sidpalas/deputies

v0.5.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 3d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents ai control-plane development

Affected surfaces

auth rbac breaking_upgrade

ReleasePort's take

Light signal

editorial:auto 3d

Version v0.5.0 removes several GitHub auth environment variables and the RUNNER_MODEL var; adopt new settings accordingly.

Why it matters: Breaking changes in v0.5.0 affect configurations: AUTH_GITHUB_* vars and RUNNER_MODEL are removed (severity 70). Update deployments before upgrade to avoid runtime failures.

Summary

AI summary

Updates ⚠ BREAKING CHANGES, 0.5.0, and 2026-06-01 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS env vars. Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS env vars. Source: llm_adapter@2026-06-01 Confidence: low	—
Breaking	High	Removed RUNNER_MODEL env var; use RUNNER_MODEL_DEFAULT instead. Removed RUNNER_MODEL env var; use RUNNER_MODEL_DEFAULT instead. Source: llm_adapter@2026-06-01 Confidence: low	—
Feature	Medium	Adds access groups RBAC capability. Adds access groups RBAC capability. Source: llm_adapter@2026-06-01 Confidence: high	—
Refactor	Low	Renamed runner default model config variable. Renamed runner default model config variable. Source: llm_adapter@2026-06-01 Confidence: high	—

Full changelog

0.5.0 (2026-06-01)

⚠ BREAKING CHANGES

GitHub product login env vars changed. Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, and UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS. Use AUTH_GITHUB_ALLOWED_USERS, AUTH_GITHUB_ALLOWED_ORGANIZATIONS, AUTH_GITHUB_DEFAULT_GROUP_ROLE, and UNSAFE_AUTH_GITHUB_ALLOW_ALL instead.
RUNNER_MODEL is removed; use RUNNER_MODEL_DEFAULT to configure the default runner model.

Features

add access groups rbac (#41) (22a1537)
rename runner default model config (3ab5b28)

Breaking Changes

Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, and UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS; use AUTH_GITHUB_ALLOWED_USERS, AUTH_GITHUB_ALLOWED_ORGANIZATIONS, AUTH_GITHUB_DEFAULT_GROUP_ROLE, and UNSAFE_AUTH_GITHUB_ALLOW_ALL instead.
Removed RUNNER_MODEL; configure default runner model using RUNNER_MODEL_DEFAULT.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track sidpalas/deputies

Get notified when new releases ship.

About sidpalas/deputies

All releases →

Related context

Related tools

Earlier breaking changes

v0.4.0 Replace Flue-specific runtime config names with runner-oriented names.