v0.27.0

Features

• Add --ghproxy-cache-ttl flag to configure the cache TTL for workspace ghproxy instances via the controller, Helm chart, and kelos install CLI. (#871)

v0.26.0

API Changes

• Add GitHub webhook support for TaskSpawners with new githubWebhook source type. TaskSpawners can now be triggered by GitHub webhook events (issues, PRs, comments) with configurable filtering. Includes webhook server deployment, signature validation, and Helm chart templates with ingress support.
  (#851)

Features

• Update claude-code image from 2.1.87 to 2.1.88 (#854)
• Update opencode image from 1.3.4 to 1.3.9 (#847)
• Update cursor image from 2026.03.25-933d5a6 to 2026.03.30-a5d3e17 (#855)
• TaskSpawner GitHub discovery now uses a workspace-scoped ghproxy that owns Workspace GitHub auth and coalesces concurrent cache misses, reducing repeated cache misses and unnecessary GitHub API traffic.
  (#859)

v0.25.0

API Changes

• You can now configure a TaskTemplate with labels and annotations expressions which will be available on the Task
  (#810)

Features

• Add ghproxy caching server to reduce duplicate GitHub API requests across TaskSpawner pods. Deployed automatically as part of the Helm chart. Configure allowed upstream hosts via ghproxy.allowedUpstreams Helm value. (#838)
• Update opencode image from 1.3.2 to 1.3.4 (#812)
• Update gemini image from 0.35.0 to 0.35.3 (#800)
• Update claude-code image from 2.1.81 to 2.1.87 (#799)
• Update codex image from 0.116.0 to 0.117.0 (#811)
• Update cursor image from 2026.03.20-44cb435 to 2026.03.25-933d5a6 (#801)
• Add Prometheus metrics export to kelos-spawner for discovery cycle observability (#821)
• users can now install kelos with helm: "helm install kelos oci://ghcr.io/kelos-dev/charts/kelos"
  (#806)
• Add Prometheus metrics (kelos_github_api_requests_total, kelos_github_api_request_duration_seconds) for GitHub API calls (#808)
• Restructured Helm values.yaml to use nested spawner.resources and tokenRefresher.resources keys instead of flat spawnerResourceRequests/spawnerResourceLimits/tokenRefresherResourceRequests/tokenRefresherResourceLimits values. Also moved spawnerImage and tokenRefresherImage under spawner.image and tokenRefresher.image respectively. (#798)
• Helm chart now includes CRDs as templates, enabling standalone helm install/upgrade without the kelos CLI. CRD installation can be disabled via crds.install=false for users managing CRDs externally. (#832)

Bug Fixes

• Fix Helm chart release to default to release-tagged images instead of :latest (#825)

Other Changes

• Labels on controller-managed resources changed from app.kubernetes.io/* to kelos.dev/*. Spawner Deployments are migrated automatically by the controller. The controller manager Deployment must be manually deleted before upgrading (kubectl delete deployment kelos-controller-manager -n kelos-system) because spec.selector.matchLabels is immutable; it will be recreated by the install process. (#826)

v0.24.0

API Changes

• Add none credential type (credentials.type: none) that disables built-in credential injection. Users supply provider-specific credentials via podOverrides.env and can set podOverrides.serviceAccountName for workload identity (IRSA, GKE Workload Identity, Azure Workload Identity). This enables AWS Bedrock, Google Vertex AI, and other providers without provider-specific CRD fields. (#785)

Features

• Update gemini image from 0.34.0 to 0.35.0 (#790)
• Update opencode image from 1.2.27 to 1.3.2 (#772)
• Add --controller-resource-requests and --controller-resource-limits flags to kelos install for configuring controller container resources. The previously hardcoded resource limits have been removed to prevent OOM kills. (#783)

