v6.7.0

Braintrust Services

• Updated Braintrust Services and API ECS to v2.13.0

What's Changed

• Remove enable_brainstore by brianvans (@brianvans) in #349
• Add mocked plan-mode smoke tests for common deployment shapes by brianvans (@brianvans) in #294
• [INF-195] Limit API Handler Role S3 permissions by Erik Weathers (@erikdw) in #316
• [INF-203] Add opt-in S3 VPC gateway endpoint allowlists by Erik Weathers (@erikdw) in #320
• [INF-507] Support an optional external attachment S3 bucket by StarfolkAI (@starfolkai)[bot] in #354
• Add custom CA bundle support to API ECS by Alex Basista (@alexbasista-bt) in #350
• Opt-in quarantine → private gateway via PrivateLink (NLB→ALB) by Erik Weathers (@erikdw) in #302
• Default Loop runtime sandbox egress to restricted by Alex R (@alexr17) in #358
• [INF-508] Support a caller-provided external Brainstore S3 bucket by StarfolkAI (@starfolkai)[bot] in #356
• Serialize AI Proxy Function URL permission writes by Alexey Soldatchenko (@soldatchenko) in #361
• Always enable Loop runtime metrics and traces by Ankur Goyal (@ankrgyl) in #365
• Allow endpoint header in AI proxy CORS by Parker Henderson (@parkerhendo) in #362

Full Changelog: v6.6.0...v6.7.0