Release 0.3.10

What's Changed

• fix(deps): bump langchain-openai, langchain-core, langchain-text-splitters to fix CVEs by @sriaradhyula in #1248
• fix(deps): bump pypdf, python-multipart, authlib, langsmith to fix CVEs by @sriaradhyula in #1250
• fix(docker): upgrade base images, binaries, and patch system CVEs by @sriaradhyula in #1251
• fix(security): resolve CodeQL source code alerts and update GitHub Actions by @sriaradhyula in #1252
• fix(supervisor): stream curl tool responses to client by @sriaradhyula in #1255
• chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 by @dependabot[bot] in #1265
• chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1264
• chore(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 by @dependabot[bot] in #1263
• chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 by @dependabot[bot] in #1262
• chore(deps): bump the github group with 2 updates by @dependabot[bot] in #1261
• fix(helm): single-node MCP ServiceAccounts and configurable name prefix by @sriaradhyula in #1267
• fix(admin): resolve stats bugs, add users pagination, channel filter, and loading indicators by @kevkantes in #1266

Full Changelog: 0.3.8...0.3.10

Release 0.3.9

What's Changed

• fix(Dockerfile): Standardise non-root user configuration for Dockerfiles in repo by @myauie in #1246
• fix(supervisor): add curl tool for PUT/POST support and web fetching by @sriaradhyula in #1242
• feat(helm): Enable Vertical Pod Autoscaling across all charts by @myauie in #1224
• fix(deps): bump langchain-openai, langchain-core, langchain-text-splitters to fix CVEs by @sriaradhyula in #1248
• fix(deps): bump pypdf, python-multipart, authlib, langsmith to fix CVEs by @sriaradhyula in #1250
• fix(docker): upgrade base images, binaries, and patch system CVEs by @sriaradhyula in #1251
• fix(security): resolve CodeQL source code alerts and update GitHub Actions by @sriaradhyula in #1252
• fix(supervisor): stream curl tool responses to client by @sriaradhyula in #1255
• chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 by @dependabot[bot] in #1265
• chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1264
• chore(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 by @dependabot[bot] in #1263
• chore(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6 by @dependabot[bot] in #1262
• chore(deps): bump the github group with 2 updates by @dependabot[bot] in #1261
• fix(helm): single-node MCP ServiceAccounts and configurable name prefix by @sriaradhyula in #1267

Full Changelog: 0.3.7...0.3.9

Release 0.3.8

What's Changed

• feat(helm): allow custom ingress path for supervisor ingress by @suwhang-cisco in #1243
• fix(slack-bot): remove nonexistent keyword_search param from RAG search prompts by @cisco-erilutz in #1247
• fix(slack): restore v0.2.41 streaming UX and suppress duplicate sub-agent output by @kevkantes in #1245
• fix(Dockerfile): Standardise non-root user configuration for Dockerfiles in repo by @myauie in #1246
• fix(supervisor): add curl tool for PUT/POST support and web fetching by @sriaradhyula in #1242
• feat(helm): Enable Vertical Pod Autoscaling across all charts by @myauie in #1224

Full Changelog: 0.3.6...0.3.8

Release 0.3.7

What's Changed

• fix(supervisor): add defaults to ResponseFormat required bool fields by @sriaradhyula in #1237
• fix(ui): don't persist session-expired errors in chat history by @sriaradhyula in #1236
• fix(ui): pin @testing-library/dom to exact version 10.4.1 by @sriaradhyula in #1239
• fix(a2a): isolate plan state per request to prevent cross-session leak by @sriaradhyula in #1235
• feat(auth): add dual auth middleware for shared key + OAuth2 coexistence by @artdroz in #1229
• feat(helm): allow custom ingress path for supervisor ingress by @suwhang-cisco in #1243
• fix(slack-bot): remove nonexistent keyword_search param from RAG search prompts by @cisco-erilutz in #1247
• fix(slack): restore v0.2.41 streaming UX and suppress duplicate sub-agent output by @kevkantes in #1245

