This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 1mo
Secrets & Credentials
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
agent-delegation
ai-agents
ai-authentication
ai-security
authentication
dev-tools
+7 more
dpop
go
llm-tools
oauth2
oauth2-1
self-hosted
sqlite
Summary
AI summaryFixed launch security regressions.
Full changelog
Changelog
- 6780e69543b998b759c99021e7cb5da248a19977 Add dashboard favicon glyph
- d60df545bca40fab98c90ed95e34bc6304f39573 Add session pagination controls
- 649bb3710eb2947eb7e313df916b40c811f4b380 Consume firstboot admin key after first display
- 88c7bf8ae1ba5226b6994613a9d032b41f7b22d9 Fix DPoP delegation metadata and canvas status
- a79642fdd04a0ff3afc1b377233611800ff8cdab Fix SharkClaw SDK delegation demo
- 62fdf1ab4fbb3e8e0b16a9d19affbd41b9553f89 Fix admin session and agent count display
- fd1589fa24c23f10c2a76fbc4e5727fffa5dddca Fix agent delegation demo and drawer status
- 09052506e1ca806f235544c7e74920d86c091dc3 Fix delegation canvas revocation and trace attribution
- 2f7714f0b81e7b08c9a631222deca4be56a799e9 Fix duplicate delegation chain hops
- 6926eb3a97bdf31c49e7e6c2d956a4dd0c3d3c1c Fix filtered user totals in admin list
- 1ed06d2a0499d91fa84e45313eaac8cca65581e1 Fix launch security regressions
- ff02e976b89197ab9daad094ff404240d4d7069c Harden update probe and revocation demo
- 8289e6a54243d2acb13532033cb9e00b8c1a62cf Update token exchange smoke grant setup
Security Fixes
- Fixed launch security regressions
- Hardened update probe and revocation demo
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Track I built open-source auth for AI agents (Go, single binary)
Get notified when new releases ship.
Sign up freeAbout I built open-source auth for AI agents (Go, single binary)
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]