This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
ReleasePort's take
Moderate signalObserval v0.8.0 removes the goal template from agent configuration and mandates a prompt field instead.
Why it matters: All existing agent configs must be updated to include a prompt; failure prevents deployment across any method (severity 70).
Summary
AI summaryUpdates 0.8.0] - 2026-05-21, Other, and Testing across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Removes goal template, replaces with required prompt field in agent configuration. Removes goal template, replaces with required prompt field in agent configuration. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
License-gated install across all deployment methods. License-gated install across all deployment methods. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Add settings UI, dashboard widget, and warning banner for retention. Add settings UI, dashboard widget, and warning banner for retention. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Add admin API endpoints and 6‑hour purge cron for retention. Add admin API endpoints and 6‑hour purge cron for retention. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Add per‑org data retention model, schema, and purge service. Add per‑org data retention model, schema, and purge service. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Extend custom branding to login, home, device pages and SVG logo. Extend custom branding to login, home, device pages and SVG logo. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Default load balancer to port 80 for single‑port access in Docker deployment. Default load balancer to port 80 for single‑port access in Docker deployment. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Feature | Low |
Add Cursor hook config emission from agent config generator. Add Cursor hook config emission from agent config generator. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Feature | Low |
Add cursor_session_push hook and background post worker for Cursor. Add cursor_session_push hook and background post worker for Cursor. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Feature | Low |
Add server‑side JSONL session parser and ingest classifier for Cursor. Add server‑side JSONL session parser and ingest classifier for Cursor. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Feature | Low |
Detect and configure Cursor on auth login. Detect and configure Cursor on auth login. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Feature | Low |
Enable hook_bridge and set cursor session parser in IDE registry. Enable hook_bridge and set cursor session parser in IDE registry. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Feature | Low |
Create components in-memory and cascade submit with agent in builder. Create components in-memory and cascade submit with agent in builder. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Bugfix | Medium |
Update default server URL to match new LB port 80 in CLI. Update default server URL to match new LB port 80 in CLI. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Medium |
Route frontend traffic through LB on port 80 via Nginx configuration. Route frontend traffic through LB on port 80 via Nginx configuration. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Medium |
Update localhost URLs from port 8000 to port 80 after LB change in e2e tests. Update localhost URLs from port 8000 to port 80 after LB change in e2e tests. Source: llm_adapter@2026-05-25 Confidence: high |
— |
| Bugfix | Low |
Add doctor patch for Cursor hook installation. Add doctor patch for Cursor hook installation. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Bugfix | Low |
Add license field to package.json for web assets. Add license field to package.json for web assets. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Refactor | Low |
Split monolithic ClickHouse module into subpackage. Split monolithic ClickHouse module into subpackage. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Refactor | Low |
Rewrite hook scripts as thin wrappers over sessions/domain in CLI. Rewrite hook scripts as thin wrappers over sessions/domain in CLI. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Refactor | Low |
Introduce sessions/domain with base, claude_code, kiro, and cursor modules in CLI. Introduce sessions/domain with base, claude_code, kiro, and cursor modules in CLI. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Refactor | Low |
Extract sanitize_name, load_jsonc, hook markers, and shim detection to shared utils in CLI. Extract sanitize_name, load_jsonc, hook markers, and shim detection to shared utils in CLI. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Refactor | Low |
Extract sanitize_name and strip_cursor_xml_tags to shared utils in server code. Extract sanitize_name and strip_cursor_xml_tags to shared utils in server code. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
Full changelog
[0.8.0] - 2026-05-21
Added
- add settings UI, dashboard widget, and warning banner (retention) (893432b)
- add admin API endpoints and 6-hour purge cron (retention) (862992f)
- add per-org data retention model, schema, and purge service (retention) (bb746af)
- license-gated install across all deployment methods (f327c95)
- extend custom branding to login, home, device pages and SVG logo (web) (c2e9fe2)
- default LB to port 80 for single-port access (docker) (fd29b8b)
- add Cursor to platform filter and show agent name in trace list (web) (deb5989)
- enable hook_bridge and set cursor session parser in IDE registry (cursor) (7011847)
- add doctor patch for Cursor hook installation (cursor) (9f39c21)
- detect and configure Cursor on auth login (cursor) (c0c068d)
- emit Cursor hook config from agent config generator (cursor) (8d3e8f4)
- add cursor_session_push hook and background post worker (cursor) (42a9057)
- add server-side JSONL session parser and ingest classifier (cursor) (81c6c36)
- create components in-memory, cascade submit with agent (builder) (53d7b75)
Changed
- split monolithic module into subpackage (clickhouse) (dbf4964)
- rewrite hook scripts as thin wrappers over sessions/ domain (cli) (a2b2ca1)
- introduce sessions/ domain with base, claude_code, kiro, and cursor modules (cli) (d53e10e)
- extract sanitize_name, load_jsonc, hook markers, and shim detection to shared utils (cli) (912f586)
- extract sanitize_name and strip_cursor_xml_tags to shared utils (server) (65c7506)
- remove goal template, replace with required prompt field (agent) (3b04a3e)
Documentation
- remove GitHub stars shield (readme) (b3bc715)
- document license-gated install and OBSERVAL_LICENSE_KEY (940a606)
- expand badge bar with live GHCR pulls, PyPI, and community badges (readme) (7945bbb)
- add AI policy, development guide, and overhaul contributing guide (afd90f4)
Fixed
- update default server URL to match new LB port 80 (cli) (92454d4)
- add license field to package.json (web) (c193090)
- query packages via repository scope instead of org (badges) (818c6d6)
- use GraphQL to fetch GHCR pull counts, require read:org scope (badges) (834e83d)
- update localhost URLs from port 8000 to port 80 after LB change (e2e) (6c61312)
- route frontend traffic through LB on port 80 (nginx) (61e7060)
- correct agent pull command in registry home (web) (3392a1b)
- resolve agent files to project scope and use sys.executable in pull (cursor) (809ca65)
- render YAML instead of JSON, expand all components by default (review) (70e106a)
- default installation scope to user for agent pull (cli) (a57f410)
- description is registry metadata, never inject into agent files (agent) (87688be)
Other
- remove demo directory (0824422)
- add refactor-guide, security-auditor, and test-writer skill definitions (becae20)
- fix broken AI_POLICY.md links in development guide (docs) (caae9a1)
Testing
- add unit, integration, and simulation tests (retention) (36a13fa)
Breaking Changes
- Removed `goal` template from agent configuration; a required `prompt` field must now be provided.
- Split monolithic ClickHouse module into subpackages, altering import paths and requiring updates to code referencing the old structure.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About BlazeUp-AI/Observal](https:
All releases →Related context
Related tools
Earlier breaking changes
Featured in
Beta — feedback welcome: [email protected]