Full Changelog: 0.3.5...0.3.7

---

⚠️ CI BUILD FAILURE ⚠️

One or more CI builds failed for this release. Please investigate and either:

1. Fix the issues and re-run the failed workflows
2. Delete this draft release and create a new one

Updated: 2026-04-17 21:06:32 UTC

Release 0.3.6

What's Changed

• fix(setup-caipe): resolve unbound variable errors with set -u by @sriaradhyula in #1232
• fix(checkpointer): strip ephemeral skills state from MongoDB checkpoint writes by @sriaradhyula in #1234
• fix(supervisor): add defaults to ResponseFormat required bool fields by @sriaradhyula in #1237
• fix(ui): don't persist session-expired errors in chat history by @sriaradhyula in #1236
• fix(ui): pin @testing-library/dom to exact version 10.4.1 by @sriaradhyula in #1239
• fix(a2a): isolate plan state per request to prevent cross-session leak by @sriaradhyula in #1235
• feat(auth): add dual auth middleware for shared key + OAuth2 coexistence by @artdroz in #1229

Full Changelog: 0.3.4...0.3.6

Release 0.3.5

What's Changed

• docs(releases): add migration guide for 0.2.41 → 0.3.2 by @sriaradhyula in #1223
• chore(deps): bump dompurify from 3.3.3 to 3.4.0 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1226
• fix(middleware): allow LLM to synthesize after RAG cap exhaustion by @cisco-erilutz in #1231
• fix(setup-caipe): resolve unbound variable errors with set -u by @sriaradhyula in #1232
• fix(checkpointer): strip ephemeral skills state from MongoDB checkpoint writes by @sriaradhyula in #1234

