kreuzberg-dev/kreuzberg v4.8.4

on GitHub

What's Changed

Added

• Helm chart for Kubernetes deployment — minimal, security-hardened Helm chart with Deployment, Service, Ingress, PVC, HPA, PDB, and ServiceAccount templates. Publishes to GHCR as an OCI artifact. (#695)
• Helm lint and kubeconform pre-commit hooks — added helm lint --strict and kubeconform (k8s 1.28.0 schema validation) to pre-commit and CI pipeline.
• Helm chart publish workflow — new publish-helm.yaml GitHub Actions workflow pushes versioned chart to oci://ghcr.io/kreuzberg-dev/charts.

Fixed

• Helm chart: init container cannot chown as non-root — added securityContext.runAsUser: 0 to the init container.
• Helm chart: unpinned busybox image tags — pinned to busybox:1.37-glibc for reproducibility.
• Comrak bridge panics on multi-byte UTF-8 boundaries — annotation byte offsets landing inside multi-byte characters caused panics in build_inlines(). Snaps offsets to valid char boundaries. (#696)

Install via Helm

helm install kreuzberg oci://ghcr.io/kreuzberg-dev/charts/kreuzberg --version 4.8.4

Full Changelog: v4.8.3...v4.8.4