ingero-io/ingero

v0.17.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 16d MCP Data & Storage

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

causal-tracing cuda cuda-graphs ebpf gpu gpu-monitoring

+11 more

gpu-observability incident-response kubernetes machine-learning mcp model-context-protocol nvidia observability pytorch sre distributed-tracing

Affected surfaces

auth rce_ssrf

Summary

AI summary

Added Annotation record type, NDJSON ingest socket, and query‑join support for annotations.

Changes in this release

Type	Severity	Summary	CVE
Breaking	Low	Dropped 'annotate --socket' option from CLI. Dropped 'annotate --socket' option from CLI. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature
Feature	Low	Added 'ingero annotate' command and wired trace ingest socket. Added 'ingero annotate' command and wired trace ingest socket. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Joined annotations to events in query and added explanation. Joined annotations to events in query and added explanation. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Pinned external annotation ingest protocol and limits in contract. Pinned external annotation ingest protocol and limits in contract. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Added annotations table with retention and incarnation join to store. Added annotations table with retention and incarnation join to store. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Added Annotation record type and process-incarnation key to annotate. Added Annotation record type and process-incarnation key to annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Added inbound NDJSON annotation ingest socket to annotate. Added inbound NDJSON annotation ingest socket to annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Feature	Low	Made socket directory group-traversable when a gid is set in annotate. Made socket directory group-traversable when a gid is set in annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Performance	Low	Applied busy_timeout to every pooled connection via DSN in store. Applied busy_timeout to every pooled connection via DSN in store. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix
Bugfix	Low	Fixed annotation incarnation join in store. Fixed annotation incarnation join in store. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Fail closed when a PID-scoped annotation's uid is unverifiable in annotate. Fail closed when a PID-scoped annotation's uid is unverifiable in annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Low	Rejected control characters in label values in annotate. Rejected control characters in label values in annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Refactor
Refactor	Low	Client now dials canonical /run socket path in annotate. Client now dials canonical /run socket path in annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Refactor	Low	Fixed stale peerCred doc comment, drops conn on error in annotate. Fixed stale peerCred doc comment, drops conn on error in annotate. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Refactor	Low	Hardened ingest socket trust boundary. Hardened ingest socket trust boundary. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low	—

Full changelog

Changelog

Documentation

dbdbdbbd56c11032db919e1ec43ff209d403f385 docs: add v0.17.0 changelog entry
0f3a35b7e5574593951d60a2f853a118e0e49163 docs: add vLLM integration example (#61)
e3bbbd7d319f30c09a434195ef46d622756a8d8d docs: backfill the 0.16.0 changelog entry
9e88d3690d9007162eb10659c5eb9ae419790813 docs: cross-link the Fleet repo from agent docs
f600eab3ebb79514ee87cd9b8366b1d197ae0bdf docs: keep README to current behavior

Other

331758cdfe088845a565397237142c3e6352c978 annotate: add Annotation record type and process-incarnation key
17d2e132235a66297396db47163a01611dcdaa1d annotate: add inbound NDJSON annotation ingest socket
bc49a8a3a1a43627d45323c7547affaf23bea3ef annotate: client dials the canonical /run socket path
83a0f4453138d921f04295587de24379148aab1c annotate: fail closed when a PID-scoped annotation's uid is unverifiable
eea1a06fa22f4d45c0827677c886877dcbe84bcd annotate: fix stale peerCred doc comment (drops conn on error)
5cada92bb1883c32bf11503cff1586fded2661c1 annotate: harden the ingest socket trust boundary
7c76a650ed3b5557bdb55f5bcc2a405f5cbee595 annotate: make the socket directory group-traversable when a gid is set
f87b39509b02fcab09f89babe7a0945a0c439c58 annotate: reject control characters in label values
fa3141213b3828e79a0c62c5379715f521b20534 chore(docs): sync version pins to v0.16.0
e484974db570cc80dcb55946459ddee78b12b829 chore(docs): sync version pins to v0.17.0
5463a3a7877963adf31f93bf21b1c059f9bcfc76 cli: add 'ingero annotate' and wire the trace ingest socket
8517fab8943f8835d61a725adc9117fac0daaf56 cli: drop 'annotate --socket' and note explain rollover scope
74b3daa2391025b499d4aabfe554e569306aacea cli: join annotations to events in query and explain
45826b4b6c6fbad9f4df65bbe5eb7be1d4f9e262 contract: pin external annotation ingest protocol and limits
abce6f7891755c5b3e40ac64bbec0e3e71337413 store: add annotations table with retention and incarnation join
60fe04fa88bcabe57331b24e828a7cec03b53b31 store: apply busy_timeout to every pooled connection via DSN
561ef0ed3fce77de7aefba0292c60c680dca82ea store: fix the annotation incarnation join
3131fb7eebf7168f9b2496bb1adb2d2570a9a279 test: deflake TestPruneBySizeAutoTrigger

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track ingero-io/ingero

Get notified when new releases ship.

About ingero-io/ingero

eBPF-based GPU causal observability agent with MCP server. Traces CUDA Runtime/Driver APIs and host kernel events to build causal chains explaining GPU latency.

All releases →