[twk3]

Owner: @twk3
Linear: ENG-1851

Chart 1.0.1 on images 2026-10-14-002, the patch that lets users who signed in before the 1.0.0 upgrade sign in again. #66 already moved appVersion and currents.imageTag to 2026-10-14-002; this bumps the chart version and writes the changelog.

The upgrade guide from #67 is already published and tells readers to run helm upgrade --version 1.0.1, which fails until this is released.

Release

• scripts/update-version.sh -v 1.0.1: sets version and regenerates configuration.md. The tag stays at 2026-10-14-002 from fix: update the images to 2026-10-14-002 so accounts created before 1.0.0 sign in again [ENG-1851] #66, matching the Docker on-prem/VERSION in release: on-prem 2026-10-14-002 [ENG-1851] docker#38.
• CHANGELOG: generated by scripts/update-changelog.sh (git-cliff), which lists fix: update the images to 2026-10-14-002 so accounts created before 1.0.0 sign in again [ENG-1851] #66 under Bug Fixes. By hand:
  • a summary line: a patch with no values changes, reachable from 1.0.0 or straight from 0.8.x;
  • a sentence under the fix: update the images to 2026-10-14-002 so accounts created before 1.0.0 sign in again [ENG-1851] #66 entry naming the two sign-in errors and the account_issuer_accountId_uidx drop, linking to Sign-In After the Upgrade;
  • the [Unreleased] CVE-2026-111497 note from docs: note that the 2026-10-14-002 images patch CVE-2026-111497 #68 moves into this release. Its advice to set currents.imageTag: 2026-10-14-002 on 1.0.0 is dropped, since 1.0.1 deploys those images.

git-cliff skips #67 and #68 (docs: commits), as it did for #65 in 1.0.0.

Testing

• helm lint charts/currents passes.
• configuration.md is helm-docs output, which is what Docs check compares.
• The 2026-10-14-002 images are in ECR.
• The fix itself was tested on currents-dev/currents#4480 and fix: update the images to 2026-10-14-002 so accounts created before 1.0.0 sign in again [ENG-1851] #66: an install upgraded 0.8.1 → 1.0.0 → 2026-10-14-002, and straight from 0.8.1.
• I also timed the 20261021-drop-account-issuer-index migration on MongoDB 8.0 with 100 users whose accounts have issuer backfilled by hand, as the reporting customer's do. It took 3–6 ms; dropIndexes itself took 0–2 ms.

After merge

Run the Release Charts workflow with markLatest: true to package the chart, create the GitHub release and update the repo index. Then close ENG-1850.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[baz-reviewer]

Baz Summary

Release Helm chart 1.0.1 with the 2026-10-14-002 application images so pre-upgrade users can sign in again, while documenting the account-index migration and Node.js security fix. Update the chart metadata and generated configuration reference to expose the patched release without changing chart values.

Topics

Topic	Details
Sign-in patch release	Release the patched application images that restore SAML and root-admin password sign-in for accounts created before the 1.0.0 upgrade, including removal of the obsolete account_issuer_accountId_uidx index and the Node.js CVE mitigation. Modified files (2) CHANGELOG.md charts/currents/Chart.yaml Latest Contributors(1) User Commit Date dj@currents.dev release: 1.0.1 [] October 27, 2026
Chart metadata	Regenerate the configuration reference so its chart version matches the 1.0.1 release while retaining the existing application image tag. Modified files (1) docs/configuration.md Latest Contributors(2) User Commit Date dj@currents.dev release: 1.0.1 [] October 27, 2026 agoldis@users.noreply.... Refine naming April 10, 2025

---

  _{Activate to get a short verdict whether this PR is good to go or not}

  _{Activate Skill Maintainer to keep your skills up to date}

  _{This PR would have been improved with Baz Planner - Try it now}