What's Changed

• test(etcd): 设计并分阶段落地嵌入式 etcd 健壮性 E2E 方案 by @orbi-build[bot] in #613
• M0：兼容规范和 rqlite 能力验证 by @orbi-build[bot] in #615
• feat(tandem): introduce rqlite-backed datastore replacement by @xiaods in #622
• fix(tandem): run the differential suite in CI and fix five lease divergences by @xiaods in #624
• refactor(tandem): remove the unreachable service handlers and serve a real Maintenance.Status by @xiaods in #625
• feat(tandem): form and operate a three-member rqlite cluster by @xiaods in #626
• feat(tandem): support members joining and leaving a running group by @xiaods in #628
• M1：Zig 兼容层 by @orbi-build[bot] in #629
• docs: state the NetworkPolicy enforcement guarantee (bundled Cilium) and the silent no-op risk without it by @orbi-build[bot] in #630
• feat(tandem): M2 收口 — Snapshot/Restore, fault tests, soak, packaging, RangeStream by @xiaods in #632

New Contributors

• @orbi-build[bot] made their first contribution in #613

Full Changelog: v1.37.0-20260916-rc1+k8e1...v1.37.0-20261015-nightly+k8e2

What's Changed

• test(etcd): 设计并分阶段落地嵌入式 etcd 健壮性 E2E 方案 by @orbi-build[bot] in #613
• M0：兼容规范和 rqlite 能力验证 by @orbi-build[bot] in #615
• feat(tandem): introduce rqlite-backed datastore replacement by @xiaods in #622
• fix(tandem): run the differential suite in CI and fix five lease divergences by @xiaods in #624
• refactor(tandem): remove the unreachable service handlers and serve a real Maintenance.Status by @xiaods in #625
• feat(tandem): form and operate a three-member rqlite cluster by @xiaods in #626
• feat(tandem): support members joining and leaving a running group by @xiaods in #628
• M1：Zig 兼容层 by @orbi-build[bot] in #629
• docs: state the NetworkPolicy enforcement guarantee (bundled Cilium) and the silent no-op risk without it by @orbi-build[bot] in #630
• feat(tandem): M2 收口 — Snapshot/Restore, fault tests, soak, packaging, RangeStream by @xiaods in #632

New Contributors

• @orbi-build[bot] made their first contribution in #613

Full Changelog: v1.37.0-20260916-rc1+k8e1...v1.37.0-20261015-nightly+k8e1

What's Changed

• docs: KIP-28 sandbox gateway trust bootstrap by @xiaods in #609
• fix(sandbox): size the warm pool against real free capacity by @xiaods in #610

Full Changelog: v1.37.0-20260915-rc1+k8e1...v1.37.0-20260916-rc1+k8e1

What's Changed

• fix(sandboxcli): secure and serialize client initialization by @xiaods in #603
• fix(runtime): bump pause to 3.10.2; hold Cilium at 1.20.0 by @xiaods in #605
• fix(agent): drop kubelet feature gates removed in Kubernetes 1.37 by @xiaods in #604
• fix(deploy): align addon images and CNI plugins with k3s 1.37 by @xiaods in #606
• fix(agent): move kubelet settings into a KubeletConfiguration drop-in by @xiaods in #607
• ci(testing): test pull requests from every branch by @xiaods in #608

Full Changelog: v1.37.0-20260914-rc1+k8e1...v1.37.0-20260915-rc1+k8e1

What's Changed

• fix(sandbox): keep background runs past 30s, reap orphans on reset, and diagnose 502s by @xiaods in #600
• fix(ci): unblock SonarCloud + DeepSource on the cert-manager bundle PR by @xiaods in #602
• feat(deploy): bundle cert-manager v1.21.2 by default by @xiaods in #601

Full Changelog: v1.37.0-20260913-rc1+k8e1...v1.37.0-20260914-rc1+k8e1

What's Changed

• fix(sandbox): make the sandbox namespace configurable end to end by @xiaods in #596
• docs(sandbox): align the k8e-sandbox skill with the real capability surface by @xiaods in #597
• docs: refresh AGENTS.md and drop the CLAUDE.md duplicate by @xiaods in #598

Full Changelog: v1.37.0-20260912-rc2+k8e1...v1.37.0-20260913-rc1+k8e1

What's Changed

• feat(deps): upgrade to Kubernetes v1.37.0-k3s1 and etcd v3.7.1-k3s1 by @xiaods in #593
• test(e2e): add the l1/l2 docker profile harness and run it in CI by @xiaods in #594
• fix(control): drop removed legacy cloud controllers from kube-controller-manager by @xiaods in #595

Full Changelog: v1.35.5-20260911-rc1+k8e1...v1.37.0-20260912-rc2+k8e1

What's Changed

• feat(deps): upgrade to Kubernetes v1.37.0-k3s1 and etcd v3.7.1-k3s1 by @xiaods in #593
• test(e2e): add the l1/l2 docker profile harness and run it in CI by @xiaods in #594

Full Changelog: v1.35.5-20260911-rc1+k8e1...v1.37.0-20260912-rc1+k8e1

What's Changed

• fix(sandbox): connect --reset-certs silently no-opped on default installs by @xiaods in #586
• fix(sandbox): manifest audit — gateway route scoping, kata scheduling safety, CRD validation by @xiaods in #587
• feat(sandbox): add API Key MCP HTTP entry and deployment by @xiaods in #589

Full Changelog: v1.35.5-20260824-rc3+k8e1...v1.35.5-20260911-rc1+k8e1

What's Changed

• docs(kip): audit KIP status and ship a default size-1 warm pool by @xiaods in #585

Full Changelog: v1.35.5-20260824-rc2+k8e1...v1.35.5-20260824-rc3+k8e1