diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 949ce4c..0451499 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.2"
+  ".": "0.2.3"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 18b129f..508f5d1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,330 @@
 
 All notable changes to CSFX-Core will be documented in this file.
 
+## [0.2.3](https://github.com/CSFX-cloud/CSFX-Core/compare/v0.2.2...v0.2.3) (2026-07-10)
+
+
+### Features
+
+* add animated custom icons for all sidebar navigation items ([8a331f4](https://github.com/CSFX-cloud/CSFX-Core/commit/8a331f432e62af605d65d0b899213c1e0282dba9))
+* add auto-generated self-signed TLS to api-gateway ([cdebae4](https://github.com/CSFX-cloud/CSFX-Core/commit/cdebae4220d4d0342ffa20e867d7f2efc9091cd8))
+* add binary self-update for csf-agent and csf-updater via github releases ([847dfe5](https://github.com/CSFX-cloud/CSFX-Core/commit/847dfe5b3b13a7764aae36715b751afb829e7142))
+* add centralized log viewer with per-service tracing capture and admin retention settings ([509f7a8](https://github.com/CSFX-cloud/CSFX-Core/commit/509f7a8e966df78f54260b7b79062b75a392cce2))
+* add container status detail, log streaming, and exec shell for workloads ([3de5fab](https://github.com/CSFX-cloud/CSFX-Core/commit/3de5fabff2873017c854f11abe8dfa73a4fa9e6e))
+* add docker compose stack deployment with service discovery and smart workload icons ([4fef60f](https://github.com/CSFX-cloud/CSFX-Core/commit/4fef60f9a373d10ad92683dc64779ef653470f22))
+* add firecracker microvm runtime alongside docker via runtime trait ([91cf259](https://github.com/CSFX-cloud/CSFX-Core/commit/91cf259db5cec28ae9f774d047326e20f5d05143))
+* add patroni user, config template and entrypoint script ([ec78a2e](https://github.com/CSFX-cloud/CSFX-Core/commit/ec78a2e92a00c34ecfb990aaed17c47a0e11e951))
+* add resource picker with docker compose stacks and dynamic service icons ([caf3acb](https://github.com/CSFX-cloud/CSFX-Core/commit/caf3acb92b7f6e48fe6fa6f0498db6f6f0dfd39b))
+* add workload self-healing with real capacity scheduling and working failover ([fbb344e](https://github.com/CSFX-cloud/CSFX-Core/commit/fbb344e72308775091fe021c3d73874855411027))
+* addded ground setup for scheduler ([2cca6f1](https://github.com/CSFX-cloud/CSFX-Core/commit/2cca6f138a90471c505c1437696002f66bcb5679))
+* added admin page and update page for cluster ([ca13d40](https://github.com/CSFX-cloud/CSFX-Core/commit/ca13d40957e93aebc45dd9f29a81f38a361b9231))
+* added agend volume mount ([8549880](https://github.com/CSFX-cloud/CSFX-Core/commit/85498809cecb27e3a72946c1d841101dffd9f07c))
+* added all frontend auth pages ([3ace818](https://github.com/CSFX-cloud/CSFX-Core/commit/3ace8180c249a4f77fbf979e91e61accf26208ab))
+* added container placement in agent and scheduler ([f84c304](https://github.com/CSFX-cloud/CSFX-Core/commit/f84c3049580e96f7b2f2eabc98e5aaeb2d424d6b))
+* added endpoints in api gateway ([c9a3563](https://github.com/CSFX-cloud/CSFX-Core/commit/c9a35630d38decf7a007b8c7747da4f17a83597c))
+* added frontend for one mono repo ([924865b](https://github.com/CSFX-cloud/CSFX-Core/commit/924865be5002aa93b276c9aa4f8945e952b6cb7d))
+* added gh token for image pulling without rate limiting ([b62b2d1](https://github.com/CSFX-cloud/CSFX-Core/commit/b62b2d188762d01e489ad1c8a160db007c7797c6))
+* added graph with histroy ([4e73dc5](https://github.com/CSFX-cloud/CSFX-Core/commit/4e73dc5aa8cf0dce4f5b952f190296cdc6a32d9d))
+* added ha with patroni on postgres ([e6f6037](https://github.com/CSFX-cloud/CSFX-Core/commit/e6f603718c26cf52d283391bfd3e510fbd2c9763))
+* added heartbeat logic to agent ([a54df53](https://github.com/CSFX-cloud/CSFX-Core/commit/a54df53dfd1fe58a691009477da5729dc75dd6f8))
+* added heartbeat logic to agent ([04d3716](https://github.com/CSFX-cloud/CSFX-Core/commit/04d3716739e49107b53b4e8ee508dd402aa420d9))
+* added logo in header for svelte ([48190b7](https://github.com/CSFX-cloud/CSFX-Core/commit/48190b7863416a061e5ef8ca9e6ad83e46d78e22))
+* added migrations for workloads ([964c20a](https://github.com/CSFX-cloud/CSFX-Core/commit/964c20a0c0d3d98fcf2e044ff38cc8605ddbddd7))
+* added mtls encryption ([9692379](https://github.com/CSFX-cloud/CSFX-Core/commit/969237918f5ce7e7b861a8cca9df4dc48c14cd3f))
+* added new alpha github run ([40b7af5](https://github.com/CSFX-cloud/CSFX-Core/commit/40b7af555a8e0e84a76929fe9b0425b45974bdaf))
+* added new alpha github run ([1ec1a76](https://github.com/CSFX-cloud/CSFX-Core/commit/1ec1a765b8c92a8c67e07c6749087b5728a34fe1))
+* added nix config for nix os master node ([8c3a866](https://github.com/CSFX-cloud/CSFX-Core/commit/8c3a8666973ac1c1cd06a0b1932af25f8842ee92))
+* added OpenTelemetry Tracing ([2d11250](https://github.com/CSFX-cloud/CSFX-Core/commit/2d1125022cacd19c63e92d6e02cd0ec12a4896a5))
+* added own patroni image ([f4b1938](https://github.com/CSFX-cloud/CSFX-Core/commit/f4b1938627f24038ce548ecb6676b9fc5f5844d0))
+* added pki for agent ([73fd3ad](https://github.com/CSFX-cloud/CSFX-Core/commit/73fd3ad794e1392c4eee1f9d944d82e9d28f9fb4))
+* added Prometheus Metrics and  Rate Limiting ([fbf9a48](https://github.com/CSFX-cloud/CSFX-Core/commit/fbf9a48b20f6f4a9113c3a3f80051827333e3f41))
+* added rbac for all things ([76faa2a](https://github.com/CSFX-cloud/CSFX-Core/commit/76faa2a0127bd7735a8c4a96639377069fe7b5ad))
+* added rbac for all things ([3b1be5b](https://github.com/CSFX-cloud/CSFX-Core/commit/3b1be5b3e2b3af6ea290d0f531df8856b87cf708))
+* added renovate ([5d0b547](https://github.com/CSFX-cloud/CSFX-Core/commit/5d0b5478160f1749ee57eca875f1c67879daa917))
