Skip to content

msaad00/agent-bom

v0.81.1 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security ai-supply-chain aibom blast-radius cloud-security
+14 more
compliance container-security cyclonedx security kubernetes llm-security mcp mcp-server owasp sarif sbom security-scanner supply-chain-security vulnerability-scanning

Affected surfaces

auth rbac

Summary

AI summary

Enforce tenant-scoped gateway routing for multitenancy.

Full changelog

What's Changed

  • [platform] align published runtime image surfaces by @msaad00 in https://github.com/msaad00/agent-bom/pull/1612
  • [ci] normalize Dependabot UI lockfile updates by @msaad00 in https://github.com/msaad00/agent-bom/pull/1613
  • chore(deps-dev): bump @tailwindcss/postcss from 4.2.2 to 4.2.3 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1610
  • chore(deps-dev): bump typescript-eslint from 8.58.0 to 8.59.0 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1611
  • chore(deps-dev): bump tailwindcss from 4.2.2 to 4.2.3 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1609
  • docs: align deployment modes and image model by @msaad00 in https://github.com/msaad00/agent-bom/pull/1614
  • fix: harden tenant-scoped metrics and proxy audit by @msaad00 in https://github.com/msaad00/agent-bom/pull/1615
  • fix: harden proxy startup and gateway HA defaults by @msaad00 in https://github.com/msaad00/agent-bom/pull/1616
  • chore: validate shipped helm deployment profiles by @msaad00 in https://github.com/msaad00/agent-bom/pull/1617
  • chore(deps): bump lxml from 6.0.4 to 6.1.0 by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1618
  • feat(ui): add deployment-context-aware navigation by @msaad00 in https://github.com/msaad00/agent-bom/pull/1619
  • feat(auth): add key rotation overlap and admin UX by @msaad00 in https://github.com/msaad00/agent-bom/pull/1620
  • feat(deploy): add one-command Helm profile installer by @msaad00 in https://github.com/msaad00/agent-bom/pull/1629
  • feat(endpoint): add managed proxy onboarding bundle by @msaad00 in https://github.com/msaad00/agent-bom/pull/1630
  • feat(gateway): add tenant-scoped runtime rate limiting by @msaad00 in https://github.com/msaad00/agent-bom/pull/1631
  • fix(auth): fail closed on missing OIDC tenant claims by default by @msaad00 in https://github.com/msaad00/agent-bom/pull/1632
  • feat(packaging): add one-command pilot compose path by @msaad00 in https://github.com/msaad00/agent-bom/pull/1633
  • feat(terraform): add AWS baseline module and destroy guidance by @msaad00 in https://github.com/msaad00/agent-bom/pull/1634
  • feat(deploy): add AWS EKS reference rollout installer by @msaad00 in https://github.com/msaad00/agent-bom/pull/1641
  • feat(deploy): add teardown helper for AWS EKS installs by @msaad00 in https://github.com/msaad00/agent-bom/pull/1652
  • feat(gateway): stitch W3C trace context across relay by @msaad00 in https://github.com/msaad00/agent-bom/pull/1654
  • feat(api): add inbound OCSF ingest route by @msaad00 in https://github.com/msaad00/agent-bom/pull/1655
  • docs(deploy): publish enterprise auth and operator guides by @msaad00 in https://github.com/msaad00/agent-bom/pull/1656
  • docs(runtime): publish operator guides and remediation contract by @msaad00 in https://github.com/msaad00/agent-bom/pull/1658
  • docs(model): publish control-plane data model and store parity by @msaad00 in https://github.com/msaad00/agent-bom/pull/1659
  • docs(deploy): refresh self-hosted diagrams and runtime flow by @msaad00 in https://github.com/msaad00/agent-bom/pull/1661
  • feat(proxy): preserve upstream W3C trace context across stdio JSON-RPC boundary by @msaad00 in https://github.com/msaad00/agent-bom/pull/1662
  • feat(deploy): add Helm teardown cleanup hooks by @msaad00 in https://github.com/msaad00/agent-bom/pull/1663
  • feat(endpoint): add packaged installer assets and MDM rollout by @msaad00 in https://github.com/msaad00/agent-bom/pull/1664
