CHANGELOG

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

This project uses towncrier and the changes for the upcoming release can be found in <https://github.com/metalbear-co/mirrord/tree/main/changelog.d/>.

3.247.0 - 2026-08-12

Added

- Browsers can join a session from a share link, with no extension.
- Multi-cluster preview replicas.

Changed

- mirrord ui now shows the state, e.g. idling or active, of preview sessions.

3.246.0 - 2026-08-10

Added

- The agent now replaces the Cache-Control header of HTTP responses that went
through it with no-cache, no-store, must-revalidate, so that browsers and
caching proxies don't cache responses served while mirrord redirects a
target. Set the new agent.override_cache_control config option to false
to turn this off.

Changed

- mirrord can now use target.path.labels to target every matching pod in a
namespace (requires operator), allowing one local session to intercept
traffic across multiple workloads that share the configured labels.

Fixed

- Fixed concurrency issues in mirrord-agent logic for outgoing connections.

3.245.0 - 2026-08-07

Added

- Added Windows crash diagnostics for mirrord exec, producing a crash record,
memory dump, and report for native faults and external kills.
- Added a --key filter to mirrord session ls, letting you list only the
active local and in-cluster sessions started with a given session key.
- Added support for specifying a kube context in mirrord up. In order of
precedence, it can be set:

1. with the --context argument when running mirrord up (highest
precedence)
2. with the context field under a service in the configuration file
3. with the common.context field in the configuration file

If none of these are set, the default behaviour remains the same.
- Configuration templating now exposes a git_branch variable holding the
current git branch, so a
config can derive values from it, for example giving each branch its own
session key. Outside a git
checkout the variable stays undefined, so pair it with the default filter
when the same config
also has to work there.

Changed

- Raised the default CPU limit on agent pods from 100m to 1 core, so agents
are not throttled under heavier traffic. Set agent.resources to override.
- Set TCP_NODELAY on the agent's connection to its clients, so messages sent
to a session are not held back by Nagle's algorithm.
- Updated the kube fork to 4.2.0. TCP_NODELAY is now set on connections to
the Kubernetes API
server, so requests are not held back by Nagle's algorithm.
- /etc/ssl/certs is now read from the remote target by default, so the local
process trusts the same
certificate authorities as the target when talking to services in the
cluster. Add the path to
feature.fs.local to restore the previous behaviour.

Fixed

- Fixed Windows pitm reusing a stale layer DLL after the mirrord binary was
upgraded by giving its extracted layer the existing per-build unique
filename.
- Fixed Windows applications reporting the wrong error when a requested local
port was unavailable.
- Fixed the Windows layer's Java debugger-port auto-detection.
- Fixed the Windows mirrord JetBrains extension leaking application processes
when a Debug session is terminated.
- Fixed the config wizard generating invalid config when path or header filter
is set.
- Renewing an expired client certificate no longer requests a CI credential
from the operator.
Users whose stored certificate had expired failed to start a session with
Enterprise license is required for generating mirrord CI api key unless the operator ran on an
Enterprise license.
- Send the user-provided session key when creating a copy target.
- The chaos edit command no longer returns a "422 Unprocessable Entity"
error.
- mirrord up now splits Kafka topics automatically.

3.244.1 - 2026-08-02

3.244.0 - 2026-08-02

Added

- Added profile field for selecting administrator-defined db branch
configuration profiles.
- Added an sslmode connection parameter for CockroachDB branching, for use
when the connection is configured with individual parameters instead of a
URL.

3.243.0 - 2026-07-31

Added

Changed

- The mirrord ui dark mode now uses neutral dark gray surfaces with the brand
purple reserved for accents, improving contrast over the previous
purple-on-purple scheme.

Fixed

- Fixed 410 session errors when reusing an existing copy target.

3.237.0 - 2026-07-22

Changed

- Job and CronJob targets no longer require enabling the copy_target feature
manually. Since these targets have no long-running pod to attach to, mirrord
now enables copy target for them automatically and tells you it did so,
instead of failing config verification.

Fixed

- Made the mirrord logo on the config wizard homepage render identically in
both themes, on its own periwinkle chip, instead of only getting the chip in
dark mode.

3.236.1 - 2026-07-21

- mirrord now support running on clusters managed by
vcluster.

Changed

- Stripped instrument and logging in layer functions that Golang hooks make
call to in order to
reduce stack consumption.
- Tweaked the Go 1.25+ syscall hook's stack switch to mimic the runtime's
asmcgocall contract,
avoiding mutation of goroutine scheduler state that may cause intermittent
crashes.

Fixed

- Fixed mirrord ui not syncing its token to the browser extension when the
page loads without a ?token= query string, such as from the Open mirrord ui button or after a reload. The page now reads the token from a new
authenticated /api/token endpoint and forwards it to the extension.

3.222.0 - 2026-06-24

Added

- Adds the pre-mvp implementation of mirrord chaos testing. With this feature,
you can artificially add latency and connection errors for outgoing traffic
through an API that runs as part of mirrord ui.

Changed

- - added --no-browser flag to prevent the browser opening automatically
- UI now respects BROWSER env var for selecting which browser to open with
- UI auth token can be set as x-auth-token header
- mirrord exec now includes session ID in progress printout

3.221.1 - 2026-06-23

Fixed

- Fixed a segfault in the macOS DNS configuration hook
(dns_configuration_free) that crashed short-lived Node workers (e.g.
Next.js/Turbopack) on macOS 26 when remote DNS config could not be built.
- Stopped the layer from reporting EOPNOTSUPP ("Operation not supported on
socket") socket errors as hard layer errors, which flooded logs and could
kill processes such as Turbopack workers.

3.221.0 - 2026-06-22

Changed

- The bundled Apple utilities are now re-extracted to ~/.mirrord/binaries
only when their version changes, tracked via ~/.mirrord/binaries_version.

Fixed

- Fixed Next.js development servers crashing under mirrord when Turbopack
compiles CSS. Turbopack runs its pooled Node workers over a loopback TCP
connection back to the parent process. To keep that connection local, mirrord
now detects Next.js processes and enables the outgoing ignore_localhost
option, so the worker handshake succeeds.
#2500

3.220.0 - 2026-06-19

Added

- Add copy.dump_args for PostgreSQL and MySQL database branches, allowing
users to override the arguments passed to pg_dump and mysqldump.

Changed

- Migrating RabbitMQ queue splitting to the unified
operator-queue-splitting crate and CRDs.

3.219.0 - 2026-06-18

Added

- Added mirrord subscribe command that streams operator interception events
for a session key as JSON.

Fixed

- Fixed a bug in SIP-patch flow using the bundled coreutils.

3.218.0 - 2026-06-16

Added

- Running mirrord ui while one is already running now detects the existing
instance and prints its URL with the reused token instead of failing to start
a second server.

Changed

- Split the mirrord up init save step into separate save/filename prompts,
and re-ask for a filename instead of aborting when declining to overwrite.
- mirrord up init no longer writes commented-out template lines for omitted
defaults.

Fixed

- Fixed incorrect deprecation warnings emitted by mirrord when
experimental.sip_utils config is used.
- Reject duplicate incoming port mappings instead of silently dropping one of
them.

3.217.1 - 2026-06-14

Fixed

- Fixed the Windows computer-name hooks GetComputerNameW,
GetComputerNameExW, and gethostname to respect the caller's buffer and
the standard size-probe contract. A long remote pod hostname no longer
makes .NET's Environment.MachineName throw, which broke clients such as
StackExchange.Redis with a RedisConnectionException. It also no longer
breaks outgoing TLS: SChannel queries the NetBIOS name with a fixed
buffer during the handshake, and a too-long name made
AcquireCredentialsHandle fail with SEC_E_SECPKG_NOT_FOUND, breaking
HTTPS and gRPC to external services such as GCP.

3.217.0 - 2026-06-14

Added

- Add support for Redis Pub/Sub.
- Add support for redis with location: remote.
- Added support for splitting Temporal task queues.
- Added the number of concurrent Preview Environment session to the output of
mirrord operator status.
- The --key argument for mirrord exec, mirrord preview, and mirrord up
can now be provided with the MIRRORD_KEY environment variable.

Changed

- A new command argument --resolved is added to the mirrord verify-config
subcommand
to display a fully resolved mirrord config including user inputs and all
default
values being used.
- Renamed the mirrord UI identity label to "Running as" (previously "Signed in
as") to reflect that it shows the active cluster identity queried by the CLI
rather than an authenticated session.
- feature.network.dns.filter is no longer marked as unstable in config docs
or CLI warnings.

Fixed

- Fixed concurrent DNS resolution intermittently failing under mirrord on
Windows. A burst of in-flight async GetAddrInfoExW queries, such as a .NET
HttpClient issues under load, could exhaust the managed-handle registry's
single-lock retry budget and drop a query, which surfaced to the app as a
WSAHOST_NOT_FOUND SocketException. The registry now shards its lock
across independent shards, so concurrent registration no longer serializes on
one lock.
- Fixed concurrent file I/O contending the Windows IOCP file-binding map
under mirrord. Many parallel open/close operations serialized on a single
RwLock, so bind and unbind could give up under contention and drop a
file's async-read completion binding, or leak its entry on close. The binding
now lives in the file's managed-handle record, which shards its lock across
independent locks and drops the binding atomically when the handle closes.
- Preview environments now hash the session key before placing it in the
PreviewSession resource's label. In practice this means keys containing
characters like /, which are invalid for Kubernetes labels, are accepted.

3.216.0 - 2026-06-07

Added

- Added -u flag to up that opens the UI in parallel to running mirrord up.
- Added internal_proxy.ping_interval to configure how often intproxy checks
the agent connection.

- Add missing file utility in appleutils

3.209.0 - 2026-04-30

Added

- Support for single cluster sessions in Multi Cluster.

Changed

- Bump bundled appleutils

3.208.0 - 2026-04-30

Added

- Added support for GCP Pub Sub.

Changed

- mirrord up now rejects unknown fields in mirrord-up.yaml to catch typos
in configuration.
- mirrord up now reports a clear error when mirrord-up.yaml is missing,
with help text on how to specify a custom path.

Fixed

- Fixed Windows DNS hook error reporting so DNS lookup failures now return the
correct WinSock error, for example WSAHOST_NOT_FOUND code 11001, instead
of surfacing unrelated errors like ERROR_INVALID_HANDLE with os error 6.
- Fixed a Node/libuv crash when mirrord's Unix getaddrinfo hook returned a
non-EAI_* error after remote DNS found no records.
- Fixed example in agent.image_pull_secrets configuration docs to use name
instead of secret-key.
- Fixed local Redis containers/processes not being cleaned up.
- mirrord now expands templates inside the root key field, so you can derive
session keys from expressions like {{ get_env(...) }} in the config file.

3.207.0 - 2026-04-28

Added

- mirrord ui now auto-configures the mirrord browser extension once the user
opens its Web UI in Chrome, so users no longer have to copy a
chrome-extension://... configure URL by hand. The session UI binds on
127.0.0.1 instead of [::1] so the page origin matches what the
extension's externally_connectable manifest entry accepts.

3.206.1 - 2026-04-24

3.206.0 - 2026-04-24

Added

- Changed the release workflow to build Linux and Windows CLI artifacts through
cargo xtask build-cli instead of handwritten cargo build steps.
Fixes regression with wrong artifact on Linux causing mirrord to not work

3.194.0 - 2026-03-19

Added

- Revamped the interactive configuration wizard frontend for generating mirrord.json
files, with cluster-aware target selection, traffic mode configuration, and
JSON export. #3994
- Added Windows installation via Chocolatey (choco install --pre mirrord)
- Added header filtering using jaq for more complex queries, removed safejaq
crate
- Experimental flag 'experimental.sip_utils' that uses our own built binaries
instead of patching
- Preview environment's usage is now collected through our telemetry system

Changed

- HTTP filter docs now instruct users to use W3C baggage/tracestate
- Modified non-blocking TCP connect mechanism to eliminate delays.
- mirrord preview start no longer replaces an existing session automatically
when giving it the same image registry, image repository, target and key. To
replace an existing session use the new --force argument, which will
replace it regardless of whether the images "match" or not.

Fixed

- Fixed the example in the documentation for outgoing traffic.
- Preview env will now respect MIRRORD_PROGRESS_MODE when printing info.

- Updated mirrord for Teams links across CLI, error messages, and agent to
point directly to app.metalbear.com instead of docs pages, providing a
shorter path to trial signup.
- Use nodeSelector when possible for agent creation. Improve
capacity/scheduling issues.

