v0.25.4
Released: 2026-04-26 · Channel: stable · Breaking: no
Summary
Two more admin Updates panel improvements driven by the operator-as-customer apply tests on v0.25.3. Pure frontend changes.
Improved
Image digest visible in both Running and Latest cards
The Updates panel now surfaces the cosign-pinned image digest in
both the “Running now” and “Latest available”
cards. The short prefix is shown by default to keep the card compact;
the full digest is in a collapsed <details> below
the apply button for easy copying. Useful for verifying that two
instances on the same version are actually running the same image
— matters when reproducing bugs across customers, or when
auditing a build chain.
Caveat: the Running-now card only shows the digest when the running version matches the latest channel manifest. If the running version is older than the latest, we don’t have the digest of the older image cached anywhere on the server side, so the field shows “check for updates to verify.” A future ticket adds direct introspection through the chatalot-updater sidecar.
Prominent breaking_changes and security_advisory banners
The manifest’s breaking_changes and security_advisory flags
have always rendered in the admin UI — but as thin inline notes
below the version, easy to scroll past. The operator-as-customer test
on v0.25.0 (which had breaking_changes: true for the X3DH
AD-binding wire-format change) confirmed the placement was too quiet:
the banner was technically visible, but didn’t catch attention
the way it needed to.
The flags now render as full-width banners with icons, hoisted above the version display. Operators see them before they reach the Apply button.
Upgrade path
Click Apply in the admin Updates tab. Pure frontend change.
Release artifacts
Container image pushed to
registry.seglamater.app/seglamater/chatalot, cosign-signed
against the published public key.