Runbook cancellation survives control-plane restarts, retried MCP draft changes recover their original results, and checkout retries share a durable reservation. This release also removes unused code and duplicated helpers across the product.
Upgrade note
Self-hosters using live billing must stop old checkout producers and finish their in-flight requests before enabling checkout traffic on this version. Follow the first durable-checkout rollout procedure. Existing unresolved payment links block a fresh checkout; subscription cancellation stops recurrence but leaves the initial charge unchanged.
Older MCP draft operations without a saved result return operation_incomplete. Inspect the current draft before making another change.
Security and recovery
- SSO provider trust changes and session revocation commit together.
- OAuth client-metadata fetching has one deadline for the complete request.
- Runner redaction now masks long private-key blocks and sensitive argument values cut by output limits. Default rules preserve public AWS access-key IDs while masking recognized secret-key and session-token fields.
- MCP uninstall capability probes run as the invoking user, without elevated privileges.
- Concurrent index migrations recover interrupted builds and verify their definitions before continuing.
- The HTTP client dependency includes fixes for two HTTP/1 parsing advisories.
Runner and MCP
- Encoded progress messages remain within the transport limit; output caps preserve valid UTF-8.
- Installers handle IPv6 loopback origins, per-copy MCP upgrades, and retained configuration reporting.
- When GitHub CLI is unavailable for provenance verification, interactive installers ask whether to continue and noninteractive installs print a warning.
- Runner 0.26.0 and MCP Bridge 0.13.0 accompany this product release.
Console and operations
- Manual agent setup uses platform-correct commands and configuration paths.
- Copy buttons preserve literal content and whitespace, omit presentation prompts, and recover correctly after repeated clicks.
- Unadvertised retired pack versions can be removed again.
- Audit CSV exports stream instead of materializing the entire export.
- Cron log reads retain short-lived jobs whose journal entries lack unit metadata.
- Database availability monitoring selects the correct metric identity.
Validation exception
CI/CD passed all 132 jobs. MCP client qualification passed seven of eight cases: GPT-5.6 Luna shortened a pack hash and could not complete one task. The evaluator refused the malformed dispatches; no action ran in that case. The release owner approved a one-release waiver of further qualification. The failed result remains recorded.