Changelog
A platform and reliability release ontransports/v1.5.14. The headline work is a new skills repository - a full dashboard, config-based registry, and management/serving APIs, wired with enterprise RBAC so skills are governed like the rest of the workspace. This release also hardens config-as-source-of-truth sync with a deterministic file-wins path, aligns SCIM provisioning with the OIDC default-access-profile behavior, and overhauls migration cataloguing and logging across Postgres and SQLite.✨ Features
- Skills Repository (OSS) - New skills repository with a dashboard UI (security warnings, navigation and access state), a config-based registry, and management plus serving APIs.
- Skills Repository RBAC (enterprise) -
SkillsRepositoryis now a first-class enterprise RBAC resource withCreate/View/Update/Deleteoperations, default role grants (Admin and Developer full CRUD, Viewer view-only),/api/skills/*route mapping with public/api/skills/serve/*, and an idempotent seed migration for existing installs. - OpenCode Gateway Providers (OSS) - Added support for OpenCode gateway providers (Go, Zen).
- Advisor Tool Compatibility (OSS) - Added advisor tool compatibility for Claude.
- Environment Label Banner (OSS) - Added an environment label banner to the sidebar so the active environment is visible at a glance.
- Datadog Plugin Host/Port (OSS + enterprise) - Datadog Agent and DogStatsD endpoints now accept separate
hostandportfields (each supporting env var references), enabling Kubernetes downward-API host injection, with a clear precedence order over the combinedaddrfield. - Postgres Password Command (OSS) - Added support for sourcing the Postgres password from a command.
- Deterministic Config File-Wins Sync (OSS + enterprise) - When
source_of_truth=config.json, plugins, governance entities, and client config now force file-wins sync. A newforceFileSyncflag on every reconcile function (guardrails, access profiles, roles, business units, MCP tool groups) bypasses hash-match preservation so config.json always wins for its declared resource types, preventing DB drift from manual edits.
🐞 Fixed
- Inference Auth via Virtual Key (OSS) - Inference authentication is now delegated entirely to the governance plugin (the authoritative virtual-key validator). VK-authenticated inference requests no longer return
401 Unauthorizedwhen dashboard password auth is enabled, and admin-password auth is now exclusive to dashboard/API routes. - SCIM Default Access Profile (enterprise) - The role’s default access profile is now always auto-assigned during SCIM provisioning, even when the user’s role does not change, aligning SCIM behavior with the OIDC login flow. The assignment is idempotent, so repeated syncs do not create duplicates.
- Migration Cataloguing and Logging (enterprise) - Migration flows now use an explicit logger for consistent output, pending migrations are handled correctly for SQLite as well as Postgres, and duplicate migration runs were eliminated.
- MCP Library Cleanup (OSS) - Custom MCP library entries are now hard-deleted and remote ones tombstoned.
- Skills API Response Bloat (OSS) - Cleared backend response bloat on skills APIs and adjusted the orphan-cleanup grace period.
- Bedrock Tool Result Order (OSS) - Preserved
tool_resultorder to match paralleltool_useblocks. - Bedrock Cache TTL (OSS) - Set TTL in Bedrock cache points.
- Gemini/Vertex Batch Conversion (OSS) - Fixed request conversion for Gemini/Vertex batch requests.
- Routing-Pinned Key ID (OSS) - Commit the routing-pinned key ID to the reserved
BifrostContextKeyAPIKeyIDafterPreRequestHookunblock. - Responses
max_output_tokens(OSS) - Preservedmax_output_tokenson Responses requests. - VK Provider Blacklist Migration (OSS) - Run the VK provider blacklist migration before backfill.
- Ranking Trends Accuracy (OSS) - Stopped double-counting the boundary hour in matview ranking trends and gated ranking readers on the fresh-aggregate matview window.
- Logstore Migrations (OSS) - Fixed duplicate migration runs for the logstore and added logging across all migrations.
- MCP Usage Guide Button (OSS) - Fixed styling of the “Connect agent” trigger button in the MCP usage guide.
📀 Base OSS version
transports/v1.5.14
