v1.1.0

Changelog

• 5e5fd31 chore(release): prep v1.1.0 — server.json + install examples (#148)
• 176fecf fix(registry): drop OCI package version; guard the registry-only rule (#147)
• d07ae55 fix(registry): bump server.json to 1.0.3; guard the drift at release (#146)
• c949a0c fix(audit): record identities, redact only credentials (#145)
• 8f90767 feat(auth): native OIDC/JWKS token validation (#144)
• a56fe4b feat(portal): agent detail drill-down (#142)
• c495a46 feat(portal): pending-approvals badge on the tab (#141)
• fe274ea feat(portal): accessibility pass; no light theme (see #139) (#140)
• 1f99575 fix(portal): embed portal.js instead of a Go string literal (#138)
• 9215621 feat(portal): audit-log viewer with per-entry signature verification (#136)
• 5a3a7e9 feat(terraform): AWS module to provision a gateway (#135)
• 99ad3f7 feat(backstage): catalog Component+API, TechDocs nav, and guards against doc rot (#134)

v1.0.3

Changelog

• e3b35c2 feat: cosign-sign container images; authenticate the alert webhook (#133)
• 92483e9 fix(security): stop /api/config leaking secrets, and stop saves destroying them (#132)

v1.0.2

Changelog

• b50ab50 fix(release): a missing tap token skips the cask instead of failing (#130)
• 6f22979 feat(dist): MIT license, Homebrew tap, valid server.json + registry docs (#129)
• 5ea8732 feat(observability): OpenTelemetry tracing for tool calls and forwarding (#128)
• 41f583b feat(observability): example Grafana dashboard + metric-sync test (#126)
• 1535ee1 feat(alerting): route threshold alerts to webhook/Alertmanager (#124)
• 6e1862d docs: GHCR packages are public by inheritance, no login needed (#123)

v1.0.1

Changelog

• 2bf7c4c fix(release): build packages, not single files; validate GoReleaser in CI (#122)
• a01ec59 feat(observability): opt-in Prometheus /metrics endpoint on the gateway (#121)
• 3b70a5f feat(release): publish versioned Helm chart to GHCR + deployment docs (#119)
• a3c4d11 feat(release): GHCR container images, Helm chart, deb/rpm packages
• 5e48476 docs: v1.0.0 launch blog post + LinkedIn/Reddit announcement drafts

v1.0.0

Changelog

• b62c50d chore(release): prep v1.0.0 — Go 1.25 release build, version metadata
• 2ad7b9d feat(ha): multi-gateway peer mesh — shared fleet view + call forwarding
• 0ac448c feat(rbac): enforce fine-grained agent/tool scoping on the /message MCP path
• 50f2769 feat(ha): persistent inventory/audit-index store + restart recovery
• d18a80f feat(lifecycle): myrmex enroll/bootstrap/rotate CLI + enrollment guide
• 3df1b18 feat(lifecycle): mTLS + OIDC-via-trusted-proxy operator authentication
• b5217fa chore: gitignore runtime audit.log artifact
• b918b82 feat(llm): optional pluggable engine + bounded, injection-hardened loop
• a5d82ed feat(llm): per-request model override, timeouts, and retries
• fb3b18b refactor: rename Go module to github.com/olafkfreund/myrmex-hive
• 09711b7 fix(security): scrub Gemini API key from returned error messages
• 67cdb98 feat(secrets): agenix: indirection form + secrets/rotation guide
• 03bc592 feat(tooling): tool schema versioning + capability advertisement
• 2e11162 chore(deps): bump golang.org/x/crypto to v0.53.0; Go 1.25
• 7d942c6 feat(lifecycle): agent enrollment via join tokens + runtime revocation
• d3d56fe feat(compliance): 'myrmex audit watch' tamper-detection alerting
• 223ae0e feat(secrets): HashiCorp Vault backend for secret indirection
• 6ade18c feat(tooling): typed package_query and bounded file_read agent tools
• 25626c6 feat(config): startup validation + MCP server manifest
• fc6c5f8 feat(compliance): audit export/pubkey commands + compliance guide
• 22f71e1 feat(tooling): typed container_ps and k8s_get agent tools
• a54ca87 feat(llm): OpenAI-compatible engine backend (openai/vLLM/llama.cpp)
• f055b30 feat(dashboard): add Fleet and Approvals views to the gateway portal
• dafb1ff feat(telemetry): fleet heartbeat, metrics history, inventory, alerting, query API
• 7a20572 feat(agent): dry-run mode for run_command
• 2cd2356 feat(rbac): command risk tiers, approval workflow, and rate limiting
• fea7f60 feat(rbac): per-token authorization scoping by agent, tag, and tool
• 60d0b5a feat(audit): add 'myrmex audit verify' for signed hash-chained logs
• e3c4b9b feat(tooling): add typed service_control agent tool
• b95dace feat(llm): add pluggable Engine interface (Ollama + disabled backends)
• 33fa137 chore(test): fail-closed fixtures + docs; stop tracking generated keys
• 2964fea feat(install): download released binaries instead of compiling on target
• 894ed36 feat(config): secret indirection for tokens and API keys
• 5432399 feat(dx): add /healthz + /readyz probes and --version build info
• 0d3024f fix(security): harden auth, transport, audit, and command execution
• 40121ac docs: add CLAUDE.md guidance for Claude Code
• 56be8d0 feat: add CNAME file and update _config.yml for custom domain (#4)
• 3780bb6 chore: onboard to Backstage catalog (#1)
• d3f8c8f fix: resolve Jekyll Markdown rendering issue for Mermaid blocks (#3)
• fea0a82 feat: RBAC, signed audit logging, agent HA failover, and Gemma 4 Ollama sidecar (#2)
• 1d3a6cc docs: update README.md and Jekyll index with comprehensive guide and installation scenarios

0.1

Changelog

• 37ee9f0 ci: install syft in release workflow for SBOM generation
• 3164309 fix: resolve syscall.Getloadavg build error on Darwin
• 19fa72e ci: upgrade goreleaser action to v6 to support v2 config
• 0ec7ec2 ci: add GitHub Pages Jekyll deployment workflow
• 08116bf feat: render markdown responses in terminal/web and support clean JSON output format
• bbf3440 feat: add myrmex CLI compilation to GoReleaser
• 46b1049 style: fix [REC] button width and alignment
• 56b22e3 feat: configure Myrmex Hive branding, robot assistant, NixOS flakes, CI, and GoReleaser
• b433520 feat: init Myrmex Hive orchestrator with Gruvbox Dark theme blog