When using nodeName directly (old, fallback way) we bypass kube scheduler,
meaning we can't preempt existing pods.
By using nodeSelector, we still use kube scheduler and with the right
priority class for the agent (default in operator chart now) we always get
scheduled.
User might not have "get" access on node, but operator always has so that's
why we have a fallback.

Internal

- Update rust to nightly 2026-02-24.
- Added safejaq crate
- Fixed header levels in feature.preview.env and feature.magic docs.
- Fixed the progress message for mirrord dump to show detected ports.
- Preview sessions are now marked with the operator's ownership label, allowing
developers to create preview sessions when multiple operators are running
concurrently.
- Update db branching so we have all the common logic between different
databases reusable instead of having it everywhere duplicated.

3.190.0 - 2026-02-23

Added

MIRRORD_LAYER_LOG_PATH allows for the specification of a directory in which
layer tracing logs will be written, one per process in the format
mirrord-layer_{%Y%m%d_%H%M%S}_{pid}_{processName}.
Where processName is a sanitized version which only contains characters from
alphanumeric, -, _; any other character falls back to _.

3.187.0 - 2026-02-09

Added

- Add new functionality to support multi cluster sessions.

Internal

- Added a regression test that verifies two consecutive calls of listen do not
close the socket.

3.186.0 - 2026-02-06

Added

- SIP - add option to re-sign binary using codesign for santa usecases if santa
detected.
- Add new flag for debugging deadlock in mirrord layer - controlled by env
MIRRORD_NODEADLOCK.

Fixed

- Fixed socket regressions.

Internal

- make disk cleanup fallible in release.

3.185.1 - 2026-02-04

Fixed

- Fix double listen making port unsubscribed. Happens in Rails.

3.185.0 - 2026-02-03

Removed

- Removed operator setup command, use helm chart instead.

Added

Internal

- Added an initial CONTRIBUTING.md guide to the mirrord-agent crate.
- update latest tag on mirrord-cli container image

3.182.0 - 2026-01-16

Added

- Add support for db branches IAM.

Changed

- mirrord now sets agent priority class for targeted agent pod as well.
#3871.targeted-agent-priority-class

Fixed

- Agent will now terminate the intproxy side of HTTP connections that were
closed by the remote HTTP client.
- Fixed a regression caused by panicking when closing a user socket that is
already dropped.

Internal

- Made wizard IO error to CliError conversion more explicit
- Refactor Windows CI workflows to use robust IAP tunneling with Service
Account authentication and VM-resident Kubeconfig. Added windows-tests.yaml
for on-demand E2E testing triggered by label or manual dispatch.
- Tell claude how to run the mirrord CLI.
- Updated configuration.md and added a CI step to verify the file is updated
if configuration has changed.
- Updated the flake lockfile.
- fix release windows

3.181.1 - 2026-01-14

Fixed

- mirrord now unsets env from process even if the process is skipped on
macOS.
- getsockname/getpeername will now correctly report IPv4-mapped-IPv6 addresses when necessary.
When the client receives an IPv6 connection on an IPv4 server socket, 127.0.0.1 will be reported instead.

Internal

- Added a CLAUDE.md file to contextualize AI agents in mirrord's codebase.
- Small refactor to make a struct member name make sense.
- Clean up windows ci - move windows CI into ci.yaml
- Clean up windows ci - move windows release into release.yaml
- Remove legacy windows_build.yaml
- Fixed flaky intproxy reconnect flow test

3.181.0 - 2026-01-12

Removed

- Removed traffic mirroring implementation based on packet sniffing, along with
related configuration options.

Added

- Control agent repository/tag via env vars
#3843
- Added new operator feature that allows bypassing user credential verification
when running mirrord ci start.

Changed

- Allows mirrord ci start to be run multiple times (now you can start
multiple mirrord ci sessions), and mirrord ci stop will stop every session.
- Unified http_filter.ports and incoming.ports behavior and made it more
intuitive. Now, ports will be stolen unfiltered/not stolen when
http_filter.ports/incoming.ports is set AND the port in question is not
in the list.

Fixed

- Connections redirected by the agent will now correctly terminate when the
target pod is killed
- Ports will now be unsubscribed only when close.2 has been called on all
handles referring to the matching socket.

Internal

- Don't force install existing software on Windows CI
- Don't run Windows e2e on CI
- Run UT/IT for Windows in CI
- Temporarily ignore RUSTSEC-2025-0141 advisory until we migrate to a
bincode alternative.
- mirrord sessions can now be identified by a "key", which can be provided by
the user in the config/cli or auto-generated. It can be used in the config's
templating engine as {{ key }}.
- Agent dockerfile will now use sccache for the host architecture instead of
the target architecture

3.180.0 - 2026-01-06

Added

- Add support local redis in db branches.
- Added an experimental configuration for logging all Apple variables before
process start.
- Support for limiting outgoing connections from mirrord sessions using a
kubernetes policy has been added to the operator.

Changed

- Added /var/db/timezone/zoneinfo to local to improve performance.
- Refreshed configuration documentation.
- Switched mirrord port-forward to evaluate connections eagerly. Using it
with MySQL is now possible.

Internal

- Added more traffic mirroring tests.
- Added chocolatey distribution to windows build workflow.
- Added support for MSI builds for Windows mirrord.
- Allow using windows-build.yml with repos without winget and choco
tokens.
- Fixed the License not appearing in MSI packages.
- mirrord-intproxy now logs operator version on default log level.
- Added a method to ResolvedTarget for getting envFrom from the target's pod
spec.
- Added a new field for the MirrordClusterSession CRD, SessionCiInfo. Now
the mirrord license-server can keep track of sessions that have been started
using the mirrord ci start command, and we can validate concurrent CI
seats.
- intproxy now compiles on windows.

3.176.0 - 2025-12-07

Added

- Added support for node.js'
fs.copyFile
function. #3741
- Added clang in build tools list, so mirrord only patches it and hooks exec
and spawn.
- Added security context configuration option for agent pod.

3.175.0 - 2025-12-03

Added

- Add pg branching.
- Added dlopen detour to support cgo library being loaded dynamically on Linux.
The feature is behind an experimental feature flag.
- Added support for filtering incoming HTTP requests by running JSONPath
queries on the body and matching the results against a regex.

Changed

- Change tracing to not emit ansi format logs in the terminal
- Made mirrord ci stop command idempotent.
- Marked mirrord config settings related to agent's mirroring as deprecated.
Mirroring implementation based on raw sockets will be removed in the future.
- Updated the experimental section of the mirrord config:
1. Removed deprecated readlink setting.
2. Removed deprecated readonly_file_buffer setting, which had been moved to
feature.fs.
3. Removed vfork_emulation setting. vfork emulation is now always enabled.
4. hook_rename is now enabled by default.
5. dns_permission_error_fatal is now enabled by default.

Fixed

- Fixed a rare layer crash in exec
- Fixed an issue where mirrord-agent could fail with an OOM error when serving
heavy TCP traffic.
- Fixed main branch Windows build errors and warnings
- mirrord-console now compiles again

Internal

- Added MirrordClusterExternalResource CRD.
- Added a unit test verifying that the internal proxy properly handles remote
termination of stolen HTTP requests.
- Added release guide in CONTRIBUTING.md.
- Fixed some clippy lints.
- On operator restart migrate copied pods.
- Optimized implementation of mirrord-protocol encoding.
- This PR fixes the issue with windows builds that steal the latest release for
the main branch
- This test runs every hour and checks that the latest release exists and all
the artifacts are there to be fetched.
Also added a small fix later
- ResolvedTarget::assert_valid_mirrord_target no longer asserts that there is
at least one available replica.

3.174.0 - 2025-11-20

Added

- Added HM Courts & Tribunal Service to ADOPTERS.md.
- Added a new option under mirrord ci start to run the binary and wait for it
to complete.

Changed

- Allow an overlap in the configuration for incoming.ports and
incoming.http_filter.ports.

Fixed

- Fixed minor edge case where intproxy might hit code that's supposed to be
unreachable and panic
#intproxy-panic
- Fixed a DNS regression that happens when user's DNS library bind their
outgoing
socket to unspecified address before send UDP message to the nameserver.

3.173.2 - 2025-11-18

Changed

- Exclude GOPATH and GOMODCACHE from env fetched

3.173.1 - 2025-11-16

Internal

- Add cleanup of unnecessary items in CI builder for docker builds.
#add-cleanup-before-docker-build

3.173.0 - 2025-11-16

Changed

- Update experimental.non_blocking_tcp_connect config default to false.

Fixed

- Fixed the security advisories of the config's template engine by updating it
to the newest version
#3657

Internal

- Fix the way release script gets workspace version.
- Kubernetes-related packages have been removed from the devshell, they should
be installed system-wide instead.
- Use the pip from the setup action, not the one preinstalled on the runner.
- make CI workflow trigger for PRs targeted to windows-support branch
(windows main)

3.172.0 - 2025-11-06

Removed

- Reverted arm64e support in mirrord-sip.

Changed

- When possible, mirrord now binds application socket to the requested address
(instead of always to localhost or unspecified).
#3693
- Reverted independent send handles for intproxy tasks.
- The fs.not_found filesystem filter is now checked before bypassing
relative files, meaning you can now ignore relative files instead of always
reading them locally
- incoming.listen_ports mappings now always apply, regardless of whether the
port is stolen or not.
- mirrord CLI progress messages now always include the binary version.

3.171.0 - 2025-11-04

Added

- Added ADOPTERS.md
- Added configurable creation timeout to the db branching config
- mirrord can now run arm64e binaries, both when inside a universal binary and
standalone. In practice, this means running arm64e+x86_64 universal binaries
no longer has to go through the Rosetta emulation layer.

Internal

- Added optional signing for windows builds.
- Build only the fat universal layer lib when running macos tests in CI.
- CLI and Intproxy now queue and (almost) fairly schedule agent-bound messages.
Intproxy now also has proper flow control when receiving network traffic from
user apps.
- Changed incoming proxy's BusyTcpListener check to use IPv4 instead of IPv6.
- Enriched an error log produced by mirrord-layer in some cases.
- The flake's lockfile has been updated and rust-analyzer is now grabbed from
nixpkgs, allowing updates without changing the rust toolchain.
- Update configuration.md with MySQL data copy options.
- Updated contributing guidance. Add PR section.

3.170.0 - 2025-10-29

Added

- Added copy mode configuration for MySQL branching.

Changed

- experimental.non_blocking_tcp_connect now defaults to true in OSS.

Fixed

- Fixed a bogus error reported by mirrord ci stop when the application has
already exited.

Internal

- Fixed update_latest CI job with write permission.
- Don't publish buildcache in release workflow.

3.169.0 - 2025-10-27

Added

- mirrord ci start now pipes application's stdout and stderr to files in a
temporary directory (/tmp/mirrord/{binary-name}-{timestamp}-{random} by
default). This can be configured with the ci.output_dir option in your
mirrord config.

Internal

- Add TypedHeader like extractor to mirrord-kube for axum like extraction from
kubernetes resources.
- When reconnecting to an operator session, the CLI now checks for a fatal 410
error.

3.168.1 - 2025-10-24

Changed

- Operator status not showing data for SQS split queues.
- When it's root, CWD will no longer be in the default-local list for file
operations.

Internal

- Fix missing source value in query params of version check.
- Remove a leftover file that is not used anywhere.

3.168.0 - 2025-10-23

Added

Internal

- Added a github action to build windows builds, now supporting windows
#windows-build
- Added a ci query param to the version check, so we can identify mirrord
being used in a ci context in our analytics.
- Updated Rust types for DB branching configs in order to support more types of
DBs.

3.165.0 - 2025-10-09

Changed

- intproxy compiles on Windows.
#.531
- All configuration snippets for agent are now self-contained.
#3610

Fixed

- Fixed the check that disallows operator-only targets when the operator is not
in use.

Internal

- The agent's docker image is now distroless, making it smaller and more
secure.
#distroless-agent-runtime
- Added a GitHub action to build Windows builds.
- Added more traffic mirroring tests.

3.164.0 - 2025-10-06

Added

- Added a new command to generate mirrord CI API key for operator users.

Changed

- Improves the agent handling of background tasks by having them run in a
separate tokio runtime. Also adds a timeout for waiting on these tasks to
finish (timeout of 5 seconds).
- Removed the outdated operator version check.

Fixed

- Disallow nested mirrord exec and mirrord container executions.
- Fixed an issue where mirrord sessions would sometimes fail after reconnecting
to the operator.

