvaps Andrei Kvapil (kvaps) commented Nov 26, 2025

Copy link
Copy Markdown
Member

What this PR does

Release note

Add changelogs for v0.37.* and v0.38.0

Summary by CodeRabbit

  • New Features

    • VPC with Multus CNI, dashboard VNC, configurable worker versions, dedicated lineage webhook daemonset, tenant workload listing
  • Bug Fixes

    • RBAC and namespace listing fixes (including non‑OIDC/system:masters), dashboard logout, migration/readiness checks, load balancer cleanup, various chart/config fixes
  • Security

    • Redis image update, stricter ingress HTTPS enforcement, flux operator hardening
  • Documentation

    • Kubernetes troubleshooting, backup/recovery, migration guidance, website and mobile updates

✏️ Tip: You can customize this high-level summary in your review settings.

@dosubot dosubot Bot added the size/XL This PR changes 500-999 lines, ignoring generated files label Nov 26, 2025
@coderabbitai

coderabbitai Bot commented Nov 26, 2025

Copy link
Copy Markdown
Contributor

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

Walkthrough

Adds nine changelog markdown files for Cozystack releases v0.37.1 through v0.38.0, documenting features, fixes, migrations, system configuration notes, and documentation updates.

Changes

Cohort / File(s) Summary
Changelog documentation
docs/changelogs/v0.37.1.md, docs/changelogs/v0.37.2.md, docs/changelogs/v0.37.3.md, docs/changelogs/v0.37.4.md, docs/changelogs/v0.37.5.md, docs/changelogs/v0.37.6.md, docs/changelogs/v0.37.7.md, docs/changelogs/v0.37.8.md, docs/changelogs/v0.38.0.md
Adds release notes for v0.37.1–v0.38.0 covering new features (e.g., lineage webhook separation, VPC/Multus, dashboard VNC), fixes (TenantNamespace RBAC, SeaweedFS migration, NATS templates), migration/upgrade guidance, security and dependency updates, system configuration changes, and documentation/CI notes.

Sequence Diagram(s)

sequenceDiagram
  autonumber
  actor User
  participant Controller as Cozy Controller (old)
  participant API as Kubernetes API
  participant WebhookDS as Lineage Webhook DaemonSet (new)
  note right of Controller `#d9f0d9`: Old flow (pre-separation)
  User->>Controller: Create/Update resources
  Controller->>API: Watch + handle lineage (sync)
  API-->>Controller: Response

  rect rgb(230,230,255)
    note left of WebhookDS `#e6e6ff`: New flow (post-separation)
    Controller->>API: Create/Update resources
    Controller->>WebhookDS: Label resources / notify
    WebhookDS->>API: Mutate/validate lineage requests
    API-->>WebhookDS: Admission responses
  end

  note over WebhookDS,Controller `#fff3cd`: Migration includes readiness checks to verify WebhookDS before cutover
Loading

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

  • Documentation-only additions, homogeneous markdown files.
  • Quick checks: formatting, links, and accuracy of listed items.

Possibly related PRs

Suggested reviewers

  • lllamnyp
  • nbykov0

Poem

🐇 I hopped through changelogs, version by version, light and spry,

Carrots of fixes, features reaching for the sky,
A webhook moved to guard each control-plane node,
Docs lined up like carrots on a bright release road,
Hooray — I nibble bugs and watch the upgrades fly! 🚀

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and directly summarizes the main change: adding changelog files for versions v0.37.1 through v0.37.8 and v0.38.0.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch changelogs-0.38

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello Andrei Kvapil (@kvaps), I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request prepares for the v0.11.0 release by consolidating changelog entries for versions v0.37.1 through v0.38.0. It introduces significant new features such as Virtual Private Cloud (VPC) support for advanced networking, a VNC console directly within the dashboard for VM management, and configurable Kubernetes worker versions. Additionally, it includes various bug fixes, security enhancements, dependency updates (like Talos Linux to v1.7.6), and documentation improvements across the Cozystack platform.