Full Changelog: 0.3.3...0.3.5

Release 0.3.4

What's Changed

• docs(blog): publish CNCF sandbox post and link PR 904 by @sriaradhyula in #1027
• fix(executor): plan step attribution, false final answer, and sub-agent source bugs by @kevkantes in #1025
• fix(slack-ingestor): detect lookback_days config changes and trigger full re-ingestion by @kevkantes in #1035
• fix(slack-bot): prevent posting to main channel when thread message is deleted by @kevkantes in #1034
• feat(argocd,ui): add directory_recurse and auto-sync task configs on YAML change by @artdroz in #1032
• feat(victorops): multi-org support via VICTOROPS_ORGS env var by @dasein in #1033
• feat(slack): replace custom MCP with korotovsky/slack-mcp-server v1.2.3 by @kevkantes in #1036
• fix(ui): optimize dynamic agent sse and major ux improvements by @subbaksh in #1028
• chore(deps): bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #1030
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.0 by @dependabot[bot] in #1031
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1029
• feat(skills): skills middleware integration with gateway API by @sriaradhyula in #1024
• feat(helm): propagate global.checkpointPersistence to all agent subcharts by @sriaradhyula in #1023
• docs(skills-middleware): fix broken contracts link failing docs build by @sriaradhyula in #1040
• fix(aws): add AWS CLI tools and fix subagent prompt parity in single-node by @artdroz in #1043
• feat(rag): improve MCP search tools and UI by @subbaksh in #1044
• feat(supervisor): add tool error resilience, workflow introspection, and form pre-population by @artdroz in #1062
• feat(rag): add data freshness tracking, cleanup, and dependency pinning by @subbaksh in #1063
• feat(backstage-ingestor): add BACKSTAGE_AUTH_MODE for multi-mode auth by @Analect in #1047
• fix: use workflow_run to post coverage comments from fork PRs by @sriaradhyula in #1081
• fix: pin all GitHub Actions to immutable commit SHAs by @sriaradhyula in #1082
• feat(github): deploy GitHub MCP server as separate HTTP pod by @artdroz in #1077
• chore(deps): bump azure/setup-helm from 4 to 5 by @dependabot[bot] in #1055
• chore(deps): bump astral-sh/setup-uv from 6 to 7 by @dependabot[bot] in #1054
• chore(deps): bump the github group across 1 directory with 2 updates by @dependabot[bot] in #1053
• fix(rag): restore per-result fetch_document markers + raise cap to 10 + 49 tests by @sriaradhyula in #1069
• chore(deps): bump the uv group across 3 directories with 16 updates by @dependabot[bot] in #1087
• feat: add Grype container scan on version tag push by @sriaradhyula in #1084
• fix(subagent): normalize MCP tool results for content_and_artifact response format by @artdroz in #1105
• ci(release): add workflow to auto-sync main → release branches by @sriaradhyula in #1107
• feat(admin): enhanced platform statistics with Slack integration and unified filters by @kevkantes in #1094
• feat(db): auto-migrate web feedback on app startup by @kevkantes in #1109
• fix(deps): upgrade nltk==3.9.4, fastmcp==3.2.0, mcp==1.26.0 for critical CVEs by @sriaradhyula in #1103
