Changelog

Zenithal 2.2.1

• Fixes a sign-in problem where an account that is not linked to Empiric Apps could leave the app looking signed in, with no license and no explanation. Zenithal now tells you what happened and links you to your account page.
• Sign in with Apple has been removed. Existing users sign in with Google, GitHub or email.

Zenithal 2.2.0

• One-click push to Amazon ECR. Zenithal signs you in to ECR automatically using your AWS CLI, so there are no tokens to copy or refresh.
• Pick an AWS profile and push. Works with AWS SSO.

Zenithal 2.1.0

• On-device AI Assist (Apple Intelligence, macOS 26): explain failed Docker builds in plain language.
• AI triage of security-scan results: surfaces the vulnerabilities that matter most, with every cited CVE validated against the real Trivy/Grype scan.
• Everything runs entirely on your Mac - nothing leaves the device. On earlier macOS the app is unchanged (AI surfaces hidden).

Zenithal 2.0.2

• New app icon.
• Build Secrets: pass API keys, tokens, and SSH keys into image builds (Image Build and Dockerfile Import) without baking them into layers - by value or file.
• Dockerfile Import build context now follows the selected Dockerfile.
• Cloud cost estimation now includes the GKE Autopilot cluster fee for accurate GCP estimates.
• Added "More from Empiric Apps" in About.
• Launch screen shows the new app icon.

Zenithal 2.0.1

Fixed the in-app upgrade checkout so purchasing Zenithal 2 completes at the correct $29.99 one-time price.

Zenithal 2.0

Start with a 7-day free trial, then a one-time $29.99 purchase unlocks Zenithal 2 and every future

2.x update - no subscription. (On Zenithal 1.x? It stays free - you only pay if you choose to move to 2.0.)

What's new:

• One-time license model with a 7-day trial - no recurring billing
• Build secrets in the Dockerfile Import Wizard - pass BuildKit secrets (API keys, SSH keys, tokens)

into image builds without baking them into image layers

• Clearer license status throughout the app (trial countdown, ownership)

Zenithal 1.0.6

• Command input now accepts Docker-style syntax (CMD [...], ENTRYPOINT [...]) - automatically cleaned before running
• Dockerfile Import Wizard extracts CMD and Entrypoint from Dockerfiles and pre-fills the fields
• Fixed nested quote handling in container commands
• Fixed Save button not activating when editing container commands
• BuildKit secrets support for secure image builds
• Improved app stability and performance

Zenithal 1.0.5

• Bind mount icon now shown on container cards for quick identification
• Bind mounts displayed in Volumes list with improved create sheet layout
• Protected bind mounts that are in use by containers from accidental deletion
• Saved bind mounts now load correctly and can be selected via picker when running containers
• Auto-populated required environment variables for common database images (PostgreSQL, MySQL, MongoDB, etc.)
• Improved app stability and responsiveness

Zenithal 1.0.4

• Security scanning with vulnerability detection and severity breakdown
• One-click remediation - run fixes directly in running containers
• Export Dockerfile fixes for single or all vulnerabilities at once
• Smart cross-platform adaptation for remediation commands (Debian, Alpine, and more)
• Warnings when vulnerabilities are in base image layers and require upstream fixes
• Image name validation prevents build errors from invalid characters
• Menu bar now shows correct container status immediately on launch

Zenithal 1.0.3

• Generate Dockerfile from any container with syntax highlighting and image intelligence
• Bind mount preservation in Dockerfile export/import for full round-trip fidelity
• Container metadata (mounts, labels) preserved across export and import
• Fix blank Save as Template dialog on first open
• Fix container export producing empty tar files
• Lima writable home mount for reliable file uploads
• Resizable file browser window with non-blocking file operations
• Collapsible sections in Run Container sheet replacing tabs
• Improved service dependency graph with polyline arrow routing
• Fix unresponsive tab switching during live profiling
• Kubernetes connection refresh after Compose-to-K8s migration
• Lima crash detection and port pre-flight validation
• Suggested mount paths for known images (nginx, postgres, etc.)
• Bind mount read-only toggle and pre-mount validation
• 22 detailed use-case guides added to documentation

Zenithal 1.0.2

• Open in Browser - Safari icon on Compose project cards, container cards, and K8s services to quickly open running apps in the browser
• Compose-to-K8s safety - Port forwarding no longer kills Lima VM processes, preventing crashes during migration
• Stop Compose before migration - New button to stop the Compose stack first when port conflicts are detected
• Auto-navigate to Kubernetes - Sidebar switches to the K8s screen after a successful migration deployment
• K8s stability improvements - Fixed DNS routing on minikube, improved deploy UX, consolidated cluster operations, and fixed stale minikube recovery
• Minikube as default - Minikube is now the recommended K8s cluster type with guided setup and auto-recovery
• Port forward cleanup - Wizard tracks and terminates kubectl port-forward processes on dismiss
• Narrowed Lima recovery - VM recovery only triggers on known stale-state errors, preventing unnecessary restarts

Zenithal 1.0.1

• Grid and list view modes for the Containers screen
• User-configurable resource limits in Settings
• Resource Guard to prevent VM overload from too many containers
• Editable YAML tab and custom template saving for Compose projects
• Deployment failure state indicators on Compose project cards
• Start progress toasts for Compose project operations
• Centralized auto-refresh for faster container visibility after deployments
• Fixed UI blocking during Compose template creation and image pulls
• Fixed Django+Celery, Uptime Kuma, and other Compose template errors
• Fixed UDP port YAML quoting in Compose Builder
• Fixed "Modifying state during view update" warnings
• Performance improvements: lazy rendering, cached grouping, pre-computed volume lookups
• Fixed 60s+ UI freeze on startup with many containers
• Background container launch from templates with pull progress bar
• Comprehensive security audit remediation across all shell commands
• OAuth PKCE support for Google and GitHub sign-in
• Image push improvements with registry authentication
• Kubernetes cluster management and resource wizards
• Security vulnerability scanning for container images
• Performance profiler and resource monitoring

Initial release of Zenithal - Docker & Kubernetes GUI for macOS.

• Container dashboard with real-time monitoring
• Docker Compose orchestration
• Kubernetes integration & migration
• Built-in security scanning with Trivy
• Image management and registry support
• Volume and network management
• Native SwiftUI interface