Release v1.4.0

Bifrost v1.4.0

Bifrost v1.4.0 modernizes the workspace UI and targets high-volume runtime paths with indexed and keyset table access, bounded response memory, bulk writes, Anthropic prompt caching, and stronger execution tracking. It also introduces visibility and in-place updates for deployed App SDKs across independent Apps and Solutions, across 38 commits since v1.3.0.

Features

• Modernized Bifrost's Home workspace, page chrome, navigation, entity pickers, and resource-management surfaces into a consistent responsive interface. (#732)
• Added deployed App SDK status, retained sanitized source, individual and bulk SDK updates, and the corresponding Solution update flow. (#742)
• Added document-ID keyset pagination and indexed document-ID batch queries for large tables. (#724, #730)
• Added atomic bulk table upserts for metadata ingestion and consolidated table batch writes on the canonical endpoint. (#719, #735)
• Added base64 webhook HMAC signature support. (#727 by @pszatkowski)

Performance & Reliability

• Bounded large-table response memory and fixed indexed document-prefix pagination under locale-aware collations. (#725, #733)
• Enabled Anthropic prompt caching for agent and client requests, then adapted caching to each endpoint's contract. (#747 by @sdc53, #751)
• Added opt-in retries for transient SDK transport failures, including synchronous coverage. (#746 by @sdc53, #750)
• Preserved long-running workflow completion tracking and refreshed workspace modules at the shared execution boundary. (#729, #720)
• Fixed event-agent delivery transaction ordering and ensured concurrent webhook requests queue their own event. (#723, #740 by @MTG-Thomas)
• Serialized concurrent OAuth SDK token refreshes to prevent token races. (#741 by @MTG-Thomas)
• Resolved the legacy America/Indianapolis schedule timezone. (#739 by @MTG-Thomas)

UI & Bug Fixes

• Kept expanding Chat run activity from scrolling tool controls and fixed mobile header status wrapping. (#758 by @MTG-Thomas, #763)
• Fixed OAuth connection health summaries, custom entity-logo rendering, and browser-active artifacts that need to download rather than render inline. (#762, #737, #743)
• Preserved null Chat tool results while hiding internal error detail from end users. (#704)
• Fixed production execution diagnostics and tool contracts. (#706)

Security & Supply-Chain Hardening

• Resolved table authorization claims separately for every WebSocket subscription, preventing claims from one subscription being reused for another. (#760 by @MTG-Thomas)
• Enabled certificate and hostname verification for database TLS connections. (#761 by @MTG-Thomas)
• Stopped publishing container images to the retired jackmusick namespace. (#736)
• Refreshed pinned Python and Node base images, GitHub Actions, and client dependencies. (#676, #677, #678, #679, #680, #681, #696)

Developer Experience

• Added validation for generic workflow execution through MCP. (#707)
• Added documentation for updating deployed App SDKs and refreshed the product screenshot set.

Breaking Changes

• App SDK v2 changes realtime table invalidation semantics: batch table mutations now emit table_invalidated, and SDK v2 refetches the authoritative table snapshot. Apps still using SDK v1 ignore that frame and can show stale table data until reload. After upgrading Bifrost, update deployed Apps from Applications → Update SDK, use Update all SDKs, or run bifrost apps sdk update APP / bifrost apps sdk update --all. For Solution-managed Apps, use the Solution update action or bifrost solution sdk deployed-update. If source is unavailable, redeploy the App or Solution first so Bifrost can retain sanitized source. (#742)
• Database connections using TLS now verify the server certificate and hostname. Install the deployment's private CA in the Bifrost trust store before upgrading if PostgreSQL uses a private or self-signed certificate. (#761 by @MTG-Thomas)

Contributors

• @MTG-Thomas — hardened database TLS and per-subscription WebSocket authorization, and fixed event ordering, OAuth token refresh, Chat scrolling, and legacy timezone handling. (#761, #760, #740, #741, #758, #739)
• @sdc53 — enabled Anthropic prompt caching and added opt-in retries for transient SDK transport errors. (#747, #746)
• @pszatkowski — added base64 webhook HMAC signature support. (#727)

Fixed CVEs and advisories

None in this release.

Docker Images

API:

docker pull ghcr.io/gobifrost/bifrost-api:1.4.0

Client:

docker pull ghcr.io/gobifrost/bifrost-client:1.4.0

This final release also updates the :latest, :1.4, and :1 channels.

Type Stubs for IDEs

No standalone bifrost.pyi asset is included in v1.4.0. Use the API-matched CLI package from your Bifrost instance for current SDK types and editor support.

Signed artifacts (Sigstore / cosign — keyless)

The source archive has a matching .sigstore bundle containing its signature, certificate, and Rekor inclusion proof. Verify it with cosign 2.4 or newer:

cosign verify-blob \
  --bundle bifrost-v1.4.0-source.tar.gz.sigstore \
  --certificate-identity-regexp 'https://github\.com/gobifrost/bifrost/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  bifrost-v1.4.0-source.tar.gz

A SLSA build-provenance attestation is also published:

gh attestation verify bifrost-v1.4.0-source.tar.gz \
  --owner gobifrost