v0.13.4

v0.13.4

This corrective release makes the Workflow action widget executable in current browsers.

• Removes invalid identity escapes from Unicode-mode regular expressions used to review plan and apply drafts.
• Retains the dual toolkit and hosted Workflows widget paths introduced in v0.13.3.
• Adds a regression test that parses every Unicode-mode regular expression in the synchronization widget.
• Requires release archives, installers, and release packages to contain both /widgets/actions and the current
  Workflows /ui/widgets/actions compatibility assets.
• Was exercised in an unsigned enterprise-preview tenant with a live on-demand Read Only workflow: the action widget
  rendered, the Workflow deployed, and a 1,000-relationship current-span plan completed with zero mutations.
• Keeps the Vault-backed connection contract, Read Only defaults, approval gates, and mutation behavior unchanged.

v0.13.2

Forward for Dynatrace v0.13.2

This patch restores installation on current Dynatrace tenants while preserving the Credential Vault security
boundary introduced in v0.13.0.

Settings Schema Compatibility

• Advances forward-api-connection to schema version 3.0.1 because Dynatrace settings schema versions are
  immutable after registration.
• Removes obsolete forceSecretResubmission metadata from the Vault-reference-only schema. The schema stores a
  CREDENTIALS_VAULT-* entity ID, not an inline username, password, or secret.
• Adds a repository regression gate that rejects raw credential properties, inline secret types, secret-resubmission
  metadata, and SECRET_RESUBMISSION constraints in the Vault-backed connection contract.

Installation Diagnostics

• Reports bounded AppEngine subresource failure details when an installation ends in ERROR, so schema deployment
  failures identify the affected resource without exposing the bearer token.

All Forward API behavior, least-privilege access profiles, dual-source dependency discovery, mutation controls, and
release provenance requirements remain unchanged from v0.13.1.

Installable

forward-dynatrace-app-v0.13.2.zip is the only installable artifact. Download all assets from this release, verify
SHA256SUMS, validate the optional detached signature when present, and verify the app and SBOM attestations against
forwardnetworks/forward-dynatrace before installation.

v0.13.1

Forward for Dynatrace v0.13.1

This packaging-only patch publishes the v0.13 enterprise-preview integration without binding artifact creation to a
specific Dynatrace tenant. The application behavior, security boundary, RBAC model, dual-source discovery contract,
and Forward API workflow are unchanged from v0.13.0.

Release Engineering

• Builds the app archive deterministically with the repository's exact pinned Dynatrace toolkit.
• Fails closed if the pinned toolkit version or archive-preparation entry point changes.
• Verifies the app identity, version, required app functions, settings schemas, and safe ZIP membership before
  publication.
• Keeps tenant OAuth and environment URLs out of the GitHub release workflow. OAuth is required only when an operator
  installs the verified archive into a Dynatrace tenant.
• Publishes the Dynatrace app as the sole installable, alongside its CycloneDX SBOM, checksums, optional detached
  checksum signature, and GitHub artifact attestations.

Product Validation

• Complete Node.js 24 CI and release gates, including strict type checking, lint, schema, security, release, checksum,
  signature, SBOM, and immutable-ref tests.
• A 1,000-relationship scale cycle and 100-cycle deterministic reconciliation soak.
• Live non-production evidence for 1,000 current distributed-trace dependencies and 1,000 reachable modeled Forward
  paths.

Tenant installation and Credential Vault configuration remain post-release acceptance steps. Begin with a dedicated
Read Only Forward identity and promote to Network Operator or Network Admin only under the documented approval policy.

Installable

forward-dynatrace-app-v0.13.1.zip is the only installable artifact. Download all assets from this release, verify
SHA256SUMS, validate the optional detached signature when present, and verify the app and SBOM attestations against
forwardnetworks/forward-dynatrace before installation.

v0.12.0

Forward for Dynatrace v0.12.0

This enterprise preview completes the repository-owned operational controls needed for a design-partner evaluation.
It does not change the single-app architecture or the Forward access-profile contract established in v0.11.0.

Highlights

• Adds named product, support, vulnerability-response, incident, compatibility, and release ownership.
• Defines capability-based Forward and Dynatrace compatibility instead of coupling support to product marketing
  versions.
• Adds a deterministic 100-cycle reconciliation soak over 1,000 relationships to every CI and release gate.
• Documents credential rotation, rate limiting, partial failure, recovery, and longer non-production soak acceptance.
• Adds public support, security reporting, upgrade, and release communication policies.
• Removes environment-specific evidence from the reusable product documentation.
• Preserves immutable plan approval, exact-approved create/update, collision protection, bounded writes, and post-write
  verification.

Installable

forward-dynatrace-app-v0.12.0.zip is the only installable artifact. The SBOM, checksum, signature, and attestation
records are verification evidence. Forward requires no software from this project.

Verification

Download all release assets together, run sha256sum -c SHA256SUMS, and verify the app and SBOM attestations against
forwardnetworks/forward-dynatrace before installation.

v0.11.0

Forward for Dynatrace v0.11.0

This enterprise preview establishes the clean product and release baseline for controlled evaluation and
non-production use.

Highlights

• Converts current Dynatrace service dependencies into governed Forward path and intent-check evidence.
• Provides Read Only, Network Operator, and Network Admin workflows with explicit least-privilege behavior.
• Supports deterministic plan, exact-approved create/update, collision protection, mutation budgets, and post-write
  reconciliation.
• Correlates modeled Forward reachability with Dynatrace Site Reliability Guardian outcomes while preserving both
  source-of-truth boundaries.
• Adds tenant-owned dependency discovery profiles, current-evidence validation, bounded results, and fail-closed
  mapping.
• Delivers one tenant-validated Dynatrace app archive with a CycloneDX SBOM, SHA-256 checksums, optional detached
  signature, and GitHub attestations.
• Includes enterprise installation, security, RBAC, operations, acceptance, and release documentation.

Installable

forward-dynatrace-app-v0.11.0.zip is the only installable artifact. The SBOM, checksum, signature, and attestation
records are verification evidence. Forward requires no software from this project.

Verification

Download all release assets together, run sha256sum -c SHA256SUMS, and verify the app and SBOM attestations against
forwardnetworks/forward-dynatrace before installation.