v0.9.0

0.9.0 (2026-07-22)

Features

• oidc: add server-side Dex reverse proxy so Dex never needs its own public ingress or hostname (7f04a5b)
• helm: add server.oidc.dexProxy.enabled to reverse-proxy /dex/* traffic through the server or UI nginx (bc77ced)

Documentation

• clarify InsecureIssuerURLContext usage per security review (e646280)
• update version references to 0.9.0 and add upgrading guide entry for dexProxy (5d0a642)
• sync version badges and remove stale local OIDC references (9d7a1c7)

Chores

• makefile: use dexProxy for single port-forward local OIDC testing, removing the separate Dex port-forward requirement (44d035c)
• bump chart version and replace the "OpenDepot" text header with the project logo in README (29ea3c6)

Highlights

Dex can now be fully hidden behind the server (or UI) — no separate public ingress or hostname required:

• New server.oidc.dexProxy.enabled values flag (default false, fully backward compatible).
• Server reverse-proxies /dex/* to the in-cluster Dex service; JWKS/discovery are fetched internally while all client-facing URLs (login.v1, device-code verification_uri, etc.) still use the external, path-based issuer URL.
• New Helm chart guards: dexProxy.enabled=true now requires server.oidc.enabled=true, dex.enabled=true, and server.oidc.issuerUrl to be set, or the chart install fails fast with a clear error.
• Local/dev tooling (make ui-setup-oidc, oidc-forward, ui-forward) simplified to a single port-forward instead of separate server + Dex port-forwards.
• See Proxying Dex Through the Server and the v0.9.0 upgrade notes.

Upgrade note: No action required to preserve existing behavior — dexProxy.enabled defaults to false, and existing dex.enabled: true deployments with separately exposed Dex continue to work unchanged.

opendepot-0.9.0

A Helm chart for deploying OpenDepot, a cloud-native OpenTofu Registry

v0.8.0

0.8.0 (2026-07-19)

Bug Fixes

• ui: fill Provider/Module kind chip on resource cards for readability (de9ad7e)
• ui: fill remaining outlined badges with white text in light mode only (7bd683f)
• ui: fix Server Component crash from function-valued sx prop (1451a57)
• ui: keep module/provider kind colors fixed across light/dark mode (f6b0183), closes #03deb8 #047df1
• ui: match Depot ref chip color to Depot section icon in light mode (cfa7d93), closes #03deb8
• ui: remove greyish Paper background from Scan Findings accordions in light mode (b6e2226), closes #f6f8 #0d1117 #161b22
• ui: resolve HIGH/CRITICAL yarn audit findings (56915de)
• ui: restore outlined kind chips in dark mode, swap AWS logo for light mode (d787d20)
• ui: restore raised card-stock elevation effect in dark mode (e26382f)

Features

• Added capabilities to pull README from a module, store it in a configmap, and then render it in the ui (cdd12a4)
• Merge pull request #73 from tonedefdev/feat/module-readmes (c2baf15)
• ui: add light mode theme with cookie-persisted toggle (be8b229)
• version: fetch and expose Module README via owned ConfigMap (a66302d)

opendepot-0.8.0

A Helm chart for deploying OpenDepot, a cloud-native OpenTofu Registry

v0.7.0

0.7.0 (2026-07-12)

Bug Fixes

• branding: center hero logo properly and keep visible on small viewports (f53c17b)
• branding: dark mode hero logo and small viewport layout (cf554d2)
• ui: sign out client-side with a toast instead of navigating to /auth/logout (d48c6a4)
• ui: use white logo wordmark, add favicon, fix collapsed sidebar layout (91fddf7)

Features

• branding: swap logos in docs and UI with new brand assets (3f94ad4)
• Rebrand with new OpenDepot branding. Overhaul documentation (4f86db7)

opendepot-0.7.0

A Helm chart for deploying OpenDepot, a cloud-native OpenTofu Registry

v0.6.1

0.6.1 (2026-06-01)

Bug Fixes

• Binary Scan Findings dropdown renders versions that didn't have vulnerabilities (0a31771)
• exclude scan-clean versions from binaryVersions dropdown and prevent accordion collapse (bf75304)

v0.6.0

0.6.0 (2026-06-01)

Bug Fixes

• address code review defects in Valkey stats migration (8bbc7a3)
• address second round of code review defects (e6276be)
• address Security Review findings — scope Valkey ACL, add CPU limit, pin image tag, add .trivyignore (4a7bd68)
• commit .trivyignore with Valkey CVE suppressions and add CVE-2026-4878 with tracking note (c97fc14)
• remove left-trim markers from nginx Host proxy_set_header in ui-configmap (b02d2ac)
• update CVE-2026-4878 tracking issue reference to #68 (85a6947)

Features

• Merge pull request #69 from tonedefdev/fix/stats-db-as-crd (7110c92)
• migrate Valkey to valkey-io/valkey-helm subchart with opt-in ACL auth (dc44ca8)
• replace SQLite stats with Valkey for horizontal scalability (1419403)

opendepot-0.6.1

A Helm chart for deploying OpenDepot, a cloud-native OpenTofu Registry

opendepot-0.6.0

A Helm chart for deploying OpenDepot, a cloud-native OpenTofu Registry