Changes and Releases

Updates on Giant Swarm workload cluster releases, apps, UI improvements and documentation changes.

• Jun 12, 2026 AI Agents muster v0.5.0

  Added

  • (oauth) Per-issuer acceptedTypHeaders for trustedIssuers in #837 by @QuentinBisson

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.4...v0.5.0

• Jun 12, 2026 AI Agents muster v0.4.4

  Fixed

  • (testing) Wait for stable MCPServer state before starting scenarios in #821 by @QuentinBisson

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.3...v0.4.4

• Jun 12, 2026 AI Agents muster v0.4.3

  Changed

  • Bump version to 0.3.13-dev in #828 by @taylorbot

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.2...v0.4.3

• Jun 12, 2026 AI Agents muster v0.4.2

  Changed

  • Align files according to platform standards in #835 by @giantswarm-align-files[bot]

  Full Changelog: https://github.com/giantswarm/muster/compare/v0.4.1...v0.4.2

• Jun 12, 2026 Connectivity ingress-nginx-app v4.3.4

  Changed

  • Controller: Update image to v1.15.7 fixing CVE-2026-49975 (unauthenticated HTTP/2 DoS)
• Jun 12, 2026 AI Agents klaus v0.0.203

  Changed

  • (deps) Update dependency @anthropic-ai/claude-code to v2.1.174 in #331 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.202...v0.0.203

• Jun 12, 2026 AI Agents klaus v0.0.202

  Fixed

  • (deps) Update module github.com/giantswarm/mcp-oauth to v0.3.2 in #332 by @renovate[bot]

  Full Changelog: https://github.com/giantswarm/klaus/compare/v0.0.201...v0.0.202

• Jun 12, 2026 AI Agents muster v0.4.1

  Changed

  • Update mcp-oauth to v0.3.1: forwarded ID tokens (trustedAudiences) are no longer hard-rejected by the trusted-issuer Bearer branch when the same issuer is also configured in trustedIssuers — fixes Backstage AI-chat SSO token forwarding returning 401 (typ header is "", expected "at+jwt") on deployments with the token-exchange broker enabled. (#838)
• Jun 11, 2026 Developer Portal backstage v0.136.0

  Added

  • Auth: mint per-management-cluster tokens silently through the muster token broker instead of per-cluster OAuth popups. A new authenticated POST /api/auth/cluster-token/:installation backend route exchanges the user’s main Dex ID token for a short-lived cluster token (RFC 8693), cached per user and installation; the kubernetes auth connectors try this silent path before the cookie-based refresh, keeping the legacy popup as fallback for unmigrated clusters. Configured via gs.clusterTokenBroker; installations marked with gs.installations.<name>.clusterTokenAudience disappear from the provider settings page, collapsing it to the single main login.
  • AI chat / muster: forward the main Dex ID token as the MCP bearer token when an MCP server’s authProvider has no dedicated auth.providers entry, enabling single sign-on for muster. Deployments activate this by removing the mcp-muster provider from auth.providers, which also removes the separate PKCE login from the user settings page. See ./docs/releases/v0.136.0-changelog.md for more information.
• Jun 11, 2026 Connectivity coredns-app v1.30.3

  Changed

  • Update coredns image to 1.14.4.

• Newer entries
• Older entries