Internal

- Added a new CRD for persisting workload patches.
- Allow config to be printed in IDE that supports it
- Pinned ci-agent-runtime image to specific commit.
- Removed an unused test.json file from the repo.
- Removed legacy MirrordOperatorUser CRD.
- The dirty_iptables::agent_exits_on_dirty_tables E2E test no longer depends
on /bin/sh being present in the agent image.
- Verify correct Prometheus metrics in SQS E2E tests.

3.163.0 - 2025-09-19

Added

- Improved UX when spawning the agent pod fails or takes a long time
#3578
- Added a configuration option to automatically inject Mirrord-Agent header
into responses to HTTP requests served by the mirrord-agent.
The header indicates whether the request was handled by the local
or the remote app. Header can be enabled with agent.inject_headers.

Fixed

- Fixed compatibility issues with Go 1.25.

Internal

- Improved mirrord-agent docs.
- Increased the timeout on the layer test outgoing::outgoing_tcp_bound_socket
from 15 to 25 seconds to reduce chance of flakes on macOS.
- Update CI to use newer versions of node and express.

3.162.0 - 2025-09-16

Added

- Mirroring incoming TCP traffic now supports using an HTTP filter.
#2538
- mirrord now retries failed Kubernetes API requests made during startup. This
should improve stability when facing transient errors, like cluster
connectivity issues.

The retry policy can be adjusted in startup_retry mirrord config section.

Changed

- Default "/run/" and "/selinux" to local.
- SimpleProgress implementation now handles prints nicely instead of debug
print.
- Changed some Debug implementations to not print HTTP body.

Fixed

- Removed conntrack-related bogus warnings from mirrord-agent logs.

3.159.0 - 2025-08-24

Added

- Add method filter to HTTP filters.

Changed

- Proper error message when the operator cannot be retrieved, and it's
required. #3476
- Improve copy target schema docs
- In SIP-patched binaries, set the identifier to start with the original
filename, like the codesign binary does.
- agent.passthrough_mirroring now defaults to true in both OSS and mfT.
- change vfork emulation to be enabled by default, fixes different issues
around the use of it
- mirrord container: change to always use native arch for intproxy, improving
performance significantly

3.158.0 - 2025-08-20

Added

- Added rtt metrics (prometheus) for checking mirrord and operator latency.

Changed

- mirrord-agent and mirrord-intproxy now include the crate version in the
produced HTTP 502 responses.

Fixed

- Fixed a bug in automatic iptables backend detection in the mirrord agent.

Internal

- Added logic for adding debug args to mirrord intproxy and mirrord extproxy.
- Improved internal proxy debug logs.

3.157.2 - 2025-08-14

- Agent communication port now uses the SO_REUSEADDR flag, fixing cases where agent
port is reused in a fast consecutive manner and fails.
- Fixed a bug where mirrord-agents were lingering after all client connections
were gone.

Internal

- Added more traffic mirroring tests.

3.152.0 - 2025-07-18

Added

- Added the config option experimental.sip_log_destination to write basic SIP logs to a file.
#3407

3.151.0 - 2025-07-16

Added

- Added a new traffic mirroring implementation, in which the connections are
redirected using iptables. The new implementation can be enabled in the
agent configuration with the agent.passthrough_mirroring flag.

3.150.0 - 2025-07-14

Changed

- Changed semantics of the agent.nftables configuration field.

When the field is not set, the agent will pick between iptables-legacy and
iptables-nft at runtime,
based on kernel support and existing mesh rules.

When the field is set, the agent will always use either iptables-legacy or
iptables-nft.
- The agent now eagerly detects HTTP in incoming connections.

Internal

- Add E2E test for using an asterisk queue-id on client config, together with
SQS json in fallback field.
- Added an E2E test for splitting SQS queues based on env var regex.
- E2E tests for splitting SQS with queue names in env vars originating in
ConfigMaps.
- Improved SQS E2E tests, removing unnecessary sleeps.

3.149.0 - 2025-07-11

Added

- mirrord-intproxy now propagates critical errors to the mirrord-layer,
solving the issue where the user application was terminating with a very
generic
Proxy error, connectivity issue or a bug error message.
#3161
- Added MirrordClusterSession CRD initial implementation, currently hidden
behind "experimental" feature for mirrord-operator crate.
- Added browser extension configuration and initiation.

Changed

- Added a new mirrord config agent.priority_class field for specifying a priority class name
for targetless agent pods.
#1007
- Added a new mirrord dump -p <PORT> -t <TARGET> command. The command allows for getting dump
of target's incoming traffic.

Changed

- Changed container.override_host_ip config to use Docker's internal address by
default when running mirrord container docker (also changes
external_proxy.host_ip to 0.0.0.0).
#3285
- Removed Discord links.

3.140.0 - 2025-04-22

Added

- New config value to allow override of listen ip for external proxy
(external_proxy.host_ip).
#3274

Changed

- The IP table chain names used by the agent are no longer randomized. The
agent detects if another agent is already
running or if a previous cleanup failed.
#3159
- Corrected agent pod creation progress message.

Fixed

- Fix issue with port-forward feature that prevented more than one open
connection per socket addr.
#3158
- Use ss for killing existing connections to allow stealing to begin

Internal

- Add cargo-deny action to check for any advisory or license issues.

Small updates to dependencies is also included
#3250
- Refactors the e2e tests utils.rs into multiple files/modules.

3.139.1 - 2025-04-17

Fixed

- Fixed an issue where mirrord-agent was being OOM killed due to a traffic
redirection loop.

Internal

- Added verification of tmp queues deletion in the SQS E2E test.
- Added E2E tests for rollout targets.
#781

3.139.0 - 2025-04-16

Added

- Added config file option for mirrord operator session commands (-f).
#3178

Changed

- Increased number of OS threads used by the mirrord agent.

3.138.0 - 2025-04-15

Added

- Added applies_to_copy_targets to the mirrord Policy specs, so we can enable
policies when using copied targets.
#797
- Added a sanity e2e test for the copy target feature.
#799
- Added CLI support for Kafka splitting without copying the target.
- The agent now issues warnings to clients that do not meet minimum
protocol version requirement for stealing an HTTP request.
#3119

Changed

- Improved mermaid diagrams readability (changed colors and lines).
#819
- Improved mirrord progress message from spawning the agent without an
operator.
#3167
- By default, the DOTNET_STARTUP_HOOKS env var will not be fetched from the
target.
- Updated contributing guidance.
- Updated dev container base image and JSON configuration file.

Fixed

- mirrord now correctly detects whether the configuration allows for stealing
health checks from the targeted pod.
#3188
- Fixed mirrord_agent_dns_request_count Prometheus metric.

Internal

- Reworked agent's threading model to avoid spawning excessive threads.
#agent-threading
- Added some documentation to the mirrord-protocol crate.
#3182
- Added some documentation in the mirrord-agent crate.
- Added timeouts to concurrent steal E2E tests.
- Extracted incoming traffic redirection logic to a separate task running in
the target's network namespace.
- Fixed 3 test HTTP servers used in E2E tests.
- Fixed one of the E2E tests.
- Test specifying a queue by URL instead of by name in SQS splitting.

3.137.0 - 2025-03-26

Added

Internal

- Fixed one of the test applications used in the E2E tests.
- Pinned ziglang version to 0.13.0.post1 in the CI due to compilation
failure.
- Updated every JSON schema used our CRDs to use a k8s style
namespacing for schema names for better compliance with openapi.
- Updated some dependencies.
- Switched to our own forks of some GitHub Actions.

3.134.2 - 2025-03-06

Added

- If a stolen HTTP request matches filters of multiple users,
the users who don't get the request are now notified with a log message.
#3120

Changed

Internal

- Add a section to CONTRIBUTING.md on how to test the release workflow.
- Changed Debug implementation for InternalHttpRequest and
InternalHttpResponse not to print full headers.
Printing full headers creates a lot of spam in the logs.
- Changed the conntrack subcommand used to flush connections when traffic
stealing starts.

3.133.1 - 2025-02-19

Fixed

- Added a reconnection mechanism when using mirrord operator.
#2901
- Fixed issues with rollout targets without a selector field present.
#3063
- Look for the correct pid that matches the targets container_id (by searching
/proc/pid/cgroup).
#3076
- Prevent reading a remote directory from producing an 'unexpected response'
error and crashing.
#3081
- Fixed a remote DNS regression introduced when hickory-resolver and
hickory-proto versions were bumped.
#3098
- mirrord CLI now correctly emits logs when enabled with RUST_LOG environment
variable. #3099

Internal

- Removed dependency on the umaintained dotenv crate. Replaced with a
dependency on the dotenvy crate.
- Removed some unnecessary dependencies from the mirrord-layer crate.
- Added a naive update to our port forward wrapper to force first check error
channel instead of ranomly picking branch on tokio::select! impl.

3.133.0 - 2025-02-17

Added

- Added an option to configure timeout for idle local HTTP connections
(experimental.idle_local_http_connection_timeout).

Changed

- Improved the warning produced when the user specifies agent namespace for a
targetless run.

Fixed

- Correct statfs data for Go.
#3044
- Updated hickory-resolver and hickory-proto to 0.25.0-alpha.5 and rand
from 0.8 to 0.9.
#3079
- Respect ignored paths and path mapping in statfs hook.
#3082
- Some FS libc calls could be carried out remotely instead of locally in some
cases. #3083
- mirrord ls command now does not list unnecessary target types when called
from a plugin/extension.
#3086
- Fixed wrong link for ipv6 config docs.

Internal

- Cleanup ci.yaml - we don't need the "docker" flag in E2E tests anymore.
- Elaborate in CONTRIBUTING.md about things to be tested when adding a new
hook.
- Extracted agent configuration to a separate crate.

3.132.1 - 2025-02-06

Fixed

- Fixed operator connect URL produced by the CLI when a target container is
specified.

3.132.0 - 2025-02-06

Removed

- Removed faulty statfs hook for Go applications.

Added

- Added Kubernetes ReplicaSet as a new target type (requires mirrord Operator).

Changed

- Namespace for targetless runs is now specified with the
target.namespace config field (or the MIRRORD_TARGET_NAMESPACE
environment variable).
agent.namespace field is ignored in targetless runs.

Internal

- Some code snippets in the configuration documentation were missing the
closing backticks, which resulted in bad formatting when converted to
markdown and displayed on the website.
- Added instructions to CONTRIBUTING.md for changing the agent log level in
mirrord config.
- Added mirrord policy support for specifying pattern requirement for header
filter when performing steal-with-filter.
- Removed envfile dependency.
- Update policy doc for http_filter header.
- Updated tests::operator::sanity::mirrord_ls test after adding ReplicaSet
support.
- mirrord-kube now allows for setting agent listen port.

3.131.2 - 2025-01-29

Fixed

- Removed an error log on a notimplemented response from the mirrord-intproxy,
might fix go crash.
#3044

Internal

- Updated Rust toolchain to nightly-2025-01-22.

3.131.1 - 2025-01-28

Changed

- mirrord commands now accept the -f/--config-file argument without the value as well.
When no value is provided, ./.mirrord/mirrord.json is assumed.
#1706

Fixed

- Added ping pong subtask to mirrord-extproxy to keep agent connection alive while it is
up. #3030
- agent.privileged no longer affects targetless agents' pods.

3.131.0 - 2025-01-27

Added

- statfs support
#statfs
- Support for in-cluster DNS resolution of IPv6 addresses.
#2958
- Prometheus metrics to the mirrord-agent.
#2975
- Kubernetes Service as a new type of mirrord target (requires mirrord
operator).

Fixed

- Misleading doc for .target.namespace config.
#3009
- Agent now correctly clears incoming port subscriptions of disconnected
clients.
- mirrord no longer uses the default {"operator": "Exists"} tolerations when
spawning targetless agent pods.

3.130.0 - 2025-01-21

Added

- Added support for rmdir, unlink and unlinkat.
#2221

Changed

- Updated configuration.md and improved .feature.env.mapping doc.

Fixed

- Stopped mirrord entering a crash loop when trying to load into some processes
like VSCode's watchdog.js when the user config contained a call to
get_env(), which occurred due to missing env - the config is now only
rendered once and set into an env var.
#2936
- Fixed an issue where HTTP requests stolen with a filter would hang with a
single-threaded local HTTP server.
Improved handling of incoming connections on the local machine (e.g
introduces reuse of local HTTP connections).
#3013

Internal

- Extended mirrord-protocol with info logs from the agent.

3.129.0 - 2025-01-14

Added

Internal

- Added mirrord-protocol message for rejecting mirror port subscription due
to MirrordPolicy.
- Updated hickory dependency version.

3.126.0 - 2024-12-06

Added

- Added SQS splitting state to mirrord operator status reporting (requires operator support).

Changed

- Hidden files and directories in $HOME directory are now read locally by
default.

