Skip to content

docs: cli v2.36.4 and Aug 4-7 Platform releases #357

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dangrondahl merged 2 commits into from
Aug 18, 2026
Merged

docs: cli v2.36.4 and Aug 4-7 Platform releases #357

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7372dc6
chore: add changelog entries for CLI v2.36.4 and Aug 4-7 Platform rel…
mintlify[bot] Aug 10, 2026
4bc8166
docs: address review comments on changelog entries
dangrondahl Aug 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions changelog/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,46 @@ description: "Release notes for Kosli products."
rss: true
---

<Update label="August 7, 2026" description="" tags={["Platform"]}>

## Bug fixes

- **React pages redirect to login on session timeout** — Controls, Repos, Environments, and Audit Log now send you to the login page (with `next` set to where you were) when the session expires, instead of leaving the page with a generic error.
- **Unmatched `/api/*` returns JSON 404** — a request to a non-existent `/api/*` path now returns a JSON `404` instead of redirecting to the HTML login page, so API clients see a proper error.

</Update>

<Update label="August 5, 2026" description="" tags={["Platform"]}>

## Bug fixes

- **Login email field focused on load** — the email input on the login and sign-in pages now receives focus automatically, so you can start typing straight away.
- **No more double-login inside off-canvas panels** — when a session expired while an off-canvas panel was open, the login page could get swapped into the panel instead of taking over the tab. Auth redirects from htmx requests now navigate the whole tab.

</Update>

<Update label="August 4, 2026" description="" tags={["Platform"]}>

## Updates

- **Readable summary for override attestations** — an override attestation now opens on a summary showing the reason, the original attestation's type and status, and a link to the attestation it overrides. The raw JSON payload is still available in the raw view.
Comment thread
dangrondahl marked this conversation as resolved.

## Bug fixes

- **Trail-by-artifact lookups no longer fail with tag filters** — `GET /api/v2/trails/{org}` filtered by fingerprint and `flow_tag` could return a 500 on large orgs because the database ran out of memory ordering the query. The fingerprint is now matched before flow filters, so these lookups return normally.

</Update>

<Update label="August 3, 2026" description="v2.36.4" tags={["CLI"]}>
Comment thread
dangrondahl marked this conversation as resolved.

## Bug fixes

- **`kosli attest` no longer fails on container-produced attachments** — passing two or more `--attachments` paths could abort with `chown ...: operation not permitted` when an attachment (for example lint, test, or coverage output) had been written by a Docker container running as a different user. The CLI no longer tries to preserve file ownership when staging attachments for upload. A genuine copy error now also names the evidence path you passed rather than an internal temp directory. See the [`kosli attest artifact` reference](/client_reference/kosli_attest_artifact) for usage.

[View on GitHub](https://github.com/kosli-dev/cli/releases/tag/v2.36.4)

</Update>

<Update label="July 31, 2026" description="v2.36.3" tags={["CLI"]}>

## Updates
Expand Down