Skip to content

v0.18.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jul 20:32
v0.18.0
4bdbae6

Added

  • Anthropic OAuth access tokens: the Anthropic model gateway now sends Authorization: Bearer for credentials with the sk-ant-oat prefix (or an explicit Bearer prefix), while standard API keys continue to use x-api-key. Same ModelEndpoint auth.secretRef works for both.
  • orlojctl auth login: new CLI command that authenticates with username/password against a native-mode server and saves a bearer token to the active profile. Eliminates the need to manually configure API tokens for CLI access.
  • POST /v1/auth/cli-token: new API endpoint that accepts credentials and returns a bearer token for CLI use (native auth mode only).
  • orlojctl config use auth probe: switching profiles now checks /v1/auth/me and prints whether the profile's credentials are valid, warning if unauthenticated.
  • orlojctl config get resolution sources: now shows where the effective server and token are coming from (profile, env var, or default), making env-override issues visible.
  • orlojd CORS configuration: --cors-allowed-origins / ORLOJ_CORS_ALLOWED_ORIGINS enables cross-origin API access; defaults to same-origin only.
  • orlojd native TLS: --tls-cert-file / --tls-key-file (or ORLOJ_TLS_CERT_FILE / ORLOJ_TLS_KEY_FILE) for HTTPS without a terminating proxy.
  • Makefile convenience targets: make test and make lint.

Changed

  • Release attribution: official Docker images and GoReleaser release archives now include LICENSE, NOTICE, and TRADEMARKS.md; README/TRADEMARKS clarify redistribution, optional “Powered by Orloj” attribution, and branding expectations.
  • Pagination cursors now emit scoped namespace/name continue tokens (bare ?after= values remain accepted).
  • Container CLI tools default to the operator-configured container network (none by default) instead of implicit bridge access.

Fixed

  • gRPC tool runtime SSRF: outbound gRPC dials now route through SafeDialer, blocking DNS-rebind to private/metadata IPs at connection time.
  • Container HTTP tool endpoints are validated with ValidateEndpointURL before sandbox execution.
  • Namespace authorization: mutation requests reject metadata.namespace values that do not match the effective request namespace.
  • Label-filtered list pagination no longer returns under-filled pages or empty pages with a non-empty continue token.
  • SSE resource watches enforce a 30-minute max duration and cap concurrent watch connections globally and per client IP.
  • Store error responses no longer leak internal driver/connection details to API clients.
  • WASM module resolver rejects plaintext http:// module refs and blocks local path traversal outside the cache directory.
  • OAuth2 token cache is bounded with LRU eviction; token-endpoint error bodies are redacted.
  • Postgres migrations use a pinned connection for advisory locking; constraint migrations are idempotent on re-run.
  • Task webhook delivery lookup uses an indexed GetByEndpointID store method instead of a full-table scan.
  • Agent job SQL updates increment resourceVersion to avoid clobbering concurrent task writes.
  • Unsupported mutation Content-Type requests receive 415 Unsupported Media Type.

Security

  • Go toolchain bumped to 1.26.5 across go.mod, CI, and Docker builds (fixes GO-2026-5856 / CVE-2026-42505 in crypto/tls).
  • Docker base images pinned by digest (golang:1.26.5-alpine, alpine:3.23).
  • Secret CLI flags (--api-key, --secret-encryption-key, --auth-reset-admin-password) log a warning when used; prefer env vars to avoid ps exposure.
  • Reference structured audit sink: agentruntime.SlogAuditSink (runtime/audit_sink_slog.go) writes audit events as structured JSON via log/slog. Wire it through Extensions.Audit to get a durable audit trail; audit logging remains off (no-op) by default. See Audit Logging.
  • Threat model documentation: new docs/pages/operations/threat-model.md consolidating trust boundaries, attacker model, controls, and operator-owned residual risks.
  • Documented audit-logging and multi-tenant guidance: docs/pages/operations/security.md now states that audit logging is operator-supplied (with retention/integrity guidance and a reference sink).
  • Dependency updates: bumped Go modules (AWS SDK, pgx, NATS, pgvector, wazero, OpenTelemetry, gRPC), Alpine 3.23 runtime images, GitHub Actions pins, and frontend packages (React 19, Vite 8). Vocs 2.x deferred — requires a separate docs migration.
Assets 22
Loading