v0.1.9

Patch release since v0.1.8.

Fixes

• PostHog reverse-proxy TLS verify and DNS re-resolution (#501)
• Docs-site Docker build: pin TypeScript 6, use webpack (#500)
• Native-arch all-in-one image so tagged releases cannot hang on qemu arm64 (#514)

Security

• brace-expansion ReDoS override (#480)
• postcss path-traversal bump (#476)
• Remaining transitive CVE sweep in docs-site and mcp-mux (#483)

Dependencies

Dependabot minor/patch sweeps across backend, frontend, docs-site, CLI packages, and GitHub Actions (upload-artifact v7, download-artifact v8). TypeScript 7, oauth2-mock-server v9, and TanStack Table v9 stay pinned; they break the SDK introspector, Jest, and getCoreRowModel.

Other

• README hero screenshot (#471)

Images: almyty/api:0.1.9, almyty/frontend:0.1.9, almyty/docs:0.1.9, almyty/almyty:0.1.9 (all-in-one publishes natively per arch, off the prod-deploy path).

Full Changelog: v0.1.8...v0.1.9

v0.1.8

What's Changed

• Revert docs to petstore + de-name in-product examples + release.yml native docs by @frane in #472
• Promote: petstore-in-docs revert + security (js-yaml/react-router) + welcome dedup + release native docs by @frane in #473
• Release v0.1.8: petstore-in-docs + security fixes + welcome dedup + native docs by @frane in #474

Full Changelog: v0.1.7...v0.1.8

v0.1.6

What's Changed

• build(deps): bump brace-expansion from 5.0.6 to 5.0.8 in /.ds-sync by @dependabot[bot] in #443
• chore: untrack + gitignore .ds-sync (stop Dependabot noise from tooling) by @frane in #444
• New-signup lifecycle activation emails (opt-in, off by default) by @frane in #446
• Remove emoji from docs (per STYLE.md) by @frane in #445
• test: lifecycle-email staging verification harness + env-overridable cadence by @frane in #448
• Promote to staging: lifecycle emails + harness (for staging verification) by @frane in #449
• test(lifecycle): harness guard accepts explicitly-named staging DB by @frane in #450
• Promote harness guard fix to staging by @frane in #451
• test(lifecycle): fix harness teardown uuid cast by @frane in #452
• Promote harness teardown fix to staging by @frane in #453
• Fix incorrect lifecycle email copy by @frane in #454
• fix(analytics): session-replay captures styled DOM (inline CSS, defer recording to load) by @frane in #455
• fix(onboarding): text=uuid in first-call query (breaks getting-started checklist) by @frane in #456
• Promote welcome-copy + PostHog + onboarding fixes to staging by @frane in #457
• Release: welcome copy + PostHog replay + onboarding text=uuid fixes to prod by @frane in #458

Full Changelog: v0.1.5...v0.1.6

v0.1.5

What's Changed

• release: rename deploy-production -> trigger-prod-deploy (clarify infra owns the deploy) by @frane in #440
• ci: PostHog key -> repo variable (drop hardcoded fallback) by @frane in #441
• v0.1.5: release frontend VITE fix + posthog var + cosign-off by @frane in #442

