Graphit Broker v0.3.4

What's Changed

• chore(release): prepare v0.3.4 (af30653)
• feat(admin): add full project access preset (df54831)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.3.4

Graphit Broker v0.3.3

What's Changed

• chore: release v0.3.3 (f409156)
• feat(admin): simplify governance workspace (054b7ab)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.3.3

Graphit Broker v0.3.2

What's Changed

• chore: release v0.3.2 (e75cb75)
• Assert Broker web ID token audiences (4962807)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.3.2

Graphit Broker v0.3.1

What's Changed

• Release v0.3.1 (5e275c6)
• feat: add Docker entrypoint customization hooks (d5c33a3)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.3.1

Graphit Broker v0.3.0

What's Changed

• Release v0.3.0 (c609895)
• feat: accept Broker API resource for web clients (508a82c)
• feat(oidc): bind MCP resources to Broker access tokens (a636932)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.3.0

Graphit Broker v0.2.4

What's Changed

• chore: release v0.2.4 (aec7fd2)
• feat: make OIDC claim source configurable (3fb0cbb)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.2.4

Graphit Broker v0.2.3

What's Changed

• chore: release v0.2.3 (8c4486d)
• feat: make OIDC nonce validation configurable (a383f09)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.2.3

Graphit Broker v0.2.2

What's Changed

• chore: release v0.2.2 (fc7c4da)
• feat(broker): grant Dream storage access and refresh agents (cfb1369)
• feat: configure database connection timeout (f891259)
• feat: bind S3 credentials to modules (089229b)
• fix: return OIDC failures to admin login (ce1a930)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.2.2

Graphit Broker v0.2.1

What's Changed

• chore: release v0.2.1 (2b9c752)
• feat: support ambient AWS credentials for S3 STS (db32fa9)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.2.1

Graphit Broker v0.2.0

What's Changed

• chore: release v0.2.0 (035876c)
• docs: showcase governance with fictional workspace captures (15e63c0)
• fix: use current Graphit logo in broker README (4ace235)
• chore: align managed Graphit agent instructions (d3fd889)
• feat: redesign broker administration and authentication (fff60ef)
• ci(lint): gate builds and releases with golangci-lint (9ccbc98)
• fix(ci): check both container volumes in the image smoke test (406f3cf)
• docs(readme): present the project with a header, badges and quick menu (09cea5d)
• feat(storage): serve the Hub from a local volume as an S3 endpoint (23787ea)
• feat(oauth): serve external MCP clients as a standards-compliant provider (ec86b83)

Installation

Linux amd64 / macOS arm64:

curl -fsSL https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.sh | sh

Windows amd64 (PowerShell):

irm https://raw.githubusercontent.com/graphit-labs/graphit-broker/main/install.ps1 | iex

The scripts verify the release archive SHA-256. To pin a release or choose a
destination, download the script and pass --version / --dir (Unix) or
-Version / -Dir (PowerShell).
Existing tagged installations can run graphit-broker self-update and restart
their broker service afterward. Review downloaded scripts before running them.

Self-contained binaries

Linux amd64 and Windows amd64 archives embed the ONNX Runtime core, shared provider,
and CUDA provider. macOS arm64 embeds the ONNX Runtime core with integrated CoreML.
Every archive also contains config.example.yaml; no adjacent ONNX library is
required. Model weights remain separate and download only for enabled local backends.

sha256sum -c graphit-broker-linux-amd64.sha256
tar -xzf graphit-broker-linux-amd64.tar.gz
./graphit-broker-linux-amd64/graphit-broker --version

Container image

The same Linux amd64 binary is published to GitHub Container Registry with SemVer
aliases that omit the Git tag's v prefix:

docker pull ghcr.io/graphit-labs/graphit-broker:0.2.0