Fixed

- Can now run cs-installed sbt. We now only need to be able to parse the first
line of a script, so we now support scripts like that sbt, which starts with
a normal shebang but then has text in a weird encoding, or maybe non-textual
data. #2947
- Prevent reverse port forwarding from ending unexpectedly due to
unexpected connection end.
#2962
- Added a sleep and await on it after websocket connection to drive IO runtime
and prevent websocket closing without handshake.

Internal

- Added optional loadFromSecret field to Kafka client config spec to allow
setting properties from a Secret.
- Allow the operator to fetch Secrets in the operator namespace.
- use Stdio::null() for "sidecar start" patch added in
#2933.

3.125.2 - 2024-11-29

Fixed

- Manually call docker start <sidecar_id> if after our sidecar run command
the container hasn't started yet and is in "created" status.
#2927

Internal

- Fixed return type of a function in mirrord-operator client code.

3.125.1 - 2024-11-27

Fixed

- Added retry of HTTP requests (intproxy) on hyper's IncompleteMessage error.

Internal

- Updated RolloutSpec and operator setup.
- Added expect_file_open_for_reading for /etc/resolv.conf path in
test_issue2283 test.
#2935

3.125.0 - 2024-11-21

Added

- Added a configuration option that allows for specifying an env file for
mirrord execution.
#1913
- Added notice that fs mapping does not apply to relative paths.
#2894

Changed

- Ignore paths that start with the current dir path, instead of any path that
contains the current dir path. Also, ignore only paths that end with the
current exe's path, not all that contain it.
- Print a warning to the user when -p is provided as part of mirrord container
run command, as it may cause issues because of our usage of
container type network mode.

Fixed

- Change getifaddrs hook to allocate memory for a new list instead of modifying
list returned from libc call.
#2903
- Read current dir, current exe, and temp dir locally, also when they contain
characters with a meaning for regexes, like e.g. parentheses.

Internal

- Add argocd application permissions to operator setup.
- Add explanation about boolean configurations in env/fs
- Changes the Result alias to CliResult, and config to layer_config (in some
places).
- build script forwards args to cargo build.

3.124.2 - 2024-11-08

Changed

- Allow targetless mode to run with local fs-mode.
#2368
- Remove unstable tags on feature.network.outgoing.filter config
#2862
- Add option to have logs when running ext commands

Fixed

- Added experimental disable_reuseaddr to bypass the issue
#2819
- mirrord-intproxy no longer lingers forever when the user tries to execute a
non-existent binary.
#2869

Internal

- Extended GitHub bug report template.
#2664
- Switch building layer on macos arm64 to use code shim.
#2872
- Added CRD for MirrordOperatorUser, adjusted operator setup.
- Changed debug display of operator session ID. Now it's printed in upper HEX
to match operator status display.

3.121.1 - 2024-10-22

Changed

- Improve error logging and reporting when a getaddrinfo-adjacent failure
happens due to IO in the agent.
#2287
- Improve error checking for InvalidCertificate errors in mirrord-cli.
#2824
- Ignore CATALINA_HOME env by default
- Skip mirrord injections into bazel-real, considering it a build tool.

Fixed

- Fix a bug where file mode was ignored when Go applications were creating
local files. #2614
- Update mirrord-container sidecar logs command to improve printing of errors.
#2726
- Fix SIP detection on scripts with no shebang, SIP of default interpreter is
now used #2797
- Bump dependencies, fix empty user in a kube context

3.121.0 - 2024-10-17

Added

- Added support for Istio CNI
#2851
- Added nodeSelector option to agent config.

Changed

- Allowed filtered steal requests to be retried when we get a Reset from
hyper(h2).

Fixed

- Fixed an issue where mirrord exec ... -- npm run serve in a Vue project was
failing with EAFNOSUPPORT: address family not supported ::1:80. Added new
.experimental.hide_ipv6_interfaces configuration entry that allows for
hiding local IPv6 interface addresses from the user application.
#2807
- Fixed wrong warning being displayed when binding UDP port 0 and filtering HTTP.
#2812
- mirrord now respects insecure-skip-tls-verify option set in the kubeconfig
when accept_invalid_certificates is not provided in the mirrord config.
#2825

Internal

- Downgraded Rust toochain to nightly-2024-09-12.
#downgrade-rust
- Added integration (regression) test for binding port 0 twice.
#2812

3.120.1 - 2024-10-14

Removed

- Remove support for IPv6 sockets with mirrord.
#2836

Internal

- Update github actions dependencies

3.120.0 - 2024-10-13

Added

- Added Kafka splitting feature.
#2601

Changed

- Add analytics about usage of experimental features
- Add option to have logs when running ext commands
- update dependencies

Fixed

- Fixed a bug where all_of and any_of HTTP filters were stealing all HTTP
traffic. #2817
- Handle IPv4 in IPv6, should help with regressions related to allowing
AF_INET6 #2827

3.119.1 - 2024-10-09

Changed

- Allow setting port for int/extproxy from the command line.

Fixed

- Use new kube rs to support empty user.
#2803
- Allow using IPv6 sockets with mirrord.
#2807
- Fix mirrord making double bind of port 0 fail.

3.119.0 - 2024-10-07

Added

- Add reverse port forwarding which can be used to proxy data from a remote
port on the target pod to a local one -
if only one port is specified, it will be used for both.

text

mirrord port-forward [options] -R [remote_port:]local_port

To use the incoming network mode and filters from a config file, use -f as
normal:

text

mirrord port-forward [options] -R [remote_port:]local_port -f
  config_file.toml

#2609

Changed

- Dependency tree does not contain tonic 0.11.
- Use forked version of apple-codesign to remove RSA dependency

Fixed

- Collect and pass environment variables to the process to be executed locally
instead of setting them for the entire local environment, which was causing
interference with analytics instrumentation.
#2783
- Don't drop RSTs, makes long-lived connections drop on steal start
#2794

3.118.1 - 2024-10-02

Added

- Internal proxy now explicitly logs exit error.

Changed

- Enabled readlink hook by default.
#2518
- Prompt user for intproxy logs (when intproxy crashes).
Adds .log as a file type for intproxy default log file.
#2750
- Refactor how mirrord gets a target when the operator is enabled, and warn
when randomly selecting a container in multi-container situations (if the
user did not specify a container).

Fixed

- Handle cases where target pod has IPv6
#2788

Internal

- Fix CI failures due to "externally-managed-environment" error
- Run go mod tidy on all go stuff

3.118.0 - 2024-09-22

Added

- Add cli_extra_args field to container config to allow specifying custom
arguments for mirrord container sidecar container.

json

{
    "container": {
      "cli_extra_args": ["--network", "host"]
    }
  }

this config will spawn mirrord cli container with

<runtime> run --network
  host --rm -d ...

.
#2756

Changed

3.116.2 - 2024-09-05

Changed

- Add option to have logs when running ext commands

3.116.1 - 2024-09-04

Fixed

- Fixed upload of mirrord binaries' shasums to homebrew repository in the
release action.
- Fix mirrord ls hanging by making so KubeResourceSeeker will list different
kinds of resources sequentially instead of in parallel.
#2724

3.116.0 - 2024-09-03

Added

- Add initial and very basic implementation of vpn
#2387
- Add warning when user tries to mirrord exec [container], pointing them to use
mirrord container instead.
#2599
- Add support for hostname resolution in port-forward.
#2696
- Add support for all_of, any_of composite http filters in config.
#2699

Changed

- mirrord now produces a more descriptive error message when it fails to call
authentication command specified in the kubeconfig.
#2575
- SQS CRD field names changed to camelCase.

Fixed

- Start on deprecating operator target list.
#2706

Internal

- Adds new (operator) targets for mirrord ls test.
- Change permissions to use new SubjectAccessReview api instead of
impersonate.

Added:

yaml

- apiGroups:
    - authorization.k8s.io
    resources:
    - subjectaccessreviews
    verbs:
    - create

Removed:

yaml

- apiGroups:
    - ""
    - authentication.k8s.io
    resources:
    - groups
    - users
    - userextras/accesskeyid
    - userextras/arn
    - userextras/canonicalarn
    - userextras/sessionname
    - userextras/iam.gke.io/user-assertion
    - userextras/user-assertion.cloud.google.com
    - userextras/principalid
    - userextras/oid
    - userextras/username
    - userextras/licensekey
    verbs:
    - impersonate

- Fix some typos
- Fixed target type formatting and E2E test.
- Fixed urlfied form of target types.
- Rejecting empty composite HTTP filters during config validation.

3.115.1 - 2024-08-21

Fixed

- Add retry for checking intproxy logs to get its listening port, Prevents any
issues when it takes a bit of time for intproxy to start when running in
container mode. #2687
- Fixed mirrord-agent not picking up graceful shutdown signal.
#2690

3.115.0 - 2024-08-21

Added

- Adds a batching readdir requests, which should improve the performance when
traversing large directories. Introduces a new ReadDirBatched message to the protocol.
#2611

Fixed

- Fix hooking on arm64 Go on Linux
#2680

Internal

- Adds intproxy logs for the integration tests in CI.

3.114.1 - 2024-08-18

Fixed

- Make splitqueues optional to support old version
#2675

Internal

- Update kube rs to use mainstream
#2636
- Use main CI action for go e2e setup.

3.114.0 - 2024-08-16

Added

- Add port forwarding feature which can be used to proxy data from a local port
to a remote one -
if the local port is not specified, it will default to the same as the remote

text

mirrord port-forward [options] -L [local_port:]remote_ip:remote_port

#567
- Client side support for the upcoming SQS queue splitting support in *mirrord
for Teams*. #2066

3.113.1 - 2024-08-15

Fixed

- Fix small error in shared sockets that resulted in it adding the shared
socket env several times.
#864
- Specify that mirrord container is an unstable feature.
#2641
- Fix IncomingConfig json schema regression.
#2662
- Fix arm64 version of mirrord-cli container image and add github cache for
container builds.
- Fixed symbol hooks for Go 1.23.

Internal

- Updated Go versions used in CI to 1.21, 1.22 and 1.23.
#2660
- Some agent code housekeeping, including improved tracing and errors and
removal of index allocator.

3.113.0 - 2024-08-14

Added

- Add new api to run mirrord inside container

text

mirrord container [options] -- <docker/podman> run ...

Because we need to run internal proxy process on the same network as the
process loaded with mirrord-layer, to keep config and kubernetes
comparability the communication to mirrord agent is made via external proxy
that will run on the host machine.

text

┌────────────────┐
                 k8s │ mirrord agent  │
                     └─────┬────▲─────┘
                           │    │
                           │    │
                     ┌─────▼────┴─────┐
      container host │ external proxy │
                     └─────┬────▲─────┘
                           │    │
                           │    │
                     ┌─────▼────┴─────┐◄──────┐
   sidecar container │ internal proxy │       │
                     └──┬─────────────┴──┐    │
          run container │ mirrord-layer  ├────┘
                        └────────────────┘

#1658

Fixed

- Add custom handling for istio ambient mode where we set
/proc/sys/net/ipv4/conf/all/route_localnet to 1 so it does require
agent.privileged = true to work. (See
#2456)
#2456
- Fix issue introduced in #2612 that broke configs with one-value definition
for IncomingConfig for network feature.
#2647

Internal

- Fixed a flake in layer integration tests.
#2632
- Add execution_kind into analytics event_properties where mirrord container results in 1 and mirrord exec results in 2.
- Cleanup unused dependencies
- Remove double analytics reporting by setting so intproxy will only report
errors if it is running inside a container.
- Update actions
- Update the location of -- in container command

text

mirrord container [options] <docker/podman/nerdctl> run -- ...

Now will be

text

mirrord container [options] -- <docker/podman/nerdctl> run ...

or simply

text

mirrord container [options] <docker/podman/nerdctl> run ...

3.112.1 - 2024-08-05

Added

- Added experimental.enable_exec_hooks_linux switch to the mirrord config.

Changed

- Change operator port from 3000 to 443 to work without any FW exceptions

Fixed

- Fixed execve hook (fix data race on process initialization, might fix more stuff)
#2624
- Added new VSCode debugpy args layout to debugger port detection

Internal

- Pinned towncrier version to 23.11.0 due to breaking update.

3.112.0 - 2024-07-30

Added

- Add fs mapping, under feature.fs.mapping now it's possible to specify regex
match and replace for paths while running mirrord exec.

