kelos-dev/kelos v0.38.0

on GitHub

Features

• Update claude-code image from 2.1.161 to 2.1.163 (#1287, @app/kelos-bot)
• Update cursor image from 2026.06.03-0bbb28e to 2026.06.04-5fd875e (#1289, @app/kelos-bot)
• Update codex image from 0.136.0 to 0.137.0 (#1288, @app/kelos-bot)
• Update gemini image from 0.45.0 to 0.45.1 (#1301, @app/kelos-bot)
• Codex OAuth refresher CronJobs now run in the target Secret namespace with per-Secret ServiceAccounts and RBAC. (#1283, @app/kelos-bot)
• Add BotMessagePolicy field to TaskSpawner Slack configuration with policy values None, All, and OthersOnly. Controls whether bot-originated messages can trigger the spawner, enabling bot-to-bot automation workflows with granular self-trigger loop protection.
  (#1233, @knechtionscoding)
• Add controller-managed Codex OAuth credential refresh. Kelos creates one CronJob per Secret labeled kelos.dev/codex-oauth-refresh=true; each CronJob runs Codex to refresh that Secret's CODEX_AUTH_JSON bundle and writes the refreshed auth.json back to the Secret. (#1262, @app/kelos-bot)
• Add optional Task and TaskSpawner template effort fields plus kelos run --effort to configure agent reasoning effort. (#1278, @gjkim42)
• Update claude-code image from 2.1.158 to 2.1.161 (#1256, @app/kelos-bot)
• Update gemini image from 0.44.1 to 0.45.0 (#1275, @app/kelos-bot)
• Update cursor image from 2026.05.28-a70ca7c to 2026.06.02-8c11d9f (#1276, @app/kelos-bot)
• Update codex image from 0.135.0 to 0.136.0 (#1264, @app/kelos-bot)

Bug Fixes

• Fix scheduled Codex OAuth credential refresh Jobs so they run as the Codex image UID and use Codex CLI flags supported by the bundled version. (#1300, @gjkim42)
• Fix ServiceAccount and RBAC creation for generic webhooks
  (#1269, @gdziwoki)
• Fix Slack task responses not being posted back to the thread after task completion. All agent types (claude-code, cursor, gemini, codex, opencode) now capture their response for Slack reporting.
  (#1263, @knechtionscoding)

Other Changes

• The agent container in task pods is now named kelos-agent instead of the agent type (e.g. claude-code). Update any tooling that references the container by name (e.g. kubectl logs <pod> -c <agent-type> becomes -c kelos-agent). The kelos- prefix is now reserved for Kelos-internal containers and may not be used by podOverrides.extraContainers / extraInitContainers; agent-type names (e.g. claude-code, codex) are now permitted there. (#1253, @app/kelos-bot)