• chore(metrics): remove one-time backfill scripts by @kevkantes in #1111
• ci(coverage-comment): fix artifact poisoning by removing unnecessary checkout by @sriaradhyula in #1102
• ci(workflows): refactor quick sanity integration into release-tag and dev workflows by @sriaradhyula in #1026
• chore(ui): pin all npm deps to exact versions by @sriaradhyula in #1114
• chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1117
• chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui by @dependabot[bot] in #1099
• chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates by @dependabot[bot] in #1118
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1 in /ai_platform_engineering/mcp/mcp_github in the go_modules group across 1 directory by @dependabot[bot] in #1093
• ci(tests): use prebuilt GHCR images in dev integration test by @sriaradhyula in #1119
• fix(dev): add caipe-supervisor-all-in-one service for single-node mode by @sriaradhyula in #1068
• fix(mcp): move host/port from FastMCP() constructor to mcp.run() for fastmcp 3.x compat by @sriaradhyula in #1122
• feat(security): rename to Grype Scan, add container image scanning for all 35 published images by @sriaradhyula in #1126
• refactor: consolidate A2A server into shared abstraction by @sriaradhyula in #1116
• feat(dynamic-agents): add OIDC_REQUIRED_DYNAMIC_AGENTS_GROUP env var by @sriaradhyula in #1128
• fix(dev): local dev no-SSO mode, Jira ADF descriptions, Docker networking by @cisco-erilutz in #1129
• chore(deps): pin all Python and Node deps to exact versions by @sriaradhyula in #1133
• chore(ui): remove unused @CopilotKit dependencies by @sriaradhyula in #1135
• fix(test): remove unused TestClient import in test_auth.py by @sriaradhyula in #1136
• fix(deps): pin langchain-core==1.2.26 to fix CVE-2025-68664 by @sriaradhyula in #1125
• feat(slack-bot): add escalation workflows, fix feedback/streaming bugs by @kevkantes in #1123
• refactor(rag): rename graph_entity to structured_entity with bug fixes by @subbaksh in #1092
• feat(dynamic-agents): AI-assisted suggestions and UX improvements for Custom Agent Builder by @subbaksh in #1142
• feat(supervisor): add ModelRetryMiddleware, gate GitHub MCP tools, bump cnoe-agent-utils by @artdroz in #1141
• fix(ui): fix conversations tab pagination and search by @subbaksh in #1144
• ci(workflow): fix YAML syntax error in sync-release-branches by @sriaradhyula in #1147
• fix(aigateway): update multiple llm providers in a batch and use lock by @suwhang-cisco in #1150
• feat: Default enable metrics endpoints by @myauie in #1064
• fix(slack-bot): mount botConfig as file, add PDB and maxUnavailable=0 by @kevkantes in #1154
• feat(github-mcp): add template support to create_repository tool by @artdroz in #1155
• Potential fix for code scanning alert no. 1832: Artifact poisoning by @sriaradhyula in #1159
• ci(release): add RC tag and Helm RC pipelines for release/* branches by @sriaradhyula in #1160
• fix: OIDC group display, task builder tools, and supervisor response format by @sriaradhyula in #1140
• fix(github-mcp): bump Go builder image to 1.25-alpine by @sriaradhyula in #1170
• fix(slack-b...

