v1.212.0

1.212.0 (2026-09-28)

Features

• web: serve the session slash commands in the browser and run templates as turns (#1713) (d2e3d9a)

Bug Fixes

• deploy: make the charts and raw manifests install, probe and document truthfully (#1701) (cf509a0)
• deploy: stop server chart rollouts deadlocking on the sessions volume and keep memory out of it (#1718) (cd22dc9)
• deploy: stop the server chart from serving plaintext under tls.enabled and align compose, RBAC and connect with the server (#1711) (060c803)
• operator: close approval gate bypasses and harden drain and chaos safety (#1708) (1dab650)
• operator: close resolved SLA violations, count them in compliance and keep every cost booking (#1710) (6360292)
• operator: harden managed Instance runtime and REST API behavior (#1702) (76090d6)
• operator: keep SourceRepository credentials out of the clone and verify ssh host keys (#1716) (281982e)
• operator: make chaos, capacity, auto-resolve and the REST edges report what really happened (#1712) (5750222)
• operator: persist escalation, page SLO exhaustion once and export honest federation and dashboard metrics (#1709) (f5bcff9)
• operator: roll pods on mounted config edits and stop dropping explicit settings (#1715) (d1ccdaa)
• release: stop the docs version bump from rewriting prose between two code spans (#1719) (3134108)
• server: give each fallback provider its own model and honor the command output cap (#1714) (25c9951)
• server: refuse to serve open when JWT material fails to load and answer standard gRPC health probes (#1700) (05e8992)
• server: send service logs to stderr in containers and honor the log rotation settings (#1707) (cab30bb)
• server: stop the auth failure limiter from throttling valid credentials (#1706) (c436d49)
• web: keep image attachments visible to the model and reachable by path (#1704) (134bf34)
• web: make the microphone work with the embedded speech engines (#1705) (33464b1)