v2026.05.12 Core Systems Rewrite

Caracal v2026.05.12

This release includes a major architecture update with the move toward a TypeScript and Go codebase, along with continued hardening of security, reliability, and core infrastructure. It also marks a broader rebuild of the project foundation and development workflow.

Highlights

• New maintainer onboarded: @Slo-Pix
• Contributions in this version from @yashgo0018 and @RAWx18
• Major architecture improvements
• Language transition to TypeScript and Go
• Continued security and reliability work across the core system

Release summary
This version focuses on strengthening the project’s long-term foundation. The codebase is being reorganized for clearer structure, better maintainability, and a more scalable architecture as Caracal moves into its next phase.

Acknowledgements
Special thanks to @Slo-Pix for joining as maintainer, and to @yashgo0018 and @RAWx18 for their contributions in this release.

What's Changed

• Potential fix for code scanning alert no. 122: Uncontrolled data used in path expression by @RAWx18 in #118
• Optimizations by @yashgo0018 in #123
• fix: resolve docs dependabot alerts by @yashgo0018 in #124
• fix: pin path-to-regexp for docs build by @yashgo0018 in #126
• Fix mock server robustness, URL constants, API key masking, and test precision by @Copilot in #127
• Rewrite: Introduce new architecture and migrate core system to Go & TypeScript by @RAWx18 in #129
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 in /services/gateway by @dependabot[bot] in #131
• chore(deps): bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.2 in /services/sts by @dependabot[bot] in #130
• fix: Update CNAME and site URL to reflect new domain for documentation by @RAWx18 in #132
• update by @RAWx18 in #147
• Update README to reflect accurate description of Caracal's functional… by @RAWx18 in #148
• Security Fix by @RAWx18 in #150
• docs: redesign landing page (#134) [1/3] by @Slo-Pix in #151
• Enhance configuration, JWT handling, and Redis client features by @RAWx18 in #152
• Refactor import paths and enhance core package functionality by @RAWx18 in #153
• Refactor Caracal references and enhance claims and session handling by @RAWx18 in #156
• docs: landing page polish(#134)[2/3] by @Slo-Pix in #157
• Enhance Caracal SDK with new features, refactoring, and type safety by @RAWx18 in #158
• Fix for Unused variable, import, function or class by @RAWx18 in #159
• Fix for Unused variable, import, function or class by @RAWx18 in #160
• Refactor and enhance services, routes, and documentation updates by @RAWx18 in #166
• Enhance MCP authentication and transport packages with Docker updates by @RAWx18 in #167
• feat: update CI scripts for TypeScript build and Go vet checks by @RAWx18 in #168
• Add Bun setup to CI and update SDK build test script by @RAWx18 in #169
• Add Bun setup to CI and update SDK build test script by @RAWx18 in #170
• Refactor SDK and dependency updates for improved agent handling by @RAWx18 in #171
• docs: section hubs, branded 404, SEO, and inner-doc UX [3/3] by @Slo-Pix in #172
• Enhance health checks, Redis integration, and add unit tests by @RAWx18 in #173
• feat: update PNPM version to 11.0.9 in workflows and add redis connec… by @RAWx18 in #174
• Add onlyBuiltDependencies configuration for PNPM in package.json by @RAWx18 in #175
• Add onlyBuiltDependencies configuration for PNPM in package.json by @RAWx18 in #176
• Fix requiresBuild for esbuild and sharp in lockfile snapshots by @RAWx18 in #177
• Fix esbuild and sharp builds approval in pnpm-workspace by @RAWx18 in #178

New Contributors

• @Slo-Pix made their first contribution in #151

Full Changelog: v2026.02.01...v2026.05.12