• : NONE (by @sowmyav27 in #7168)
• : NONE (by @roehrijn in #7210)
• bugfix: Fix node environment teardown getting stuck when the OpenTofu workspace was already deleted. (by @seanschneeweiss in #7304)
• bugfix: Fixed an issue where deleting a user or team could remove the owner (and owner access) of projects and other resources owned by unrelated users or teams. (by @roehrijn in #7136)
• bugfix: Pre-release upgrade checks (Platform) now resolve the vcluster upgrade-version correctly when the platform base's DefaultVClusterVersion already equals the latest vcluster-pro GA, and no longer pick a release candidate as the upgrade target due to sort -V not honoring SemVer pre-release ordering. (by @sowmyav27 in #7192)
• deprecation: The API for moving virtual cluster instances between projects (projects.management.loft.sh/migratevirtualclusterinstance) is deprecated and will be removed in a future release. (by @seanschneeweiss in #7276)
• enhacement: OIDC token exchange endpoint can support ADFS access_token_issuer non-standard behavior when "LOFT_OIDC_TRUST_ACCESS_TOKEN_ISSUER=true" env var is set. (by @matskiv in #7299)
• enhancement: vCluster Platform's managemet.loft.sh API now supports ValidatingAdmissionPolicy resources (by @matskiv in #7300)
• feature: Add forwardTokenMode (Off/TokenReview/Passthrough) for tenant clusters. Passthrough forwards the caller's token directly to the tenant cluster's API server without a TokenReview or impersonation. The forwardToken boolean is deprecated but still honored. (by @lizardruss in #7191)
• feature: Add metrics-reader and metrics-writer access-key scope roles for the upcoming monitoring gateway. Scoped access keys now have their SelfSubjectAccessReview responses re-checked against the key's per-cluster scope, so a self review never reports more access than the key can actually exercise. The default loft-management-admin role grants metricsread on clusters and virtual cluster instances; per-instance metrics reads for project members are gated through each instance's owner access. (by @johannesfrey in #7108)
• fix: Improve cluster overview usage view toggle labels, prevent node claims status column clipping on resize, and fix tenant cluster API client paths to use the project-scoped virtualcluster route. (by @andyluak in #7109)
• ui: Add redirect to virtual machines list if vm is deleted on details page (by @PRTTMPRPHT in #7229)
• ui: Added "no actions" context menu for empty items in VM graph (by @PRTTMPRPHT in #7242)
• ui: Added contextual docs links to breadcrumb (by @PRTTMPRPHT in #7075)
• ui: Added graph view in virtual machine details (by @PRTTMPRPHT in #7196)
• ui: Added separate power status tracking for BMHs (by @PRTTMPRPHT in #7056)
• ui: Added validation against missing node pools when creating auto nodes clusters (by @PRTTMPRPHT in #7053)
• ui: Applied new header style across all main pages (by @PRTTMPRPHT in #7110)
• ui: Changed host cluster drilldown to match established drilldown styles (by @PRTTMPRPHT in #7225)
• ui: Fixed actions availability for virtual machines (by @PRTTMPRPHT in #7234)
• ui: Fixed capitalization of VPN table headers (by @PRTTMPRPHT in #7163)
• ui: Fixed detection of error state for KubeVirt data volumes (by @PRTTMPRPHT in #7235)
• ui: Fixed hover state for user row in sidebar (by @PRTTMPRPHT in #7164)
• ui: Made template names wrap in template marketplace (by @PRTTMPRPHT in #7159)
• ui: Removed template entry from tenant cluster header (by @PRTTMPRPHT in #7184)
• ui: Revamped tenant cluster status page (by @PRTTMPRPHT in #7040)