v0.37.0

0.37.0 (2026-07-16)

Features

• acceptance: accept benign repo-hygiene passengers instead of refusing the folder (#242) (49327fd)
• acceptance: treat a release-referenced values file as read-only context (#245) (d25c013)
• overlay: prove new-object placement; author images/replicas overrides and $patch:delete (#244) (38590d1)
• render-root scoping + tolerate patches and patched overlays reading ../../base (#239) (e9d6be1)
• scan-repo: adopt external-base overlays instead of refusing them (#243) (c7650f9)

Bug Fixes

• kustomize: stop writing the build's own output into the build's input (#234) (8444cd0)

Documentation

• boundary: consolidate support records (#241) (3b937f9)

gitops-reverser: v0.36.0

0.36.0 (2026-07-14)

⚠ BREAKING CHANGES

• kustomize: attribute overrides with a dyed render, verify by re-render, delete the re-implementation (#233)
• kustomize: read kustomization.yaml with kustomize, not a hand-written parser (#229)

Features

• kustomize: attribute overrides with a dyed render, verify by re-render, delete the re-implementation (#233) (61ed1e7)
• kustomize: read kustomization.yaml with kustomize, not a hand-written parser (#229) (6b3f202)

Bug Fixes

• kustomize: a digest: override no longer strips the tag out of the source file (#231) (8a835f0)
• kustomize: refuse a folder kustomize cannot build, and read the override chain from the renderer (#232) (960e3bd)

gitops-reverser: v0.35.0

0.35.0 (2026-07-14)

⚠ BREAKING CHANGES

• gitops-api: layout corpus, support baseline, and doc-link checker (#224)

Features

• bi-directional ArgoCD advise/tests + strip Argo tracking-id from Git writes (#225) (ddd75cb)
• gitops-api: layout corpus, support baseline, and doc-link checker (#224) (c48cc58)

Bug Fixes

• sanitize: strip the kcp.io/cluster annotation from Git writes (#227) (d9b6d9d)

gitops-reverser: v0.34.0

0.34.0 (2026-07-10)

⚠ BREAKING CHANGES

• rbac: least-privilege RBAC, a strict chart values schema, and informers that stop on 403 (#223)

Features

• API-surface trigger gating, Redis key prefix, pkg/manifestanalyzer + scan-folder/scan-repo rename (#221) (0a940b3)
• rbac: least-privilege RBAC, a strict chart values schema, and informers that stop on 403 (#223) (21a0565)

gitops-reverser: v0.33.0

0.33.0 (2026-07-09)

Features

• git: write-boundary L1/L2 preconditions, WriteBoundaryRefused status, and go 1.26.5 refresh (#216) (e9a2476)
• manifest-analyzer: repo-walker onboarding discovery (F8 first cut) (22e9e92)

Documentation

• gitops-api: onboarding repo-discovery design (F8); archive shipped F1/F7 (#213) (4469e2b)

gitops-reverser: v0.32.0

0.32.0 (2026-07-08)

Features

• chart: Redis-optional install by default; rename modes to configured-author/attributed-author (#211) (3bd40c0)

gitops-reverser: v0.31.0

0.31.0 (2026-07-08)

Features

• gitops-api: treat higher-level KRM objects (HelmRelease, Argo Application, KRO) as first-class documents (#203) (e5722a7)
• secrets: stop retaining Secret values in the control plane (#208) (535c5ed)

gitops-reverser: v0.30.0

0.30.0 (2026-07-07)

Features

• gitops-api: place new resources to match the repo's existing layout (#202) (97a9c87)
• kustomize: edit images/replicas overrides through to kustomization.yaml (#198) (a8ce917)

Bug Fixes

• release: sign and attest GitHub release assets directly (#201) (10f8962)

gitops-reverser: v0.29.2

0.29.2 (2026-07-05)

Performance Improvements

• build: cache Go build + module dirs in Dockerfile builder (#194) (55ed662)

gitops-reverser: v0.29.0

0.29.0 (2026-06-30)

⚠ BREAKING CHANGES

• bumping crd versions and last edits
• validating webhook is required (even is audit has been configured).

Features

• --author-attribution={true|false} is now allowing you to enable or disable the need for kube-api configuration (at the cost of loosing the real author). (7860294)
• bumping crd versions and last edits (4fcffa3)
• CommitRequest can be attributed by validating webhook handler since it's an internal command (58dd37a)
• let's get all testing to Kubernetes 1.36 (905ff29)
• manifestanalyzer,git: refuse unsupported GitTarget folder content in the writer (6264d5d)
• refuse weird files in GitTarget path, but do allow .gittargetignore (1bf3820)
• reworking metrics to new architecture (b502afe)
• validating webhook is required (even is audit has been configured). (96ec390)
• watch-first ingestion (28389c9)
• watch: diff watch-derived vs audit-derived desired sets (Phase 1 payoff) (c8ba472)
• watch: parallel watch-state stream behind --watch-state-stream (097230b)
• watch: surface a refused GitTarget folder as a Blocked stream (5bdc43d)

Bug Fixes

• Allow GitTarget to respond quickly to changes in the tracked GitFolder (591d310)
• e2e: gate cluster readiness on healthy API discovery (5b81718)
• green CI — guard anonymous-access nil deref and skip audit webhook TLS for committer-only e2e (1e23e16)
• wainting for the right status to return (cc701d6)

Documentation

• adding skills and working on status design (e55b63a)
• created new plan, and hopefully found why the tests are so flaky (9e610e6)
• designing gittargetignore (19ffc7e)
• final review on architecture.md (046b538)
• moving architecture along with the rewrite (6e1193a)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.29.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.29.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.29.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64