Skip to content

Spring AI Business Copilot v2.4.1

Latest
Latest

Choose a tag to compare

View all tags
@qcodingdev qcodingdev released this 26 Sep 00:39
v2.4.1
052e0cb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Spring AI Business Copilot 2.4.1

2.4.1 strengthens the five existing business Copilots with recoverable execution, governed evaluation, clearer evidence, optional enterprise identity, and dependency security updates. It keeps the Data, Knowledge, Support, Report, and Resume/HR modules as the product scope.

2.4.1 加固现有五个业务 Copilot：任务可恢复、评测与 Prompt 可治理、证据口径更清晰，并提供可选企业身份接入及依赖安全更新。产品范围仍为 Data、Knowledge、Support、Report、Resume/HR。

Highlights / 主要改进

  • Added an owner-aware task runtime with conditional state transitions, budget reservation, interruption recovery, and user-visible timelines. Report and Knowledge use it in production paths.
  • Added a versioned evaluation harness and first-40-scenario gate. Empty or unverified results, failed assertions, model-call budget violations, and cleanup failures block evaluation.
  • Added an administrator acceptance evidence view that separates runtime readiness, model quality, vendor acceptance, and release gates. Evidence records are version-scoped and append-only.
  • Added optional OIDC identity with issuer/subject actor mapping, application roles, and session expiry handling.
  • Kept Data-to-Report metric snapshots and period definitions explicit; comparisons require compatible metric versions and periods.
  • Made Chinese the default for nine business Prompt templates and added explicit English variants, while retaining the actual template identity in governance and audit metadata.
  • Tightened query cancellation ownership and cumulative AI usage accounting; protected Report publication and Data handoff consumption from replaced workers.
  • Updated Bouncy Castle, Netty, Tomcat, and Vitest for dependency security.

Verification / 验证

  • PR #23: all six CI jobs passed, including Maven/PostgreSQL, five real-application business flows, MySQL 5.7 and 8.4, dependency review, and container security.
  • The same merged commit passed the GitHub main CI run 36205137733.
  • Local release-candidate verification: 662 Maven tests, 62 desktop/mobile browser scenarios, 22 real-application browser scenarios, and 67 fixed evaluation cases passed.
  • Five-module real-model release smoke passed on an isolated application and PostgreSQL stack; its containers, image, network, and data volume were removed afterward.

Deployment boundary / 部署边界

A production installation still needs its own identity, secrets, network policy, retention settings, model-quality evaluation, and vendor sandbox acceptance. This software release does not certify a particular production deployment.

生产部署仍需由部署方完成身份、密钥、网络策略、数据保留、真实模型质量评测及供应商沙箱验收；软件版本发布不代表任何具体生产环境已验收。

See CHANGELOG.md for the detailed changes.

Assets 2
Loading