+* added renovate via github actions ([18de04d](https://github.com/CSFX-cloud/CSFX-Core/commit/18de04de9b54478b7a459f65b286fba0175c0173))
+* added ressource groups ([e818f2f](https://github.com/CSFX-cloud/CSFX-Core/commit/e818f2f9f29fe2b58b2561c7855e8e046668a721))
+* added ressource modell and workload specs ([50aac08](https://github.com/CSFX-cloud/CSFX-Core/commit/50aac08caafa6ce4fc0e6deb1eba06aedea4ebbf))
+* added sdn controller for network ([59ace74](https://github.com/CSFX-cloud/CSFX-Core/commit/59ace74411e55b3ac65d922469fe3bd8ae893a64))
+* added sdn controller for network ([49b5ed9](https://github.com/CSFX-cloud/CSFX-Core/commit/49b5ed90d558a112f6d1e7e6c8e247a2a81372f2))
+* added update mech ([0a33b2b](https://github.com/CSFX-cloud/CSFX-Core/commit/0a33b2b513324ac0812b34d920b24274f638a325))
+* added update stop and resume ([fd01b36](https://github.com/CSFX-cloud/CSFX-Core/commit/fd01b361aa31869dd27daadb7694e54f6265c844))
+* added user name in sidebar and added nodes page demo for testing ([60f7e41](https://github.com/CSFX-cloud/CSFX-Core/commit/60f7e415c0273d199dfc1e62303969d82160296b))
+* added volume manager mount ([f0e3313](https://github.com/CSFX-cloud/CSFX-Core/commit/f0e3313b68e0c026ca6fd6ebeee41616cd23dce3))
+* **agent:** log update signal when desired flake rev changes ([0cfbcb6](https://github.com/CSFX-cloud/CSFX-Core/commit/0cfbcb6a6408909f413f5594652ddcc8f745f5fa))
+* agents with mtls ([bceb6e0](https://github.com/CSFX-cloud/CSFX-Core/commit/bceb6e0faa39f95eb3a02fc556ab60b6b835f3ca))
+* animated login button and fail modal ([fcf45a2](https://github.com/CSFX-cloud/CSFX-Core/commit/fcf45a2725250c86663cea4c00a2e8fcee5e4907))
+* **api-gateway:** restrict system update endpoint to admin-only via RBAC ([988342b](https://github.com/CSFX-cloud/CSFX-Core/commit/988342b237539371555fcb2e97048bb8c28f39f0))
+* bring up per-resource-group wireguard mesh with persistent agent identity ([72cb91f](https://github.com/CSFX-cloud/CSFX-Core/commit/72cb91f5fb10fc201a774a8dea454dcc79d799d9))
+* build csf-updater locally via nix and publish alpha binaries to github releases ([eb3df31](https://github.com/CSFX-cloud/CSFX-Core/commit/eb3df3135649fc4796ce05861a60c393c7ad942c))
+* build csf-updater locally via nix and publish alpha binaries to… ([3d759e1](https://github.com/CSFX-cloud/CSFX-Core/commit/3d759e1091b9d3dedbc2bf6d98dac0b33d1ad4ae))
+* cluster-wide bootstrap tokens ([b479ec6](https://github.com/CSFX-cloud/CSFX-Core/commit/b479ec65937ad0f4569346e2b4f921b0fd5d0a5f))
+* **cp:** wire csfx-updater as systemd service and rename units ([5bd062e](https://github.com/CSFX-cloud/CSFX-Core/commit/5bd062e4c5941b2c49ce23c76b4f6a92895eb466))
+* **csf-updater:** implement secure rust-based updater daemon with nixos integration ([eb065a0](https://github.com/CSFX-cloud/CSFX-Core/commit/eb065a03514fef1e4997da2e2169b0b783cb9de8))
+* **csf-updater:** verify image digests against GHCR before applying update ([f791f42](https://github.com/CSFX-cloud/CSFX-Core/commit/f791f42a5fbbe9cd1330424d35539608cc384471))
+* **csfx-updater:** add observability logs across update pipeline ([fcd2495](https://github.com/CSFX-cloud/CSFX-Core/commit/fcd249595d31a18d03d89fc476ec4f3625770703))
+* docker compose prod ([d5ebd58](https://github.com/CSFX-cloud/CSFX-Core/commit/d5ebd58bebb3dcf32caa80570de00685bb44f982))
+* enforce resource group network isolation with per-rg bridges and nftables ([7dd3533](https://github.com/CSFX-cloud/CSFX-Core/commit/7dd35330c3cfd9f44a225bac0c73622d4cda4c6c))
+* entry point for schedueler in etcd cluster ([080225c](https://github.com/CSFX-cloud/CSFX-Core/commit/080225c57fb984d4c713a4593bd1b83a0c571b7d))
+* etcd ([5c0720a](https://github.com/CSFX-cloud/CSFX-Core/commit/5c0720a531a0a729e7a7805eb91433e4bbd4e7d9))
+* **etcd:** enable authentication and restrict access to csf service user ([ba2a887](https://github.com/CSFX-cloud/CSFX-Core/commit/ba2a88718a38deda7a82e515052456f741256052))
+* expose agent and updater binary versions in update-status ([08030a9](https://github.com/CSFX-cloud/CSFX-Core/commit/08030a9bf54add66b3d8ad237a0b440cdd55ddc9))
+* ground setup ceph storage ([1ad3e67](https://github.com/CSFX-cloud/CSFX-Core/commit/1ad3e67a1d032af910b64b9a98ae649aff3b6620))
+* ground setup failover controler ([806149f](https://github.com/CSFX-cloud/CSFX-Core/commit/806149feaee42ac62c174694f4bddbbb54f55bdf))
+* ground setup failover controler ([47ea8b6](https://github.com/CSFX-cloud/CSFX-Core/commit/47ea8b647bdc621503a5a06e2afd80ed351c7a27))
+* ground setup registry for agents ([9ed2f4a](https://github.com/CSFX-cloud/CSFX-Core/commit/9ed2f4a04d941fea35a3f1067c649db9bb512779))
+* impl communcitaion and hearbeat ([d51fb91](https://github.com/CSFX-cloud/CSFX-Core/commit/d51fb91651189334c38132427d4c11da6af7accf))
+* implement gitops poller, git mirror, and nix build pipeline in csf-updater ([d08736e](https://github.com/CSFX-cloud/CSFX-Core/commit/d08736eac471364bdbd3893d6004fa9d96c1bf8f))
+* implement watchdog heartbeat counter in registry and csf-updater ([3024db4](https://github.com/CSFX-cloud/CSFX-Core/commit/3024db49e879db9b03123693ef321afde3d576a8))
+* inject CSF_BUILD_VERSION into binaries at compile time via build.rs ([8d18efb](https://github.com/CSFX-cloud/CSFX-Core/commit/8d18efb8a2fdc7a73aa5f6c2aa7357800163bfc5))
+* login flow ([9f18045](https://github.com/CSFX-cloud/CSFX-Core/commit/9f18045554f0cba824de209bd588eec83197937e))
+* new connection to db and refactor ([063bc84](https://github.com/CSFX-cloud/CSFX-Core/commit/063bc842d07926aa7bba3441a781bd9df5100f0a))
