nebius-cxcli-v0.1.8

• Fixed the nebius-cxcli CI and release workflows to run nebius_cxcli.release_catalog checks with the repo .venv/bin/python created by make all, avoiding bare-runner Python import failures under GitHub Actions.
• Hardened tests/test_setup_build.py against ambient GitHub Actions build env leakage so setup/build source-selection and release-ref rewrite tests stay deterministic in CI.

nebius-cxcli-v0.1.6

• Simplified bootstrap-ci so reruns automatically reconcile the CLI-managed customer workflow to the latest generated contract; --auth-bootstrap remains enabled by default and workflow-only runs are now the explicit opt-out via --no-auth-bootstrap.
• Added regression coverage that bootstrap-ci --help and the command surface keep --auth-bootstrap enabled by default.
• Fixed customer-side Terraform plan/apply flows for private repos by persisting rendered tfvars in the generated manifest and recreating ignored generated/infra/terraform.auto.tfvars.json from that manifest before Terraform runs, both in CLI-generated bundle commands and generated customer workflows.
• Clarified and tested that deploy <generated-dir> remains a local/customer-side bundle operation only and does not auto-run bootstrap-ci or mutate GitHub CI workflow/environment state.

nebius-cxcli-v0.1.5

• Added PR-side coverage for bootstrap-ci workflow generation across both development (main) and stable tagged (nebius-cxcli-v<version>) default CLI refs.
• Hardened bootstrap-ci to fail before writing the customer workflow when GitHub auth-bootstrap prerequisites are missing, and documented --github-repo as an override over target-repo auto-detection.
• Added explicit render profiles: generator-side validate and render now default to portable output, while --render-profile local-dev keeps checked-out Terraform module paths for workstation testing.
• Hardened generated-bundle validation and customer workflows with validate-generated --portable, so PR/apply pipelines reject non-portable local Terraform module sources before plan/apply.
• Simplified wheel/release packaging to bundle the portable catalog via the build override path instead of rewriting the working-tree root catalog during GitHub Actions builds.
• Aligned the generated customer workflow with the example repo by using a shared Python-version env and compact JSON discovery output for deterministic GitHub Actions matrix handoff.
• Added repo-side coverage that the checked-in local and portable catalogs stay semantically aligned except for Terraform module source addresses.
• Added direct tests for the validate-sources CLI command surface and GitHub environment-secret bootstrap helpers so those paths no longer rely only on indirect coverage.

nebius-cxcli-v0.1.3

• Hardened release publishing so tagged wheels use the exact tag version and verify bundled portable component sources through shared release-catalog helpers.
• Limited release catalog ref rewriting to this monorepo's module sources and now fail release validation when external module sources are left on floating refs or local paths.
• Added PR-side coverage for release catalog rendering and wheel verification so release packaging errors are caught before tagging.
• Fixed publish-release.sh --prep changelog rewriting so moved release notes preserve Markdownlint-safe blank lines around lists and headings.

nebius-vpngw-v0.5.4

• Tightened multi-connection validation and template guidance: tunnel names must now be globally unique, APIPA tunnel ranges and BGP inner IPs must be unique per gateway instance, and the generated config/docs now clarify the supported multi-site active/passive workflow.
• Improved status for multi-connection gateways: Carrying Traffic is now computed per connection, and live FRR multipath across overlapping prefixes is surfaced as an ECMP Warning that names the prefix and the active tunnels carrying it.

github-report-v0.1.2

• replace the org-specific CLI flow with a required --owner option that works for GitHub organizations and personal accounts
• support activity reports for owner-wide scans and individual public repositories using the same modifications-then-commits ranking
• make the installer idempotent for re-runs and wheel upgrades, and simplify GitHub token guidance for end users

Install

Recommended: download the bundled install archive from this release and run:

curl -fsSLO https://github.com/nebius/nebius-ps-services/releases/download/github-report-v0.1.2/github-report-install-0.1.2.tar.gz
tar -xzf github-report-install-0.1.2.tar.gz
bash ./install-github-report.sh

No git clone is required.

github-report-v0.1.1

• improve installer guidance for Python setup, GitHub account/token creation, and post-install verification
• publish installer, tarball, checksums, and install notes as release assets

Install

Recommended: download the bundled install archive from this release and run:

curl -fsSLO https://github.com/nebius/nebius-ps-services/releases/download/github-report-v0.1.1/github-report-install-0.1.1.tar.gz
tar -xzf github-report-install-0.1.1.tar.gz
bash ./install-github-report.sh

No git clone is required.

github-report-v0.1.0

• first release

nebius-vpngw-v0.5.3

• Made the output path optional for create-from-peer-config; when omitted, the generated config now defaults to ./nebius-vpngw.config.yaml.
• Added --local-config-file as an output-file alias for create-from-peer-config, with fail-fast validation if it conflicts with the positional output path.

nebius-vpngw-v0.5.2

• Expanded the pytest-based test suite, split unit/integration coverage, centralized test config in pyproject.toml, and added Makefile targets plus service-scoped CI.
• Hardened operational CLI commands: restart-tunnel now performs a full IPsec and matching-BGP reset, and failover/failback were tightened and validated against the active/passive HA flow.
• Improved route management for Nebius workload subnets that inherit parent network pools, and added live BGP advertisement reconciliation so route commands reflect the current YAML instead of stale FRR state.
• Switched releases to the monorepo service pattern: publish-release.sh now handles prep/tagging, vpngw-ci.yml is PR/manual only, and vpngw-release.yml is the dedicated tag-driven GitHub Release workflow for nebius-vpngw-v*.