Release 0.3.3

What's Changed

• docs(blog): publish CNCF sandbox post and link PR 904 by @sriaradhyula in #1027
• fix(executor): plan step attribution, false final answer, and sub-agent source bugs by @kevkantes in #1025
• fix(slack-ingestor): detect lookback_days config changes and trigger full re-ingestion by @kevkantes in #1035
• fix(slack-bot): prevent posting to main channel when thread message is deleted by @kevkantes in #1034
• feat(argocd,ui): add directory_recurse and auto-sync task configs on YAML change by @artdroz in #1032
• feat(victorops): multi-org support via VICTOROPS_ORGS env var by @dasein in #1033
• feat(slack): replace custom MCP with korotovsky/slack-mcp-server v1.2.3 by @kevkantes in #1036
• fix(ui): optimize dynamic agent sse and major ux improvements by @subbaksh in #1028
• chore(deps): bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #1030
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.0 by @dependabot[bot] in #1031
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1029
• feat(skills): skills middleware integration with gateway API by @sriaradhyula in #1024
• feat(helm): propagate global.checkpointPersistence to all agent subcharts by @sriaradhyula in #1023
• docs(skills-middleware): fix broken contracts link failing docs build by @sriaradhyula in #1040
• fix(aws): add AWS CLI tools and fix subagent prompt parity in single-node by @artdroz in #1043
• feat(rag): improve MCP search tools and UI by @subbaksh in #1044
• feat(supervisor): add tool error resilience, workflow introspection, and form pre-population by @artdroz in #1062
• feat(rag): add data freshness tracking, cleanup, and dependency pinning by @subbaksh in #1063
• feat(backstage-ingestor): add BACKSTAGE_AUTH_MODE for multi-mode auth by @Analect in #1047
• fix: use workflow_run to post coverage comments from fork PRs by @sriaradhyula in #1081
• fix: pin all GitHub Actions to immutable commit SHAs by @sriaradhyula in #1082
• feat(github): deploy GitHub MCP server as separate HTTP pod by @artdroz in #1077
• chore(deps): bump azure/setup-helm from 4 to 5 by @dependabot[bot] in #1055
• chore(deps): bump astral-sh/setup-uv from 6 to 7 by @dependabot[bot] in #1054
• chore(deps): bump the github group across 1 directory with 2 updates by @dependabot[bot] in #1053
• fix(rag): restore per-result fetch_document markers + raise cap to 10 + 49 tests by @sriaradhyula in #1069
• chore(deps): bump the uv group across 3 directories with 16 updates by @dependabot[bot] in #1087
• feat: add Grype container scan on version tag push by @sriaradhyula in #1084
• fix(subagent): normalize MCP tool results for content_and_artifact response format by @artdroz in #1105
• ci(release): add workflow to auto-sync main → release branches by @sriaradhyula in #1107
• feat(admin): enhanced platform statistics with Slack integration and unified filters by @kevkantes in #1094
• feat(db): auto-migrate web feedback on app startup by @kevkantes in #1109
• fix(deps): upgrade nltk==3.9.4, fastmcp==3.2.0, mcp==1.26.0 for critical CVEs by @sriaradhyula in #1103
• chore(metrics): remove one-time backfill scripts by @kevkantes in #1111
• ci(coverage-comment): fix artifact poisoning by removing unnecessary checkout by @sriaradhyula in #1102
• ci(workflows): refactor quick sanity integration into release-tag and dev workflows by @sriaradhyula in #1026
• chore(ui): pin all npm deps to exact versions by @sriaradhyula in #1114
• chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1117
• chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui by @dependabot[bot] in #1099
• chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates by @dependabot[bot] in #1118
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1 in /ai_platform_engineering/mcp/mcp_github in the go_modules group across 1 directory by @dependabot[bot] in #1093
• ci(tests): use prebuilt GHCR images in dev integration test by @sriaradhyula in #1119
• fix(dev): add caipe-supervisor-all-in-one service for single-node mode by @sriaradhyula in #1068
• fix(mcp): move host/port from FastMCP() constructor to mcp.run() for fastmcp 3.x compat by @sriaradhyula in #1122
• feat(security): rename to Grype Scan, add container image scanning for all 35 published images by @sriaradhyula in #1126
• refactor: consolidate A2A server into shared abstraction by @sriaradhyula in #1116
• feat(dynamic-agents): add OIDC_REQUIRED_DYNAMIC_AGENTS_GROUP env var by @sriaradhyula in #1128
• fix(dev): local dev no-SSO mode, Jira ADF descriptions, Docker networking by @cisco-erilutz in #1129
• chore(deps): pin all Python and Node deps to exact versions by @sriaradhyula in #1133
• chore(ui): remove unused @CopilotKit dependencies by @sriaradhyula in #1135
• fix(test): remove unused TestClient import in test_auth.py by @sriaradhyula in #1136
• fix(deps): pin langchain-core==1.2.26 to fix CVE-2025-68664 by @sriaradhyula in #1125
• feat(slack-bot): add escalation workflows, fix feedback/streaming bugs by @kevkantes in #1123
• refactor(rag): rename graph_entity to structured_entity with bug fixes by @subbaksh in #1092
• feat(dynamic-agents): AI-assisted suggestions and UX improvements for Custom Agent Builder by @subbaksh in #1142
• feat(supervisor): add ModelRetryMiddleware, gate GitHub MCP tools, bump cnoe-agent-utils by @artdroz in #1141
• fix(ui): fix conversations tab pagination and search by @subbaksh in #1144
• ci(workflow): fix YAML syntax error in sync-release-branches by @sriaradhyula in #1147
• fix(aigateway): update multiple llm providers in a batch and use lock by @suwhang-cisco in #1150
• feat: Default enable metrics endpoints by @myauie in #1064
• fix(slack-bot): mount botConfig as file, add PDB and maxUnavailable=0 by @kevkantes in #1154
• feat(github-mcp): add template support to create_repository tool by @artdroz in #1155
• Potential fix for code scanning alert no. 1832: Artifact poisoning by @sriaradhyula in #1159
• ci(release): add RC tag and Helm RC pipelines for release/* branches by @sriaradhyula in #1160
• fix: OIDC group display, task builder tools, and supervisor response format by @sriaradhyula in #1140
• fix(github-mcp): bump Go builder image to 1.25-alpine by @sriaradhyula in https://...

