Skip to content

platform: v1.3.26

Choose a tag to compare

View all tags
@archestra-ci archestra-ci released this 04 Aug 14:13
Immutable release. Only release title and notes can be modified.
platform-v1.3.26
8028936
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.3.26 (2026-08-04)

Features

  • auth: impersonation hardening — audit trail, attribution, kill switch, org-RBAC gating (#7043) (63cae3a)
  • auth: make ARCHESTRA_AUTH_DISABLE_BASIC_AUTH actually disable basic auth, and turn it on for staging (#7053) (b3bc08c)
  • auth: require-2FA enforcement with dedicated enrollment page, session lifetime cap, 2FA enterprise gating, and sign-in origin banner cleanup (#7039) (68b4246)
  • mcp-apps: let MCP Apps use the *_file tools (#6922) (fc9f967)
  • mcp-runtime: push deployment states from K8s watch events instead of blind polling (#7036) (441ecc6)
  • rbac: own-vs-all log visibility (log:admin / auditLog:admin) and the Platform Admin role (#7038) (99ae9b3)

Bug Fixes

  • address recurring production error hotspots across the proxy and pre-auth hot paths (#7067) (4903f05)
  • deps: bump the CVE-flagged deps blocking every merge-queue run (#7079) (7d8a2ed)
  • docker: dial the platform's own API by IPv4 literal, not localhost (#7082) (8c7c2db)
  • frontend: second WCAG AA pass — focus management, keyboard operability, contrast (#7073) (d080ff6)
  • frontend: state the concrete 24h freshness window in the stale-session panel (#7084) (3ee7ef0)
  • llm-proxy: record and report token usage that streaming and Responses turns were dropping (#7080) (789b6d4)
  • llm: Azure AI Foundry direct-path URL handling; optional reranking; native Cohere Rerank support (#7076) (1111c84)
  • llm: make dual LLM sanitization terminate, fail closed, and run on subscription credentials (#7018) (6eb8e57)
  • mcp-registry: anchor the tools search icon, attribute personal agents, add a Usage tab (#7056) (b588fc6)
  • mcp-runtime: don't mark healthy MCP pods failed on K8s API throttling (#7035) (acea84b)
  • mcp: delete personal MCP credentials on user deletion (#7054) (61ac6e4)
  • mcp: purge personal MCP credentials and apps when a membership is removed (#7074) (ee9122f)
  • mcp: sweep personal MCP credentials owned by users with no memberships (#7081) (06deee5)
  • oauth: stop relaying better-auth's bodyless responses as the JSON literal null (#7078) (c752cf9)
  • rename the account page to Personal Settings (#7062) (fdf9265)
  • ui: say the enforcement check failed instead of narrating the experiment (#7061) (f41ed6e)
  • users: keep SelectValue mounted so the role filter can reopen (#7050) (3cb087c)

Code Refactoring

  • mcp: remove the MCP server installation request feature (#7060) (dfd2446)
Assets 3
Loading