Tracecat 1.0.0-beta.51-rc.12

Security

• Add AI security architecture (#3158)
• Terminate action process groups (#3159)
• Overhaul security, isolation, and audit log documentation (#3166)
• Patch dependabot alerts (#3192)

Integrations

• Unblock catalog MCP OAuth setup (#3165)
• Add Elastic API templates (#3176)

Agents

• Workflow execution tools (#3150)
• Preserve NUL session history (#3156)
• Enable deferred tool loading in the Claude runtime (#3163)

Performance improvements

• Add postgres scatter capacity harness (#3140)
• Avoid unused relationship loads in case metrics (#3157)

Bug fixes

• Surface lookup errors (#3124)
• Isolate bypass-RLS sessions on a dedicated pool (#3141)
• Support multi-replica sessions (#3151)

Dependencies

• Pin Python dependency versions (#3175)

Build system

• Remove unused entrypoint.sh migration wrapper (#3147)

Other

• Use pointer cursor on dropdown menu items (#3089)
• Mark pool backend experimental, auto selects ephemeral (#3146)
• Expose concurrency controls in deployments (#3153)
• Explain Helm application updates (#3155)
• Prefer frozen slotted dataclass over NamedTuple (#3160)
• Require LOC breakdown table in PR bodies (#3161)
• Remove broken OpenAPI template converter (#3164)
• Remove experimental pool backend (#3167)

Full changelog: 1.0.0-beta.51-rc.11...1.0.0-beta.51-rc.12