+* new nix config ([26ea9cc](https://github.com/CSFX-cloud/CSFX-Core/commit/26ea9cc9449148345546c23e6d56487ef442b96b))
+* nix deployment for auto docker deploy ([fb3c2da](https://github.com/CSFX-cloud/CSFX-Core/commit/fb3c2da09b697c7631f4665a653780d34f95e3d2))
+* nix os config deploy on test server ([b8b5aff](https://github.com/CSFX-cloud/CSFX-Core/commit/b8b5affb0a0170bfd833936c3dd0b1ea6d14259d))
+* pre reg agent for zero trust ([85bd67a](https://github.com/CSFX-cloud/CSFX-Core/commit/85bd67af18bc070a2db463a1e44651c2562885b4))
+* propagate agent version on every heartbeat and add live node metrics tunnel ([72c46e3](https://github.com/CSFX-cloud/CSFX-Core/commit/72c46e3ad47056116611a9c7140442e17223f86b))
+* propagate desired_flake_rev via heartbeat response to agent update trigger ([97914a6](https://github.com/CSFX-cloud/CSFX-Core/commit/97914a6e052340d11571efce801b00d82b45583b))
+* propagate post_update_heartbeats counter to agent for watchdog health check ([88c0051](https://github.com/CSFX-cloud/CSFX-Core/commit/88c005146f9afc59051f707160ca3d2eb1aff8bc))
+* renam csf to csfx ([6888431](https://github.com/CSFX-cloud/CSFX-Core/commit/6888431b8a52a4827bc9493f7897534eb6b201f1))
+* replace flake-rev API with version-based update scheduling ([64dfe62](https://github.com/CSFX-cloud/CSFX-Core/commit/64dfe62b5724c642b6b6d26d30fc6cb2bc6c48dd))
+* **resource-groups:** add container deploy, volume management, and detail view ([7b32db8](https://github.com/CSFX-cloud/CSFX-Core/commit/7b32db8ee1dacf56062f96dee4f1649048f13464))
+* serve frontend statically from api-gateway on port 8000 ([69f0ad8](https://github.com/CSFX-cloud/CSFX-Core/commit/69f0ad848167879a504f87083eadf7455596df4f))
+* setup ceph storage ([a8c2dc5](https://github.com/CSFX-cloud/CSFX-Core/commit/a8c2dc541ca7969112e797f950e5f6819f6de776))
+* setup for etcd cluster ([af2db8d](https://github.com/CSFX-cloud/CSFX-Core/commit/af2db8d3777fa0090a646b3a122984f38df248bd))
+* setup ground struc agent ([eeb12eb](https://github.com/CSFX-cloud/CSFX-Core/commit/eeb12eb7fbb7b00874158ec08386650502133864))
+* **ssh:** add ephemeral key-based SSH access to cluster nodes ([e4940e7](https://github.com/CSFX-cloud/CSFX-Core/commit/e4940e727322312bbf24dfc911f22acb24cb9612))
+* **ui,agent,registry:** add WireGuard P2S VPN, modal forms, and NodePort expose model ([d8c098b](https://github.com/CSFX-cloud/CSFX-Core/commit/d8c098b71064d1e3c1ec32e66d21821ab90e63a8))
+* use mutable binary paths for csf-agent and csf-updater to enable self-update ([64e4326](https://github.com/CSFX-cloud/CSFX-Core/commit/64e4326d174a440a911e8b46f024866dc607e2e8))
+
+
+### Bug Fixes
+
+* add patroni bootstrap script to create csf app user and database ([0e07850](https://github.com/CSFX-cloud/CSFX-Core/commit/0e07850de14f5ac35098d4acaa9e2248a5fae7b5))
+* added docker compose and fix build in docker ([e24e7b9](https://github.com/CSFX-cloud/CSFX-Core/commit/e24e7b9e441289a6edee0c0e244ae5489fe1d413))
+* added log for testing update flow ([8aaeef0](https://github.com/CSFX-cloud/CSFX-Core/commit/8aaeef0ff44c77e752e04c9dcc5fc0c5a57264bb))
+* added log for testing updater ([2728d06](https://github.com/CSFX-cloud/CSFX-Core/commit/2728d06c157b95e2d9124fc2e449c9411075c978))
+* added logging for testing ([920e730](https://github.com/CSFX-cloud/CSFX-Core/commit/920e7300a4eacf5d9ce3291bfc2ed38b35ffba7e))
+* added test file ([b949322](https://github.com/CSFX-cloud/CSFX-Core/commit/b9493227571d73c6166c4d43bf105e94471a8e20))
+* added test file ([7b37dc1](https://github.com/CSFX-cloud/CSFX-Core/commit/7b37dc1ea34a2a4aefe54c6d348124ac8d99a640))
+* added test file for updater ([8414f8b](https://github.com/CSFX-cloud/CSFX-Core/commit/8414f8b74c9d4b99bb5da9c9468e972a4ad38a3a))
+* added test file for updater ([d3cc2f3](https://github.com/CSFX-cloud/CSFX-Core/commit/d3cc2f341347274e7f7d1ed2de48a7340a049d4a))
+* agent ([b09048e](https://github.com/CSFX-cloud/CSFX-Core/commit/b09048e54df3c4e815f1c095e2af43cd71fc5eb2))
+* agent bootstrap error ([013b2c8](https://github.com/CSFX-cloud/CSFX-Core/commit/013b2c899925240cbc667b88052d27bb2c536e7c))
+* agent error ([a6b0bbe](https://github.com/CSFX-cloud/CSFX-Core/commit/a6b0bbe86e6de90e9bcab2a1df9a4bed74b33e55))
+* **agent:** detect OS from /etc/os-release instead of sysinfo ([1d86d69](https://github.com/CSFX-cloud/CSFX-Core/commit/1d86d69e1afe067bb5fdb6507cc0e202ecc68681))
+* **agent:** rename state dir from csfx-daemon to csfx-agent ([0ee1896](https://github.com/CSFX-cloud/CSFX-Core/commit/0ee18965f068a7e526fb64b87bdf3ffb75dcde4a))
+* **agent:** start docker on demand via systemd instead of at boot ([86a2d7c](https://github.com/CSFX-cloud/CSFX-Core/commit/86a2d7c4029d721ae51591c79011fe41d9e7813f))
+* api gateway and regisrty ([68a9671](https://github.com/CSFX-cloud/CSFX-Core/commit/68a96718290e13b308a2f4e9512e10da1d8a7cc7))
+* **api-gateway:** exempt update status routes from rate limiting ([fd08546](https://github.com/CSFX-cloud/CSFX-Core/commit/fd08546c131ee1d91ca53aa3ff20117fe678d58c))
+* **api-gateway:** make TLS config generation async to avoid block_on panic ([ba21420](https://github.com/CSFX-cloud/CSFX-Core/commit/ba2142097d629b40b52eef149c11d7dc8c179fd9))
+* arm runner and manifest error ([394f159](https://github.com/CSFX-cloud/CSFX-Core/commit/394f1598824f9d8cda0fe243b090b5fbbd716425))
+* arm runner and manifest error ([a1ad641](https://github.com/CSFX-cloud/CSFX-Core/commit/a1ad641c705482d52e592b1ff729dfcdbab958f5))
+* attach firecracker tap devices to rg bridge and clean up stale rg networks ([8591a8e](https://github.com/CSFX-cloud/CSFX-Core/commit/8591a8ee676e8c190204cb74d25430cd20abcb5a))