Example:

toml

[feature.fs.mapping]
  "/var/app/temp" = "/tmp" # Will replace all calls to read/write/scan for
  "/var/app/temp/sample.txt" to "/tmp/sample.txt"
  "/var/app/.cache" = "/workspace/mirrord$0" # Will replace
  "/var/app/.cache/sample.txt" to
  "/workspace/mirrord/var/app/.cache/sample.txt" see
  Regex::replace

#2068
- Warning when mirrord automatically picked one of multiple containers on the
target.

Changed

- Allows targeting StatefulSet without the copy_target feature (still requires
operator though).

Fixed

- Remove invalid schema doc mentioning podname as a valid pod target selector.
#721
- Pass the list of UserSocket to child processes when exec is called through an
env var MIRRORD_SHARED_SOCKETS.
#864
- Fixed an issue where operator license was incorrectly recognized as expired
when it was expiring later the same day.
- Fixed new exec hooks breaking execution of Flask apps.

Internal

- Added clippy check on test code to the CI.
- Regenerated config docs.

3.111.0 - 2024-07-17

Added

Internal

- CLI now sends additional headers with each request to the mirrord operator.
#2466
- Add mirrord-operator-apiserver-authentication Role and RoleBinding to
fetch extension-apiserver-authentication configmap from "kube-system".
- Fixed compilation errors in mirrord-operator crate with only crd feature
enabled.
- Fixed compilation of mirrord-operator crate with no features.
- Updated x509-certificate dependency.

3.108.0 - 2024-07-02

Added

- Added support for streaming HTTP responses.
#2557

Changed

- Changed http path filter to include query params in match
#2551
- Configuration documentation contents order.
- Errors that occur when using discovery API to detect mirrord operator are no
longer fatal. When such error is encountered, mirrord command falls back to
using the OSS version.

Fixed

- When using mesh use lo interface for mirroring traffic.
#2452

Internal

- Correct version of HTTP response is sent based on agent protocol version.
#2562
- mirrord-intproxy crate unit tests are now part of the CI.

- Fixed a bug where outgoing connections where not intercepted from bound
sockets. #2438

Internal

- Fix all check-rust-docs warnings
#1399
- Use with_env_vars in flaky fs_config_default test
#2163
- Move LicenseInfoOwned to another module
- Update contributing guide.

3.100.1 - 2024-05-06

Fixed

- mirrord-agent now catches SIGTERM signal and cleans iptables during graceful
deletion. #2427
- Fixed ping pong logic for intproxy-agent communication. Intproxy now sends
pings on a fixed schedule, regardless of any other messages.

3.100.0 - 2024-05-05

Added

- Added experimental, temp feature for supporting hazelcast pings
#2421
- Provide value hint to Clap for generating shell completions for config_file
to
only resolve to files, not just first match.

Changed

- Changed default env exclude to have BUNDLE_WITHOUT
#2417
- Append more permissions to operator clusterrole
- Improve tera templating config error to dig into source and give out more
details.
- env.unset feature is now case insensitive

3.99.2 - 2024-04-30

Fixed

- Fixed case where resolving DNS failed when setting HTTP filter
#2411

- Added create and delete verbs on pods resource in
clusterrole/mirrord-operator for operator setup.

Changed

- Set timeout of dns request to 1s and only attempt once
#2379

Fixed

- Fix memory issue when binding

Internal

- Remove AgentManagement because only KubernetesAPI implements it now and
there is no need for this abstraction and moved the used functions straight
onto KubernetesAPI.
- Split off pod template to a separate ContainerVariant implementation used
inside of JobVariant and JobTargetedVariant.
- Updates to rust nightly-2024-04-15. Also fixes some pointer
copy_from_nonoverlapping issues.

3.97.0 - 2024-04-16

Added

Fixed

- Internal proxy and agent now properly handle connection shutdowns.
#2309
- Fix some open/fd potential issues
- Fixed the display of agent startup errors to the user.
- Fixed timeout set on new internal proxy connection in fork detour.

Internal

- Adds new message type IdeMessage. Allows us to send messages to the IDE
that should be shown in notification boxes, with buttons/actions.
- Change design around analyticsreporter to be more robust/clean
- Prepared an e2e test for stealing WebSockets connections with an HTTP filter
set.

3.92.1 - 2024-03-17

Removed

- Removed problematic DNS cache from internal proxy.

Fixed

- Fixed a bug with handling hints passed to getaddrinfo function.

Internal

- stealer to steal in incoming mode typo
#docs-incoming-stealer
- Add kuma-sidecar kuma-init to default list of skipped containers. (no
need to target these containers)
#skip-kuma-containers
- Added a unit test to internal proxy DNS cache. Added more tracing to internal
proxy.

3.92.0 - 2024-03-13

Added

- Added support for statx function.
#2204

Fixed

- Fix incoming network interception via port-forward when "stealing" traffic
with a mesh like linkerd or istio (Using the same OUTPUT iptable rules for
both meshed and not meshed networks)
#2255
- Add Kuma mesh detection and support to mirrord-agent.
#2296
- Added sidecar exclusion for kuma mesh, fixing issues running in that setup

3.91.0 - 2024-03-05

Added

- Adds operator session management commands to mirrord-cli, these are: mirrord operator session kill-all, mirrord operator session kill --id {id}, and
the hidden mirrrod operator session retain-active.
#217
- Notify user on license validity.
#382

Changed

- Adds a new PolicyRule for delete and deletecollection of sessions for
mirrord operator setup.
#456
- Change pause feature from unstable to deprecated
- Increased size of buffers used by TCP steal to read incoming streams (from 4k
to 64k in the agent, from 1k to 64k in the internal proxy).
- Increased size of buffers used by outgoing feature to read streams (from 4k
to 64k in the agent, from 1k to 64k in the internal proxy).

Fixed

- Fixed a bug where gethostbyname calls where intercepted regardless of the
remote dns feature status.
#2281
- Fixed a bug where non-existent hosts in outgoing filter would prevent the
application from initiating outgoing connections.
#2283
- Remove special handling for DNS when dealing with UDP outgoing sockets
(manual UDP resolving).
#2289

Internal

- Fixed lints in hook macros.

3.90.0 - 2024-02-27

Added

- Add agent configuration to use nftables instead of iptables-legacy to make it
work in mesh that uses nftables.
#2272
- The agent now processes all DNS queries concurrently. Also, client sessions
in the agent do not block on the DNS queries.

Changed

- change kubeconfig path expansion to use env as well
#2262
- Increase internal proxy timeout from 5 seconds to 10 seconds to fix long
agent ops

Internal

- Add information how to use config file in config docs

3.89.1 - 2024-02-22

Fixed

- Fixed issue with Golang calling fstat on Linux causing crash
#2254

3.89.0 - 2024-02-22

Changed

- Change intproxy log to append
- use_proxy configuration now applies to mirrord operator status, and mirrord
ls

3.88.0 - 2024-02-18

Added

- Add log level and log destination for int proxy
#2246

Changed

- 1. mirrord CLI now does not check target type when the copy_target feature
is enabled. The check is now done only in the operator.
2. mirrord operator setup not includes permissions to read and change
rollouts scale.

Fixed

- Incoming traffic was being mirrord when set to false.

3.87.0 - 2024-02-15

Removed

- Remove pause tests as part of deprecation

Added

- Changed internal proxy to allow for HTTP upgrades with filtered HTTP steal.
#2224
- Added support for selecting malfunctioning targets with copy_target
feature. #2239
- Added configuration option feature.env.load_from_process, which allows for
changing the way mirrord loads environment variables from the remote target.

Fixed

- Add missing permissions needed by operator for copy and scaledown

Internal

- Add IDE release e2e to the ci-success job
#2184
- Change cleanup to delete without grace
- Removed #![allow(incomplete_features)] from the code - no longer needed.
- Reorganized TcpSubscriptionStealer code - extracted port subscriptions into
a separate struct.

3.86.1 - 2024-02-05

Fixed

- Added runAsNonRoot: false and runAsUser: 0 to the security context of an
ephemeral agent when running privileged (to prevent overriding these values
with values from the pod spec).
- Disabled unix sockets being wrongfully sent to the agent when socket isn't
connected

3.86.0 - 2024-01-29

Changed

- JAVA_TOOL_OPTIONS is excluded by default from the environment variables
that are fetched from the target.

Internal

- Update links to new docs

3.85.1 - 2024-01-29

Fixed

- Running mirrod exec go run EXECUTABLE on macOS with go1.21.
#2202
- Fixed a compilation bug in mirrord-operator crate tests.

3.85.0 - 2024-01-24

Added

- Added license subscription id to operator status CRD. Adjusted
CredentialStore to preserve signing key pair for the same operator license
subscription id. #2190
- CLI now sends machine host + username to show in mirrord operator status
(not sent to our cloud!)
- Report port locks and filters in operator status

Changed

- Change configuration parsing to be strict unallowing unknown fields
- Cluster DNS resolving now happens by nameserver order rather by statistics

Fixed

- Running R on macOS.
#2186
- Running scripts with whitespaces in the shebang.
#2193

Internal

- Allow both x86_64 and arm64 when patching thin binaries.
#2186

3.84.1 - 2024-01-19

Fixed

- Add support for shebang containing spaces like asdf's node does
#2181

3.84.0 - 2024-01-18

Added

- Report namespace for operator sessions

Fixed

- add preadv and readv to fix erlang file reading
#2178

3.83.0 - 2024-01-11

Changed

- Filesystem: File not found default filter happens after checking local filter
- The copy_target feature is now officially stable.
- mirrord operator status reports active copy targets.

Fixed

- Remove guard from dlopen, making calls from within dlopen hookable,
potentially fixing issues

Internal

- Moved the docs from CopyTargetFileConfig to CopyTargetConfig so that
medschool reads them.
#2164
- Fixed layer panics in trace only mode.

3.82.0 - 2024-01-08

Removed

- Removed http_header_filter. Please use http_filter with key
header_filter instead.

Added

- mirrord operator setup defines a MirrordPolicy CRD so that admins can
block certain features by creating policies. When receiving a forbidden error
from the operator for trying to steal traffic, mirrord shows an error and
exits.

Fixed

- Added userextras/oid to mirrord operator role to solve issues in some AKS
clusters #2152

Internal

- Add function to load agentfileconfig from path

3.81.0 - 2024-01-01

Changed

- Changed setup to not create self signed, letting operator fallback to it
automatically on runtime
- Update dependencies

Fixed

- Fix opendir not being hooked on macOS arm64

Internal

- Deprecate go 18, enable go 21
- Fix some test labels, separate tests by flags, update contributing guide
- Re-add outgoing traffic with many requests tests

3.80.0 - 2023-12-27

Changed

- Remove unstable from ignore localhost

Fixed

- Allow license key that starts with -
#2140
- Fix job lingering by exiting always successfully on agent

3.79.2 - 2023-12-24

Fixed

- Added hook for realpath function, fixing issues on files not found in Java

3.79.1 - 2023-12-23

Fixed

- Fix dirfd crashing on macOS

3.79.0 - 2023-12-21

Removed

- Remove waitlist signup from CLI

Added

- Added new teams command to the CLI.
- Remove support for old cri-o, use new CRI API (v1)

Fixed

- Uses the syscalls crate to handle calling the syscalls for go. And adds
pwrite64, pread64, fsync and fdatasync hooks for go.
#2099

Internal

- Debug instructions for intproxy in contributor guide.
- Flush outgoing the console loggers after each logs so that we can see more
logs before the layer or the intproxy exit when debugging.

3.78.2 - 2023-12-14

Fixed

- Fixed config verification in IDE context when the config does not specify the
target but uses the scale_down feature.

3.78.1 - 2023-12-13

Fixed

- Removed confusing error from mirrord exec progress.
#2115
- Support binding [::] by resolving to ipv4 unspecified. Fix gRPC Python
running in Docker
#2117

3.78.0 - 2023-12-12

Fixed

- Fix create react apps by adding node related files to default local
#2074
- Fixed an issue with internal proxy timing out when the user application
spawns lengthy build processes.
#2101

Internal

- Adds a new trait LicenseValidity implemented for DateTime to help us when
checking a license's validity. Relevant for
#346.
- Update rust to nightly-2023-12-07.

- Changed the way targetless is printed in mirrord verify-config to allow
the IDEs to properly show target selection dialogs.