Highlights

  • Virtual Private Cloud (VPC) Support: Introduces a new system module for advanced networking, including Multus CNI integration, subnet management, and network isolation for tenant applications.
  • VNC Console in Dashboard: Enables direct access to virtual machine consoles from the dashboard, enhancing VM management experience.
  • Configurable Kubernetes Worker Versions: Allows platform administrators to independently configure Kubernetes worker node versions for greater flexibility in cluster management.
  • Enhanced Security Measures: Implements HTTPS-only enforcement for API, closes Flux Operator ports to external access, and updates Redis for security fixes.
  • Cozy-lib Improvements: Enhances the 'flatten' function for better ResourceQuota handling and nil resource support, improving template processing.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment Gemini (@gemini-code-assist) Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on Gemini (@gemini-code-assist) comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request primarily focuses on preparing for the v0.11.0 release by updating changelogs, bumping dependency versions, and refreshing image tags and digests. The changes are generally straightforward. However, the main changelog for v0.38.0 contains several duplicated and inconsistent entries that should be corrected for clarity. Additionally, a critical issue was found where an image digest for kubeapps-apis was removed, which poses a security and reliability risk and should be addressed.

Comment thread packages/system/dashboard/values.yaml Outdated
Comment thread docs/changelogs/v0.38.0.md
@dosubot dosubot Bot added size/L This PR changes 100-499 lines, ignoring generated files and removed size/XL This PR changes 500-999 lines, ignoring generated files labels Nov 26, 2025
@kvaps Andrei Kvapil (kvaps) changed the title changelogs 0.38 Add changelogs for v0.37.* and v0.38.0 Nov 26, 2025

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 5

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between aa42845 and 69a9519.

📒 Files selected for processing (9)
  • docs/changelogs/v0.37.1.md (1 hunks)
  • docs/changelogs/v0.37.2.md (1 hunks)
  • docs/changelogs/v0.37.3.md (1 hunks)
  • docs/changelogs/v0.37.4.md (1 hunks)
  • docs/changelogs/v0.37.5.md (1 hunks)
  • docs/changelogs/v0.37.6.md (1 hunks)
  • docs/changelogs/v0.37.7.md (1 hunks)
  • docs/changelogs/v0.37.8.md (1 hunks)
  • docs/changelogs/v0.38.0.md (1 hunks)
🧰 Additional context used
🧠 Learnings (1)
📚 Learning: 2025-10-13T20:30:04.130Z
Learnt from: lllamnyp
Repo: cozystack/cozystack PR: 1515
File: packages/system/lineage-controller-webhook/templates/daemonset.yaml:29-34
Timestamp: 2025-10-13T20:30:04.130Z
Learning: In the cozystack project, the lineage-controller-webhook runs as a DaemonSet on all control-plane nodes without leader election. Each API server instance needs its own local webhook available, and the reconciliation is read-only (retrieving configuration from the cluster). The service uses `internalTrafficPolicy: Local` to route traffic to the local node's webhook instance.

Applied to files:

  • docs/changelogs/v0.37.2.md
🪛 LanguageTool
docs/changelogs/v0.37.3.md

[grammar] ~8-~8: Use a hyphen to join words.
Context: ...vements * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)

docs/changelogs/v0.38.0.md

[grammar] ~48-~48: Use a hyphen to join words.
Context: ... #1576). * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)


[grammar] ~72-~72: Use a hyphen to join words.
Context: ....com/lllamnyp) in #1647). * [dx] JSDoc compatible syntax for values.yaml: Add...

(QB_NEW_EN_HYPHEN)


[grammar] ~72-~72: Use a hyphen to join words.
Context: ...le syntax for values.yaml**: Added JSDoc compatible syntax for values.yaml docume...

(QB_NEW_EN_HYPHEN)


[style] ~124-~124: Three successive sentences begin with the same word. Consider rewording the sentence or use a thesaurus to find a synonym.
Context: ...ttps://github.com/kvaps) in #1527). * Update Kube-OVN v1.14.11: Updated Kube-OVN t...

(ENGLISH_WORD_REPEAT_BEGINNING_RULE)

🪛 markdownlint-cli2 (0.18.1)
docs/changelogs/v0.38.0.md

99-99: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

🔇 Additional comments (9)
docs/changelogs/v0.37.3.md (1)

1-45: Verify AI-generated changelog entries for accuracy before merging.