Release 0.3.2

What's Changed

• docs(blog): publish CNCF sandbox post and link PR 904 by @sriaradhyula in #1027
• fix(executor): plan step attribution, false final answer, and sub-agent source bugs by @kevkantes in #1025
• fix(slack-ingestor): detect lookback_days config changes and trigger full re-ingestion by @kevkantes in #1035
• fix(slack-bot): prevent posting to main channel when thread message is deleted by @kevkantes in #1034
• feat(argocd,ui): add directory_recurse and auto-sync task configs on YAML change by @artdroz in #1032
• feat(victorops): multi-org support via VICTOROPS_ORGS env var by @dasein in #1033
• feat(slack): replace custom MCP with korotovsky/slack-mcp-server v1.2.3 by @kevkantes in #1036
• fix(ui): optimize dynamic agent sse and major ux improvements by @subbaksh in #1028
• chore(deps): bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #1030
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.0 by @dependabot[bot] in #1031
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1029
• feat(skills): skills middleware integration with gateway API by @sriaradhyula in #1024
• feat(helm): propagate global.checkpointPersistence to all agent subcharts by @sriaradhyula in #1023
• docs(skills-middleware): fix broken contracts link failing docs build by @sriaradhyula in #1040
• fix(aws): add AWS CLI tools and fix subagent prompt parity in single-node by @artdroz in #1043
• feat(rag): improve MCP search tools and UI by @subbaksh in #1044
• feat(supervisor): add tool error resilience, workflow introspection, and form pre-population by @artdroz in #1062
• feat(rag): add data freshness tracking, cleanup, and dependency pinning by @subbaksh in #1063
• feat(backstage-ingestor): add BACKSTAGE_AUTH_MODE for multi-mode auth by @Analect in #1047
• fix: use workflow_run to post coverage comments from fork PRs by @sriaradhyula in #1081
• fix: pin all GitHub Actions to immutable commit SHAs by @sriaradhyula in #1082
• feat(github): deploy GitHub MCP server as separate HTTP pod by @artdroz in #1077
• chore(deps): bump azure/setup-helm from 4 to 5 by @dependabot[bot] in #1055
• chore(deps): bump astral-sh/setup-uv from 6 to 7 by @dependabot[bot] in #1054
• chore(deps): bump the github group across 1 directory with 2 updates by @dependabot[bot] in #1053
• fix(rag): restore per-result fetch_document markers + raise cap to 10 + 49 tests by @sriaradhyula in #1069
• chore(deps): bump the uv group across 3 directories with 16 updates by @dependabot[bot] in #1087
• feat: add Grype container scan on version tag push by @sriaradhyula in #1084
• fix(subagent): normalize MCP tool results for content_and_artifact response format by @artdroz in #1105
• ci(release): add workflow to auto-sync main → release branches by @sriaradhyula in #1107
• feat(admin): enhanced platform statistics with Slack integration and unified filters by @kevkantes in #1094
• feat(db): auto-migrate web feedback on app startup by @kevkantes in #1109
• fix(deps): upgrade nltk==3.9.4, fastmcp==3.2.0, mcp==1.26.0 for critical CVEs by @sriaradhyula in #1103
• chore(metrics): remove one-time backfill scripts by @kevkantes in #1111
• ci(coverage-comment): fix artifact poisoning by removing unnecessary checkout by @sriaradhyula in #1102
• ci(workflows): refactor quick sanity integration into release-tag and dev workflows by @sriaradhyula in #1026
• chore(ui): pin all npm deps to exact versions by @sriaradhyula in #1114
• chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1117
• chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui by @dependabot[bot] in #1099
• chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates by @dependabot[bot] in #1118
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1 in /ai_platform_engineering/mcp/mcp_github in the go_modules group across 1 directory by @dependabot[bot] in #1093
• ci(tests): use prebuilt GHCR images in dev integration test by @sriaradhyula in #1119
• fix(dev): add caipe-supervisor-all-in-one service for single-node mode by @sriaradhyula in #1068
• fix(mcp): move host/port from FastMCP() constructor to mcp.run() for fastmcp 3.x compat by @sriaradhyula in #1122
• feat(security): rename to Grype Scan, add container image scanning for all 35 published images by @sriaradhyula in #1126
• refactor: consolidate A2A server into shared abstraction by @sriaradhyula in #1116
• feat(dynamic-agents): add OIDC_REQUIRED_DYNAMIC_AGENTS_GROUP env var by @sriaradhyula in #1128
• fix(dev): local dev no-SSO mode, Jira ADF descriptions, Docker networking by @cisco-erilutz in #1129
• chore(deps): pin all Python and Node deps to exact versions by @sriaradhyula in #1133
• chore(ui): remove unused @CopilotKit dependencies by @sriaradhyula in #1135
• fix(test): remove unused TestClient import in test_auth.py by @sriaradhyula in #1136
• fix(deps): pin langchain-core==1.2.26 to fix CVE-2025-68664 by @sriaradhyula in #1125
• feat(slack-bot): add escalation workflows, fix feedback/streaming bugs by @kevkantes in #1123
• refactor(rag): rename graph_entity to structured_entity with bug fixes by @subbaksh in #1092
• feat(dynamic-agents): AI-assisted suggestions and UX improvements for Custom Agent Builder by @subbaksh in #1142
• feat(supervisor): add ModelRetryMiddleware, gate GitHub MCP tools, bump cnoe-agent-utils by @artdroz in #1141
• fix(ui): fix conversations tab pagination and search by @subbaksh in #1144
• ci(workflow): fix YAML syntax error in sync-release-branches by @sriaradhyula in #1147
• fix(aigateway): update multiple llm providers in a batch and use lock by @suwhang-cisco in #1150
• feat: Default enable metrics endpoints by @myauie in #1064
• fix(slack-bot): mount botConfig as file, add PDB and maxUnavailable=0 by @kevkantes in #1154
• feat(github-mcp): add template support to create_repository tool by @artdroz in #1155
• Potential fix for code scanning alert no. 1832: Artifact poisoning by @sriaradhyula in #1159
• ci(release): add RC tag and Helm RC pipelines for release/* branches by @sriaradhyula in #1160
• fix: OIDC group display, task builder tools, and supervisor response format by @sriaradhyula in #1140
• fix(github-mcp): bump Go builder image to 1.25-alpine by @sriaradhyula in https://...

