platform: v1.3.25
Immutable
release. Only release title and notes can be modified.
1.3.25 (2026-07-31)
Features
- agents: config versioning — schema, snapshot model, fork-on-write (#6923) (b59aa97)
- chatops: per-channel answer-all for MS Teams (#7001) (f74d454)
- chat: soft-delete conversations instead of hard-deleting (#6985) (ce7ebbf)
- helm: check whether the cluster enforces NetworkPolicy (#7026) (fe8e565)
- k8s: report measured NetworkPolicy enforcement, not inferred (#7027) (8f5f237)
- knowledge-base: soft-delete knowledge bases and connectors (#6989) (60be01e)
- mcp: soft-delete and restore for MCP servers, catalogs, and tools (#6994) (944ae12)
- projects: retain files & schedules on delete, add admin restore (#6919) (e002e66)
- security: data-retention windows + content encryption at rest (Enterprise) (#6943) (cec25d7)
- skills: version-history API for skills and agents (#7030) (73905cb)
Bug Fixes
- account: show why the sessions list is unavailable instead of an empty card (#7032) (bc91223)
- account: stop the account card flashing content before the role loads (#7034) (960d736)
- apps: prevent agents from clobbering or hijacking existing apps; add app lock (T-979) (#7012) (654384e)
- chatops: let the bot answer to the name people actually see (#7022) (949a2ce)
- chatops: make a reaction-mute stick in answer-all channels (#7017) (c8b06cd)
- frontend: close out the machine-translation crash class (#7019) (26b713c)
- frontend: key SearchableSelect trigger content for machine translation (#7015) (82ba90c)
- frontend: stop Chrome page-translate from crashing the app (#6988) (8d9655f)
- helm: let the migrate job start on the upgrade that introduces the content-encryption key (#7025) (662def8)
- llm-proxy: enforce guardrails on client-decorated gateway tool names (#7023) (a013c59)
- mcp: re-add the built-in Archestra catalog to its default tool subset (#7005) (bc1efc3)
- proxy: withhold tool calls until the invocation policy gate decides (#6999) (a4adc29)
- security: no privilege escalation through role assignment or invitations (#7031) (fbacd16)
- security: stop exporting plaintext content on OTel spans when encryption at rest is on (#7028) (389517b)