This changelog is AI-generated. Please ensure that a human reviewer has verified the accuracy of entries, particularly:

  • Feature descriptions match the actual changes in the referenced PRs
  • PR/commit numbers and author attributions are correct
  • No key changes or fixes are missing or misrepresented
docs/changelogs/v0.38.0.md (1)

81-108: Verify changelog entries against v0.37.6.md and v0.37.7.md for consistency.

A previous review flagged several inconsistencies with entries from earlier release changelogs. Specifically:

  • Line 98: [dashboard-controller] Fix static resources... references PR #1615 — verify this matches the PR referenced in v0.37.6.md (flagged as #1605)
  • Line 100: [virtual-machine] Revert per-vm network policies is attributed to @kvaps — verify against v0.37.6.md attribution
  • Line 103: [kubernetes] Cleanup loadbalancer services references PR #1631 — verify against v0.37.7.md (flagged as #1622)
  • Line 104: [rbac] Fix permissions for high-privilege users references PR #1622 — verify against v0.37.7.md (flagged as #1624)

These discrepancies can confuse users tracking issue history and may indicate copy-paste errors or outdated information.

Please cross-check these entries against the corresponding v0.37.6.md and v0.37.7.md changelogs to ensure PR numbers and attributions are accurate.

docs/changelogs/v0.37.1.md (1)

1-30: Well-organized changelog documentation for v0.37.1.

The entries are clearly categorized, properly attributed, and well-formatted. All contributor links and changelog URL are in order.

docs/changelogs/v0.37.2.md (1)

1-20: Well-documented changelog with appropriate migration guidance for v0.37.2.

The addition of a "Migration and Upgrades" section is fitting for this release, clearly explaining the lineage webhook separation and providing practical guidance for users upgrading from 0.36.2.

docs/changelogs/v0.37.4.md (1)

1-28: Clear and well-formatted changelog for v0.37.4.

The entries are properly structured and documented, with good detail on both features and documentation updates.

docs/changelogs/v0.37.5.md (1)

1-27: Well-organized security-focused changelog for v0.37.5.

The introduction of a "Security" section is appropriate for this release, clearly highlighting important security improvements including image updates and port hardening.

docs/changelogs/v0.37.6.md (1)

1-29: Well-documented changelog for v0.37.6 with good feature and fix coverage.

Entries are clearly described with proper attribution to contributors and PR references.

docs/changelogs/v0.37.7.md (1)

1-17: Clear and focused changelog for v0.37.7.

Concise documentation of targeted fixes and system configuration changes appropriate for this patch release.

docs/changelogs/v0.37.8.md (1)

1-18: Well-maintained changelog for v0.37.8.

Clear documentation of targeted fixes and system configuration updates with appropriate contributor attribution.


## Features and Improvements

* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix hyphenation in compound adjective.

"User facing" should be hyphenated when used as a compound adjective modifier.

Apply this diff:

-* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
+* **[apps] Make VM service user-facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
* **[apps] Make VM service user-facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
🧰 Tools
🪛 LanguageTool

[grammar] ~8-~8: Use a hyphen to join words.
Context: ...vements * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)

🤖 Prompt for AI Agents
In docs/changelogs/v0.37.3.md around line 8, the phrase "user facing" is used as
a compound adjective and should be hyphenated; update the text to "user-facing"
so the line reads: "* **[apps] Make VM service user-facing**: Virtual machine
services are now marked as user-facing, improving service discovery and
visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in
#1523)."

### Applications

* **[tenant] Allow listing workloads**: Enabled listing of workloads for tenants, improving visibility and management of tenant resources ([**@kvaps**](https://github.com/kvaps) in #1576).
* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix hyphenation: "user-facing" should be hyphenated.

Line 48 uses "user facing" but compound adjectives should be hyphenated.

- * **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
+ * **[apps] Make VM service user-facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).

Also applies to: 48-48

🧰 Tools
🪛 LanguageTool

[grammar] ~48-~48: Use a hyphen to join words.
Context: ... #1576). * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)

🤖 Prompt for AI Agents
In docs/changelogs/v0.38.0.md around line 48, the phrase "user facing" is
missing a hyphen; change "user facing" to the hyphenated compound adjective
"user-facing" so the line reads "...services are now marked as user-facing,
improving..." and apply the same hyphenation wherever "user facing" appears on
that line.