+* auth probelm ([80ef776](https://github.com/CSFX-cloud/CSFX-Core/commit/80ef776441ffd6b20ae1d451500e2b38e1b4d770))
+* backend compile error ([5db3510](https://github.com/CSFX-cloud/CSFX-Core/commit/5db351022e79e9629677ca05fec48a4403a86040))
+* backend compile error ([cb476e5](https://github.com/CSFX-cloud/CSFX-Core/commit/cb476e55cb7c3b04c2981fae716a45c2bd208995))
+* backend error ([f4c6023](https://github.com/CSFX-cloud/CSFX-Core/commit/f4c6023deb08ea68510b087426f7c3fb6e31303e))
+* backend error ([cd69b8c](https://github.com/CSFX-cloud/CSFX-Core/commit/cd69b8c9d89faa11a7c12c6eb42262428f7e6777))
+* backup dir error ([21811e7](https://github.com/CSFX-cloud/CSFX-Core/commit/21811e73fd73a349eec130b9cc37eb3f17869b95))
+* backup dir error ([e36b67e](https://github.com/CSFX-cloud/CSFX-Core/commit/e36b67e0942df2cb2526becae260dabd77bd3148))
+* build error ([9a2e6d2](https://github.com/CSFX-cloud/CSFX-Core/commit/9a2e6d2b2cd2d86343a0bcb161392a3d55d01b5f))
+* build error ([78364e8](https://github.com/CSFX-cloud/CSFX-Core/commit/78364e809165d8f3b598279d08180ec5b95480af))
+* build error  with updater hash ([839fd28](https://github.com/CSFX-cloud/CSFX-Core/commit/839fd2836017f3829bc997cea6e8adfe71934719))
+* build errors and added frontend ([b1cb885](https://github.com/CSFX-cloud/CSFX-Core/commit/b1cb885b283d785190683537bc40100ade67d0b9))
+* bump nixpkgs to 25.05 for Cargo 1.85/edition2024 support ([ddb75f3](https://github.com/CSFX-cloud/CSFX-Core/commit/ddb75f3419e9dcc2fa3a724c96afb93f708893c7))
+* cargo fmt ([93ce25f](https://github.com/CSFX-cloud/CSFX-Core/commit/93ce25f4ee98af4bed40f9f828b9c75119a8450d))
+* cert issue ([f544e36](https://github.com/CSFX-cloud/CSFX-Core/commit/f544e36724fcdef4408c7c93ddd40c98bf3ffcc6))
+* ci ([ceb3486](https://github.com/CSFX-cloud/CSFX-Core/commit/ceb3486dccc2bb34f8e83cf85d9f298845cd1c7e))
+* ci ([2d5b689](https://github.com/CSFX-cloud/CSFX-Core/commit/2d5b689c3008f6dc210a43a7984278a4f54205ae))
+* ci pipeline new setup with nix ([eaffdf5](https://github.com/CSFX-cloud/CSFX-Core/commit/eaffdf54134c3415b0e55e9e3e5bbcb7f2689adb))
+* compile errors ([6cfe5ae](https://github.com/CSFX-cloud/CSFX-Core/commit/6cfe5aedb51effa4152975ede9438391948a5241))
+* correct pre-release version comparison and let forced updates bypass pause ([46266c7](https://github.com/CSFX-cloud/CSFX-Core/commit/46266c7801cebac8a26931f3834276c3be402049))
+* create csfx role and database during patroni bootstrap ([7d0486c](https://github.com/CSFX-cloud/CSFX-Core/commit/7d0486c8e6ac3ac890674804932aca399517de5e))
+* **csf-updater:** run as dedicated system user with docker group instead of root ([22cf1e5](https://github.com/CSFX-cloud/CSFX-Core/commit/22cf1e5adabe3f5d23ee64ad7c383ce9cd5d55bb))
+* **csf-updater:** validate version string from etcd before executing update ([13e9fdf](https://github.com/CSFX-cloud/CSFX-Core/commit/13e9fdf8630c7f5e3468d16fab26ff77809c60cd))
+* **csfx-updater:** add --no-out-link to nixos-rebuild build to avoid permission error ([0b8e472](https://github.com/CSFX-cloud/CSFX-Core/commit/0b8e472c52e23c34b3ce8fda40c3a235f06a5ee0))
+* dep update axum 0.7 -> 0.8 ([9be3ff4](https://github.com/CSFX-cloud/CSFX-Core/commit/9be3ff45bc0aa781dd8393325465d89168526a63))
+* deps reqwest 0.11 -> 0.13 ([864c2db](https://github.com/CSFX-cloud/CSFX-Core/commit/864c2db5c9471e459c95a35eb1883175996516ca))
+* **deps:** update dependency @icons-pack/svelte-simple-icons to v7 ([01dd084](https://github.com/CSFX-cloud/CSFX-Core/commit/01dd084ca79416b911ca6d1ab21b03dbb9e55191))
+* **deps:** update dependency @icons-pack/svelte-simple-icons to v7 ([e5cef90](https://github.com/CSFX-cloud/CSFX-Core/commit/e5cef90fec7f18b90831d4b63ec998a38a6a8fa4))
+* **deps:** update rust dependencies ([2fe8332](https://github.com/CSFX-cloud/CSFX-Core/commit/2fe83321c0242fad8aa821ed613194d192e1f6df))
+* **deps:** update rust dependencies ([b2e32f0](https://github.com/CSFX-cloud/CSFX-Core/commit/b2e32f0139aa08337237fb28198288597c24c91e))
+* dev bootstrap ([1547ee8](https://github.com/CSFX-cloud/CSFX-Core/commit/1547ee838877589f000946f0278a70baff698f26))
+* disable rustls default aws-lc-rs feature to fix musl aarch64 link ([8c61471](https://github.com/CSFX-cloud/CSFX-Core/commit/8c61471f44871a7fd3636d1361cdd068ad3169b4))
+* docker access in updater error ([ce45cba](https://github.com/CSFX-cloud/CSFX-Core/commit/ce45cbab1f20aa43a0b2d64c45b72fa3b2979183))
+* docker compose ([8fd8be6](https://github.com/CSFX-cloud/CSFX-Core/commit/8fd8be64d461b2679f4aa23aec807e92a9b4b820))
+* docker container on nix ([a285a18](https://github.com/CSFX-cloud/CSFX-Core/commit/a285a1885b0bc0e98b6afddc2acb2e808febe52f))
+* docker container on nix ([2aca464](https://github.com/CSFX-cloud/CSFX-Core/commit/2aca464388c5efb0acf330ac9de332b0da925b89))
+* docker long build ([2372614](https://github.com/CSFX-cloud/CSFX-Core/commit/2372614b0f8a6a10ab2997d657cad211e8e53b98))
+* docker prod build ([581a20d](https://github.com/CSFX-cloud/CSFX-Core/commit/581a20d4b0d8c938cbd541c099d509780d781fdc))
+* docker start ([a247b64](https://github.com/CSFX-cloud/CSFX-Core/commit/a247b6453b18ac9c26138e37285047885e7ad3e4))
+* docker updater error ([d8f7457](https://github.com/CSFX-cloud/CSFX-Core/commit/d8f7457e5412d5397f1b0cee250503c74fdb9f65))
+* double vv in version ([506c289](https://github.com/CSFX-cloud/CSFX-Core/commit/506c2890855d2a2b000e8f87eef3bf56d7fc5ef3))
+* double vv in version ([48065e5](https://github.com/CSFX-cloud/CSFX-Core/commit/48065e564a46bfa497fa61be1145437ec06d5415))
