Skip to content

BlazeUp-AI/Observal](https:

v1.9.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agents analytics antigravity claude-code cli-tool codex
+11 more
cursor cursor-ai insights kiro large-language-models mcp pi playground registry self-hosted skills

Affected surfaces

auth deps

Summary

AI summary

Multiple new search features and authentication improvements, plus removal of structured telemetry storage.

Full changelog

[1.9.3] - 2026-06-26

Added

  • add trigram user search (search) (03d4710)
  • add explicit SAML CLI login (auth) (9dbfc9c)
  • move SSO settings into dynamic config (sso) (5e380e9)
  • add flag-only init (agent) (386c5e2)
  • add flag-only submits (registry) (4291a25)
  • infer local container setup (mcp) (9c1f6cc)
  • rank registry queries (search) (4ffbde5)
  • add keyword helper (search) (aa39e20)
  • use code editor in component edit forms (web) (f0cfd9f)
  • add skill script code editor (web) (2a3005b)
  • make MCP config textarea editor-like (web) (090e221)

Changed

  • format install warning (mcp) (c88f450)
  • route telemetry features through sessions (fbc7a38)
  • remove structured telemetry storage (25c46a1)

Documentation

  • recommend uv tool installs (cli) (baa0635)
  • add search setup guidance (skills) (38c55b9)
  • document harness attribution (integrations) (636942b)

Fixed

  • bump vulnerable joserfc (deps) (fb12ee7)
  • bypass login page for direct SSO (auth) (0d45615)
  • refetch config for direct SSO login (auth) (a7cb7f2)
  • open direct SSO device login (auth) (1897e1e)
  • improve CLI SSO login flow (auth) (327b1b4)
  • show locked super admin roles (users) (94d0ebd)
  • warn manual installs about setup (mcp) (98ddb82)
  • require json paste for git submit (mcp) (f55c567)
  • address lint reuse and legacy tests (ci) (6b32891)
  • cast skill targets safely (search) (e993986)
  • add insights selection toggle (web) (ce9e1b3)
  • cache management insights (exec) (68bceb9)
  • remove ops overview command (cli) (2618ff7)
  • hide deleted agents from leaderboards (8f80350)

Testing

  • update SSO settings expectations (auth) (60a3ba5)
  • cover natural keywords (search) (a33f3e0)
  • update telemetry cleanup coverage (d06b3d1)

Breaking Changes

  • Removed structured telemetry storage

Security Fixes

  • Bumped vulnerable joserfc dependency (deps)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track BlazeUp-AI/Observal](https:

Get notified when new releases ship.

Sign up free

About BlazeUp-AI/Observal](https:

All releases →

Related context

Earlier breaking changes

  • v1.6.0 rename logger alias to optic (audit)
  • v1.2.0 Removes legacy pre-JSONL modules in insights.
  • v1.2.0 Removes agent visibility and team access features.
  • v1.1.0 Replace deployment_mode API field with licensed boolean.
  • v0.8.0 Removes goal template, replaces with required prompt field in agent configuration.

Beta — feedback welcome: [email protected]