Changelog: June 2026

# Product

- Nullstone AI Skills Catalog
- Cloud Run Deployment Monitoring
- Live Kubernetes Deployment Failure States
- Capabilities UI Redesign
- Infrastructure Tab Redesign
- On-Demand IaC Sync
- Reusable Deployment GitHub Actions
- Deploy-Time CLI Controls
- Org Integrations & Members

## Nullstone AI Skills Catalog

We launched the Nullstone AI Skills Catalog — reusable skills that teach Claude and other AI assistants how to work with Nullstone.
The first skill guides Nullstone IaC generation and validation: it gives assistants the schema and semantics of Nullstone's config YAML — the Terraform module to use, variable values, app env vars, and connection targets for remote state — so the config they generate and edit is valid.

- [Read more and install](https://docs.nullstone.io/ai/skills/overview.html)

## Cloud Run Deployment Monitoring

Last month's Deployment Monitoring redesign covered Kubernetes and AWS ECS/Fargate.
This month we brought GCP Cloud Run into the same redesigned surface — for both long-running services and jobs.

What's new:

- Cloud Run **Service** deployments now show revisions, traffic split, and instances in the compact redesigned layout
- Cloud Run **Job** executions are now first-class: see the execution list, identify why an execution failed, and jump to the relevant debugging resources
- Failure information surfaced inline, with direct links to logs and the cloud console — matching the experience already shipped for Kubernetes and ECS/Fargate

## Live Kubernetes Deployment Failure States

The Monitoring tab now reports *why* a Kubernetes deployment, pod, or job is unhealthy as ongoing live status — not just at deploy time.
Failures that appear after a deploy (for example, a pod that enters `CrashLoopBackOff` an hour into runtime) now surface the same actionable failure detail directly in the UI, so you no longer have to drop to `kubectl` to diagnose them.

## Capabilities UI Redesign

We merged the Capabilities tab into the Configuration tab and made capabilities editable inline.
You can now add, edit, and remove capabilities in place, see all of a capability's connections, and modify those connections directly in the UI instead of jumping between a separate header section.

## Infrastructure Tab Redesign

The Infrastructure tab now shows the full history of a workspace's state file — including the raw JSON — while continuing to surface the outputs and resources for each state version.
We also improved display of long or structured outputs and made it possible to unlock your own workspace from the UI.

## On-Demand IaC Sync

A new `nullstone iac sync` command reconciles Nullstone's IaC config (apps, capabilities, connections) with what's declared in your repo, on demand — no GitHub webhook required.

- `nullstone iac sync --stack=<stack> --env=<env> [--auto-plan] [--auto-apply]`
- Scope is a stack + environment, across every block in the env's IaC files
- **Detached mode** lets CI submit the IaC files directly in the API payload, so the sync can skip the GitHub fetch entirely

## Reusable Deployment GitHub Actions

We published a set of public, reusable composite GitHub Actions so consumer repos can assemble a full Nullstone deploy pipeline without re-writing checkout, CLI setup, and other boilerplate. Each action does one thing for one app/module:

- `publish-module` — publish an IaC module if its source files changed (exposes a `changed` output)
- `build-publish-docker-app` — build an app image with Buildx and push it to the Nullstone artifact registry
- `iac-sync` — reconcile IaC config for an environment
- `deploy-app` — deploy a single app via `nullstone deploy`
- `deploy-and-run` — deploy an app and then run a follow-up command (migrations, seed jobs, batch tasks)

## Deploy-Time CLI Controls

Several new flags give you finer control over deploys and CI loops:

- `nullstone deploy --env-var` — set additional env vars at deploy time (supports interpolation of other env vars; secrets are not interpolated)
- `nullstone apply --if=any-changes` — skip the server-side apply when there are no unapplied workspace changes
- `nullstone modules publish --if=checksum-changed` — skip publishing when the packaged tarball matches the latest published version

## Org Integrations & Members

- The Nullstone GitHub App can now be installed and managed from the org-level **Integrations** page, alongside Slack — no longer buried inside the GitOps connection flow
- The organization **Members** page now displays each member's email address

# Catalog

### Zero-Downtime GKE Load Balancer Rollouts

Container-native (NEG) load balancer rollouts could produce brief downtime (`connection termination` / `no healthy upstream`) because pods terminate faster than the LB deprograms its endpoints.
The `gcp-gke-dedicated-load-balancer` capability now coordinates pod termination with LB deprogramming automatically, via a new `var.deprogram_secs` (default `60`).
- [Dedicated HTTP Load Balancer](https://app.nullstone.io/registry/modules/nullstone/gcp-gke-dedicated-load-balancer)

### Blue/Green GKE Node Pools

Node pool changes on GKE can now roll out blue/green, replacing node pools without disrupting running workloads.

### AWS App Scaffolds

Two more standalone scaffold modules wire up the boilerplate Nullstone needs — service accounts, log streaming, metrics, artifact pushes, deployments, remote access — so custom apps drop in with the same operational surface as first-party modules:

- [AWS Lambda app scaffold](https://registry.terraform.io/modules/nullstone-modules/lambda-appscaffold/aws/latest)
- [AWS S3 Site app scaffold](https://registry.terraform.io/modules/nullstone-modules/s3site-appscaffold/aws/latest)

### HTML Revalidation for `aws-s3-site`

Fixed the "stuck page" failure mode for static sites behind CloudFront + S3, where cached HTML kept requesting assets from a previous deploy's path after an origin swap.
The `aws-s3-site` module now supports HTML revalidation so freshly deployed pages reliably pick up the current asset versions.