+* eliminate aws-lc-sys from musl build by switching to ring crypto provider across all services ([4045fbb](https://github.com/CSFX-cloud/CSFX-Core/commit/4045fbbfe3435c33c67fab4e62730f9c1258e665))
+* error backup location ([6ae9411](https://github.com/CSFX-cloud/CSFX-Core/commit/6ae9411407ec437eb833fd1b0c92840abc12dbea))
+* error backup location ([b3d0246](https://github.com/CSFX-cloud/CSFX-Core/commit/b3d024694be9c5aad6fb6e55af460c3757eb9f89))
+* erros ([15623c3](https://github.com/CSFX-cloud/CSFX-Core/commit/15623c34830ff30d88b0d8cf844dec77dcd77245))
+* etcd connection error ([1a44dc1](https://github.com/CSFX-cloud/CSFX-Core/commit/1a44dc18fdecb233a6c2aa06819508f2eef3564d))
+* **etcd:** block etcd ports from external access via firewall rules in install script ([34e1cd2](https://github.com/CSFX-cloud/CSFX-Core/commit/34e1cd26ccd9fc8a40dd4f681ed5e9cff1e281cb))
+* exempt agent heartbeat/workloads/volumes routes from rate limiting ([1b4d3c3](https://github.com/CSFX-cloud/CSFX-Core/commit/1b4d3c399a69f69953dacb7a0ab3dc7927d81901))
+* filter noisy access, sql, heartbeat and performance events from log storage ([a6f7510](https://github.com/CSFX-cloud/CSFX-Core/commit/a6f751056c11bfbcd2dc548ebab909f49796e9b7))
+* for local dev env ([5decf9b](https://github.com/CSFX-cloud/CSFX-Core/commit/5decf9bbd747d66c597073992130b78e9d6b2a5c))
+* format ([73ab945](https://github.com/CSFX-cloud/CSFX-Core/commit/73ab9453e3fdd4f2cbecaa81ed27408b2dc0eab7))
+* **gateway:** exempt registry routes from rate limiting ([c9f30e9](https://github.com/CSFX-cloud/CSFX-Core/commit/c9f30e96cc9f1a59bcbea6efc885597d1139cdbb))
+* github pipeline ([791c518](https://github.com/CSFX-cloud/CSFX-Core/commit/791c518c193985d6233768285eb34356a633ddf9))
+* github pipleine time ([f88850e](https://github.com/CSFX-cloud/CSFX-Core/commit/f88850e3e29fcc63556f8fa12c192ba6f8a54207))
+* github pipleine time ([6e8e2cd](https://github.com/CSFX-cloud/CSFX-Core/commit/6e8e2cd25bd17c41db5aa6ad64d3d7519c17c809))
+* gitignore ([d6c3dca](https://github.com/CSFX-cloud/CSFX-Core/commit/d6c3dcafc7f3aa28cf9c49ac9963d67797c9620f))
+* ha for postgres with patroni ([078de22](https://github.com/CSFX-cloud/CSFX-Core/commit/078de2230c5fc93871bf0c1bd64e5933ce5ea7a4))
+* handle 429 rate limit in agent registration with retry backoff ([31d3c29](https://github.com/CSFX-cloud/CSFX-Core/commit/31d3c29e80c596dc2395bdb9b178f1b3c8d527c6))
+* image version ([cd9b47c](https://github.com/CSFX-cloud/CSFX-Core/commit/cd9b47ce0cbfb59292ba28fdfc173c5c0f2e9914))
+* install rustls aws-lc-rs crypto provider before TLS init ([5ccb37d](https://github.com/CSFX-cloud/CSFX-Core/commit/5ccb37d8e92f12b18b22dc4b85713435fe1e6668))
+* leader election ([28871eb](https://github.com/CSFX-cloud/CSFX-Core/commit/28871eb6b9fc98ee7a6792e618834baaf374f706))
+* leader select ([e5d8867](https://github.com/CSFX-cloud/CSFX-Core/commit/e5d88678b3378da846b18ea045d179a57651a47f))
+* load times on svg main ([e37e88b](https://github.com/CSFX-cloud/CSFX-Core/commit/e37e88bab79d1e3e040c5446250ce93f1fd59d0e))
+* load xterm dynamically to avoid SSR CJS named export error ([db41761](https://github.com/CSFX-cloud/CSFX-Core/commit/db417613a86ae79ffa50d4c10706ab71bb0ffc22))
+* lock state when updater go into error ([28c0247](https://github.com/CSFX-cloud/CSFX-Core/commit/28c0247dabb89763f2191c4d8fe95854bf7f8663))
+* make bootstrap registration idempotent by upserting on hostname ([98a935a](https://github.com/CSFX-cloud/CSFX-Core/commit/98a935a7f89bb901b5a3314854016e60a70c9950))
+* manifest build ([dd5d522](https://github.com/CSFX-cloud/CSFX-Core/commit/dd5d522b846b34fb8243257201a84c45a6203c4a))
+* master node auto-bootstrap — self-register agent via admin API on first boot ([1d64a1f](https://github.com/CSFX-cloud/CSFX-Core/commit/1d64a1f205d642c5ae18d5fc67447735576247cc))
+* merge errors ([3d808ae](https://github.com/CSFX-cloud/CSFX-Core/commit/3d808aed9b35da3f2f86aaa3f79a946256d899ea))
+* metrics error agent ([4ac4ce8](https://github.com/CSFX-cloud/CSFX-Core/commit/4ac4ce842d18dfa0d281d83b59628855d8de7207))
+* migrate axum routes to 0.8 syntax and downgrade sysinfo to 0.32 ([d29d12d](https://github.com/CSFX-cloud/CSFX-Core/commit/d29d12d6ca49a200fd4c864d6c40e8404debc20f))
+* migration in docker dev enviroment and auth fix frontend ([8140686](https://github.com/CSFX-cloud/CSFX-Core/commit/81406865af1f2aa268543472304da83f764ea8ce))
+* mtls handshake ([cbe31b3](https://github.com/CSFX-cloud/CSFX-Core/commit/cbe31b3765a60bb945bd5753b925236f0ab9042a))
+* mtls heart beat ([93fb782](https://github.com/CSFX-cloud/CSFX-Core/commit/93fb78235d31544fe1950cbfbb27e078067735d2))
+* mtls heart beat ([869170f](https://github.com/CSFX-cloud/CSFX-Core/commit/869170f2b51fc821bf2d64d5dfb4a7860446ab25))
+* mtls issue ([26e0cb2](https://github.com/CSFX-cloud/CSFX-Core/commit/26e0cb21b0691c34388278cbc8ce251ec1d26146))
+* mulitple docker builds ([9a857ca](https://github.com/CSFX-cloud/CSFX-Core/commit/9a857ca9ce05afc74da10988a8007865c3c94f04))
+* mulitple docker builds ([6a55d51](https://github.com/CSFX-cloud/CSFX-Core/commit/6a55d51027477a7226915e7f4ef61a45a8013692))
+* new structure project ([5280c7e](https://github.com/CSFX-cloud/CSFX-Core/commit/5280c7e562c9191c420353285a1e646657782a94))
+* new test version ([109c775](https://github.com/CSFX-cloud/CSFX-Core/commit/109c7751eb3a874d7c69f845dade267e80771527))
+* nix compile error ([8d6d32e](https://github.com/CSFX-cloud/CSFX-Core/commit/8d6d32e1178c28d31113a48b495659acb9eb61f2))
+* nix compile error ([48d2bde](https://github.com/CSFX-cloud/CSFX-Core/commit/48d2bde073f248546886630edbe63fc4359e9603))