3.75.2 - 2023-11-22

Fixed

- Fixed issues with mirroring incoming TCP connections when targeting multi-pod
deployments. #2078

3.75.1 - 2023-11-14

Fixed

3.65.1 - 2023-09-07

Changed

- Add some Ruby env to excluded: GEM_HOME, GEM_PATH
#1892

Fixed

- Disable opendir hook on aarch macOS since it crashes due to arm64e issues
#1920

3.65.0 - 2023-09-06

Added

- Add hooks for opendir, readdir64_r, __lxstat, __lxstat64,
__xstat64. Also contains a refactor of the *stat family of hooks (they
now call a shared function), and openat64 as its own function.
#1899

Changed

- CLI: Change operator setup to fetch from API version of operator to install
- Don't error on agent ready missing absent, add retry in connection to
upstream agent

Fixed

- Fixed agent crashing on flush connections not enabled
#1904
- CI: run macOS clippy on all of the codebase
- Fixed pause flakiness by improving our cleanup process [using watch]

Internal

- CLI: Change to use drain instead of hoping sleep would help
- Enable ephemeral containers for tests on operator

3.64.2 - 2023-09-05

Changed

- Changed the targeted and non targeted flows for creating agent.
#1844
- Add info about errors to TELEMETRY.md

Fixed

- Change agent to use current thread runtime, multi thread is enabled by
mistake.
* Added a sleep before exiting both in layer and agent to allow
tokio::spawn tasks spawned from Drop finish.
* Changed implementation of pause guard to use tokio::spawn - fixes pause
in combination with above change.
- Fix analytics not being sent on drop

Internal

- Refactor [if Some / else None] pattern to use [bool.then()] in medschool.
#1890
- Add a "Try to reduce the use of non-optional Options" rule to the mirrord
style guide.
- Label mirroring integration tests as flaky

3.64.1 - 2023-09-03

Fixed

- Remove extra message of {"type":"FinishedTask","name":"mirrord preparing to launch","success":true,"message":null} that causes breakage in extensions.

3.64.0 - 2023-09-02

Added

- Warn when running in a mesh service with mirror mode.
#1768

Fixed

- Fixed detecting operator not found as an error
#1868
- Update hyper and hyper-util to fix double select call (and properly handle
large http traffic).
#1869
- Fixed ongoing connections not being stolen by changing our flush mechanism -
add a rule to drop marked connections and then mark existing connections when
starting to steal.
#1870
- Fixed panic on crash analytics
#1872
- Fixed showing error on each file not found triggered by the file not found
configuration
- Regex meta characters are now escaped in $HOME (not-found file filter).

Internal

- Set fork env in integration tests using uvicorn
#1627
- Fix complete_passthrough response flake
#1811
- Fix typo in flush connections conntrack command

3.63.0 - 2023-08-28

Added

- Add the ability to send analytics on errors and not only on successful runs.
#1785
- Report back internal proxy error stream to cli
#1855

Changed

- Changed config unstable/deprecations to be aggregated with other config
warnings #1860

Fixed

- not-found file filter fixed to only match files inside the $HOME
directory. #1863
- Fix openshift detection taking too long by querying a subset instead of all
APIs

Internal

- CI Improvements:
- Unify lint and integration for macOS to save cache and runner.
- Remove trace logging from integration tests on macos
- use node 18 for testing since installing 19 in CI takes hours.
- remove build_mirrord job - quite useless as it's used only in other
workflow, so have it there and re-use cache
also save some cache,
- specify target for all cargo invocations to re-use cache efficiently.
- fix flake with node server closing before time
- Fix regression in kube api blocking operator from compiling
- Reorganize the CI with the following objective of unifying as much as we can
CI that can run on the same host, this is to have less caches and have better
compilation time (as there's overlap). Things done:

- Remove the build layer CI, since we now have an integration tests that
check it + clippy for aarch darwin / Linux
- Make clippy run for all of the project for aarch64 linux instead of agent
only
- Revert removal of Rust cache from e2e (was by mistake)
- Don't use "cache" for other Gos since it will try to overwrite and have bad
results.

3.62.0 - 2023-08-26

Added

- Add analytics collection to operator session information.
#1805
- Added an extra not-found file filter to improve experience when using cloud
services under mirrord.
#1694

Changed

- Update telemetry.md with new info about mirrord for Teams
#1837
- Changed keep alive to happen from internal proxy to support cases where layer
process is stuck [breakpoint/etc]
#1839
- Changed CLI progress to print warnings and not only set it as the last
message of progress
- Changed config verify to return aggregated warnings list for user to print
instead of warn in current progress - can fix issues with extension where we
printed to stderr.

Fixed

- Fix ephemeral agent creation api using agent namespace instead of target.
Add note about agent namespace being irrelevant in ephemeral.
- Fix macOS SIP potential issues from exec having mirrord loaded into the code
sign binary.
- Fix operator setup so MIRRORD_OPERATOR_IMAGE will function properly.
- Fixed issue connecting to ephemeral container when target is in different
namespace

Internal

- Changed e2e to use a shared setup e2e action to leverage all GitHub caches,
reduce e2e time by half.
- Changes to the CI to make it faster:
- Use go cache for integration test
- use mac-13 runner for tests

3.61.0 - 2023-08-22

Added

- Support DNS resolution for the outgoing filter config.
#702

Fixed

- Fixed wrong errno being set by mirrord, fixing various flows that rely on
errno even when return code is ok
#1828

3.60.0 - 2023-08-21

Added

- Detect and warn when cluster is openshift
#1560
- Add missing hook for open64, fixing certificate loading on C# + Linux
#1815
- Small changes relevant to operator for #1782.

Fixed

3.57.1 - 2023-08-15

Internal

- Add nodes and pods/log resource permissions to mirrord-operator
ClusterRole.

3.57.0 - 2023-08-15

Added

- Add hooks for Go 1.19 >= on Linux Arm
#563
- Add node allocatabillity check to prevent OutOfPods error on agent job.
#1782

Changed

- Incoming config now supports off mode, which is also used when "incoming": "off".
When incoming is off, listen requests go through.
Changed targetless to warn on listen, since bind can happen on outgoing
sockets as well.

Fixed

- Replaced termspin with indicatif, fix multi line issues and refactored
progress. #1664

Internal

- Add trace only mode for layer for easier debugging
- Agent now prints its version in the initial "agent ready" message.

3.56.1 - 2023-08-09

Fixed

- Add missing hook for read$NOCANCEL, fixes reading remote files in some
scenarios. #1747

Internal

- Updated hyper version.
#1774

3.56.0 - 2023-08-07

Added

- Added internal_proxy timeout configurations to allow users specify timeouts
in edge cases. #1761

Changed

- Change operator / cli version mismatch to show only when mirrord is older
than operator

Fixed

- Fix grpc errors caused by missing trailers on filtered http responses.
#1731

3.55.2 - 2023-08-06

Fixed

- macOS - Running Go build with mirrord while Go binary is SIP protected is
fixed by enabling file hooks on SIP load mode.
#1764

3.55.1 - 2023-08-06

Fixed

- Try to resolve an issue where internal proxy is under heavy load since bash
scripts does a lot of fork/exec by:
1. Increasing internal proxy's listen backlog (might not help on macOS)
2. Change internal proxy to create the upstream (agent) connection in a
different task, allowing it to keep accepting.
#1716
- Fixed detecting skipped processes during layer injection.
#1752
- Fix fork issues by changing layer runtime to be current thread
#1759

3.55.0 - 2023-08-03

Added

- Add support for selecting Kubeconfig context to use by either using:
1. Configuration option kube_context.
2. mirrord exec argument --context
3. Environment variable MIRRORD_KUBE_CONTEXT
#1735

Changed

Internal

- Redirect stderr and stdout of internal proxy to /dev/null (stdout only after
printing port).
#int-proxy-dev-null

3.53.3 - 2023-07-26

Fixed

- Add jspawnhelper to build-tool list & fix skip_processes detection
#1709
- Use shellexpand to resolve tilde for kubeconfig.
#1721

3.53.2 - 2023-07-24

Fixed

- Add automatic skip for build-tools "skip_build_tools": boolean to config
[default: True] (build-tool list: as, cc, ld, go, air, asm,
cc1, cgo, dlv, gcc, git, link, math, cargo, hpack, rustc,
compile, collect2, cargo-watch and debugserver)
#1478
- Fix feature.env.override documentation "overrides" -> "override".
mirrord.dev#120
- Specify default value for agent.tolerations in docs as json instead of
yaml.

3.53.1 - 2023-07-23

Changed

- Changed internal proxy to drop stdout/stderr after it finishes loading

Internal

- Fixed flakes caused by stdout/stderr not being flushed before after process
is done

3.53.0 - 2023-07-20

Added

- Add support for agent.tolerations configuration field for setting agent
Tolerations to work around Taints in the cluster.
#1692

Changed

- Added env var exclusion for _JAVA_OPTIONS to avoid loading remote jars or
settings that wouldn't work locally.
#1695

3.52.1 - 2023-07-19

Internal

- Added Java Debug port detecting to use in VSCode/IntelliJ
#1689

3.52.0 - 2023-07-18

Added

- Support for OIDC refresh token
#1460

Fixed

- Fixed case where proxy can timeout since it holds a stale connection. Added
heartbeat to the connection handling
- Fixed dynamic pause with operator not working - moved pause request to be
from internal proxy
- Update the code to reimplement the fix but without moving the pinging source.

Internal

- Add Cargo Chef to mirrord-agent docker image for better utilisation of cache
layers.
- Reduce amount of API calls to use operator

3.51.1 - 2023-07-16

Changed

- 'mirrod ls' command now no longer lists crashed pods as targets
#1617

Internal

- Add readinessProbe and livenessProbe to operator deployment.
- Add support for operator feature flags & new "proxy" verb api.
- Remove operator pvc from setup.

3.51.0 - 2023-07-16

Added

- Add outgoing traffic filter feature.

Adds a way of controlling from where outgoing traffic should go, either
through the remote pod, or from the local app. Can be configured with the
remote and local options under feature.network.outgoing.
#702
- mirrord configuration now allows disabling Linux capabilities for the agent
container. #1662
- Add env to specify operator image

Internal

- Add new error to the kube error enum needed by operator
- Update VS Code gif in README

3.50.5 - 2023-07-13

Fixed

- Make sure conntrack flushes the correct port.
#1655
- Added CAP_NET_RAW Linux capability agent.

Internal

- Use a patched (fixed) version of rasn, otherwise doing a cargo update breaks
compilation due to rasn-derive from rasn used in apple-codesign.

3.50.4 - 2023-07-11

Fixed

- Layer now passes detected debugger port down to the child processes.
#1641

3.50.3 - 2023-07-11

Fixed

- Fixed double slash in uri path on pause/unpause requests in agent
#1638
- Fix agent steal crash by adding fallback to using only PREROUTING iptable
chain. #1640

Internal

- Add test for operator setup command that checks that the setup passes with
mirrord operator setup ... | kubectl apply --dry-run=client -f -.
#create-operator-setup-test
- Add --prepend --input and --output args when running medschool.

3.50.2 - 2023-07-10

Changed

- Changed agent job definition to tolerate everything
#1634

Internal

- Fix a critical typo in operator setup added in 3.50.1.
#setup-hotfix

3.50.1 - 2023-07-09

Fixed

- Small fix to operator setup command.

Internal

- We were overriding the fs mode only for the file filter, but not for the rest
of the config.

3.50.0 - 2023-07-07

Removed

- Removed error capture error trace feature

Added

- Add support for Argo rollout target.
#1593

Changed

- Agent container is no longer privileged. Instead, it is given a specific set
of Linux capabilities: CAP_NET_ADMIN, CAP_SYS_PTRACE, CAP_SYS_ADMIN.
#1615
- Changed agent job definition to include limits
#1621

Fixed

- Running java 17.0.6-tem with mirrord.
#1459

Internal

- Add support for installing operator with online license key.
- Cleaning kube resources after e2e tests no longer needs two runtime threads.

