Skip to main content
​
v1.5.1

​
Changelog

Release on transports/v1.6.1. Decouples the IdP-assigned identity from Bifrost’s local user primary key for SCIM and OIDC users (with a backfill migration), enriches BigQuery storage-API exports with full token, response, and trace detail, and scopes gossip cluster membership with an explicit cluster identifier.

​
✨ Features

  • Stable Local User Identity for SCIM/OIDC - Added source_id and source_name columns to governance_users so the IdP-assigned identifier is stored separately from Bifrost’s stable local primary key. A new ent_add_user_source_fields migration backfills existing IdP-managed users, all SCIM import paths (Okta, Entra, SailPoint, Zitadel, Keycloak, Google Workspace, Auth0) now resolve users via GetUserBySourceID, and status reconciliation compares against source_id so manually-created users are no longer disturbed.
  • Enriched BigQuery Trace Exports - The BigQuery Storage Write API writer now serializes additional fields on each trace row, including request_id, prompt/completion token breakdowns (cached read/write, reasoning, accepted/rejected prediction tokens), response metadata (response_id, response_object, response_created, system_fingerprint, service_tier), and dimensions plus request_headers.
  • Cluster Identifier in Gossip - Added an explicit cluster identifier to the gossip and memberlist join flow so nodes only form membership with peers belonging to the same logical cluster, preventing cross-cluster gossip when deployments share a network.

​
🐞 Fixed

  • BigQuery Writer Shutdown Panic - Extracted managed-stream teardown into a closeManaged method with panic recovery, so the Storage Write API client no longer crashes the process during shutdown under certain error conditions.
  • BigQuery Service Account Auth - The managedwriter.NewClient call now receives the same credential options as the primary client, so an explicitly configured service_account_key is honored instead of silently falling back to ADC.
  • OIDC Source ID Resolution - The OAuth callback and NotifyUserTeamMembershipsChange now resolve the IdP subject to the local primary key, so session rows and team membership notifications reference the correct governance_users ID instead of the raw IdP subject.
  • Team ID Migration Safety - Removed the destructive UUID reassignment phase from the migrateTeamIDsToUUID migration; it now only applies ON UPDATE CASCADE constraints and leaves existing team primary keys untouched.
  • Logs Page URL Parsing - Array query parameters on the logs page now use parseAsSafeArrayOf, correctly handling special characters in URLs.
  • Bedrock Usage Calculation - Fixed token usage calculation for the Bedrock provider.
  • Hybrid Log Token Usage - Token usage is now rebuilt from denormalized columns in the hybrid log list.

​
📀 Base OSS version

transports/v1.6.1

​
🔌 If you are compiling plugin against this release - use following deps