+* nix config error ([6b5adf7](https://github.com/CSFX-cloud/CSFX-Core/commit/6b5adf761e94725978d2eae57de95ffbebcdb410))
+* nix config with path ([1d80789](https://github.com/CSFX-cloud/CSFX-Core/commit/1d807891e75767847657cd8d8e4b213cfcfaa7f5))
+* nix container version ([4e6da4e](https://github.com/CSFX-cloud/CSFX-Core/commit/4e6da4e81a8a4ab61db85f25c63db98ca64f85ff))
+* nix error ([ebfdf55](https://github.com/CSFX-cloud/CSFX-Core/commit/ebfdf554ec6969fd612ff868502fb3847d167bf5))
+* nix os config version ([8ed2d60](https://github.com/CSFX-cloud/CSFX-Core/commit/8ed2d60dc0a98474801ef8a1b3ad624917c2ca52))
+* nixos test version updated ([0230d7f](https://github.com/CSFX-cloud/CSFX-Core/commit/0230d7f19c89cc2d043544485bc8c580e3cc10ba))
+* nixos updater error ([2b46867](https://github.com/CSFX-cloud/CSFX-Core/commit/2b46867d09d908db5e7dc613883903e28e507046))
+* nixos version ([64cfcec](https://github.com/CSFX-cloud/CSFX-Core/commit/64cfcecad0faf97ea62a51753df171cea5ccf6ba))
+* node deduplication and cluster telemetry ([2259013](https://github.com/CSFX-cloud/CSFX-Core/commit/2259013cd36d995360cc79e35699132616174f48))
+* nodes offline check ([353f803](https://github.com/CSFX-cloud/CSFX-Core/commit/353f803e93d9ac069778e6263c96b312f61fb753))
+* path error in updater ([e10e08f](https://github.com/CSFX-cloud/CSFX-Core/commit/e10e08fa5884573e89b3a08b40f569055e0c1eb3))
+* patroni bootstrap error ([5895235](https://github.com/CSFX-cloud/CSFX-Core/commit/5895235c801f11cba514de1d52d4d75d0cede78e))
+* patroni internal error from bootstrap ([d52bc00](https://github.com/CSFX-cloud/CSFX-Core/commit/d52bc00e1fac28e20e18daeb7f62c7dde72b6b11))
+* persistante update screen ([f43c476](https://github.com/CSFX-cloud/CSFX-Core/commit/f43c476d8926f475102f2de0eb48ca5c60c5f35f))
+* pin rust 1.88.0 via rust-overlay for edition2024/time crate support ([2b6bc89](https://github.com/CSFX-cloud/CSFX-Core/commit/2b6bc897531313710e9021533aafa3fc5d8ebdcf))
+* pipeline ([d01b1ee](https://github.com/CSFX-cloud/CSFX-Core/commit/d01b1ee1f238b6becbee40d73eaf4fc78418bd66))
+* pipeline ([25a9442](https://github.com/CSFX-cloud/CSFX-Core/commit/25a944201cafbd55e6202f8fa47858ebf3445717))
+* pipeline ([4f38260](https://github.com/CSFX-cloud/CSFX-Core/commit/4f38260edbe01e734ddb4ba45e131144b4164171))
+* pipeline ([3f6b004](https://github.com/CSFX-cloud/CSFX-Core/commit/3f6b004bba89ba8a2637ff7ca74b43c4b7fba7d7))
+* pipeline build error ([ddbfc81](https://github.com/CSFX-cloud/CSFX-Core/commit/ddbfc81032daae687355fd3fba90b7ea7662a820))
+* pipeline docker build ([c7d94c1](https://github.com/CSFX-cloud/CSFX-Core/commit/c7d94c1818e948f3ded5bd4f12979017cbdabd03))
+* pipeline docker build ([909cc1a](https://github.com/CSFX-cloud/CSFX-Core/commit/909cc1a4c8cf776d188191b52f9c7ce902bb5ff8))
+* pipeline docker image ([5f91789](https://github.com/CSFX-cloud/CSFX-Core/commit/5f917898e25b514b505db32e7f97c28a6391ddab))
+* pipeline docker image ([c5743de](https://github.com/CSFX-cloud/CSFX-Core/commit/c5743de52af8862013515bccc8aa9fb82267219e))
+* pipeline time ([20e929c](https://github.com/CSFX-cloud/CSFX-Core/commit/20e929c0286b624f482d06863ee0397dfc10b897))
+* pipeline time ([a642161](https://github.com/CSFX-cloud/CSFX-Core/commit/a64216117ad7600664d424d81989bb509f0020a2))
+* pipleine ([bcdc605](https://github.com/CSFX-cloud/CSFX-Core/commit/bcdc605a9caf49ff3d00ed5759118d7813f8c44c))
+* pipleine ([885eadd](https://github.com/CSFX-cloud/CSFX-Core/commit/885eadd3f0ec2154659070e901bc03c7c2f294d2))
+* provide complete workspace structure to cargo-chef ([d1c2022](https://github.com/CSFX-cloud/CSFX-Core/commit/d1c20229585c112d90e915520bbb7cf61ef07222))
+* provide complete workspace structure to cargo-chef ([5bef937](https://github.com/CSFX-cloud/CSFX-Core/commit/5bef937644c38dec3d3bb9dc39a4ef5df85c1268))
+* proxy api requests to https gateway with insecure flag for dev ([d65b24c](https://github.com/CSFX-cloud/CSFX-Core/commit/d65b24c60f01d4b4f1201ba6f1794f2d8ccdd16b))
+* rate limit by authenticated user instead of shared ip bucket ([4f166c3](https://github.com/CSFX-cloud/CSFX-Core/commit/4f166c3a972489be07eeb1fc745605a6055e211f))
+* rate-limit agents by API key hash instead of shared IP bucket ([d4ab5ff](https://github.com/CSFX-cloud/CSFX-Core/commit/d4ab5ffb7053b82a2aa49b6921bb673279a54332))
+* **registry:** make AgentStatus::from_str case-insensitive ([e80d89b](https://github.com/CSFX-cloud/CSFX-Core/commit/e80d89ba0b002a43fabbd02c5856493d9bd848c8))
+* **registry:** migrate route params from :param to {param} syntax ([af9e2ec](https://github.com/CSFX-cloud/CSFX-Core/commit/af9e2ec51343dd228fb10e03498b6cedce8f16e1))
+* remove NoNewPrivileges to allow sudo systemctl for binary restart ([ddc22b8](https://github.com/CSFX-cloud/CSFX-Core/commit/ddc22b83f374fae4c0e88c13b66158a6fd95f730))
+* removed old scripts ([dc19cb5](https://github.com/CSFX-cloud/CSFX-Core/commit/dc19cb582571cf3515effb8ba122f23536e31a3a))
+* renovate ([1b87f10](https://github.com/CSFX-cloud/CSFX-Core/commit/1b87f1045250da00cef55a31afbe23326b8eccf6))
+* replace aws-lc-rs with ring for musl aarch64 ([7fdc686](https://github.com/CSFX-cloud/CSFX-Core/commit/7fdc6863ba542fa110d17bcfb69a87f866706485))
+* replace rustls-tls feature with rustls for reqwest 0.13 compat ([bf6d095](https://github.com/CSFX-cloud/CSFX-Core/commit/bf6d0958752c09bfadc2ef859a289ef28bbeaaa7))
+* repo ([fa07190](https://github.com/CSFX-cloud/CSFX-Core/commit/fa07190eeb0a04c9d6087e4bb48c740a6545f63b))