3.47.0 - 2023-06-20

Added

- Added listen_ports to incoming config to control what port is actually
being used locally
so mirrored/stolen ports can still be accessed locally via those. If port
provided by listen_ports
isn't available, application will receive EADDRINUSE.
Example configuration:

json

{
      "feature":
      {
          "incoming": {
              "listen_ports": [[80, 7111]]
          }
      }
  }

will make port 80 available on 7111 locally, while stealing/mirroring port
80. #1554

Changed

- Changed the logic of choosing local port to use for intercepting mirror/steal
sockets
now instead of assigning a random port always, we try to use the original one
and if we fail we assign random port.
This only happens if listen_ports isn't used.
#1554
- The path /opt itself is read locally by default (up until now paths inside
that directory were read locally by default, but not the directory itself).
#1570
- Changed back required IntelliJ version to 222+ from 223+
- Moved VSCode extension to its own repository and versioning
https://github.com/metalbear-co/mirrord-vscode

Fixed

- Running python with mirrord on apple CPUs.
#1570

Internal

- Use tagged version of ci-agent-build, so we can update Rust and the agent
independently. #1457

3.46.0 - 2023-06-14

Added

- Add support for HTTP Path filtering
#1512

Changed

- Refactor vscode-ext code to be more modular

Fixed

- Fixed bogus warnings in the VS Code extension.
#1504
- Mirroring/stealing a port for a second time after the user application closed
it once. #1526
- fixed using dotnet debugger on VSCode
#1529
- Properly detecting and ignoring localhost port used by Rider's debugger.
- fix vscode SIP patch not working

Internal

- Add a state Persistent Volume Claim to operator deployment setup.
- Bring the style guide into the repo.
- Fix vscode e2e job not running
- Remove OpenSSL dependency again
- Switch to new licensing and operator authentication flow.
- fix launch json for vscode extension
- fix macos build script to use directory's toolchain

3.45.2 - 2023-06-12

Internal

- Remove frida openSSL dependency

- Changed agent's pause feature. Now the pause is requested dynamically by CLI
during setup and the agent keeps the target container paused until exit or
the unpause request was received.
#1408
- Added support for NPM run configuration on JetBrains products.
#1418

Changed

- Change mirrord ls to show only pods that are in running state (not
crashing,starting,etc)
#1436
- Change fs mode to be local with overrides when targetless is used
- Make progress text consistently lowercase.

Fixed

- Fix misalignment on IntelliJ not accepting complex path in target
#1441
- Add impersonate permissions for GCP specific RBAC in operator

Internal

- Fix node spawn test flakiness on macOS
#1431

3.43.0 - 2023-05-22

Added

- Support for targetless execution: when not specifying any target for the
agent, mirrord now spins up an independent agent. This can be useful e.g. if
you are just interested in getting the cluster's DNS resolution and outgoing
connectivity but don't want any pod's incoming traffic or FS.
#574
- Support for targetless mode in IntelliJ based IDEs.
#1375
- Support for targetless mode in vscode.
#1376

Changed

- If a user application tries to read paths inside mirrord's temp dir, we hook
that and read the path outside instead.
#1403
- Don't print error if we fail checking for operator

Fixed

- Added better detection for protected binaries, fixes not loading into Go
binary #1397
- Disallow binding on the same address:port twice. Solves part of issue 1123.
#1123
- Fix the lost update bug with config dropdown for intelliJ
Fix the lost update bug with config dropdown for intelliJ.
#1420
- Fix intelliJ compatibility issue by implementing missing
createPopupActionGroup

Internal

- Run IntelliJ Plugin Verifier on CI
#1417
- Remove bors.toml since we use GH merge queue now
- Upgrade k8s dependencies and rustls, remove ugly feature ip patch

3.42.0 - 2023-05-15

Added

- mirrord config dropdown for intelliJ.
#1030
- Log agent version when initializing the agent.

Changed

- Remove quotes in InvalidTarget' target error message

Fixed

- Use ProgressManager for mirrord progress on intelliJ
#1337
- Fixed go run failing because of reading remote files by maing paths under
/private and /var/folders read locally by default.
#1397
- Fix not loading into Go because of SIP by adding into default patched
binaries

3.41.1 - 2023-05-07

Fixed

- Fixed regression in GoLand and NodeJS causing a crash
#1389

3.41.0 - 2023-05-06

Added

- Last selected target is now remembered in IntelliJ extension and shown first
in the target selection dialog.
#1347
- Warn user when their mirrord version doesn't match the operator version.

Changed

- mirrord loading progress is displayed in the status indicator on IntelliJ,
replacing the singleton notifier
#1337

Fixed

- Fix crash on unexpected LogMessage
#1380
- Added hook for recvfrom to support cases where caller expects the messages to
be from address they were sent to.
#1386

Internal

- Add x-session-id to operator request, that is persistent across child
processes in a single mirrord exec.
- Improve metadata for VSCode extension
- Remove unnecessary DNS resolve on agent addr when incluster feature is
enabled in mirrord-kube.

Internal

- Optimize agent Dockerfile for better cache use
#1280
- Cover more areas of the code and targets using clippy in CI and fix its
warnings
- Rely more on Rusts own async trait and drop async-trait crate (the agent cant
fully switch yet though).
#use-rust-async-traits

- Change CLI's version update message to display the correct command when
mirrord has been installed with homebrew.
#1194
- fix using config with WSL on JetBrains
#1210
- Fix internal proxy exiting before IntelliJ connects to it in some situations
(maven). Issue was parent process closing causing child to exit. Fixed by
waiting from the extension call to the child.
#1211
- mirrord-cli: update cli so failing to use operator will fallback to
no-operator mode.
#1218
- Add option to install specific version using the install.sh script via
command line argument or VERSION environment variable
#1222
- Change connection reset to be a trace message instead of error
- Error when agent exits.

Internal

- Bring the testing documentation into the repo, link it in readme, and add
some information.
- Introduce CheckedInto trait to convert raw pointers (checking for null) in
Detour values.
#detours
- Re-enable http mirror e2e tests..
#947
- Change OPEN_FILES from Mutex HashMap to just using DashMap.
#1206
- Refactor file ops open/read/close to allow us to directly manipulate the
remote file (in agent) without going through C (mainly used to not leak the
remote file due to how gethostname works).

Change dup to take an argument that signals if we should change the fd from
SOCKETS to OPEN_FILES (or vice-versa).
#1202

3.33.0 - 2023-03-22

Added

- Support for outgoing unix stream sockets (configurable via config file or
environment variable).
#1105
- Add version of hooked functions.
#1203

Changed

- add Hash trait on mirrord_operator::license::License struct
- dependencies bump and cleanup
- fix mirrord loading twice (to build also) and improve error message when no
pods found

Fixed

- fix f-stream functions by removing its hooks and add missing underlying libc
calls #947
- fix deadlock in go20 test (remove trace?)
#1206

Internal

- set timeout for flaky/hanging test

3.32.3 - 2023-03-19

Changed

- change outgoing connection drop to be trace instead of error since it's not
an error

Fixed

- Support stealing on meshed services with ports specified in
--skip-inbound-ports on linkerd and itsio equivalent.
#1041

3.32.2 - 2023-03-14

Fixed

- fix microk8s support by adding possible containerd socket path
#1186
- fix gethostname null termination missing
#1189
- Update webbrowser dependency to fix security issue.

3.32.1 - 2023-03-12

Fixed

- fix mirroring not handling big requests - increase buffer size (in rawsocket
dependency).
also trace logs to not log the data.
#1178
- fix environment regression by mixing the two approaches together.
priority is proc > oci (via container api)
#1180

Internal

Fixed

- agent: Make sniffer optional to support cases when it's not available and mirroring is not required.

3.27.1

Fixed

- getsockname now returns the remote local address of the socket, instead of the
local fake address of the socket.
This should fix issues with Akka or other software that checks the local address and
expects it to match the local ip of the pod.
This breaks agent protocol (agent/layer need to match).
- GoLand debug fails because of reading /private/var/folders remotely (trying to access self file?). fixed with filter change (see below)

Changed

- VSCode extension: update dialog message
- JetBrains: can now change focus from search field to targets using tab/shift+tab (for backward)
- Refactor - mirrord cli now spawns internal proxy which does the Kubernetes operations for
the layer, so layer need not interact with k8s (solves issues with remote/local env mix)
- filter: add /private/var/folders" to default local read override - filter: fixed regex for/tmpdefault local read override - disable flask e2e until we solve the glibc issue (probably fstream issue)

`3.24.0`

`Added`

`Fixed`

- mirrord-agent: Handle HTTP upgrade requests when the stealer feature is enabled (with HTTP traffic) PR #973. - E2E tests compile on MacOS. - mirrord could not load into some newer binaries of node - #987. Now hooking alsoposix_spawn, since node now useslibuv's uv_spawn (which in turn calls posix_spawn) instead of libc's execvp (which calls execve). - Read files from the temp dir (defined by the system'sTMPDIR) locally, closes #986.

`3.20.0`

`Added`

- Support impersonation in operator

`Fixed`

- Go crash in some scenarios #834. - Remove already deprecated--no-fs and --rwoptions, that do not do anything anymore, but were still listed in the help message. - Bug: SIP would fail the second time to run scripts for which the user does not have write permissions.

`Changed`

- Change layer/cli logs to be to stderr instead of stdout to avoid mixing with the output of the application. Closes #786

`3.19.2`

`Changed`

- Code refactor: moved all file request and response types into own file.

`3.19.1`

`Fixed`

- Changelog error failing the JetBrains release.

`3.19.0`

`Changed`

- mirrord-operator: replace operator api to use KubernetesAPI extension. #915

`Fixed`

- tests: flaky passthrough fix. Avoid 2 agents running at the same time, add minimal sleep (1s) - macOS x64/SIP(arm): fix double hookingfstatat$INODE64. Possible crash and undefined behavior.

`Added`

- introduce mirrord-console - a utility to debug and investigate mirrord issues.

`Deprecated`

- Remove old fs mode - cli: no--rw or --no-fs. - layer: noMIRRORD_FILE_OPS/MIRRORD_FILE_RO_OPS/MIRRORD_FILE_FILTER_INCLUDE/MIRRORD_FILE_FILTER_EXCLUDE

`3.18.2`

`Fixed`

- crash when getaddrinfois bypassed and libc tries to free our structure. Closes #930 - Stealer hangs on short streams left open and fails on short closed streams to filtered HTTP ports - #926.

`3.18.1`

`Fixed`

- Issue when connect returns libc::EINTR or libc::EINPROGRESScausing outgoing connections to fail. - config: file config updated to fix simple pattern of IncomingConfig. #933

`3.18.0`

`Added`

- Agent now sends error encountered back to layer for better UX when bad times happen. (This only applies to error happening on connection-level). - Partial ls flow for Go on macOS (implementedfdopendir and readdir_r). Closes #902 - New feature: HTTP traffic filter! - Allows the user to steal HTTP traffic based on HTTP request headers, for exampleClient: mewould steal requests that match this header, while letting unmatched requests (and non-HTTP packets) through to their original destinations.

`Fixed`

- Update the setup-qemu-action action to remove a deprecation warning in the Release Workflow - stat functions now support directories. - Possible bugs with fds being closed before time (we now handle dup'ing of fds, and hold those as ref counts)

`Changed`

- agent: Return better error message when failing to use PACKET_IGNORE_OUTGOING flag.

`3.17.0`

`Added`

- Add brew command to README

`Fixed`

- intellij plugin: mirrord icon should always load now. - intellij plugin: on target selection cancel, don't show error - just disable mirrord for the run and show message. - fixed setting a breakpoint in GoLand on simple app hanging on release build (disabled lto). - Fixes #906.

`Deprecated`

- Removed disabled in favor of local in fs configuration.

`Changed`

- update kubedependency + bump other - updatedlv packed with plugins.

`3.16.2`

`Fixed`

- Add go to skipped processes in JetBrains plugin. Solving GoLand bug.

`3.16.1`

`Fixed`

- Running on specific Kubernetes setups, such as Docker for Desktop should work again.

`3.16.0`

`Added`

- fd leak on Linux when using libuv (Node). Caused undefined behavior. Fixes #757.

`Misc`

- Better separation in mirrord cli.

`3.13.4`

`Changed`

- Adjust filters - all directory filters also filter the directory itself (for when lstat/stating the directory). Added/Applications

`3.13.3`

`Added`

- Add mirrord ls which allows listing target path. Hidden from user at the moment, as for now it's meant for extension use only.

`Changed`

- Refactor e2e tests: split into modules based on functionality they test. - internal refactor in mirrord-agent: Stealer feature changed from working per connection to now starting with the agent itself ("global"). Got rid ofsteal_workerin favor of a similar abstraction to what we have insniffer.rs (TcpConnectionStealerthat acts as the traffic stealing task, andTcpStealerApiwhich bridges the communication between the agent and the stealer task). - Tests CI: don't wait for integration tests to start testing E2E tests.

`Fixed`

- Add missing fstat/lstat/fstatat/stat hooks.

`3.13.2`

`Fixed`

- Weird crash that started happening after Frida upgrade on macOS M1.

`Fixed`

- CI: Fix regex for homebrew formula - Potentially ignoring write calls (fd < 2). - CI: Fix release for linux aarch64. Fixes #760. - Possible cases where we don't close fds correctly.

`3.10.4`

`Fixed`

- VS Code Extension: Fix crash when no env vars are defined in launch.json

`3.10.3`

`Changed`

- CLI: change temp lib file to only be created for new versions - mirrord-config: refactored macro so future implementations will be easier

`Fixed`

- Release: fix homebrew release step

`3.10.2`

`Fixed`

- CI: fix release_gh zip file step

`3.10.1`

`Added`

- VS Code Extension: add JSON schema - Bypass SIP on MacOS on the executed binary, (also via shebang). See [#649]. This does not yet include binaries that are executed by the first binary.