Comment thread docs/changelogs/v0.38.0.md
* **[controller] Remove crdmem, handle DaemonSet**: Removed crdmem and improved DaemonSet handling in controller ([**@lllamnyp**](https://github.com/lllamnyp) in #1555).
* **[dashboard] Revert reconciler removal**: Reverted reconciler removal to restore proper dashboard functionality ([**@lllamnyp**](https://github.com/lllamnyp) in #1559).
* **[dashboard-controller] Fix static resources reconciliation and showing secrets**: Fixed static resources reconciliation and improved secret display in dashboard controller ([**@kvaps**](https://github.com/kvaps) in #1615).
* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix missing link reference for "dashboard".

Static analysis detected a missing link reference at line 99. The text references [dashboard] but no corresponding link definition exists.

Verify the context around line 99 and either:

  1. Remove the bracket notation if it's not meant to be a link, or
  2. Add the corresponding link definition (e.g., [dashboard]: <url>)

Please provide the corrected text.

Also applies to: 99-99

🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

99-99: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

🤖 Prompt for AI Agents
In docs/changelogs/v0.38.0.md around line 99, the token “[dashboard]” is
referenced but no link definition exists; either remove the bracketed link
syntax or add a link definition. Fix by replacing the inline reference with
plain text (e.g., change “[cozystack-api][dashboard]” to “cozystack-api
dashboard” or similar) or add a matching link definition for “[dashboard]” at
the end of the changelog with the correct URL (e.g., a relative path or docs
site URL) so the reference resolves.

Signed-off-by: Andrei Kvapil <kvapss@gmail.com>

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

♻️ Duplicate comments (4)
docs/changelogs/v0.37.3.md (1)

8-8: Fix hyphenation: "user-facing" requires a hyphen.

When used as a compound adjective, "user facing" should be hyphenated.

Apply this diff:

-* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
+* **[apps] Make VM service user-facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
docs/changelogs/v0.38.0.md (3)

60-60: Fix hyphenation: "user-facing" requires a hyphen.

When used as a compound adjective, "user facing" should be hyphenated.

Apply this diff:

-* **[apps] Make VM service user facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).
+* **[apps] Make VM service user-facing**: Virtual machine services are now marked as user-facing, improving service discovery and visibility in the dashboard ([**@lllamnyp**](https://github.com/lllamnyp) in #1523).

84-84: Fix hyphenation: "JSDoc-compatible" requires hyphens.

When used as a compound adjective, "JSDoc compatible" should be hyphenated in both occurrences on this line.

Apply this diff:

-* **[dx] JSDoc compatible syntax for values.yaml**: Added JSDoc compatible syntax for values.yaml documentation ([**@kvaps**](https://github.com/kvaps) in #1536).
+* **[dx] JSDoc-compatible syntax for values.yaml**: Added JSDoc-compatible syntax for values.yaml documentation ([**@kvaps**](https://github.com/kvaps) in #1536).

111-111: Remove or clarify bracket notation that causes missing link reference.

Line 111 contains [cozystack-api][dashboard] which is interpreted as markdown reference links. Since no link definitions exist, remove the bracket notation or format as plain text.

Apply this diff:

-* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
+* **cozystack-api and dashboard: Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 69a9519 and b5b12d0.

📒 Files selected for processing (9)
  • docs/changelogs/v0.37.1.md (1 hunks)
  • docs/changelogs/v0.37.2.md (1 hunks)
  • docs/changelogs/v0.37.3.md (1 hunks)
  • docs/changelogs/v0.37.4.md (1 hunks)
  • docs/changelogs/v0.37.5.md (1 hunks)
  • docs/changelogs/v0.37.6.md (1 hunks)
  • docs/changelogs/v0.37.7.md (1 hunks)
  • docs/changelogs/v0.37.8.md (1 hunks)
  • docs/changelogs/v0.38.0.md (1 hunks)
🚧 Files skipped from review as they are similar to previous changes (4)
  • docs/changelogs/v0.37.4.md
  • docs/changelogs/v0.37.2.md
  • docs/changelogs/v0.37.8.md
  • docs/changelogs/v0.37.1.md
🧰 Additional context used
🪛 LanguageTool
docs/changelogs/v0.38.0.md

[grammar] ~60-~60: Use a hyphen to join words.
Context: ... #1576). * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)


[grammar] ~84-~84: Use a hyphen to join words.
Context: ....com/lllamnyp) in #1647). * [dx] JSDoc compatible syntax for values.yaml: Add...