+* resolve musl build failure for csf-updater binary ([50a89e8](https://github.com/CSFX-cloud/CSFX-Core/commit/50a89e88f6338073a52a272870213509c1001d82))
+* restrict binary dir permissions and verify sha256 checksum on download ([2b3260f](https://github.com/CSFX-cloud/CSFX-Core/commit/2b3260fe91b3038cda9d7fb8edf9d8a498e6c643))
+* reverse proxy on registry routet through api gateway ([6e2ce4f](https://github.com/CSFX-cloud/CSFX-Core/commit/6e2ce4fa34f145cf4cad3d966de33bc4fef13491))
+* rm enity folder in every project ([dbd5178](https://github.com/CSFX-cloud/CSFX-Core/commit/dbd51781b76cb6bd793a361ba39ad40f8bb4f9dd))
+* rollback on failed update flow ([a1109d2](https://github.com/CSFX-cloud/CSFX-Core/commit/a1109d25996633e3af7b8f2e21c57592d7a7b29c))
+* script error ([4b1b343](https://github.com/CSFX-cloud/CSFX-Core/commit/4b1b3436aa9b28bf90c8bd97ca1074b9ef1d9b28))
+* securtity issue fix sha-1 to sha-256 ([4252495](https://github.com/CSFX-cloud/CSFX-Core/commit/42524951a5d53c7fe48de02abb7cec99d7ee0550))
+* securtiy issues on agent registration ([228a81f](https://github.com/CSFX-cloud/CSFX-Core/commit/228a81f818b5a0519ac026ba71790fe713431010))
+* self kill error updater and manuell fix updater error ([f17d096](https://github.com/CSFX-cloud/CSFX-Core/commit/f17d09653022c39061ad6b9c7648161c2ee56cb4))
+* set TLS_ENABLED=false in docker-compose and accept self-signed certs in agent ([a14e75d](https://github.com/CSFX-cloud/CSFX-Core/commit/a14e75defb4a644c9aa1fa7463b5e8b453de0487))
+* set working directory to /tmp for nixos-rebuild to avoid symlink permission error ([74b7bd1](https://github.com/CSFX-cloud/CSFX-Core/commit/74b7bd1882fab31bea909a98e6c2c139e648e9f0))
+* shared folder ([bc7ce08](https://github.com/CSFX-cloud/CSFX-Core/commit/bc7ce08c1399119c835e3120c03372672a6d0631))
+* shared folder ([752f4df](https://github.com/CSFX-cloud/CSFX-Core/commit/752f4df9fd771d6a7380b9bc949378856ffefa78))
+* single-node patroni+etcd, remove haproxy ([45952da](https://github.com/CSFX-cloud/CSFX-Core/commit/45952da7810a0b980e334d4eaf8f6493d994fb8e))
+* small change for testing updater ([1f5509f](https://github.com/CSFX-cloud/CSFX-Core/commit/1f5509fe0c8dada44290e98502321e69ea97866c))
+* ssh error for dev ([a6a4fc9](https://github.com/CSFX-cloud/CSFX-Core/commit/a6a4fc9bcfceca80bb3a10dae50ff3cd7b389e5e))
+* strip digest newlines to prevent invalid image reference in manifest ([fdd4d7e](https://github.com/CSFX-cloud/CSFX-Core/commit/fdd4d7e4b4cba4b5acfb861f2071c050fa627a09))
+* strip trailing semicolon from parsed nix version strings ([346e5f4](https://github.com/CSFX-cloud/CSFX-Core/commit/346e5f4ed78e90f04c5132d94d24b8dda5cc88ac))
+* structure porject fix ([8d40d6a](https://github.com/CSFX-cloud/CSFX-Core/commit/8d40d6aa329ed175a41e38dcbf4c6aae1c55bd86))
+* structure project ([d2d83f1](https://github.com/CSFX-cloud/CSFX-Core/commit/d2d83f1bb0f6a1a27ace1213d98d7bac2879a949))
+* swagger ui ([54113f4](https://github.com/CSFX-cloud/CSFX-Core/commit/54113f4d6ef39718123f1f0978a18b527d0d2628))
+* swagger ui ([033f790](https://github.com/CSFX-cloud/CSFX-Core/commit/033f790c400efc7981de8c150f88136139c6ba74))
+* switch rustls provider from aws-lc-rs to ring for musl compat ([7c6c62b](https://github.com/CSFX-cloud/CSFX-Core/commit/7c6c62b43ec605e0eefb18dbdc528cdc79bef2e3))
+* sync missing permissions to existing Admin role on startup ([bf050ae](https://github.com/CSFX-cloud/CSFX-Core/commit/bf050aeaa133b33286114cf5b90694016c28f8ef))
+* test file for updater ([472f282](https://github.com/CSFX-cloud/CSFX-Core/commit/472f282ae756db5762aea6911de03be5fdc6ed8d))
+* test file for updater ([0927186](https://github.com/CSFX-cloud/CSFX-Core/commit/0927186d706062c85eebe48c35a11e3db3073357))
+* test file updater ([d9a485a](https://github.com/CSFX-cloud/CSFX-Core/commit/d9a485a4a6a582fbbf7b3ee858f2dd7502135c8b))
+* test file updater ([6e55d23](https://github.com/CSFX-cloud/CSFX-Core/commit/6e55d23e61a81b7ad5696f046a168a87bc4f6716))
+* test file updater ([0cdebfb](https://github.com/CSFX-cloud/CSFX-Core/commit/0cdebfb25d5d9dcb6d9de51a9f76600cdf173d0d))
+* test file updater ([398adf1](https://github.com/CSFX-cloud/CSFX-Core/commit/398adf17716f012109360cb81b29e64d596a40bc))
+* test file updater ([7f45bbc](https://github.com/CSFX-cloud/CSFX-Core/commit/7f45bbc1fa1b5c231723137224eb2133f6832b9a))
+* test file updater ([666f334](https://github.com/CSFX-cloud/CSFX-Core/commit/666f334b08076d832e2c9cd04345cb654f70206b))
+* test file updtaer ([b7241fc](https://github.com/CSFX-cloud/CSFX-Core/commit/b7241fc938b17e70e2571e3d423b5d3a1d78c233))
+* test file updtaer ([aae1373](https://github.com/CSFX-cloud/CSFX-Core/commit/aae1373ec9b9649fcddfdbc2345286eaeb14af17))
+* token route for dev ([97d0776](https://github.com/CSFX-cloud/CSFX-Core/commit/97d07769537cf0a119a860a2a8cea646970cf9e8))
+* update bollard, rand, sysinfo, axum FromRequestParts for dep updates ([588d22b](https://github.com/CSFX-cloud/CSFX-Core/commit/588d22b99c898b9e03b4dfbd908202bc92b3560a))
+* update permission error ([1d5a1c1](https://github.com/CSFX-cloud/CSFX-Core/commit/1d5a1c1cd82ff13209d4b60f1fb5f093c98e198d))
+* update permission error ([f7b57ec](https://github.com/CSFX-cloud/CSFX-Core/commit/f7b57ec497bf172d9a68e17af401e4bc156fdd26))
+* update test file ([8c52df7](https://github.com/CSFX-cloud/CSFX-Core/commit/8c52df714880a389d13b77c6bb4f168e9f545d54))
+* update test file ([12def61](https://github.com/CSFX-cloud/CSFX-Core/commit/12def61b65de4a7b4e3a621865af99da3ba15990))
+* updater ([e1b45c8](https://github.com/CSFX-cloud/CSFX-Core/commit/e1b45c86e69fcbd046a79eecb6aaf7fa6dbb5f6a))
