This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
ReleasePort's take
Light signalConfiguration format has changed; existing setups must migrate to remain compatible.
Why it matters: Migration is required for compatibility after the configuration format update (severity 70).
Summary
AI summaryUpdates Bug Fixes, New Features, and Chores across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Configuration format updated; migration required for compatibility. Configuration format updated; migration required for compatibility. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds upstream basic authentication support for secure backend connections. Adds upstream basic authentication support for secure backend connections. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds health check endpoint at `/health` for monitoring. Adds health check endpoint at `/health` for monitoring. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds structured JSON logging option for better log parsing. Adds structured JSON logging option for better log parsing. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds support for custom headers in upstream requests. Adds support for custom headers in upstream requests. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Adds graceful shutdown handling with connection draining. Adds graceful shutdown handling with connection draining. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Updates Go runtime to version 1.21 for performance and security improvements. Updates Go runtime to version 1.21 for performance and security improvements. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Performance | Low |
Improves connection pooling efficiency under load. Improves connection pooling efficiency under load. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Performance | Low |
Improves TLS connection handling for secure upstream connections. Improves TLS connection handling for secure upstream connections. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes memory leak in long‑running proxy connections. Fixes memory leak in long‑running proxy connections. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes incorrect handling of chunked transfer encoding in responses. Fixes incorrect handling of chunked transfer encoding in responses. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes race condition in concurrent request processing. Fixes race condition in concurrent request processing. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Low |
Fixes timeout handling for slow upstream responses. Fixes timeout handling for slow upstream responses. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Refactor | Low |
Refactors logging system to support multiple output formats. Refactors logging system to support multiple output formats. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
Full changelog
Summary
This release focuses on enhancing proxy functionality with improved connection handling, adding critical security features, and refining the overall developer experience. Key additions include upstream authentication support, comprehensive health check endpoints, and structured logging capabilities.
Breaking Changes
⚠️ Configuration Format Update: The configuration file structure has been updated to support new authentication and logging features. Existing configurations may require migration to maintain compatibility.
New Features
- Add upstream basic authentication support for secure backend connections
- Add health check endpoint at
/healthfor monitoring and load balancer integration - Add structured JSON logging option for better log parsing and analysis
- Add support for custom headers in upstream requests
- Add graceful shutdown handling with proper connection draining
Bug Fixes
- Fix memory leak in long-running proxy connections
- Fix incorrect handling of chunked transfer encoding in responses
- Fix race condition in concurrent request processing
- Fix header case sensitivity issues in request forwarding
- Fix timeout handling for slow upstream responses
Improvements
- Improve connection pooling efficiency for better performance under load
- Improve error messages with more detailed context and debugging information
- Improve startup time by optimizing configuration loading
- Improve TLS connection handling for secure upstream connections
- Refactor logging system to support multiple output formats
Documentation
- Update README with new configuration options and examples
- Add documentation for health check endpoint usage
- Add migration guide for configuration format changes
- Update installation instructions for different environments
Chores
- Update Go version to 1.21 for improved performance and security
- Update dependencies including gorilla/mux and other third-party packages
- Add comprehensive test coverage for new features
- Update CI/CD pipeline for automated testing and deployment
- Add linting and formatting checks to pre-commit hooks
Breaking Changes
- Configuration Format Update: The configuration file structure has been updated to support new authentication and logging features. Existing configurations may require migration to maintain compatibility.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Track Oc-go-cc, an Open-source proxy that lets Claude Code use OSS models
Get notified when new releases ship.
Sign up freeAbout Oc-go-cc, an Open-source proxy that lets Claude Code use OSS models
All releases →Related context
Earlier breaking changes
- v0.5.2 Catalog storage migrates from JSON files to SQLite by default.
- v0.3.0 Anthropic model routing now prioritizes Zen-specific endpoints over legacy Anthropic when `IsZen` is true; existing configs may need updates using `model_overrides`.
- v0.3.0 `model_overrides` now requires explicit model names for DeepSeek V4 Pro and Flash Free variants; shorthand syntax removed.
- v0.2.9 Removes models mimo-v2-pro, mimo-v2-omni, qwen3.5-plus from routing
- v0.2.8 Breaks existing API key management workflows requiring round-robin configuration
Beta — feedback welcome: [email protected]