(QB_NEW_EN_HYPHEN)


[grammar] ~84-~84: Use a hyphen to join words.
Context: ...le syntax for values.yaml**: Added JSDoc compatible syntax for values.yaml docume...

(QB_NEW_EN_HYPHEN)


[style] ~136-~136: Three successive sentences begin with the same word. Consider rewording the sentence or use a thesaurus to find a synonym.
Context: ...ttps://github.com/kvaps) in #1527). * Update Kube-OVN v1.14.11: Updated Kube-OVN t...

(ENGLISH_WORD_REPEAT_BEGINNING_RULE)

docs/changelogs/v0.37.3.md

[grammar] ~8-~8: Use a hyphen to join words.
Context: ...vements * [apps] Make VM service user facing: Virtual machine services are n...

(QB_NEW_EN_HYPHEN)

🪛 markdownlint-cli2 (0.18.1)
docs/changelogs/v0.38.0.md

5-5: Heading levels should only increment by one level at a time
Expected: h2; Actual: h3

(MD001, heading-increment)


111-111: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

docs/changelogs/v0.37.6.md

10-10: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

🔇 Additional comments (2)
docs/changelogs/v0.37.7.md (1)

1-18: LGTM!

The changelog is well-structured with clear entries, proper attribution, and accurate cross-references. No issues identified.

docs/changelogs/v0.37.5.md (1)

1-28: LGTM!

Well-structured changelog with clear categorization, proper attribution, and accurate cross-references. No issues identified.


* **[api] Use shared informer cache**: Optimized API server by using shared informer cache, reducing API server load and improving performance ([**@lllamnyp**](https://github.com/lllamnyp) in #1539).
* **[dashboard] sync with upstream & enhancements**: Synchronized dashboard with upstream and added various enhancements ([**@kvaps**](https://github.com/kvaps) in #1603).
* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Remove or clarify bracket notation for inline components.

Line 10 uses [cozystack-api][dashboard] which is interpreted as markdown reference links. Since no link definitions exist, either format as plain text (e.g., cozystack-api and dashboard) or use proper markdown emphasis without brackets.

Apply this diff:

-* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
+* **cozystack-api and dashboard: Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
* **cozystack-api and dashboard: Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

10-10: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

🤖 Prompt for AI Agents
In docs/changelogs/v0.37.6.md around line 10, the changelog entry uses bracketed
notation "[cozystack-api][dashboard]" which is being parsed as markdown
reference links; update that inline text to plain text or standard emphasis to
avoid reference-style interpretation — for example replace the bracketed form
with "cozystack-api and dashboard" or "**cozystack-api** / **dashboard**" so the
entry renders as intended without requiring link definitions.


This release introduces **Virtual Private Cloud (VPC)** support, enabling advanced networking capabilities for tenant applications. We've also added VNC console support in the dashboard, made Kubernetes worker versions configurable, and delivered numerous improvements and fixes across the platform.

### Virtual Private Cloud (VPC) Networking

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix markdown heading level.

The introduction heading uses ### (h3) but should use ## (h2) to maintain proper heading hierarchy. Per markdown specifications (MD001), heading levels should only increment by one level at a time.

Apply this diff:

-### Virtual Private Cloud (VPC) Networking
+## Virtual Private Cloud (VPC) Networking
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
### Virtual Private Cloud (VPC) Networking
## Virtual Private Cloud (VPC) Networking
🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

5-5: Heading levels should only increment by one level at a time
Expected: h2; Actual: h3

(MD001, heading-increment)

🤖 Prompt for AI Agents
In docs/changelogs/v0.38.0.md around lines 5 to 5 the "Virtual Private Cloud
(VPC) Networking" heading is incorrectly using an h3 (###) but should be an h2
(##) to preserve proper heading hierarchy (MD001); change the leading '###' to
'##' for that line so the document's heading levels increment correctly.


