Executive Summary

This release period marks a significant expansion of the platform’s capabilities with the introduction of Managed Services for Postgres and S3, alongside the ability to publish landscapes as service providers. Developer productivity is enhanced by a redesigned Execution Manager and Config Editor, supported by new runtimes for virtual Kubernetes workloads and custom image deployments.

Deprecations / API changes

• Managed Services
  • codesphere.managedServices in config.yaml needs to be updated to adapt to the breaking change in the provider schema before installation. You can replace your existing configuration with the one provided in https://docs.codesphere-demo.com/docs/private-cloud/install-guide#managed-service-configuration 
    • The section api.endpoint needs to be nested as backend.api.endpoint
    • For the PostgreSQL provider, the property superuserName needs to be removed from codesphere.managedServices in config.yaml
  • PostgreSQL services now use postgis images instead of postgresql. For the existing services, a manual migration command needs to be run after release: 

kubectl get clusters.postgresql.cnpg.io -n ms-postgres -o json | jq -r '.items[] | select(.spec.imageName | contains("/postgresql:")) | .metadata.name + " " + .spec.imageName' | while read -r name image; do registry=$(echo "$image" | sed 's|/postgresql:.*||'); version=$(echo "$image" | sed 's|.*/postgresql:||'); new_image="${registry}/postgis:${version}-3.6.0-standard-trixie"; echo "Patching $name: $image -> $new_image"; kubectl patch clusters.postgresql.cnpg.io "$name" -n ms-postgres --type=merge -p "{\"spec\": {\"imageName\": \"${new_image}\"}}"; done

Features

Managed Services & Databases

• Postgres Upgrades & (Alpha) S3 like object storage: Introduced an S3-compatible Managed Service for object storage, enabling support for extensions (i.e. PostGIS).
• (Alpha) MsSQL / T-SQL compatible database: PostgreSQL instance with Babelfish extension to support applications requiring Microsoft TDS compatibility
• Distribute Deployments As Managed Services: Users can now publish their own landscapes as managed service providers directly to the catalog via the UI or Public API - built for internal developer portal and two sided marketplace use cases
• Service Catalog Redesign: The creation dialogs and catalog have been redesigned with better validation, tooltip descriptions for schema-based inputs, and clearer status indicators.

Configuration & Secrets

• (Alpha) Secrets Management: Added a dedicated "Secrets" table to the configuration tab and integrated OpenBao (Vault) for enhanced security.
• (Alpha) Service Scoped Env Vars: Environment variables can now be scoped specifically to individual services or the entire workspace for finer control.
• (Alpha) Templater Improvements: Enhanced the templating engine to resolve keys efficiently and added utilities for title casing and secret references.

IDE & Developer Experience

• Execution Manager: Introduced a new, responsive Execution Manager that features real-time replica health status, service-specific status icons, and improved log streaming with font-mono rendering.
• Router & Service Status: Added a router status badge and streams to provide immediate visual feedback on connectivity and service health.
• Accessibility & UI (A11y): Conducted a platform-wide accessibility initiative, added light mode toggle, implemented screen-reader-friendly headings, keyboard navigation for all user journeys, and high-contrast UI improvements.

Runtimes & Compute

• (Alpha) Custom Images: Enabled support for custom docker image services, including automatic agent bundling for all OS and distroless images. 
• (Alpha) Helm Deployments: Introduced a managed virtual Kubernetes service to support cloud-native deployments and virtualized Kubernetes environments.

Infrastructure & Access

• Public API Enhancements: Added endpoints for scaling service replicas and improved consistency in Managed Service type definitions.
• Domain Management: Introduced options to skip domain control verification (for private cloud environments) and improved handling of restricted domains.

Bug Fixes & Stability

• Deployment Reliability: Resolved issues where long-running landscape deployments failed due to expired tokens and fixed "AlreadyInitialized" crashes in the workspace mounter.
• Managed Services: Fixed a constraint issue that prevented the reuse of names from deleted services and corrected the display of CPU resources for sub-vCPU plans.
• IDE Performance: Addressed "Already disposed" errors during workspace teardown and fixed a bug where the file tree would fail to load for projects with large directory structures.
• Networking & Security: Fixed a bug where members could see but not interact with VPN settings and addressed an issue preventing login to restricted dev domains.
• UI Consistency: Resolved various layout breaks occurring at 200% zoom levels and fixed focus-trapping issues in the Team Administration and Sign-In menus.
• Communication Layer: Transitioned multiple internal services to a stream-based communication model to improve responsiveness and reduce API overhead.

Security Updates: Patched various dependencies to the latest version.