Version 3.261022.0

Enhancements:

• #8651 ci: pin GitHub-hosted runners to ubuntu-24.04
• #8604 feat(chatbot): show and download the decks, reports and videos XTM One makes in Ask Ariane
• #8576 feat(chatbot): proxy the decks, reports and videos XTM One makes to the embedded chat
• #8574 feat(xtm-hub): add a parameter to the XTM Hub browser messages
• #7905 feat(multitenancy): API isolation v2 injector_contract GThreadArsenal
• #6428 feat(multitenancy): API isolation v2 workflow GEngineExec
• #5390 refactor(inject-expectation): delete result set by user on technical inject
• #5388 refactor(inject-expectation): migrate ExpectationsExpirationManagerService

Bug Fixes:

• #8664 fix(docker): apt-get upgrade layer is served from the CI cache
• #8644 fix(docker): upgrade OS packages when building images
• #8602 fix(docs): documentation images disappear when built with selectolax 1.0.1
• #8598 fix(auth): a new SSO user is denied access to its tenant after its first login
• #8455 fix(model): InvalidDataAccessApiUsageException in Exercise model
• #8452 fix(stream): stream is being rate limited
• #8358 fix(Chaining): AI capabilities are not working
• #8180 fix(chaining): no-agent inject failures re-publish ready events and kill the workflows-ready consumer
• #7872 fix(multi-tenancy): two production paths read an activated table with no tenant scope
• #7867 fix(chaining): different behavor between default and new tenant
• #7839 fix: platform outage — HTTP 500 "Whitelabel Error Page" blocks all access, TNR run tnr-2026-09-08T08:05Z fully blocked
• #7829 fix(chaining): Phishing findings are not visible in the attack path
• #7802 fix(inject): attack timeline loses inject after opening update drawer