v1.9.0

1.9.0 (2026-04-27)

Features

• 10-01: implement drop-reason classifier, hints map, version (10bf710)
• 10-02: add SetWarnLogger + dedup WARN for unrecognized drop reasons (b1ab014)
• 11-01: implement classification gate in Aggregator.Run() (3def91e)
• 11-02: implement healthWriter + wire healthCh in pipeline (GREEN) (5a2b838)
• 12-01: implement PrintClusterHealthSummary + healthWriter.Snapshot() (5fd943e)
• 13-01: add ignore-drop-reason filter to aggregator (5c96669)
• 13-02: wire --ignore-drop-reason and --fail-on-infra-drops flags (c29233a)
• 13-03: ExitCodeError + --fail-on-infra-drops exit logic (296a851)
• quick-260427-aml: PreRunE validation + Levenshtein top-5 suggestions + ,ok lookup (I2+I3+I7) (1e5f398)

Bug Fixes

• quick-260427-aml: non-blocking healthCh send + fallback snapshot under --no-evidence (C1+C2) (3ef8573)
• quick-260427-aml: omit generic-URL hints + README timeout --preserve-status (M1+M2) (281f685)
• quick-260427-aml: summary topN tie boundary + adaptive width + Transient fixture (I8+M5+M6) (4107d25)
• quick-260427-aml: SummaryPathState enum + DropClass.String() source of truth (C3+I1+I5 partial) (71c1b50)
• quick-bp7: Levenshtein hardening — runes + threshold + sort.Slice + conditional suggestions (I-2/I-3/I-4/I-5) (960d3cd)
• quick-bp7: Snapshot returns deep-independent copies + Remediation omitempty doc (C-2/I-9) (d76a2e6)

v1.8.0

1.8.0 (2026-04-26)

Features

• pa5: --ignore-protocol drops flows by L4 proto in aggregator + counter (6cea8d5)

v1.7.0

1.7.0 (2026-04-25)

Features

• 08-01: implement HTTP L7 extraction primitives (70a3e97)
• 08-02: wire HTTP L7 codegen into BuildPolicy (HTTP-01, HTTP-04) (d3724cb)
• 08-03: pipeline L7 codegen + VIS-01 warning + evidence L7Ref (92eded4)
• cli: plumb --l7 + --no-l7-preflight (no-op codegen, Phase 8 lights up) (3d7bee9)
• evidence: bump schema v1 to v2 with optional L7Ref (EVID2-01) (2389793)
• explain: --http-method, --http-path, --dns-pattern filters (L7CLI-02) (546af15)
• explain: render L7 attribution in text/JSON/YAML (L7CLI-03) (595b584)
• hubble: aggregator DNS counter + evidence DNS branch (DNS-01, VIS-01 gate) (fef0971)
• k8s: L7 preflight checks for cilium-config + cilium-envoy with warn-and-proceed (VIS-04, VIS-05) (5ab5556)
• policy: extractDNSQuery + kube-dns companion injector (DNS-01, DNS-02) (1013f6f)
• policy: wire DNS L7 codegen into BuildPolicy with companion injector (DNS-01, DNS-02, DNS-03) (a71f908)

Bug Fixes

• policy: preserve Rules in mergePortRules + sort L7 lists in normalizeRule + L7 discriminator on RuleKey (EVID2-02, EVID2-03, EVID2-04) (615e527)

v1.6.0

1.6.0 (2026-04-24)

Features

• cli: cpg replay + cpg explain subcommands with dry-run + evidence (73e0e4b)
• evidence: add JSON schema for per-rule attribution (db6f62f)
• evidence: atomic writer + reader with schema version check (a885ccc)
• evidence: merge semantics with FIFO sample/session caps (259de0f)
• evidence: XDG-aware path resolver with output-dir hash (2c6a58e)
• flowsource: jsonpb file source with DROPPED filter, gzip, error counters (79c1d96)
• hubble,diff: dry-run mode with unified YAML diff (ab4cb0e)
• hubble,evidence: evidence writer goroutine + pipeline fan-out (05c8320)
• policy: add RuleKey and RuleAttribution types (3e00803)
• policy: BuildPolicy returns per-rule attribution (34eb318)

v1.5.1

1.5.1 (2026-04-24)

Miscellaneous Chores

• release 1.5.1 (95572e1)

v1.5.0

1.5.0 (2026-03-11)

Features

• add Flush() with structured INFO summary and counter reset (53953e1)
• add UnhandledTracker with Track() and dedup logic (91ff19d)
• flush UnhandledTracker at each aggregation cycle and shutdown (8a6742e)
• integrate UnhandledTracker into aggregator for nil_endpoint and empty_namespace (e5bc231)
• integrate UnhandledTracker into policy builder for all skip reasons (a4012b9)

Bug Fixes

• add TrafficDirection to dedup key, use strings.Contains in tests (12373e9)

v1.4.0

1.4.0 (2026-03-10)

Features

• respect 50 char max (fdd746e)

v1.3.0

1.3.0 (2026-03-10)

Features

• add kubectl krew plugin support (cilium-policy-gen) (9c03bbf)

Bug Fixes

• remove invalid .Contributors template and fix deprecated archives.format (6cde130)

v1.2.0

1.2.0 (2026-03-09)

Features

• annotate generated policy rules with human-readable comments (4a9b2d9)

Bug Fixes

• align go module path with GitHub repository (github.com/SoulKyu/cpg) (d9116a3)

v1.1.0

1.1.0 (2026-03-09)

Features

• support ICMP flows and reserved entities in policy generation (aa252ef)

Bug Fixes

• deduplicate reserved identity warnings to log once per identity (25d316a)
• improve label selection with component priority and Cilium label filtering (703a751)
• only warn on actionable reserved identities, demote unknown to debug (908d08d)
• split ICMPs and ToPorts into separate rules per Cilium spec (a698e9f)
• support ICMP, entity and CIDR rule merging in policy merge logic (606e5f1)
• warn when dropped flows target reserved identities outside cpg scope (64ef7d4)