Skip to content

dagu

v2.9.0 Breaking

This release includes 4 breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-workflow cron data-pipeline devops durable-execution durable-workflows
+14 more
human-in-the-loop job-scheduler mcp-server multiplayer-agent on-premise private-runners self-hosted self-service selfservice-portal task-automation task-scheduler workflow-engine workflow-orchestration workflow-scheduler

Affected surfaces

breaking_upgrade deps

Summary

AI summary

Updates fix, refactor, and test across a mixed release.

Full changelog

Changelog

This release includes visibility improvements and bug fixes for distributed executions, along with other general bug fixes. Additionally, the built-in AI agent has been removed in favor of MCP support, and the built-in docs management feature has also been removed.

Added

  • feat: add DAG-run runtime conditions (#2332) @yohamta0

Changed

  • test: cover approval resume process identity (#2334) @yohamta0
  • refactor: remove built-in AI agent (#2335) @yohamta0
  • chore(deps): bump node from 25-alpine to 26-alpine (#2338) @dependabot
  • chore(deps): bump alpine from 3.23 to 3.24 (#2339) @dependabot

Fixed

  • refactor: remove shared-volume worker mode (#2327) @yohamta0
  • fix: close node outputs on failed progress paths (#2328) @yohamta0
  • fix: limit app stream file watching (#2329) @yohamta0
  • refactor: Remove docs feature (#2331) @yohamta0
  • fix: reject approval while DAG run is active (#2336) @yohamta0
  • chore(deps): bump the go-patch group with 7 updates (#2340) @dependabot
  • fix: include worker output in distributed run logs (#2343) @yohamta0
  • test: implement MCP read conformance (#2345) @yohamta0
  • fix: bootstrap missing sub-attempt status reports (#2346) @yohamta0
  • refactor: remove migrate command (#2347) @yohamta0
  • test: implement MCP change conformance (#2348) @yohamta0

Contributors

Thanks to our contributors for this release:

| Contribution | Contributor |
| --- | --- |
| chore(deps): bump node from 25-alpine to 26-alpine (#2338), chore(deps): bump alpine from 3.23 to 3.24 (#2339), chore(deps): bump the go-patch group with 7 updates (#2340) | @dependabot |
| bug: stale attempt: lease no longer active (#2344) | @pommetjehorlepiep (report) |
| Approval resume: long container step falsely marked failed (#2251) | @pengu-fr b (report) |

Full Changelog: https://github.com/dagucloud/dagu/compare/v2.8.3...v2.9.0

Breaking Changes

  • Removed built-in AI agent (#2335) in favor of MCP support.
  • Removed built-in docs management feature (#2331).
  • Bumped Node.js runtime from 25-alpine to 26-alpine (#2338).
  • Bumped Alpine base image from 3.23 to 3.24 (#2339).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track dagu

Get notified when new releases ship.

Sign up free

About dagu

A local-first workflow engine built the way it should be: declarative, file-based, self-contained, air-gapped ready. One binary that scales from laptop to distributed cluster. Your Workflow Operator handles creating and debugging workflows.

All releases →

Related context

Earlier breaking changes

  • v2.10.6 Built-in authentication token TTLs are now limited to 8760h (365 days); larger values are rejected at startup.

Beta — feedback welcome: [email protected]