v2.5.1

2.5.1 (2026-10-23)

Bug Fixes

• deps: bump Go to 1.26.10 for GO-2026-6809 (bd20b96)
• deps: bump Go to 1.26.10 for GO-2026-6809 (dc29825)

v2.5.0

2.5.0 (2026-10-11)

Features

• observability: correlate tickets and logs with their trace (03e5a4e)
• observability: correlate tickets and logs with their trace (a0f9862)

Bug Fixes

• observability: correlate the pipeline's failure-path log lines (e302209)

v2.4.2

2.4.2 (2026-10-10)

Bug Fixes

• monitor: dedup on alert name, exempt critical from flap cooldown (0a5c770)
• monitor: dedup on alert name, exempt critical from flap cooldown (585e7ef), closes #162
• monitor: honour severity=critical label in flap cooldown (e405d45)
• monitor: honour severity=critical label in flap cooldown (87c9d2d)
• monitor: key alert dedup on alert name, skip flap cooldown for critical (2abb6be), closes #162
• monitor: pass blank alert name when deduping GitHub workflow tickets (9678fdd), closes #162
• monitor: pass blank alert name when deduping poller tickets (7fbda48), closes #162

Removed

• api: remove the external-agent webhook subscription API (#161): GET/POST /api/v1/webhooks, DELETE /api/v1/webhooks/{id}, POST /api/v1/tickets/{id}/external-claims, PATCH /api/v1/tickets/{id}/external-results, the MCP tools mctl_agent_list_webhooks, mctl_agent_register_webhook, mctl_agent_delete_webhook, and the WEBHOOK_ENABLED / WEBHOOK_DEFAULT_TTL settings. This is a removal of public API, released as a patch because it was never switched on in production (WEBHOOK_ENABLED was never set) and its only client, mctl-openclaw, is archived. WEBHOOK_CALLBACK_URL (Telegram webhook base) is unchanged. The tables webhook_endpoints, external_events, external_deliveries and external_claims are left in place.

v2.4.1

2.4.1 (2026-10-10)

Bug Fixes

• deps: bump Go to 1.26.9 for net/http advisories (d5be11b)
• deps: bump golang.org/x/net to v0.60.0 for GO-2026-6617 (ea21c9a)
• deps: bump x/net to v0.60.0 and Go to 1.26.9 (5c18674)

v2.4.0

2.4.0 (2026-10-01)

Features

• telegram: forward private /start to the bot-start bridge (3c7890e)
• telegram: forward private /start to the bot-start bridge (e88f436)

Bug Fixes

• botstart: cap in-flight forwards and count every outcome (63c7b31)
• botstart: close the forwarder before draining; fail closed (2194479)

v2.3.0

2.3.0 (2026-09-30)

Features

• agents: issue-143-follow-ups-from-142-service-name-canonic (313902f)

Bug Fixes

• agents: harden service-name canonicalisation and escalation messages (6f329a5)
• commit is what makes release-please pick it up. (96a12ec)
• diagnosis: release the claude-sonnet-5-5 switch (76b9279)
• diagnosis: release the claude-sonnet-5-5 switch (96a12ec)

v2.2.0

2.2.0 (2026-09-29)

Features

• agents: issue-141-oomkilled-and-other-pod-scoped-skills-re (1a1271f)
• monitor: classify ContainerOOMKilled as a resource-limit alert (3f4549b)
• monitor: classify ContainerOOMKilled as a resource-limit alert (5171d37)
• monitor: classify NodeMemoryHeadroomLow as a resource-limit alert (301599b)
• monitor: classify NodeMemoryHeadroomLow as a resource-limit alert (ffedcbe)
• telemetry: trace ticket processing over OTLP and count LLM tokens (29bb65e)
• telemetry: trace ticket processing over OTLP and count LLM tokens (0c9e8f2)

Bug Fixes

• agents: address P1/P2 codex findings on issue-141-oomkilled-and-other-pod-scoped-skills-re (31b04d5)
• agents: address P1/P2 codex findings on issue-141-oomkilled-and-other-pod-scoped-skills-re (9a91630)
• agents: address P1/P2 codex findings on issue-141-oomkilled-and-other-pod-scoped-skills-re (fc7d01d)
• agents: address P1/P2 codex findings on issue-141-oomkilled-and-other-pod-scoped-skills-re (a5354d5)
• agents: issue-141-oomkilled-and-other-pod-scoped-skills-re (b9547e6)
• telemetry: address review — request outcome, fix span semantics (5052029)
• telemetry: follow the OTLP protocol variable; survive a failed reload (d8c9f83)

v2.1.0

2.1.0 (2026-09-03)

Features

• agents: issue-101-go-1-25-13-bump-dockerfile-go-mod-toolch (5e6649b)

v2.0.1

2.0.1 (2026-08-29)

Bug Fixes

• never auto-merge on an unpersisted transition; carry the diagnosis (cfc0d75)
• pipeline: do not announce a transition the store refused (fad74e9)
• pipeline: guard and detach the post-failure diagnosis writes too (1163403)

v2.0.0

2.0.0 (2026-08-29)

⚠ BREAKING CHANGES

• agents: remote skills previously registered with an http:// endpoint or a private/loopback/CGNAT-range host will fail outbound calls once this ships (the dial guard applies to already-registered skills, not just new registrations). Re-register them over https:// with a public/allowed host.

Features

• agents: issue-99-path-allowlist-for-gitops-writes-remote (01adb82)

Bug Fixes

• remote: close DNS-rebinding TOCTOU in dial guard; bound registration DNS lookup (c9d8a4b)