Repository navigation
1.1.0
1.1.0
✨ Features
- System & JVM metrics — new per-agent metrics endpoint (
SystemInfoRequest/SystemInfoResponse,TSystemInfo), with aCpuLoadSamplerandSystemInfoCollectoron the agent and operator-side aggregation (AgentMetricsMapper,TAgentMetrics). - Enriched command DTOs — operator command details now carry service state resolved server-side (
TCommandDetail,TCommandInfo).
🔒 Security & Dependencies
- Replaced OkHttp with
java.net.http.HttpClientto drop the transitive Kotlin CVE-2026-53914. - Switched to the maintained
net.i2p.crypto:eddsafork to fix CVE-2020-36843 (also enables reading ed25519 SSH keys from the fat jar). - Fixed the OWASP suppression schema so CVE suppressions apply correctly in CI.
- Suppressed the by-design SSRF alert in
FetchUrlServletvia a CodeQL inline comment. - Bumped
com.github.jknack:handlebars4.5.0 → 4.5.2 andorg.assertj:assertj-core3.27.6 → 3.27.7.
🔧 CI
- Cache the NVD database weekly so the OWASP scan stops re-downloading it on every run.
🧩 Compatibility
- Operator UI pin bumped to dc-agent-react v1.5.0.
Full Changelog: 1.0.13...1.1.0