+* updater ([a637575](https://github.com/CSFX-cloud/CSFX-Core/commit/a637575bdefb907fbab57985a75bd6c7ff5ebeab))
+* updater backend ([2c51cf4](https://github.com/CSFX-cloud/CSFX-Core/commit/2c51cf4188339327ee24efdd2f4bdc7080bd0ae9))
+* updater backend ([ff2d41a](https://github.com/CSFX-cloud/CSFX-Core/commit/ff2d41afe46fbb55f97f67871965f0f96b1d28b8))
+* updater download ([57bb7e5](https://github.com/CSFX-cloud/CSFX-Core/commit/57bb7e55ff8663110d8efa372d511429a58f3f6c))
+* updater download ([d66bb2b](https://github.com/CSFX-cloud/CSFX-Core/commit/d66bb2b80e43ab2a0059d563d31aa29d36ad1254))
+* updater error ([f614134](https://github.com/CSFX-cloud/CSFX-Core/commit/f61413419e196801e50d4162d0130516f0838a3a))
+* updater error ([c2d3273](https://github.com/CSFX-cloud/CSFX-Core/commit/c2d32738bf5b865c0f6e210d291cf973b26b9dcd))
+* updater error with images and pull ([bbb8694](https://github.com/CSFX-cloud/CSFX-Core/commit/bbb8694fc2c7a3a065c5a08af073d2009b8a9fd4))
+* updater fix complete log ([10e0943](https://github.com/CSFX-cloud/CSFX-Core/commit/10e094324832fa675cccabfb2f139dac60d51391))
+* updater fix complete log ([87ed08e](https://github.com/CSFX-cloud/CSFX-Core/commit/87ed08e00b21cd138c6c25a28023dae90f559592))
+* updater flow ([3d9b26c](https://github.com/CSFX-cloud/CSFX-Core/commit/3d9b26ce73f21adad7574df48f0c5995c1a82ea8))
+* updater flow with api-gateway ([1de5b80](https://github.com/CSFX-cloud/CSFX-Core/commit/1de5b806df10452027c8b9a97c3808228178c064))
+* updater flow with api-gateway ([5bf29ab](https://github.com/CSFX-cloud/CSFX-Core/commit/5bf29ab4e746717538d56956c32a76aa8532d245))
+* updater from frontend ([0c4e596](https://github.com/CSFX-cloud/CSFX-Core/commit/0c4e596d1b728001c4c104b97327132fe92cd53f))
+* updater from frontend ([d6f72c3](https://github.com/CSFX-cloud/CSFX-Core/commit/d6f72c392ae8b70bd0c447b78e7dcd83ef2aebd2))
+* updater frontend screen ([30e638f](https://github.com/CSFX-cloud/CSFX-Core/commit/30e638f7efa853404e8af948794812750cebde1b))
+* updater frontend screen ([8cbfbdc](https://github.com/CSFX-cloud/CSFX-Core/commit/8cbfbdc9d92151eee8751cab461398681159ed9b))
+* updater prevelidge error ([af1bf41](https://github.com/CSFX-cloud/CSFX-Core/commit/af1bf41ce7a3560e7f18e28b730d9a075623dff5))
+* updater prevelidge error ([788a637](https://github.com/CSFX-cloud/CSFX-Core/commit/788a6372dddc6f675b157f6e1e7bedd649d0d350))
+* updater screen ([7b48394](https://github.com/CSFX-cloud/CSFX-Core/commit/7b48394d12a9a20271e71ddf50545ce6859ff947))
+* updater screen ([2b153ba](https://github.com/CSFX-cloud/CSFX-Core/commit/2b153ba21e6939806ecb03424b41e7144f73b39e))
+* updater script ([364fc05](https://github.com/CSFX-cloud/CSFX-Core/commit/364fc0568d6521d028ab04f6736274c657c31708))
+* updater script ([8f95aee](https://github.com/CSFX-cloud/CSFX-Core/commit/8f95aee1e388725512a38f6334e064c34163108f))
+* updater test file ([8a277df](https://github.com/CSFX-cloud/CSFX-Core/commit/8a277df5a9d347755f55ebb71f013395bf944bbf))
+* updater test file ([5008a78](https://github.com/CSFX-cloud/CSFX-Core/commit/5008a788071992090b9087a6dc3a3af960441067))
+* updater test file ([300475b](https://github.com/CSFX-cloud/CSFX-Core/commit/300475bcaa25553a8c1b6caf262cce96580138ac))
+* updater test file ([c67ceba](https://github.com/CSFX-cloud/CSFX-Core/commit/c67ceba0ac9ff976baed17e8dadc6ae0c1511984))
+* updater test file ([f3a5766](https://github.com/CSFX-cloud/CSFX-Core/commit/f3a5766bdd6e6e8fb587f53255779e2eef92a141))
+* updater test file ([05e1a16](https://github.com/CSFX-cloud/CSFX-Core/commit/05e1a165464307a18a2e5ea9735d73754a4132e5))
+* updater test file ([2dc6d5c](https://github.com/CSFX-cloud/CSFX-Core/commit/2dc6d5c6fc4667c8d4f4c75656d431b5d3422ab3))
+* updater test file ([b721cbe](https://github.com/CSFX-cloud/CSFX-Core/commit/b721cbeea7aae6d3205a0bdad4010377c7d58f6f))
+* **updater:** correct GitHub refs API path and treat 304 as no-op ([e11c40e](https://github.com/CSFX-cloud/CSFX-Core/commit/e11c40e2c513a6aee2aeaf90e17129a739756009))
+* **updater:** set explicit nixosConfigurations attr in flake URL to match csfx-node ([bdaa676](https://github.com/CSFX-cloud/CSFX-Core/commit/bdaa676c07542440e1c9fcd190b4419d36b8850a))
+* **updater:** surface version resolution failures to etcd ([9ad7152](https://github.com/CSFX-cloud/CSFX-Core/commit/9ad7152a544172d0a3ac348249a1f8decddb2c5e))
+* use relative API URLs for same-origin deployment ([16495a4](https://github.com/CSFX-cloud/CSFX-Core/commit/16495a45961bd049d54d9d05c9f56b6cec36ca06))
+* version docker image ([8768620](https://github.com/CSFX-cloud/CSFX-Core/commit/87686205a3bc01b67b7c6897c736da65f1ec752d))
+* wait for auth token before loading data on nodes, resource-groups and logs pages ([9ff3735](https://github.com/CSFX-cloud/CSFX-Core/commit/9ff3735b34d241669772152ae034715a7fabcc27))
+* wait for auth token before loading resource group on mount ([b67e6f1](https://github.com/CSFX-cloud/CSFX-Core/commit/b67e6f1ea1d25758eb025d546e4870e2fafa270e))
+* wire TLS through dev environment for gateway, agents, and registry ([8028bae](https://github.com/CSFX-cloud/CSFX-Core/commit/8028bae86db21caa40c0a8e05e099952787977fe))
+* workflow ([c71c60f](https://github.com/CSFX-cloud/CSFX-Core/commit/c71c60f945d715666e6e0ed01678c5e59b0c48f4))
+
 ## [0.5.1](https://github.com/CS-Foundry/CSFX-Core/compare/v0.5.0...v0.5.1) (2026-03-07)
 
 
diff --git a/Cargo.toml b/Cargo.toml
index a8af76e..37e405b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.2.2"
+version = "0.2.3"
 edition = "2021"
 authors = ["CS-Foundry"]
 license = "SEE LICENSE IN LICENSE"