Skip to content

Destrayon/Connapse

v0.3.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai ai-agents blazor docker document-management .net
+13 more
embeddings generative-ai hybrid-search knowledge-management llm mcp-server model-context-protocol ollama pgvector retrieval-augmented-generation self-hosted semantic-search vector-db

Affected surfaces

auth rbac

Summary

AI summary

Added multi-provider embeddings, LLMs, vector support and background sync.

Full changelog

Added

  • 4 connector types: MinIO, Filesystem (FileSystemWatcher), S3 (IAM-only), Azure Blob (managed identity)
  • Per-container settings overrides (chunking, embedding, search, upload)
  • Cloud identity linking: AWS IAM Identity Center (device auth) + Azure AD (OAuth2+PKCE)
  • IAM-derived scope enforcement — cloud permissions as source of truth
  • Multi-provider embeddings: Ollama, OpenAI, Azure OpenAI
  • Multi-provider LLM: Ollama, OpenAI, Azure OpenAI, Anthropic
  • Multi-dimension vector support with partial IVFFlat indexes per model
  • Cross-model search with automatic Semantic-to-Hybrid fallback
  • Background sync: FileSystemWatcher for local, 5-min polling for cloud containers
  • Connection testing for all providers (S3, Azure Blob, MinIO, LLM, embeddings, AWS SSO, Azure AD)
  • Provider-specific API keys and IOptionsSnapshot for settings
  • 457 passing tests (unit + integration)

Fixed

  • CLI self-update for global tool installs
  • AWS account IDs removed from logs (CodeQL)
  • User-controlled values sanitized in ConnectorWatcherService logs

Full Changelog: https://github.com/Destrayon/Connapse/compare/v0.2.2...v0.3.1

Security Fixes

  • AWS account IDs removed from logs (addresses CodeQL issue)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Destrayon/Connapse

Get notified when new releases ship.

Sign up free

About Destrayon/Connapse

Self-hosted knowledge backend for AI agents with hybrid vector + keyword search, container-isolated indexes, and 11 MCP tools. .NET, Docker-ready.

All releases →

Related context

Beta — feedback welcome: [email protected]