`Fixed`

- fix markdown job by adding the checkout action

`3.7.3`

`Fixed`

- mirrord-agent: No longer resolves to eth0by default, now we first try to resolve the appropriate network interface, if this fails then we useeth0as a last resort. Fixes #670.

`Changed`

- intelliJ: use custom delve on macos

`3.7.2`

`Fixed`

- Release: fix broken docker build step caused by folder restructure

`3.7.1`

`Fixed`

- using gcloud auth for kubernetes. (mistakenly loaded layer into it) - debugging Go on VSCode. We patch to use our own delivered delve. - Changed layer not to crash when connection is closed by agent. Closed #693.

`Changed`

- IntelliJ: fallback to using a textfield if listing namespaces fails

`3.7.0`

`Added`

- mirrord-config: New mirrord-schema.jsonfile that contains docs and types which should help the user write their mirrord config files. This file has to be manually generated (there is a test to help you remember).

`Fixed`

- Fixed breaking vscode release step

`3.5.1`

`Fixed`

- Fixed an issue with the release CI

`Changed`

- Update target file config to have namespace nested inside of target and not a separate target_namespace. See #587 and #667

`3.5.0`

`Added`

`3.1.3`

`Changed`

- release: VS Code extension release as stable and not pre-release.

`Fixed`

- Dev container failing to execute apt-get install -y clang

`3.1.2`

`Changed`

- Update some texts in documentation, READMEs, and extension package descriptions - IntelliJ version check on enabling instead of on project start. Don't check again after less than 3 minutes.

`3.1.1`

`Fixed`

- IntelliJ plugin crashing on run because both include and exclude were being set for env vars.

`3.1.0`

`Added`

`Fixed`

- Fix IntelliJ Extension artifact - use glob pattern - Use LabelSelector instead of app=* to select pods from deployments - Added another protection to not execute in child processes from k8s auth by setting an env flag to avoid loading then removing it after executing the api.

`3.0.19-alpha`

`Added`

`3.0.9-alpha`

`Changed`

- Ignore http tests because they are unstable, and they block the CI. - Bundle arm64 binary into the universal binary for MacOS.

`3.0.8-alpha`

`Changed`

- mirrord-layer: Use tracing::instrument to improve logs.

`Added`

- Outgoing UDP test with node. Closes [#323]

`3.0.4-alpha`

`Fixed`

- Fix crash in VS Code extension happening because the MIRRORD_OVERRIDE_ENV_VARS_INCLUDE and MIRRORD_OVERRIDE_ENV_VARS_EXCLUDE vars being populated with empty values (rather than not being populated at all) .Closes [#413]. - Add exception to gradle when dylib/so file is not found. Closes [#345] - mirrord-layer: Return errors from agent whenconnectfails back to the hook (previously we were handling these as errors in layer, soconnect had slightly wrong behavior).

`3.0.3-alpha`

`Changed`

- Changed agent namespace to default to the pod namespace. Closes [#404].

`3.0.2-alpha`

`Added`

- Code sign Apple binaries. - CD - Update latest tag after release is published.

`Changed`

- In go-e2e test, call os.Exit instead of sending SIGINTto the process. - Install script now downloads latest tag instead of main branch to avoid downtime on installs.

`Fixed`

- Fix Environment parsing error when value contained '=' Closes [#387]. - Fix bug in outgoing traffic with multiple requests in quick succession. Closes [#331].

`3.0.1-alpha`

`Fixed`

- Add missing dependency breaking the VS Code release.

`3.0.0-alpha`

`Added`

- New feature: UDP outgoing, mainly for Go DNS but should work for most use cases also! - E2E: add tests for python's fastapi with uvicorn - Socket ops -connect: ignore localhost and ports 50000 - 60000 (reserved for debugger) - Add "*.plist" toIGNORE_REGEX, refer [#350].

`Changed`

- Change all functionality (incoming traffic mirroring, remote DNS outgoing traffic, environment variables, file reads) to be enabled by default. Note that flags now disable functionality

`Fixed`

- mirrord-layer: User-friendly error for invalid kubernetes api certificate - mirrord-cli: Add random prefix to the generated shared lib to prevent Bus Error/EXC_BAD_ACCESS - Support for Go 1.19>= syscall hooking - Fix Python debugger crash in VS Code Extension. Closes [#350].

`2.13.0`

`Added`

- Release arm64 agent image.

`Fixed`

- Use selected namespace in IntelliJ plugin instead of always using default namespace.

`2.12.1`

`Fixed`

- Fix bug where VS Code extension would crash on startup due to new configuration values not being the correct type. - Unset DYLD_INSERT_LIBRARIES/LD_PRELOAD when creating the agent. Closes [#330]. - Fix NullPointerException in IntelliJ Extension. Closes [#335]. - FIx dylib/so paths for the IntelliJ Extension. Closes [#337].

`2.12.0`

`Added`

- CI - set typescript version at 4.7.4 to fix broken release action

`2.9.0`

`Added`

- Support for Golang fileops - IntelliJ Extension for mirrord

`Changed`

- mirrord-layer: Added common Result type to to reduce boilerplate, removed dependency of anyhowcrate. - mirrord-layer: SplitLayerError into LayerError and HookErrorto distinguish between errors that can be handled by the layer and errors that can be handled by the hook. (no more requiring libc errno for each error!). Closes #247

`Added`

- Add support for overriding a process' environment variables by setting MIRRORD_OVERRIDE_ENV_VARS to true. To filter out undesired variables, use theMIRRORD_OVERRIDE_FILTER_ENV_VARSconfiguration with arguments such asFOO;BAR.

`Changed`

- Remove unwrap from the Future that was waiting for Kube pod to spin up in pod_api.rs. (Fixes #110) - Speed up agent container image building by using a more specific base image. - CI: Remove building agent before building & running tests (duplicate) - CI: Add Docker cache to Docker build-push action to reduce build duration. - CD release: Fix universal binary for macOS - Refactor: Change protocol + mirrord-layer to split messages into modules, so main module only handles general messages, passing down to the appropriate module for handling. - Add a CLI flag to specifyMIRRORD_AGENT_TTL- CI: Collect mirrord-agent logs in case of failure in e2e. - Add "app" = "mirrord" label to the agent pod for log collection at ease. - CI: Add sleep after local app finishes loading for agent to load filter make tests less flaky. - Handle relative paths for open, openat - Fix once cell renamings, PR #98165 - Enable the blocking feature of thereqwest library

`2.2.1`

`Changed`

- Compile universal binaries for MacOS. (Fixes #131) - E2E small improvements, removing sleeps. (Fixes #99)

`2.2.0`

`Added`

- File operations are now available behind the MIRRORD_FILE_OPSenv variable, this means that mirrord now hooks into the following file functions:open, fopen, fdopen, openat, read, fread, fileno, lseek, and writeto provide a mirrored file system. - Support for running x64 (Intel) binary on arm (Silicon) macOS using mirrord. This will download and use the x64 mirrord-layer binary when needed. - Add detours for fcntl/dup system calls, closes #51

`Changed`

- Add graceful exit for library extraction logic in case of error. - Refactor the CI by splitting the building of mirrord-agent in a separate job and caching the agent image for E2E tests. - Update bug report template to apply to the latest version of mirrord. - Change release profile to strip debuginfo and enable LTO. - VS Code extension - update dependencies. - CLI & macOS: Extract to/tmp/ instead of $TMPDIR as the executed process is getting killed for some reason.

`Fixed`

- Fix bug that caused configuration changes in the VS Code extension not to work - Fix typos

`2.1.0`

`Added`

- Prompt user to update if their version is outdated in the VS Code extension or CLI. - Add support for docker runtime, closes #95. - Add a keep-alive to keep the agent-pod from exiting, closes #63

`2.0.4`

Complete refactor and re-write of everything.

- The CLI/VSCode extension now use mirrord-layer which loads into debugged process using LD_PRELOAD/DYLD_INSERT_LIBRARIES`.
It hooks some of the syscalls in order to proxy incoming traffic into the process as if it was running in the remote
pod.
- Mono repo
- Fixed unwraps inside
of agent-creation,
closes #191

---

CHANGELOG Copy Section

Change Log

3.247.0 - 2026-08-12 3.247.0 - 2026-08-12')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

3.246.0 - 2026-08-10 3.246.0 - 2026-08-10')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.245.0 - 2026-08-07 3.245.0 - 2026-08-07')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.244.1 - 2026-08-02 3.244.1 - 2026-08-02')" title="Copy chapter prompt for LLMs"> Copy Chapter

3.244.0 - 2026-08-02 3.244.0 - 2026-08-02')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

3.243.0 - 2026-07-31 3.243.0 - 2026-07-31')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.242.0 - 2026-07-30 3.242.0 - 2026-07-30')" title="Copy chapter prompt for LLMs"> Copy Chapter

Changed Copy Section

Fixed Copy Section

3.241.0 - 2026-07-29 3.241.0 - 2026-07-29')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.240.0 - 2026-07-27 3.240.0 - 2026-07-27')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Fixed Copy Section

3.239.0 - 2026-07-27 3.239.0 - 2026-07-27')" title="Copy chapter prompt for LLMs"> Copy Chapter

Changed Copy Section

Fixed Copy Section

3.238.0 - 2026-07-24 3.238.0 - 2026-07-24')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.237.0 - 2026-07-22 3.237.0 - 2026-07-22')" title="Copy chapter prompt for LLMs"> Copy Chapter

Changed Copy Section

Fixed Copy Section

3.236.1 - 2026-07-21 3.236.1 - 2026-07-21')" title="Copy chapter prompt for LLMs"> Copy Chapter

Fixed Copy Section

3.236.0 - 2026-07-21 3.236.0 - 2026-07-21')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

3.235.0 - 2026-07-20 3.235.0 - 2026-07-20')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Fixed Copy Section

3.234.0 - 2026-07-17 3.234.0 - 2026-07-17')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.233.0 - 2026-07-14 3.233.0 - 2026-07-14')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

3.232.0 - 2026-07-12 3.232.0 - 2026-07-12')" title="Copy chapter prompt for LLMs"> Copy Chapter

Removed Copy Section

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.231.0 - 2026-07-08 3.231.0 - 2026-07-08')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.230.0 - 2026-07-07 3.230.0 - 2026-07-07')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

Fixed Copy Section

3.229.0 - 2026-07-05 3.229.0 - 2026-07-05')" title="Copy chapter prompt for LLMs"> Copy Chapter

Changed Copy Section

3.228.0 - 2026-07-03 3.228.0 - 2026-07-03')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

3.227.0 - 2026-07-02 3.227.0 - 2026-07-02')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Fixed Copy Section

3.226.0 - 2026-07-01 3.226.0 - 2026-07-01')" title="Copy chapter prompt for LLMs"> Copy Chapter

Added Copy Section

Changed Copy Section

3.225.0 - 2026-06-30 3.225.0 - 2026-06-30')" title="Copy chapter prompt for LLMs"> Copy Chapter

CHANGELOG

3.247.0 - 2026-08-12

Added

Changed

3.246.0 - 2026-08-10

Added

Changed

Fixed

3.245.0 - 2026-08-07

Added

Changed

Fixed

3.244.1 - 2026-08-02

3.244.0 - 2026-08-02

Added

3.243.0 - 2026-07-31

Added

Changed

Fixed

3.242.0 - 2026-07-30

Changed

Fixed

3.241.0 - 2026-07-29

Added

Changed

Fixed

3.240.0 - 2026-07-27

Added

Fixed

3.239.0 - 2026-07-27

Changed

Fixed

3.238.0 - 2026-07-24

Added

Changed

Fixed

3.237.0 - 2026-07-22

Changed

Fixed

3.236.1 - 2026-07-21

Fixed

3.236.0 - 2026-07-21

Added

Changed

3.235.0 - 2026-07-20

Added

Fixed

3.234.0 - 2026-07-17

Added

Changed

Fixed

3.233.0 - 2026-07-14

Added

Changed

3.232.0 - 2026-07-12

Removed

Added

Changed

Fixed

3.231.0 - 2026-07-08

Added

Changed

Fixed

3.230.0 - 2026-07-07

Added

Changed

Fixed

3.229.0 - 2026-07-05

Changed

3.228.0 - 2026-07-03

Added

Changed

3.227.0 - 2026-07-02

Added

Fixed

3.226.0 - 2026-07-01

Added

Changed

3.225.0 - 2026-06-30

Added