v0.2.3

What's Changed

• site: Releases section with one page per version by @pueding in #157
• site: let PostHog page views through the Content-Security-Policy by @pueding in #158
• docs: install pages install 0.2.2; build check; review of install.md by @pueding in #161
• docs: move Connect your coding agents into Getting started by @pueding in #163
• ci: name the CLI snapshot build after the newest v* tag by @pueding in #164
• Console sign-in page: where to find a lost bootstrap password by @pueding in #162
• Access rules: refuse duplicate rules; searchable group field with known groups by @pueding in #165
• Console: add a model, with the API key typed in the console or an existing Secret by @pueding in #169
• Patch 0.2.3 bugs: #113 #115 #134 #160 by @pueding in #171
• Access rules can name people (users) as well as groups by @pueding in #170
• release: 0.2.3 changelog, install version and preset results by @pueding in #172

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• site: publish CHANGELOG.md at /docs/changelog by @pueding in #149
• ci: run each job only when files it builds or tests change by @pueding in #154
• Console: show ambit connect first; one page "Connect your coding agents" by @pueding in #152
• site: changelog follow-ups by @pueding in #153
• docs: shorten ambit local up docs and state the key order by @pueding in #150
• site: PostHog page views on ambitproject.dev (cookieless, production host only) by @pueding in #151
• release: v0.2.2 changelog and preset live results (18 of 18 pass) by @pueding in #156

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• docs: link Known limitations from the Why Ambit table by @EllieDJeon in #142
• ci(release): build the CLI for the pushed tag, and mark latest only when complete by @pueding in #143
• v0.2.1: release fixes, flaky test, CHANGELOG by @pueding in #144
• controller: offboarding applies during the activation gate's settle wait by @pueding in #146
• test: preset live results for v0.2.1 (18 of 18 pass) by @pueding in #147

New Contributors

• @EllieDJeon made their first contribution in #142

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• docs: README front page, CONTRIBUTING and Code of Conduct by @pueding in #60
• site: Docusaurus skeleton, README address check, path-filtered publishing by @pueding in #65
• fix: collector reported ready before it accepted records by @pueding in #66
• docs by @pueding in #68
• docs by @pueding in #69
• fix: UI tests share one admin, so run them in one worker by @pueding in #67
• site by @pueding in #70
• fix: request limits were checked and counted before model authorization by @pueding in #71
• docs: link the five guides from the index; budgets need limits.enabled by @pueding in #73
• fix: a Budget refusal had an empty body and the ratelimit service's numbers by @pueding in #72
• Console: larger type scale (15px body), 1280px layout, key banner fix by @pueding in #74
• docs: compliance and audits page by @pueding in #80
• validate: accept integer fields the way the API server does by @pueding in #76
• security: fix known Go vulnerabilities; add CodeQL by @pueding in #92
• console: correct tool setup snippets and per-tool tabs by @pueding in #101
• docs: coding agents — tested Codex, opencode, Hermes; other agents table by @pueding in #102
• Ambit CLI release 1 (v0.2.0) by @pueding in #75
• ci(site): deploy the live site only from a version tag or a site-* tag by @pueding in #105
• docs: Ambit CLI quick start and reference (waits for the v0.2.0 tag) by @pueding in #104
• build(deps-dev): Bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in /web by @dependabot[bot] in #118
• build(deps): Bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #119
• build(deps): Bump golang.org/x/time from 0.15.0 to 0.16.0 by @dependabot[bot] in #121
• build(deps): Bump @radix-ui/react-slot from 1.3.3 to 1.4.0 in /web by @dependabot[bot] in #124
• build(deps): Bump golang.org/x/crypto from 0.57.0 to 0.58.0 by @dependabot[bot] in #125
• build(deps-dev): Bump vite from 8.3.2 to 8.3.4 in /web by @dependabot[bot] in #126
• build(deps-dev): Bump @playwright/test from 1.63.0 to 1.64.0 in /web by @dependabot[bot] in #128
• build(deps): Bump @tanstack/react-table from 9.2.4 to 9.2.8 in /web by @dependabot[bot] in #129
• build(deps): Bump helm/kind-action from 1.15.0 to 1.15.1 by @dependabot[bot] in #130
• build(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 by @dependabot[bot] in #131
• build(deps): Bump github.com/ClickHouse/clickhouse-go/v2 from 2.48.0 to 2.49.0 by @dependabot[bot] in #120
• build(deps): Bump github.com/prometheus/client_golang from 1.24.0 to 1.25.0 by @dependabot[bot] in #122
• build(deps): Bump node from 0b36e8c to 143494b by @dependabot[bot] in #123
• v0.2.0: ambit connect, audit-only mode, Claude Desktop docs and CLI follow-ups by @pueding in #111
• controller: name the rejected object when a rules change stalls by @pueding in #137
• v0.2.0 release prep: npm token for the release, docs screenshots by @pueding in #138
• test: preset live results for v0.2.0 (18 of 18 pass) by @pueding in #140

