Review required
Auth
Breaking upgrade
deploy, auth, trial, ui, readme
↳
v0.95.0
(13d)
—
UI, CLI, Deploy, Compliance, API
Review required
Auth
RBAC
Pydantic migration
Review required
Auth
RBAC
Inter‑procedural ownership detection
No immediate action
h5i
v0.2.2
Breaking risk
·
Env changes + cleanup + UI recenter
No immediate action
Folder upload removal
↳
v0.7.8
(1mo)
—
Browser folder upload removal
No immediate action
Provenance memory classes + integrations + CI fixes
No immediate action
BOLA false‑positive fix
↳
v3.17.0
(1mo)
—
VG126 behavior change
Upgrade now
Dependencies
CI, LinkedIn, Fingerprint, Task Engine, Python, Deps
Review required
Auth
RBAC
AST‑aware VG950 suppression
↳
v3.15.0
(1mo)
—
AST/dataflow engine + VG406 improvements
↳
v3.14.2
(1mo)
—
VG964 false‑positive fix
↳
v3.6.0
(1mo)
—
SSRF false‑positive reduction
Config change
Auth
Usage reporting, LangChain optional, IORails enhancements
Upgrade now
Dependencies
Cryptography core dependency
No immediate action
MIT license change
Upgrade now
Auth
RBAC
Dependencies
Security fixes, dependency upgrades, bug fixes
Review required
Auth
Explicit return token required
↳
v3.1.16
(2mo)
—
Credential‑required connection strings
Config change
Auth
Auth for remote HTTP
No immediate action
Enum regex lowercasing requirement
↳
v3.1.4
(2mo)
—
ADD matching, USER/HEALTHCHECK skipping, .env file restriction
↳
v3.0.57
(2mo)
—
SDK flag removals
↳
v3.0.54
(2mo)
—
Removed markdown library names
Review required
Auth
RBAC
Dependencies
Next 16 export fix
Config change
Breaking upgrade
Pinned MCP config version
↳
v3.0.26
(3mo)
—
VG964 Next.js requirement
Review required
Auth
RBAC
Tenant-scoped gateway routing