Full Changelog: v0.1.4...v0.1.5

v0.1.4

What's Changed

• Promote: flaky-fix + BYO-KMS wiring + security sweep by @frane in #371
• Promote backlog batch (runner/flake/kms-channels/onboarding) by @frane in #377
• emulator integration tests for cred-gated features (LocalStack KMS / OIDC / stripe-mock) by @frane in #395
• publish: skip gracefully when NPM_TOKEN unset (stop the red) by @frane in #396
• publish via npm OIDC trusted publishing (no token) by @frane in #397
• Fix npm package metadata + marketing copy for 1.2.0 by @frane in #398
• publish: idempotent committed-version publish (clean lockstep) by @frane in #399
• integration tests: run migrations instead of synchronize (validate the real migration path) by @frane in #400
• publish: npm install instead of npm ci (lockfile-less packages) by @frane in #401
• publish: drop lockfile so @almyty/* resolves from npm (fixes chat+cli) by @frane in #403
• Fix drifted CLI docs before 1.2.0 publish by @frane in #402
• deps to latest: sentry 10, openid-client 6, typeorm 1.1, recharts 3 (ts7 reverted) by @frane in #404
• npm versioning: dist_tag (latest/next) + lockstep CI gate by @frane in #405
• fix sharp/libvips High CVEs in docs-site (override -> 0.35.3) by @frane in #406
• auth: error above submit button + button spinner (rage-click fix) by @frane in #407
• release: self-documenting GitHub Release on each tag by @frane in #408
• Promote v0.1.4 batch (deps-to-latest, auth-fix, sharp, versioning, cli-deps) by @frane in #409
• Explain the two version lines (CLI 1.x vs platform 0.x) by @frane in #410
• Docker Hub tag retention (stop the per-commit tag sprawl) by @frane in #411
• Prune: lower KEEP_SHA to 2 (digest deploys don't need old sha tags) by @frane in #417
• Build: deploy by digest, stop per-commit tag sprawl by @frane in #414
• Patch 5 Dependabot vulns (sharp High + 4 moderate/low) by @frane in #416
• Promote development -> staging (v0.1.4 batch) by @frane in #419
• Rewrite getting-started: visual + CLI-first, payoff-led by @frane in #412
• Rewrite user docs visual + CLI-first (CLI section + section landings) by @frane in #413
• Rewrite operate + gateway guide docs (visual/CLI-first) by @frane in #415
• Rewrite remaining guide docs (agents, tools, enterprise, misc) by @frane in #418
• Strip em-dashes from the example recipes by @frane in #420
• Strip em-dashes from API reference + mcp-server page by @frane in #421
• fix: postgres 15->16 dev/prod parity + self-hosting doc alignment by @frane in #422
• docs: writing-style guide for user-facing content by @frane in #423
• Promote full batch to staging (v0.1.4: infra+deps+security+docs) by @frane in #426
• Release v0.1.4 to prod (reconciled staging->master) by @frane in #427
• Promote staging -> master (v0.1.4 batch) by @frane in #425
• Patch 12 more Dependabot alerts (vite High + react-router + undici + hono + esbuild) by @frane in #434
• Deploy by version tag, not digest (prod shows semver in k8s) by @frane in #436
• Release v0.1.4 final to master (round-2 deps + version-tag deploys) by @frane in #438
• Promote v0.1.4 final (deps round-2 + version-tag deploys) by @frane in #437

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• fix flaky svix-signature test (1/64 no-op tamper) by @frane in #360
• BYO-KMS: wire EnvelopeCryptoService into secret call-sites (#239) by @frane in #361
• clear Dependabot security alerts (all critical + high) by @frane in #369
• Spec: in-app onboarding guidance (golden path) by @frane in #362
• npm suite lockstep 1.2.0 + make @almyty/runner publishable by @frane in #373
• BYO-KMS: wire EnvelopeCryptoService into channel adapters by @frane in #374
• fix gateway-agent-runs integration flake (shared-schema DDL race) by @frane in #375
• onboarding golden-path: server-side checklist + Petstore seeding + guided empty states (#362) by @frane in #376
• isolate oauth-discovery-slug integration spec (last public-schema racer) by @frane in #378
• reconcile master with development (prod was on stale code) by @frane in #380

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Full Changelog: v0.1.0...v0.1.2

v0.1.1

Full Changelog: v0.1.0...v0.1.1

v0.1.0 — first public release

First tagged release of almyty, the full-stack platform for AI agents.

Images

All images are multi-arch, cosign-signed, and ship with an SBOM:

• almyty/almyty — all-in-one self-host image (API + web UI; bring Postgres and Redis)
• almyty/api + almyty/frontend — split images for Kubernetes / scale-out
• almyty/docs — the documentation site

docker pull almyty/almyty:latest

Tags follow semver: 0.1.0 / 0.1 / 0 / latest (latest = newest release, not the development tip).

Self-hosting

Start with docker-compose.allinone.yml and the guide at https://docs.almyty.com/self-hosting

Hosted platform: https://app.almyty.com · Website: https://almyty.com