* **[dashboard] Introduce VNC console**: Added VNC console support in the dashboard, allowing users to access virtual machine consoles directly from the web interface ([**@kvaps**](https://github.com/kvaps) in #1627).
* **[dashboard] sync with upstream & enhancements**: Synchronized dashboard with upstream project and added various enhancements ([**@kvaps**](https://github.com/kvaps) in #1603).
* **[dashboard] Migrate patches to upstream project**: Migrated dashboard patches to upstream project for better maintainability ([**@kvaps**](https://github.com/kvaps) in #1569).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Consolidate duplicate changelog entry.

The entry [dashboard] Migrate patches to upstream project appears twice—once at line 42 under "Dashboard" and again at line 199 in the "Refactors & chores" section. This duplication may confuse readers about the nature and scope of the change.

Remove the duplicate from the "Refactors & chores" section:

-* **[dashboard] Migrate patches to upstream project**: Migrated dashboard patches to upstream project for better maintainability ([**@kvaps**](https://github.com/kvaps) in #1569).

Alternatively, if these represent different aspects of the work (e.g., feature in one section, refactor in another), clarify the distinction with additional context in each entry.

Also applies to: 199-199

🤖 Prompt for AI Agents
In docs/changelogs/v0.38.0.md around lines 42 and 199, there is a duplicate
changelog entry "[dashboard] Migrate patches to upstream project" appearing
under both the "Dashboard" and "Refactors & chores" sections; remove the
duplicate from the "Refactors & chores" section (line 199) or, if they describe
different aspects, edit each entry to clarify the distinct scope (e.g., mark one
as a user-facing feature/maintenance note and the other as an internal refactor)
so readers are not confused.

Comment on lines +110 to +120
* **[dashboard-controller] Fix static resources reconciliation and showing secrets**: Fixed static resources reconciliation and improved secret display in dashboard controller ([**@kvaps**](https://github.com/kvaps) in #1615).
* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
* **[virtual-machine] Revert per-vm network policies**: Reverted per-VM network policies to previous behavior ([**@kvaps**](https://github.com/kvaps) in #1611).
* **[cozy-lib] Fix: handling resources=nil**: Fixed handling of nil resources in cozy-lib templates ([**@kvaps**](https://github.com/kvaps) in #1607).
* **[cozy-lib] Fix malformed ResourceQuota rendering for LoadBalancer services**: Fixed malformed ResourceQuota rendering for LoadBalancer services in cozy-lib templates ([**@IvanHunters**](https://github.com/IvanHunters) in #1642).
* **[kubernetes] Cleanup loadbalancer services**: Added cleanup functionality for load balancer services in Kubernetes app ([**@lllamnyp**](https://github.com/lllamnyp) in #1631).
* **[rbac] Fix permissions for high-privilege users**: Fixed RBAC permissions for high-privilege users, ensuring proper access control ([**@lllamnyp**](https://github.com/lllamnyp) in #1622).
* **[vpc] Fix access to subnet details configmap**: Fixed access to subnet details configmap in VPC functionality ([**@lllamnyp**](https://github.com/lllamnyp) in #1638).
* **[api,lineage] Ensure node-local traffic**: Ensured node-local traffic handling for API and lineage components ([**@lllamnyp**](https://github.com/lllamnyp) in #1554).
* **[extra] ingress: rm spaces from external ip list**: Removed spaces from external IP list in ingress configuration, fixing formatting issues ([**@nbykov0**](https://github.com/nbykov0) in #1652).
* **scripts: fix 20 migration**: Fixed migration script #20 to ensure proper execution during upgrades ([**@nbykov0**](https://github.com/nbykov0) in #1653).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Script executed:

#!/bin/bash
# First, locate the changelog files
find . -name "v0.38.0.md" -o -name "v0.37.6.md" -o -name "v0.37.7.md" | head -20

Repository: cozystack/cozystack


<shell_result>
Repository: cozystack/cozystack
Exit code: 0

stdout:

./docs/changelogs/v0.37.6.md
./docs/changelogs/v0.37.7.md
./docs/changelogs/v0.38.0.md

</shell_result>


Script executed:

#!/bin/bash
# Read the specific lines from v0.38.0.md (110-120)
echo "=== v0.38.0.md lines 110-120 ==="
sed -n '110,120p' ./docs/changelogs/v0.38.0.md

echo -e "\n=== Full v0.37.6.md for context ==="
cat -n ./docs/changelogs/v0.37.6.md

echo -e "\n=== Full v0.37.7.md for context ==="
cat -n ./docs/changelogs/v0.37.7.md

