v0.2.4

Changelog

• 6cd36f0 fix(deploy): fail closed on the bare-pod gate
• 4a94360 refactor(admission): collapse replicas defaulting into one helper

v0.2.3

Changelog

• 07b334e chore: bump cocoon-common to v0.2.3
• 585a005 chore: go mod tidy (client_model direct after metrics tests)
• 89b59b5 fix(metrics): unify fail-open decode as skipped; audit follow-ups
• 5d0803a refactor(metrics)!: result/reason labels + exactly-once admission recording
• e8144ea refactor: quality pass (/code + simplify + comment tightening)

v0.2.2

Changelog

• b5246a8 chore(deps): bump cocoon-common to v0.2.2
• 80a4c73 refactor: code-style and simplify cleanup

v0.2.1

Changelog

• 351173a chore(deps): bump cocoon-common to v0.2.1
• 6ff9722 chore: align tooling and add package docs
• e466d76 chore: code review batch (2026-05) (#1)
• b633df8 feat: hot-reload TLS keypair so cert-manager rotation skips pod restart
• 96d5867 refactor: drop dead affinity package and the metrics it owned
• 6c2da68 style(log): drop double-pass err in Fatalf, route err-bearing Warnf via Errorf

v0.2.0

Changelog

• 701f8f3 adopt cocoon-common httpx and NewClientset helpers
• bef05fb fix logging variant and wire affinity metrics
• a065e07 refactor: clean shutdown, drop type-switch generics, misc style fixes
• 44b5288 style: flatten single-entry const block to bare form

v0.1.9

Changelog

• ed90fb3 refactor: add Godoc to all exports, fix error messages, pre-allocate errs
• 530b5aa upgrade to latest common, epoch

v0.1.8

Changelog

• f832164 fix: check old object tolerations to prevent scale-down bypass
• 4d4cdbc fix: reject numeric toolbox names, fail-closed on scale webhook API errors
• dac25cd refactor: use slices.ContainsFunc and slices.IndexFunc for Go 1.25 idioms
• 80d828b upgrade to latest common

v0.1.7

Changelog

• d9d81c4 feat: reject firecracker + clone mode in webhook
• caaaba7 feat: validate AgentSpec/ToolboxSpec Backend and firecracker constraints
• 80b563c fix: skip spec validation on metadata-only CocoonSet updates
• 2877696 refactor: inline single-use isCloudImgURL helper

v0.1.6

Changelog

• 3b26860 Deny bare pods: cocoon pods must be managed by a CocoonSet
• 4ba31cb Strip stale RBAC and README from the removed affinity model
• 7f35f92 chore: enforce SKILL.md code style rules
• 6787df3 ci: drop stale master branch trigger from build.yml
• 68a0039 clean up memo
• a134559 code clean
• 4cdd30c fix(admission): valid ConfigMap key + scale subresource enforcement
• c6d1c5c fix(rbac): grant get on apps/v1 deployments + statefulsets
• 968c228 fix: align agent OS validation message and docs with android support
• d5a3ba5 refactor and clean up
• 24faa30 working ver, use latest cocoon technology

v0.1.5

Changelog

• f37ea7b chore: reset webhook layout to minimal scaffold
• 9bd63a7 clean up 2nd round, context use t.Context for testing
• a5338ad config: kustomize base for webhook deployment
• 05cda19 perf: add LabelSelector to pickAnyCocoonNode node listing
• 9ab0a3c performance tune
• 1f89fb4 refactor to fix code issue
• dc9c5de refactor with v1 api
• 099fbb9 review: cocoon-webhook M4.5 follow-up
• bf253df tests: table tests for affinity, mutator, validators
• 370a734 webhook: AffinityStore interface + ConfigMap implementation
• 36cd9c7 webhook: nodepool picker (least-used) and orphan slot reaper
• 8cb8119 webhook: pod mutator using AffinityStore reservation
• 0467b6c webhook: prometheus metrics on a separate listener
• eb37e1a webhook: scaffold Server with admission route table
• ef9eff5 webhook: validate CocoonSet specs ahead of the operator
• 07ac5fb webhook: validate handler blocks workload scale-down