Release 0.3.1

What's Changed

• docs(blog): publish CNCF sandbox post and link PR 904 by @sriaradhyula in #1027
• fix(executor): plan step attribution, false final answer, and sub-agent source bugs by @kevkantes in #1025
• fix(slack-ingestor): detect lookback_days config changes and trigger full re-ingestion by @kevkantes in #1035
• fix(slack-bot): prevent posting to main channel when thread message is deleted by @kevkantes in #1034
• feat(argocd,ui): add directory_recurse and auto-sync task configs on YAML change by @artdroz in #1032
• feat(victorops): multi-org support via VICTOROPS_ORGS env var by @dasein in #1033
• feat(slack): replace custom MCP with korotovsky/slack-mcp-server v1.2.3 by @kevkantes in #1036
• fix(ui): optimize dynamic agent sse and major ux improvements by @subbaksh in #1028
• chore(deps): bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #1030
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.0 by @dependabot[bot] in #1031
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1029
• feat(skills): skills middleware integration with gateway API by @sriaradhyula in #1024
• feat(helm): propagate global.checkpointPersistence to all agent subcharts by @sriaradhyula in #1023
• docs(skills-middleware): fix broken contracts link failing docs build by @sriaradhyula in #1040
• fix(aws): add AWS CLI tools and fix subagent prompt parity in single-node by @artdroz in #1043
• feat(rag): improve MCP search tools and UI by @subbaksh in #1044
• feat(supervisor): add tool error resilience, workflow introspection, and form pre-population by @artdroz in #1062
• feat(rag): add data freshness tracking, cleanup, and dependency pinning by @subbaksh in #1063
• feat(backstage-ingestor): add BACKSTAGE_AUTH_MODE for multi-mode auth by @Analect in #1047
• fix: use workflow_run to post coverage comments from fork PRs by @sriaradhyula in #1081
• fix: pin all GitHub Actions to immutable commit SHAs by @sriaradhyula in #1082
• feat(github): deploy GitHub MCP server as separate HTTP pod by @artdroz in #1077
• chore(deps): bump azure/setup-helm from 4 to 5 by @dependabot[bot] in #1055
• chore(deps): bump astral-sh/setup-uv from 6 to 7 by @dependabot[bot] in #1054
• chore(deps): bump the github group across 1 directory with 2 updates by @dependabot[bot] in #1053
• fix(rag): restore per-result fetch_document markers + raise cap to 10 + 49 tests by @sriaradhyula in #1069
• chore(deps): bump the uv group across 3 directories with 16 updates by @dependabot[bot] in #1087
• feat: add Grype container scan on version tag push by @sriaradhyula in #1084
• fix(subagent): normalize MCP tool results for content_and_artifact response format by @artdroz in #1105
• ci(release): add workflow to auto-sync main → release branches by @sriaradhyula in #1107
• feat(admin): enhanced platform statistics with Slack integration and unified filters by @kevkantes in #1094
• feat(db): auto-migrate web feedback on app startup by @kevkantes in #1109
• fix(deps): upgrade nltk==3.9.4, fastmcp==3.2.0, mcp==1.26.0 for critical CVEs by @sriaradhyula in #1103