Full Changelog: v0.1.0...v0.2.0

v0.1.0

What's Changed

• Step 3c: hardening from the post-3b review; API group ambitproject.dev by @pueding in #1
• Step 4a: MCP servers through ToolHive with tool-level access by @pueding in #2
• Step 4b: MCP server requests, approval by digest, tool sets by @pueding in #3
• Step 4c: GitOps mode — console changes become pull requests by @pueding in #4
• Step 4d: Connect SSO page by @pueding in #5
• Step 5: per-user credentials (Connections) by @pueding in #6
• Step 6: offboarding over SCIM by @pueding in #7
• Step 7: evidence — audit trail in ClickHouse by @pueding in #8
• Step 8: budgets and dependency outages by @pueding in #9
• Step 9: MCP guardrails (tool pinning and masking) by @pueding in #10
• Step 10: operations (replicas, rolling update, soak, rotation, image inventory) by @pueding in #11
• Console review: fixes and missing pages found in the browser review by @pueding in #12
• Use your own ClickHouse and Valkey (TLS, private CA, passwords) by @pueding in #13
• Upgrade verification for the components Ambit ships by @pueding in #14
• Say which providers really revoke a leaver's grants by @pueding in #15
• Memory limits on every container in Ambit's namespace by @pueding in #18
• Per-group limits on tool call arguments by @pueding in #19
• Add a Dependencies page: failure mode and live health per component by @pueding in #16
• Token counts and cost per group; LLM route parses every request by @pueding in #20
• Step 10: SOAK_WARMUP for long soaks by @pueding in #21
• Show each GitOps change's progress: merged, synced, applied by @pueding in #17
• Offboarding revokes at GitHub, Slack, Notion and HubSpot by @pueding in #22
• Dollar budgets per group and person; model price suggestions and editing by @pueding in #23
• Soak fixes, alerts, gateway certificate warning, dollar-budget follow-ups by @pueding in #24
• Dollar budgets: charge streams that turn usage reporting off by @pueding in #25
• Controller nudges the xDS certificate Secret when renewal did not happen by @pueding in #26
• Model routing PR 1: ModelRouter with keyword and length rules by @pueding in #27
• CLAUDE.md: worktree and shared-cluster rules for Claude Code sessions by @pueding in #28
• Model routing type LLM: ambit-router classifies prompts with a small LLM by @pueding in #35
• Docs: vSR is not planned; categories need type LLM by @pueding in #36
• Upgrade agentgateway to v1.6.0 by @pueding in #37
• Self-hosted Models list their API formats (custom providers) by @pueding in #38
• CI: run the full check once per change by @pueding in #40
• CI: shorter e2e (probe waits, kubelet sync, build and browser caches) by @pueding in #41
• CI: parallel e2e parts, early test services, shorter load windows by @pueding in #42
• Model: offer only providers Ambit can configure by @pueding in #39
• CI: move step 8 to e2e part a by @pueding in #43
• CI: build the Ambit image once, in the build job by @pueding in #44
• Model: 12 more providers that need only an API key by @pueding in #45
• Azure OpenAI and Amazon Bedrock Model providers by @pueding in #46
• App presets (phase 1): live-tested presets for vendor MCP servers by @pueding in #29
• Google Vertex AI Model provider by @pueding in #47
• MCP: one server's create or delete no longer breaks MCP for every user (risk 16) by @pueding in #48
• MCP: a down or booting server no longer slows every user's new session by @pueding in #49
• Quick start: Dex in-cluster, Dex tokens for the gateway, quickstart values and CI check by @pueding in #54
• ci: documentation-only changes skip the build job too by @pueding in #56
• docs: Ambit logo, icon and social preview (mark D) by @pueding in #55
• web: console uses the Ambit mark (favicon, sign-in, sidebar) by @pueding in #57
• ci: faster e2e balance, image build reuses the test compile, agentgateway from a cache by @pueding in #58
• Personal API keys for Claude Code, Cursor, SDKs and MCP clients by @pueding in #59
• release: prepare v0.1.0 by @pueding in #62
• Bump the kubernetes group with 3 updates by @dependabot[bot] in #30
• build(deps): Bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 by @dependabot[bot] in #31
• Bump vite from 8.3.1 to 8.3.2 in /web by @dependabot[bot] in #32
• Bump @tanstack/react-router from 1.170.40 to 1.170.41 in /web by @dependabot[bot] in #34
• presets: fix failing contract checks (canva, linear, servicenow, webex) by @pueding in #61
• fix: SCIM provisioning answered 503 while a restarted console waited for the key Lease by @pueding in #63
• presets: live run for v0.1.0 by @pueding in #64
• build(deps): Bump @tanstack/react-query from 5.104.0 to 5.104.1 in /web by @dependabot[bot] in #33

New Contributors

• @pueding made their first contribution in #1
• @dependabot[bot] made their first contribution in #30

Full Changelog: https://github.com/craftsman-apps/ambit/commits/v0.1.0