Skip to main content
​
v1.4.10
Breaking changes in v1.4.0. See the v1.4.0 Migration Guide for full before/after examples, automatic migration details, and a step-by-step checklist before upgrading.

​
Changelog

A platform and reliability release on transports/v1.5.14. The headline work is a new skills repository - a full dashboard, config-based registry, and management/serving APIs, wired with enterprise RBAC so skills are governed like the rest of the workspace. This release also hardens config-as-source-of-truth sync with a deterministic file-wins path, aligns SCIM provisioning with the OIDC default-access-profile behavior, and overhauls migration cataloguing and logging across Postgres and SQLite.

​
✨ Features

  • Skills Repository (OSS) - New skills repository with a dashboard UI (security warnings, navigation and access state), a config-based registry, and management plus serving APIs.
  • Skills Repository RBAC (enterprise) - SkillsRepository is now a first-class enterprise RBAC resource with Create/View/Update/Delete operations, default role grants (Admin and Developer full CRUD, Viewer view-only), /api/skills/* route mapping with public /api/skills/serve/*, and an idempotent seed migration for existing installs.
  • OpenCode Gateway Providers (OSS) - Added support for OpenCode gateway providers (Go, Zen).
  • Advisor Tool Compatibility (OSS) - Added advisor tool compatibility for Claude.
  • Environment Label Banner (OSS) - Added an environment label banner to the sidebar so the active environment is visible at a glance.
  • Datadog Plugin Host/Port (OSS + enterprise) - Datadog Agent and DogStatsD endpoints now accept separate host and port fields (each supporting env var references), enabling Kubernetes downward-API host injection, with a clear precedence order over the combined addr field.
  • Postgres Password Command (OSS) - Added support for sourcing the Postgres password from a command.
  • Deterministic Config File-Wins Sync (OSS + enterprise) - When source_of_truth=config.json, plugins, governance entities, and client config now force file-wins sync. A new forceFileSync flag on every reconcile function (guardrails, access profiles, roles, business units, MCP tool groups) bypasses hash-match preservation so config.json always wins for its declared resource types, preventing DB drift from manual edits.

​
🐞 Fixed

  • Inference Auth via Virtual Key (OSS) - Inference authentication is now delegated entirely to the governance plugin (the authoritative virtual-key validator). VK-authenticated inference requests no longer return 401 Unauthorized when dashboard password auth is enabled, and admin-password auth is now exclusive to dashboard/API routes.
  • SCIM Default Access Profile (enterprise) - The role’s default access profile is now always auto-assigned during SCIM provisioning, even when the user’s role does not change, aligning SCIM behavior with the OIDC login flow. The assignment is idempotent, so repeated syncs do not create duplicates.
  • Migration Cataloguing and Logging (enterprise) - Migration flows now use an explicit logger for consistent output, pending migrations are handled correctly for SQLite as well as Postgres, and duplicate migration runs were eliminated.
  • MCP Library Cleanup (OSS) - Custom MCP library entries are now hard-deleted and remote ones tombstoned.
  • Skills API Response Bloat (OSS) - Cleared backend response bloat on skills APIs and adjusted the orphan-cleanup grace period.
  • Bedrock Tool Result Order (OSS) - Preserved tool_result order to match parallel tool_use blocks.
  • Bedrock Cache TTL (OSS) - Set TTL in Bedrock cache points.
  • Gemini/Vertex Batch Conversion (OSS) - Fixed request conversion for Gemini/Vertex batch requests.
  • Routing-Pinned Key ID (OSS) - Commit the routing-pinned key ID to the reserved BifrostContextKeyAPIKeyID after PreRequestHook unblock.
  • Responses max_output_tokens (OSS) - Preserved max_output_tokens on Responses requests.
  • VK Provider Blacklist Migration (OSS) - Run the VK provider blacklist migration before backfill.
  • Ranking Trends Accuracy (OSS) - Stopped double-counting the boundary hour in matview ranking trends and gated ranking readers on the fresh-aggregate matview window.
  • Logstore Migrations (OSS) - Fixed duplicate migration runs for the logstore and added logging across all migrations.
  • MCP Usage Guide Button (OSS) - Fixed styling of the “Connect agent” trigger button in the MCP usage guide.

​
📀 Base OSS version

transports/v1.5.14

​
🔌 If you are compiling plugin against this release - use following deps