• chore(metrics): remove one-time backfill scripts by @kevkantes in #1111
• ci(coverage-comment): fix artifact poisoning by removing unnecessary checkout by @sriaradhyula in #1102
• ci(workflows): refactor quick sanity integration into release-tag and dev workflows by @sriaradhyula in #1026
• chore(ui): pin all npm deps to exact versions by @sriaradhyula in #1114
• chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1117
• chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui by @dependabot[bot] in #1099
• chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates by @dependabot[bot] in #1118
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.4.1 in /ai_platform_engineering/mcp/mcp_github in the go_modules group across 1 directory by @dependabot[bot] in #1093
• ci(tests): use prebuilt GHCR images in dev integration test by @sriaradhyula in #1119
• fix(dev): add caipe-supervisor-all-in-one service for single-node mode by @sriaradhyula in #1068
• fix(mcp): move host/port from FastMCP() constructor to mcp.run() for fastmcp 3.x compat by @sriaradhyula in #1122
• feat(security): rename to Grype Scan, add container image scanning for all 35 published images by @sriaradhyula in #1126
• refactor: consolidate A2A server into shared abstraction by @sriaradhyula in #1116
• feat(dynamic-agents): add OIDC_REQUIRED_DYNAMIC_AGENTS_GROUP env var by @sriaradhyula in #1128
• fix(dev): local dev no-SSO mode, Jira ADF descriptions, Docker networking by @cisco-erilutz in #1129
• chore(deps): pin all Python and Node deps to exact versions by @sriaradhyula in #1133
• chore(ui): remove unused @CopilotKit dependencies by @sriaradhyula in #1135
• fix(test): remove unused TestClient import in test_auth.py by @sriaradhyula in #1136
• fix(deps): pin langchain-core==1.2.26 to fix CVE-2025-68664 by @sriaradhyula in #1125
• feat(slack-bot): add escalation workflows, fix feedback/streaming bugs by @kevkantes in #1123
• refactor(rag): rename graph_entity to structured_entity with bug fixes by @subbaksh in #1092
• feat(dynamic-agents): AI-assisted suggestions and UX improvements for Custom Agent Builder by @subbaksh in #1142
• feat(supervisor): add ModelRetryMiddleware, gate GitHub MCP tools, bump cnoe-agent-utils by @artdroz in #1141
• fix(ui): fix conversations tab pagination and search by @subbaksh in #1144
• ci(workflow): fix YAML syntax error in sync-release-branches by @sriaradhyula in #1147
• fix(aigateway): update multiple llm providers in a batch and use lock by @suwhang-cisco in #1150
• feat: Default enable metrics endpoints by @myauie in #1064
• fix(slack-bot): mount botConfig as file, add PDB and maxUnavailable=0 by @kevkantes in #1154
• feat(github-mcp): add template support to create_repository tool by @artdroz in #1155
• Potential fix for code scanning alert no. 1832: Artifact poisoning by @sriaradhyula in #1159
• ci(release): add RC tag and Helm RC pipelines for release/* branches by @sriaradhyula in #1160
• fix: OIDC group display, task builder tools, and supervisor response format by @sriaradhyula in #1140
• fix(github-mcp): bump Go builder image to 1.25-alpine by @sriaradhyula in https://...