kelos-dev/kelos v0.41.0

on GitHub

API Changes

• Mark kelos.dev/v1alpha1 API versions as deprecated in the CRDs and warn users to migrate to kelos.dev/v1alpha2. (#1386, @gjkim42)

Features

• Update gemini image from 0.46.0 to 0.47.0 (#1373, @app/kelos-bot)
• Update claude-code image from 2.1.179 to 2.1.183 (#1374, @app/kelos-bot)
• Update opencode image from 1.17.7 to 1.17.8 (#1375, @app/kelos-bot)
• Update codex image from 0.140.0 to 0.141.0 (#1379, @app/kelos-bot)
• Update opencode image from 1.17.6 to 1.17.7 (#1358, @app/kelos-bot)
• Update claude-code image from 2.1.178 to 2.1.179 (#1361, @app/kelos-bot)
• Update codex image from 0.139.0 to 0.140.0 (#1362, @app/kelos-bot)
• CLI config file now supports an env field for persistent environment variables applied to all tasks. Supports plain values and valueFrom (secretKeyRef/configMapKeyRef). The --env flag overrides config values. (#1305, @knechtionscoding)
• Add --deny-slack-connect-channels flag to kelos-slack-server to deny service to externally shared (Slack Connect) channels. The bot leaves on invite and fails closed when channel status cannot be verified. (#1330, @knechtionscoding)

Bug Fixes

• Codex, OpenCode, and Cursor agent entrypoints now preserve plugin skill reference files, install flat skill directories using the <plugin>:<skill> namespace, and fail initialization on namespace collisions. (#1372, @app/kelos-bot)
• Kelos install now waits for webhook readiness using EndpointSlices instead of deprecated core Endpoints. (#1365, @app/kelos-bot)
• Long-running tasks no longer fail mid-run when the GitHub App installation token expires. The controller now mounts the workspace token Secret as a file at /kelos/github-token/GITHUB_TOKEN, refreshes GitHub App-derived per-task token Secrets in place while the Job is running, retries refresh failures before the current token expires, and reference agent images read the file for git and gh calls. The env vars GITHUB_TOKEN, GH_TOKEN, and GH_ENTERPRISE_TOKEN are still set as compatibility fallbacks, and KELOS_GITHUB_TOKEN_FILE exposes the mounted token path for custom agents. podOverrides.volumes may not use the reserved kelos-github-token volume name. (#1196, @app/kelos-bot)
• kelos CLI now creates, reads, and prints Task, Workspace, and TaskSpawner resources using kelos.dev/v1alpha2. (#1357, @gjkim42)

Documentation

• Optimized the first-party Kelos skill to reduce context usage by loading CLI and troubleshooting details from references on demand. (#1366, @gjkim42)