v0.23.0

Features

• Update gemini image from 0.33.2 to 0.34.0 (#732)
• Update claude-code image from 2.1.77 to 2.1.81 (#744)
• Update cursor image from 2026.03.11-6dfa30c to 2026.03.20-44cb435 (#745)
• Update codex image from 0.115.0 to 0.116.0 (#750)
• The Kelos skill can now be installed via skills.sh: npx skills add kelos-dev/kelos (#762)
• Added kelos install --token-refresher-resource-requests and --token-refresher-resource-limits so GitHub App token refresher sidecars can be configured with CPU and memory resources. (#755)
• Add --spawner-resource-requests and --spawner-resource-limits flags to kelos-controller for configuring resource requirements on spawner containers. Also available via kelos install CLI. (#737)
• The install mechanism now uses an embedded Helm chart for manifest rendering, replacing raw YAML string manipulation. All existing CLI flags and behavior are preserved. (#728)

v0.22.0

API Changes

• Add per-source pollInterval field to githubIssues, githubPullRequests, and jira sources, allowing each source to override the root-level spec.pollInterval. The root-level field is deprecated. (#719)
• TaskSpawner githubIssues and githubPullRequests now support commentPolicy, including optional GitHub user, team, and minimum-permission restrictions for comment-based workflow control. Legacy triggerComment and excludeComments remain supported for migration, but cannot be combined with commentPolicy.
  (#703)

Features

• Update claude-code image from 2.1.76 to 2.1.77 (#711)
• Update codex image from 0.114.0 to 0.115.0 (#712)
• Update gemini image from 0.33.1 to 0.33.2 (#713)
• Update cursor image from 2026.02.27-e7d2ef6 to 2026.03.11-6dfa30c (#714)
• Update opencode image from 1.2.26 to 1.2.27 (#698)
• Add --verbosity flag to kelos-controller and kelos-spawner for simplified log level control. Default logging now shows only info and error messages (V(0)) instead of debug output. (#689)

v0.21.0

Features

• Add ETag-based HTTP caching to TaskSpawner to reduce GitHub API rate limit consumption (#682)

v0.20.0

API Changes

• Add opt-in GitHub status reporting to TaskSpawner via reporting.enabled on gitHubIssues and gitHubPullRequests sources. When enabled, the spawner posts lifecycle comments to originating issues and pull requests when tasks are accepted, succeed, or fail. (#653)
• Add upstreamRepo field to Task and TaskSpawner APIs. When set (or automatically derived from githubIssues.repo / githubPullRequests.repo), the KELOS_UPSTREAM_REPO environment variable is injected into agent containers so fork-workflow tasks target the correct upstream repository. Also fix GHES host preservation when shorthand owner/repo overrides are used. (#626)

Features

• Add a first-party Kelos agent skill (skill/) that teaches AI agents how to author and debug Kelos resources, with reference YAML patterns and an example AgentConfig. (#598)

Bug Fixes

• Fix taskspawner comment filter to consider pull request review body text (#645)

v0.19.0

API Changes

• Add githubPullRequests source type for TaskSpawners, enabling PR-driven workflows with filtering by review state, labels, draft status, and comment-based trigger/exclude. (#597)

Features

• AgentConfig MCP servers now support headersFrom.secretRef and envFrom.secretRef to source header and environment values from Kubernetes Secrets. (#588)

Bug Fixes

• Review comments on pull requests are now evaluated against TriggerComment and ExcludeComments filters in GitHubPullRequestSource. (#628)
• Fix kelos get taskspawner to display the source column for taskspawners using githubPullRequests and jira sources. (#609)
• Fix taskspawner unable to delete completed tasks for retrigger due to missing RBAC permission. (#614)

v0.18.0

API Changes

• Added Cursor CLI as a first-class agent type. Users can now create Tasks with type: cursor to run Cursor-based coding agents. (#557)

Bug Fixes

• Fixed kelos logs so it resolves the current live task pod, clears stale task pod references, and returns a clear message when a task no longer has a live pod. (#587)
• Fix worker pods preferring stale gh CLI auth over injected workspace token by setting GH_CONFIG_DIR to a clean directory on the workspace volume and clearing inherited git credential helpers. (#583)
• Fix comment pagination to fetch all pages (up to 1000 comments) instead of only the first 100, preventing missed trigger/exclude commands on busy issues. (#536)