Repository: cozystack/cozystack


<shell_result>
Repository: cozystack/cozystack
Exit code: 0

stdout:

=== v0.38.0.md lines 110-120 ===
* **[dashboard-controller] Fix static resources reconciliation and showing secrets**: Fixed static resources reconciliation and improved secret display in dashboard controller ([**@kvaps**](https://github.com/kvaps) in #1615).
* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
* **[virtual-machine] Revert per-vm network policies**: Reverted per-VM network policies to previous behavior ([**@kvaps**](https://github.com/kvaps) in #1611).
* **[cozy-lib] Fix: handling resources=nil**: Fixed handling of nil resources in cozy-lib templates ([**@kvaps**](https://github.com/kvaps) in #1607).
* **[cozy-lib] Fix malformed ResourceQuota rendering for LoadBalancer services**: Fixed malformed ResourceQuota rendering for LoadBalancer services in cozy-lib templates ([**@IvanHunters**](https://github.com/IvanHunters) in #1642).
* **[kubernetes] Cleanup loadbalancer services**: Added cleanup functionality for load balancer services in Kubernetes app ([**@lllamnyp**](https://github.com/lllamnyp) in #1631).
* **[rbac] Fix permissions for high-privilege users**: Fixed RBAC permissions for high-privilege users, ensuring proper access control ([**@lllamnyp**](https://github.com/lllamnyp) in #1622).
* **[vpc] Fix access to subnet details configmap**: Fixed access to subnet details configmap in VPC functionality ([**@lllamnyp**](https://github.com/lllamnyp) in #1638).
* **[api,lineage] Ensure node-local traffic**: Ensured node-local traffic handling for API and lineage components ([**@lllamnyp**](https://github.com/lllamnyp) in #1554).
* **[extra] ingress: rm spaces from external ip list**: Removed spaces from external IP list in ingress configuration, fixing formatting issues ([**@nbykov0**](https://github.com/nbykov0) in #1652).
* **scripts: fix 20 migration**: Fixed migration script #20 to ensure proper execution during upgrades ([**@nbykov0**](https://github.com/nbykov0) in #1653).

=== Full v0.37.6.md for context ===
     1	
     2	<!--
     3	https://github.com/cozystack/cozystack/releases/tag/v0.37.6
     4	-->
     5	
     6	## Features and Improvements
     7	
     8	* **[api] Use shared informer cache**: Optimized API server by using shared informer cache, reducing API server load and improving performance ([**@lllamnyp**](https://github.com/lllamnyp) in #1539).
     9	* **[dashboard] sync with upstream & enhancements**: Synchronized dashboard with upstream and added various enhancements ([**@kvaps**](https://github.com/kvaps) in #1603).
    10	* **[cozystack-api][dashboard] Fix filtering for application services/ingresses/secrets**: Fixed filtering functionality for application services, ingresses, and secrets in both API and dashboard ([**@kvaps**](https://github.com/kvaps) in #1612).
    11	
    12	## Fixes
    13	
    14	* **[controller] Remove crdmem, handle DaemonSet**: Removed crdmem and improved DaemonSet handling in controller ([**@lllamnyp**](https://github.com/lllamnyp) in #1555).
    15	* **[dashboard] Revert reconciler removal**: Reverted reconciler removal to restore proper dashboard functionality ([**@lllamnyp**](https://github.com/lllamnyp) in #1559).
    16	* **[dashboard-controller] Fix static resources reconciliation and showing secrets**: Fixed static resources reconciliation and improved secret display in dashboard controller ([**@kvaps**](https://github.com/kvaps) in #1605).
    17	* **[api,lineage] Ensure node-local traffic**: Ensured node-local traffic handling for API and lineage components ([**@lllamnyp**](https://github.com/lllamnyp) in #1606).
    18	* **[virtual-machine] Revert per-vm network policies**: Reverted per-VM network policies to previous behavior ([**@lllamnyp**](https://github.com/lllamnyp) in #1611).
    19	* **[cozy-lib] Fix: handling resources=nil**: Fixed handling of nil resources in cozy-lib templates ([**@kvaps**](https://github.com/kvaps) in #1607).
    20	* **[nats] Use dig function to check for existing secret and prevent nil indexing**: Fixed NATS app chart to use dig function for checking existing secrets and prevent nil indexing errors ([**@kvaps**](https://github.com/kvaps) in #1609, #1610).
    21	
    22	## Development, Testing, and CI/CD
    23	
    24	* **[cozystack-controller] improve API tests**: Improved API tests for cozystack-controller ([**@lllamnyp**](https://github.com/lllamnyp) in #1599).
    25	* **[kubernetes] Helm hooks for cleanup**: Added Helm hooks for cleanup operations in Kubernetes app ([**@lllamnyp**](https://github.com/lllamnyp) in #1616).
    26	
    27	---
    28	
    29	**Full Changelog**: [v0.37.5...v0.37.6](https://github.com/cozystack/cozystack/compare/v0.37.5...v0.37.6)
    30	