  • feat(k8s): add proxy sidecar mutating webhook by @msaad00 in https://github.com/msaad00/agent-bom/pull/1665
  • fix(api): close middleware RBAC route coverage gaps by @msaad00 in https://github.com/msaad00/agent-bom/pull/1671
  • feat(deploy): add EKS preflight and post-deploy verify by @msaad00 in https://github.com/msaad00/agent-bom/pull/1672
  • feat(proxy): sign cached gateway policy bundles by @msaad00 in https://github.com/msaad00/agent-bom/pull/1673
  • feat(gateway): hot-reload file-backed policy by @msaad00 in https://github.com/msaad00/agent-bom/pull/1675
  • feat(proxy): extend replay window with bounded memory by @msaad00 in https://github.com/msaad00/agent-bom/pull/1676
  • feat(graph): wire skill audit findings into graph by @msaad00 in https://github.com/msaad00/agent-bom/pull/1678
  • test(runtime): add gateway and OCSF contract coverage by @msaad00 in https://github.com/msaad00/agent-bom/pull/1680
  • chore(deps-dev): bump vitest from 4.1.4 to 4.1.5 in /ui by @dependabot[bot] in https://github.com/msaad00/agent-bom/pull/1683
  • docs(runtime): add operations runbook by @msaad00 in https://github.com/msaad00/agent-bom/pull/1682
  • feat(ui): add feedback and bug-report entrypoints by @msaad00 in https://github.com/msaad00/agent-bom/pull/1685
  • feat(ui): make MCP inventory obvious before proxy rollout by @msaad00 in https://github.com/msaad00/agent-bom/pull/1688
  • docs(deploy): simplify self-hosted deployment story by @msaad00 in https://github.com/msaad00/agent-bom/pull/1689
  • docs(architecture): define unified platform control plane by @msaad00 in https://github.com/msaad00/agent-bom/pull/1690
  • feat(platform): surface MCP provenance across discovery and fleet by @msaad00 in https://github.com/msaad00/agent-bom/pull/1698
  • docs(deploy): align EKS rollout to unified platform surfaces by @msaad00 in https://github.com/msaad00/agent-bom/pull/1699
  • docs(deploy): define retention and security-lake strategy by @msaad00 in https://github.com/msaad00/agent-bom/pull/1700
  • feat(platform): persist MCP observation provenance by @msaad00 in https://github.com/msaad00/agent-bom/pull/1701
  • docs(deploy): clarify entrypoints and self-hosted runtime model by @msaad00 in https://github.com/msaad00/agent-bom/pull/1702
  • feat(graph): clarify snapshot and blast-radius semantics by @msaad00 in https://github.com/msaad00/agent-bom/pull/1703
  • docs(mcp): add proxy vs gateway vs fleet guide by @msaad00 in https://github.com/msaad00/agent-bom/pull/1704
  • docs(release): tighten scale and runtime caveats by @msaad00 in https://github.com/msaad00/agent-bom/pull/1705
  • chore(release): bump version to 0.81.1 by @msaad00 in https://github.com/msaad00/agent-bom/pull/1706
  • [codex] feat(multitenancy): enforce tenant-scoped gateway routing by @msaad00 in https://github.com/msaad00/agent-bom/pull/1707
  • [codex] docs(multitenancy): tighten self-hosted tenancy boundary by @msaad00 in https://github.com/msaad00/agent-bom/pull/1708
  • [codex] fix(release): close audit followups by @msaad00 in https://github.com/msaad00/agent-bom/pull/1709
  • docs(auth): define UI and API session model by @msaad00 in https://github.com/msaad00/agent-bom/pull/1710
  • docs(deploy): clarify official deployment paths by @msaad00 in https://github.com/msaad00/agent-bom/pull/1711
  • docs(deploy): split enterprise self-hosted diagrams by @msaad00 in https://github.com/msaad00/agent-bom/pull/1712
  • docs(trust): define customer data and support boundary by @msaad00 in https://github.com/msaad00/agent-bom/pull/1713

Full Changelog: https://github.com/msaad00/agent-bom/compare/v0...v0.81.1

Breaking Changes

  • [codex] enforce tenant-scoped gateway routing

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track msaad00/agent-bom

Get notified when new releases ship.

Sign up free

About msaad00/agent-bom

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

All releases →

Related context

Beta — feedback welcome: [email protected]