This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 1 known CVE
Topics
agents
analytics
antigravity
claude-code
cli-tool
codex
+11 more
cursor
cursor-ai
insights
kiro
large-language-models
mcp
pi
playground
registry
self-hosted
skills
Affected surfaces
auth
deps
Summary
AI summaryMultiple new search features and authentication improvements, plus removal of structured telemetry storage.
Full changelog
[1.9.3] - 2026-06-26
Added
- add trigram user search (search) (03d4710)
- add explicit SAML CLI login (auth) (9dbfc9c)
- move SSO settings into dynamic config (sso) (5e380e9)
- add flag-only init (agent) (386c5e2)
- add flag-only submits (registry) (4291a25)
- infer local container setup (mcp) (9c1f6cc)
- rank registry queries (search) (4ffbde5)
- add keyword helper (search) (aa39e20)
- use code editor in component edit forms (web) (f0cfd9f)
- add skill script code editor (web) (2a3005b)
- make MCP config textarea editor-like (web) (090e221)
Changed
- format install warning (mcp) (c88f450)
- route telemetry features through sessions (fbc7a38)
- remove structured telemetry storage (25c46a1)
Documentation
- recommend uv tool installs (cli) (baa0635)
- add search setup guidance (skills) (38c55b9)
- document harness attribution (integrations) (636942b)
Fixed
- bump vulnerable joserfc (deps) (fb12ee7)
- bypass login page for direct SSO (auth) (0d45615)
- refetch config for direct SSO login (auth) (a7cb7f2)
- open direct SSO device login (auth) (1897e1e)
- improve CLI SSO login flow (auth) (327b1b4)
- show locked super admin roles (users) (94d0ebd)
- warn manual installs about setup (mcp) (98ddb82)
- require json paste for git submit (mcp) (f55c567)
- address lint reuse and legacy tests (ci) (6b32891)
- cast skill targets safely (search) (e993986)
- add insights selection toggle (web) (ce9e1b3)
- cache management insights (exec) (68bceb9)
- remove ops overview command (cli) (2618ff7)
- hide deleted agents from leaderboards (8f80350)
Testing
Breaking Changes
- Removed structured telemetry storage
Security Fixes
- Bumped vulnerable joserfc dependency (deps)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About BlazeUp-AI/Observal](https:
All releases →Related context
Related tools
Earlier breaking changes
- v1.6.0 rename logger alias to optic (audit)
- v1.2.0 Removes legacy pre-JSONL modules in insights.
- v1.2.0 Removes agent visibility and team access features.
- v1.1.0 Replace deployment_mode API field with licensed boolean.
- v0.8.0 Removes goal template, replaces with required prompt field in agent configuration.
Beta — feedback welcome: [email protected]