=== Full v0.37.7.md for context ===
     1	
     2	<!--
     3	https://github.com/cozystack/cozystack/releases/tag/v0.37.7
     4	-->
     5	
     6	## Fixes
     7	
     8	* **[kubernetes] Cleanup loadbalancer services**: Added cleanup functionality for load balancer services in Kubernetes app ([**@lllamnyp**](https://github.com/lllamnyp) in #1622).
     9	* **[rbac] Fix permissions for high-privilege users**: Fixed RBAC permissions for high-privilege users, ensuring proper access control ([**@lllamnyp**](https://github.com/lllamnyp) in #1624).
    10	
    11	## System Configuration
    12	
    13	* **[system] kubeovn: increase limits**: Increased resource limits for Kube-OVN components to improve stability and performance ([**@nbykov0**](https://github.com/nbykov0) in #1629).
    14	
    15	---
    16	
    17	**Full Changelog**: [v0.37.6...v0.37.7](https://github.com/cozystack/cozystack/compare/v0.37.6...v0.37.7)
    18	

</shell_result>


Confirm all inconsistencies are accurate; however, the attribution claim for line 112 needs clarification.

The verification confirms three of the four inconsistencies:

  1. Line 110 [dashboard-controller] Fix static resources...: v0.38.0.md shows PR [dashboard-controller] Fix static resources reconciliation and showing secrets #1615, but v0.37.6.md (line 16) shows [Backport release-0.37] [nats] Fix NATS app chart to use existing secret credentials when present #1605
  2. Line 112 [virtual-machine] Revert per-vm network policies...: v0.38.0.md shows Andrei Kvapil (@kvaps), but v0.37.6.md (line 18) shows Timofei Larkin (@lllamnyp); PR [virtual-machine] Revert per-vm network policies #1611 matches ✓
  3. Line 115 [kubernetes] Cleanup loadbalancer services...: v0.38.0.md shows PR [kubernetes] Cleanup loadbalancer services #1631, but v0.37.7.md (line 8) shows [rbac] Fix permissions for high-privilege users #1622
  4. Line 116 [rbac] Fix permissions...: v0.38.0.md shows PR [rbac] Fix permissions for high-privilege users #1622, but v0.37.7.md (line 9) shows [Backport release-0.37] [rbac] Fix permissions for high-privilege users #1624

Cross-reference v0.37.6.md and v0.37.7.md to determine which PR numbers and attributions are authoritative, then update v0.38.0.md accordingly.

🧰 Tools
🪛 markdownlint-cli2 (0.18.1)

111-111: Reference links and images should use a label that is defined
Missing link or image reference definition: "dashboard"

(MD052, reference-links-images)

🤖 Prompt for AI Agents
In docs/changelogs/v0.38.0.md around lines 110–120, correct the cross-release
attribution inconsistencies: change line 110's PR reference from #1615 to #1605;
on line 112 update the author from @kvaps to @lllamnyp (PR #1611 stays); change
line 115's PR from #1631 to #1622; and change line 116's PR from #1622 to #1624;
keep existing surrounding text/phrasing intact.

@kvaps
Andrei Kvapil (kvaps) merged commit d70197c into main Nov 26, 2025
3 checks passed
@kvaps
Andrei Kvapil (kvaps) deleted the changelogs-0.38 branch November 26, 2025 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/L This PR changes 100-499 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant