> ## Documentation Index > Fetch the complete documentation index at: https://docs.getbifrost.ai/llms.txt > Use this file to discover all available pages before exploring further. # v1.4.3 > Enterprise v1.4.3 changelog - 2026-05-22 **Breaking changes in v1.4.0.** See the [v1.4.0 Migration Guide](/enterprise/migration-guides/v1.4.0) for full before/after examples, automatic migration details, and a step-by-step checklist before upgrading. ## Changelog An expanded v1.4.3 on a clean OSS base of `transports/v1.5.4` (v1.4.2 had pinned an untagged commit). Headline items: **Data Access Control (DAC) goes fleet-wide** so `own-data` / `team-data` / `all-data` scoping now governs API keys, access profiles, roles, guardrails, MCP clients and tool groups, customers, teams, business units, and OAuth tokens, with targeted per-entity cache hydration replacing broad reloads. **Broker-mode clustering** routes all inter-node traffic through a central gRPC relay, enabling deployment on platforms without inbound peer connectivity such as Cloud Run, and a new **heartbeat-based ghost node detection and cluster health system** classifies partitioned and dead nodes and recovers their budget usage. **Temporary access tokens** and **MCP per-user OAuth** add scoped, time-limited credentials and per-user MCP authorization. The release also brings three new guardrail providers (CrowdStrike AIDR, Patronus AI, and Google Model Armor), team and access-profile calendar alignment, cluster-gossiped feature flags, a dedicated Dashboard RBAC resource, role and access-profile duplication, and OTEL-parity attributes across the Datadog and BigQuery exporters. ## ✨ Features ### Data Access Control (DAC) * **Row-level DAC across governed entities** : DAC scoping (`own-data` / `team-data` / `all-data`, set per role) now governs visibility of API keys, access profiles and AP templates, roles, guardrails and their configs/rules, MCP clients and tool groups, customers, teams, and business units. Each resource tracks a `created_by_user_id` owner, with backfill migrations attributing legacy rows to the oldest active admin. Unauthenticated and local-admin deployments bypass DAC filtering and are unaffected. * **Hierarchical entity ownership** : customers, teams, business units, MCP clients, and MCP tool groups carry creator ownership so DAC-scoped paginated listings filter them correctly under `own-data` and `team-data` roles. * **OAuth token DAC scoping and lifecycle reconciliation** : `oauth_user_tokens` and `oauth_user_sessions` are DAC-scoped; deleting a user or virtual key cascades token/session cleanup in a transaction, and virtual-key MCP allowlist changes reconcile both user-keyed and VK-keyed tokens. * **Targeted DAC cache hydration** : broad RBAC snapshot rebuilds are replaced with per-entity hydration for teams, virtual keys, and customers, narrowing the blast radius of each cluster gossip event and cutting database load. * **Role DAC level surfaced to the UI** : `/api/users/me/permissions` now returns the caller's `role_dac`, letting the UI gate features such as manual user creation. ### Clustering & Broker Mode * **Broker-mode clustering** : a new `broker` cluster type routes all inter-node traffic through a central gRPC relay instead of a peer-to-peer memberlist mesh, enabling deployment on platforms without inbound peer connectivity such as Cloud Run. Start the lightweight relay with `-mode=broker` (or `BIFROST_MODE=broker`); leader election, roster sync, diagnostics, optional TLS, and auth tokens are all supported. * **Cluster controller interface** : a `cluster.Controller` interface and transport-neutral `Node` type decouple the codebase from the concrete mesh implementation, letting mesh and broker controllers be swapped behind one boundary. * **Cluster-aware logging** : log metadata and per-node usage aggregation are now cluster-aware. * **Ghost node detection and cluster health monitoring** : a heartbeat-based liveness system. Each node periodically upserts a row to the new `enterprise_cluster_node_heartbeats` table; the leader reads it to classify unknown or disconnected nodes as ghosts (alive but partitioned) or dead, and recovers their budget and rate-limit usage from the shared logs table using a monotonic cursor that never skips async-written log rows. Graceful shutdown writes a `shutting_down` heartbeat and broadcasts a notification so peers drop the node immediately instead of waiting for TTL expiry, and ghost usage snapshots plus cursor state are gossiped so followers stay consistent across leader failover. * **Cluster health and governance introspection APIs** : `GET /api/cluster/health` returns node classifications, partition count, and timing configuration; `GET /api/cluster/governance-introspection` returns local and remote budget and rate-limit state plus ghost and dead node IDs. The existing `/api/cluster/nodes` endpoint is augmented with ghost, dead, and detecting status. * **Cluster health visualization** : the enterprise cluster UI renders ghost, dead, detecting, and orphan nodes with distinct visual styles and status badges, auto-polling the new health endpoints. ### Access & Identity * **Temporary access tokens** : short-lived, scoped access tokens for time-limited API access; the temp-token service is wired into Enterprise server bootstrap and accepted by the MCP per-user auth flow. * **MCP per-user OAuth** : MCP OAuth refactored into a per-user flow, with new `PreMCPHook` / `PostMCPHook` overrides promoting the virtual-key owner onto request context so the MCP path resolves `UserID` identically to the LLM path. * **Tenant-wide Okta provisioning** : Okta user and group sync drops app-assignment scoping in favor of tenant-wide endpoints, removing the per-user lookup loop and the requirement that every synced user or group be explicitly app-assigned. * **Stable team identity across renames** : team attribute mappings track the raw IdP claim as a `source_id`, and team lookup prefers `GetTeamBySourceID` so renamed teams are matched instead of duplicated on resync. * **User virtual-key lookup by email** : new `GET /api/users/email/{email}/virtual-keys` endpoint returns a user's virtual keys by email, for MDM and credential-helper integrations. * **Virtual key ownership** : virtual keys now capture and display the `created_by` user. A `created_by_user_id` column on `governance_virtual_keys` replaces the `enterprise_virtual_key_users` junction table as the single source of truth for VK ownership, and DAC membership and scope queries read from it directly. * **Role duplication** : duplicate an existing role from the roles table; the new role copies the source role's description, DAC level, and permissions, with its name suffixed `_copy`. Available to users with role-create permission. * **Duplicate access profile** : a Duplicate action on each access profile opens the sheet pre-filled with the source profile's provider configs, budgets, rate limits, and MCP settings, named ` (copy)` with the name field auto-focused for quick renaming. ### Governance * **Calendar-aligned budgets at team and access-profile level** : a `calendar_aligned` toggle resets budgets and rate limits at calendar boundaries (for example the 1st of the month) rather than rolling from the creation date. It is surfaced in the Create Team dialog, the Team Detail Sheet, and the access profile form, and is propagated through profile copy and virtual-key sync. * **Feature flags with cluster gossip** : feature flags toggled via UI or API are broadcast to all cluster nodes via gossip and persisted so late-joining nodes hydrate correctly; file-locked flags remain per-node. A new `FeatureFlags` RBAC resource gates view and update. * **Virtual key rotation** : rotate virtual keys from the UI and backend. * **Semantic cache wired as a direct dependency** : the `semanticcache` plugin is promoted to a direct dependency and the client's embedding executor is injected at bootstrap, so cache-key embeddings actually run. ### Guardrails * **CrowdStrike AIDR guardrail provider** : new guardrail provider support. * **Patronus AI guardrail provider** : new guardrail provider support. * **Google Model Armor guardrail provider** : new guardrail provider support. * **Responses API support in guardrails** : guardrail content extraction and mapping handle the Responses API request and response shape, so Responses-format conversations are evaluated with full fidelity. * **Gray Swan tool-call support** : the Gray Swan provider now forwards `tool_calls`, `tool_call_id`, and the `tools` schema so function-calling conversations are evaluated with full fidelity; request header metadata is also forwarded. * **Per-rule conversation-turn cap** : a `maxTurnsToSend` field on guardrail rules limits how many historical turns are forwarded to a provider, with content extraction reworked to emit one block per message for role-aware payloads. * **Rule-level guardrail timeouts** : rule timeouts are passed to providers (Azure, Bedrock, Gray Swan) via context so each provider applies and reports the correct timeout. ### Observability & Telemetry * **OTEL-parity Datadog metrics** : the Datadog exporter now emits per-attempt request, latency, error, and success counters (tagged with `provider`, `model`, and `fallback_index`), granular input and output token-detail breakdowns, retry counts, TTFT, and cache-hit metrics, matching the OTEL plugin's dimension set. A request ID is stamped on root spans, and stream latency conversions were corrected. * **OTEL-parity BigQuery schema** : the BigQuery exporter schema gains granular input and output token-detail columns, response metadata fields (`response_id`, `response_object`, `service_tier`, `system_fingerprint`, and more), and a `request_id` column. A startup schema sync detects and adds missing columns to existing tables automatically, with no manual migration or data rewrite. ### Dashboard & UI * **Dedicated Dashboard RBAC resource** : a `Dashboard` resource with a `View` operation gates the analytics dashboard and its aggregate endpoints (`/api/logs/stats`, `/api/logs/histogram`, `/api/logs/rankings`) independently of raw log access. An upgrade migration grants it to roles already holding `Observability:View` or `Logs:View`. * **Granular dashboard RBAC** : finer RBAC for API keys, inference, metrics, and MCP logs, with inaccessible sidebar items filtered out. * **User rankings tab synced with extended log filters** : the user rankings tab syncs its URL state with extended log filters and supports user filtering. * **Onboarding checklist widget** : an onboarding setup checklist widget with backend support. * **Server-side filter search** : filter sidebar checkbox lists perform server-side search and pagination via a debounced `q` query param. * **UI action menus and chart polish** : inline action buttons are replaced with pinned dropdown menus across teams, virtual keys, MCP clients, pricing overrides, routing rules, model limits, and logs; chart card headers gain animated totals and full-precision tooltips. ### OSS Base (`transports/v1.5.4`) * **Bedrock Mantle inference engine** : support for `gpt-oss` models on Bedrock Mantle via an OpenAI-compatible SSE endpoint. * **Azure realtime provider** : Azure realtime provider with nested model normalization, plus enriched realtime routing, logging, cost, and session tracking. * **Bedrock system tools** : system tool support for Bedrock models. * **Service tier mappings** : service tier mappings for Gemini and Anthropic. * **Config file override of DB values** : file values in `config.json` override DB values when the file changes between restarts; `model_parameters_url` is configurable via config JSON and the Helm chart. * **OTEL plugin selection** : custom selection of which plugins export OTEL trace spans. * **Semantic cache plugin rewrite** : the semantic cache plugin was rewritten, and the `cleanup_on_shutdown` config option was removed. * **Virtual key blocked models** : block specific models at the virtual-key provider-config level; blocked models take priority over allowed models and are enforced by governance. * **MCP log attribution** : MCP tool logs are stamped with user, team, customer, and business unit IDs so MCP usage is traceable like LLM usage. * **Team and business unit filters** : team and business unit filters across the dashboard and logs views. * **Sticky time filters** : time-filter selections persist when navigating between sidebar items. ## 🐞 Fixed ### DAC & Cluster * **Targeted access-profile broadcasts** : access profile cluster broadcasts are split into template-level and user-level message types, each carrying the IDs peer nodes need to take the correct targeted action. * **DAC resolver cache burst on entity creation** : a shared `reloadDACMembership` helper refreshes RBAC and DAC membership caches after team, customer, and virtual-key reloads so in-memory permission state never goes stale. * **Cluster node ID correlation** : cluster node IDs are correlated with WebSocket node IDs to prevent an empty cluster state in the UI. * **MCP tool group scope** : corrected subquery column references in the MCP tool group DAC scope. * **Streaming chunk context** : `ProcessStreamingChunk` now receives the request `BifrostContext`. ### Access & Identity * **SCIM and OIDC session lifecycle** : OIDC session cleanup no longer deletes sessions when the access token expires; only orphaned sessions and sessions older than 30 days are removed, preventing forced re-login every hour. Cookie token selection is unified in a shared `ChooseAuthCookieToken`, and Keycloak now uses the access token so its `realm_access` and `resource_access` role claims resolve correctly. ### Guardrails * **Sampling double-count fix** : guardrail sampling merges the decide and record steps into a single atomic `ShouldExecuteAndRecord` call so `both`-phase rules are sampled exactly once per request, and stale peer gossip is pruned. ### Billing & UI * **Sheet layout** : sticky footer buttons stay anchored at the bottom of the CEL rule and MCP tool group sheets, alongside assorted UI polish. ### OSS Base (`transports/v1.5.4`) * **fasthttp panic** : fixed a fasthttp panic on malformed requests. * **Streaming stability** : fixed a remote-stream-close race on context cancel, a nil-pointer dereference in stream cancellations, idle stream timeouts, and context-cancel ordering before read errors. * **Bedrock fixes** : Bedrock Mantle fixes, chat tool arguments, stop reason, missing lifecycle events, and Responses prefill handling. * **OpenAI Responses** : preserve OpenAI responses stream metadata and add usage to the completed event in the Responses-to-Chat-Completions fallback. * **Anthropic fixes** : set Anthropic beta headers on Vertex, emit a role chunk from message start, trim trailing whitespace, fix reasoning-content forwarding on Responses-to-Chat conversion, and preserve output schema refs. * **Streaming pricing overrides** : virtual-key and provider-key level pricing overrides now apply to streaming requests. * **Secret redaction** : `FullyRedacted()` for proxy passwords and `MarshalForStorage()` for `ProxyConfig` prevent partial value leakage in API responses. * **Calendar-aligned migrations** : multiple migration fixes for calendar-aligned budget tables. * **Semantic cache** : dimension check on namespace creation, a double-close panic guard, request-time plugin resolution, and telemetry decoupling. * **Filter queries** : removed the `defaultFilterDataLimit` cap and skipped the pagination clamp on virtual-key export requests. * **MCP logs** : stale stats removed from the logs list response. * **configstore** : clearer error message when an API key name conflicts across providers. * **DB safety** : the unsafe inline jsonb cast was replaced with a `bifrost_safe_jsonb` PL/pgSQL helper. * **Azure batch** : Azure blob fields are now included in batch responses. * **Idle timeout panic** : fixed a panic in the streaming idle-timeout reader, with a guard to skip reads once the connection is closed. * **TTFT metric accuracy** : corrected the request start-time so the time-to-first-token metric is accurate. * **Vertex service tier** : the Vertex traffic type now maps to the correct Bifrost service tier. * **Keyless providers** : `ListModels` works for providers configured without an API key. * **Anthropic tools** : stopped forcing `type: custom` on Anthropic tool definitions, and preserved the tool-call stop reason in the Anthropic streaming fallback. * **Node usage reconciliation** : a monotonic log cursor stops reconciliation from skipping late async log writes. * **Fallback budget tracking** : the stale governance rejection flag is cleared on a decision allow, so successful fallback retries count toward budgets and rate limits. * **UI fixes** : OAuth popup message validation, constrained table column widths, provider API form padding, and image parameter passthrough; the virtual keys table fills available height with a sticky header and scrollable body; routing-rule and virtual-key sheet layout growth is fixed; toasts remain clickable above modal overlays. ## 📀 Base OSS version `transports/v1.5.4` This release pins clean tagged OSS modules (v1.4.2 had pinned an untagged commit, `bef816abe9c2`): ``` github.com/maximhq/bifrost/core v1.5.11 github.com/maximhq/bifrost/framework v1.3.12 github.com/maximhq/bifrost/transports v1.5.4 github.com/maximhq/bifrost/plugins/governance v1.5.12 github.com/maximhq/bifrost/plugins/logging v1.5.12 github.com/maximhq/bifrost/plugins/prompts v1.0.12 github.com/maximhq/bifrost/plugins/semanticcache v1.5.12 github.com/maximhq/bifrost/plugins/compat v0.1.10 github.com/maximhq/bifrost/plugins/maxim v1.6.11 github.com/maximhq/bifrost/plugins/mocker v1.5.11 github.com/maximhq/bifrost/plugins/otel v1.2.11 github.com/maximhq/bifrost/plugins/telemetry v1.5.11 ``` ## 🔌 If you are compiling plugin against this release - use following deps ``` module github.com/maximhq/bifrost-enterprise go 1.26.2 require ( cloud.google.com/go/bigquery v1.74.0 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.20.0 github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 github.com/DataDog/datadog-go/v5 v5.6.0 github.com/DataDog/dd-trace-go/v2 v2.4.0 github.com/aws/aws-sdk-go-v2 v1.41.7 github.com/aws/aws-sdk-go-v2/config v1.32.11 github.com/aws/aws-sdk-go-v2/credentials v1.19.14 github.com/aws/aws-sdk-go-v2/service/bedrockruntime v1.50.6 github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 github.com/bytedance/sonic v1.15.0 github.com/coreos/go-oidc/v3 v3.12.0 github.com/fasthttp/router v1.5.4 github.com/golang-jwt/jwt/v5 v5.3.0 github.com/google/cel-go v0.26.1 github.com/google/uuid v1.6.0 github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 github.com/grandcat/zeroconf v1.0.0 github.com/hashicorp/consul/api v1.28.2 github.com/hashicorp/memberlist v0.5.4 github.com/maximhq/bifrost/core v1.5.12 github.com/maximhq/bifrost/framework v1.3.12 github.com/maximhq/bifrost/plugins/governance v1.5.12 github.com/maximhq/bifrost/plugins/logging v1.5.12 github.com/maximhq/bifrost/plugins/prompts v1.0.12 github.com/maximhq/bifrost/plugins/semanticcache v1.5.12 github.com/maximhq/bifrost/transports v1.5.4 github.com/nakabonne/tstorage v0.3.6 github.com/stretchr/testify v1.11.1 github.com/testcontainers/testcontainers-go v0.40.0 github.com/tetratelabs/wazero v1.11.0 github.com/valyala/fasthttp v1.68.0 github.com/zricethezav/gitleaks/v8 v8.30.1 go.etcd.io/etcd/client/v3 v3.6.6 golang.org/x/crypto v0.49.0 golang.org/x/oauth2 v0.36.0 golang.org/x/sync v0.20.0 google.golang.org/api v0.274.0 google.golang.org/grpc v1.80.0 google.golang.org/protobuf v1.36.11 gorm.io/driver/sqlite v1.6.0 gorm.io/gorm v1.31.1 k8s.io/api v0.34.1 k8s.io/apimachinery v0.34.1 k8s.io/client-go v0.34.1 ) require ( cel.dev/expr v0.25.1 // indirect cloud.google.com/go v0.123.0 // indirect cloud.google.com/go/auth v0.18.2 // indirect cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect cloud.google.com/go/compute/metadata v0.9.0 // indirect cloud.google.com/go/iam v1.5.3 // indirect cloud.google.com/go/monitoring v1.24.3 // indirect cloud.google.com/go/storage v1.61.3 // indirect dario.cat/mergo v1.0.2 // indirect github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect github.com/BobuSumisu/aho-corasick v1.0.3 // indirect github.com/DataDog/datadog-agent/comp/core/tagger/origindetection v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/obfuscate v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/opentelemetry-mapping-go/otlp/attributes v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/proto v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/remoteconfig/state v0.73.0-rc.1 // indirect github.com/DataDog/datadog-agent/pkg/trace v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/util/log v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/util/scrubber v0.71.0 // indirect github.com/DataDog/datadog-agent/pkg/version v0.71.0 // indirect github.com/DataDog/go-libddwaf/v4 v4.6.1 // indirect github.com/DataDog/go-runtime-metrics-internal v0.0.4-0.20250721125240-fdf1ef85b633 // indirect github.com/DataDog/go-sqllexer v0.1.8 // indirect github.com/DataDog/go-tuf v1.1.1-0.5.2 // indirect github.com/DataDog/sketches-go v1.4.7 // indirect github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect github.com/Masterminds/goutils v1.1.1 // indirect github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Microsoft/go-winio v0.6.2 // indirect github.com/STARRY-S/zip v0.2.1 // indirect github.com/andybalholm/brotli v1.2.0 // indirect github.com/antlr4-go/antlr/v4 v4.13.0 // indirect github.com/apache/arrow/go/v15 v15.0.2 // indirect github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect github.com/armon/go-metrics v0.4.1 // indirect github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.10 // indirect github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.21 // indirect github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23 // indirect github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23 // indirect github.com/aws/aws-sdk-go-v2/internal/ini v1.8.5 // indirect github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 // indirect github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 // indirect github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 // indirect github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 // indirect github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 // indirect github.com/aws/aws-sdk-go-v2/service/signin v1.0.9 // indirect github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 // indirect github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 // indirect github.com/aws/smithy-go v1.25.1 // indirect github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect github.com/beorn7/perks v1.0.1 // indirect github.com/bodgit/plumbing v1.3.0 // indirect github.com/bodgit/sevenzip v1.6.0 // indirect github.com/bodgit/windows v1.0.1 // indirect github.com/buger/jsonparser v1.1.2 // indirect github.com/bytedance/gopkg v0.1.3 // indirect github.com/bytedance/sonic/loader v0.5.0 // indirect github.com/cenkalti/backoff v2.2.1+incompatible // indirect github.com/cenkalti/backoff/v4 v4.3.0 // indirect github.com/cenkalti/backoff/v5 v5.0.3 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/charmbracelet/lipgloss v0.5.0 // indirect github.com/cihub/seelog v0.0.0-20170130134532-f561c5e57575 // indirect github.com/cloudwego/base64x v0.1.6 // indirect github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5 // indirect github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/errdefs/pkg v0.3.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect github.com/coreos/go-semver v0.3.1 // indirect github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cpuguy83/dockercfg v0.3.2 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect github.com/distribution/reference v0.6.0 // indirect github.com/docker/docker v28.5.2+incompatible // indirect github.com/docker/go-connections v0.6.0 // indirect github.com/docker/go-units v0.5.0 // indirect github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707 // indirect github.com/dustin/go-humanize v1.0.1 // indirect github.com/ebitengine/purego v0.9.1 // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect github.com/envoyproxy/go-control-plane/envoy v1.36.0 // indirect github.com/envoyproxy/protoc-gen-validate v1.3.0 // indirect github.com/fasthttp/websocket v1.5.12 // indirect github.com/fatih/color v1.17.0 // indirect github.com/fatih/semgroup v1.2.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect github.com/fsnotify/fsnotify v1.8.0 // indirect github.com/fxamacker/cbor/v2 v2.9.0 // indirect github.com/gitleaks/go-gitdiff v0.9.1 // indirect github.com/go-jose/go-jose/v4 v4.1.4 // indirect github.com/go-logr/logr v1.4.3 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.3.0 // indirect github.com/go-openapi/analysis v0.24.2 // indirect github.com/go-openapi/errors v0.22.5 // indirect github.com/go-openapi/jsonpointer v0.22.4 // indirect github.com/go-openapi/jsonreference v0.21.4 // indirect github.com/go-openapi/loads v0.23.2 // indirect github.com/go-openapi/runtime v0.29.2 // indirect github.com/go-openapi/spec v0.22.2 // indirect github.com/go-openapi/strfmt v0.25.0 // indirect github.com/go-openapi/swag v0.25.4 // indirect github.com/go-openapi/swag/cmdutils v0.25.4 // indirect github.com/go-openapi/swag/conv v0.25.4 // indirect github.com/go-openapi/swag/fileutils v0.25.4 // indirect github.com/go-openapi/swag/jsonname v0.25.4 // indirect github.com/go-openapi/swag/jsonutils v0.25.4 // indirect github.com/go-openapi/swag/loading v0.25.4 // indirect github.com/go-openapi/swag/mangling v0.25.4 // indirect github.com/go-openapi/swag/netutils v0.25.4 // indirect github.com/go-openapi/swag/stringutils v0.25.4 // indirect github.com/go-openapi/swag/typeutils v0.25.4 // indirect github.com/go-openapi/swag/yamlutils v0.25.4 // indirect github.com/go-openapi/validate v0.25.1 // indirect github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/goccy/go-json v0.10.5 // indirect github.com/gogo/protobuf v1.3.2 // indirect github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/btree v1.1.3 // indirect github.com/google/flatbuffers v23.5.26+incompatible // indirect github.com/google/gnostic-models v0.7.0 // indirect github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f // indirect github.com/google/s2a-go v0.1.9 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect github.com/googleapis/gax-go/v2 v2.19.0 // indirect github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect github.com/h2non/filetype v1.1.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.3 // indirect github.com/hashicorp/go-immutable-radix v1.3.1 // indirect github.com/hashicorp/go-metrics v0.5.4 // indirect github.com/hashicorp/go-msgpack/v2 v2.1.5 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-rootcerts v1.0.2 // indirect github.com/hashicorp/go-sockaddr v1.0.7 // indirect github.com/hashicorp/go-version v1.7.0 // indirect github.com/hashicorp/golang-lru v1.0.2 // indirect github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect github.com/hashicorp/hcl v1.0.0 // indirect github.com/hashicorp/serf v0.10.1 // indirect github.com/huandu/xstrings v1.5.0 // indirect github.com/invopop/jsonschema v0.13.0 // indirect github.com/jackc/pgpassfile v1.0.0 // indirect github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect github.com/jackc/pgx/v5 v5.9.2 // indirect github.com/jackc/puddle/v2 v2.2.2 // indirect github.com/jaswdr/faker/v2 v2.8.0 // indirect github.com/jinzhu/inflection v1.0.0 // indirect github.com/jinzhu/now v1.1.5 // indirect github.com/json-iterator/go v1.1.12 // indirect github.com/klauspost/compress v1.18.2 // indirect github.com/klauspost/cpuid/v2 v2.3.0 // indirect github.com/klauspost/pgzip v1.2.6 // indirect github.com/kylelemons/godebug v1.1.0 // indirect github.com/lucasb-eyer/go-colorful v1.2.0 // indirect github.com/lufia/plan9stats v0.0.0-20251013123823-9fd1530e3ec3 // indirect github.com/magiconair/properties v1.8.10 // indirect github.com/mailru/easyjson v0.9.1 // indirect github.com/mark3labs/mcp-go v0.43.2 // indirect github.com/mattn/go-colorable v0.1.14 // indirect github.com/mattn/go-isatty v0.0.20 // indirect github.com/mattn/go-runewidth v0.0.15 // indirect github.com/mattn/go-sqlite3 v1.14.32 // indirect github.com/maximhq/bifrost/plugins/compat v0.1.11 // indirect github.com/maximhq/bifrost/plugins/maxim v1.6.12 // indirect github.com/maximhq/bifrost/plugins/mocker v1.5.12 // indirect github.com/maximhq/bifrost/plugins/otel v1.2.12 // indirect github.com/maximhq/bifrost/plugins/telemetry v1.5.12 // indirect github.com/maximhq/maxim-go v0.2.1 // indirect github.com/mholt/archives v0.1.2 // indirect github.com/miekg/dns v1.1.68 // indirect github.com/minio/minlz v1.0.0 // indirect github.com/minio/simdjson-go v0.4.5 // indirect github.com/mitchellh/copystructure v1.2.0 // indirect github.com/mitchellh/go-homedir v1.1.0 // indirect github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/mitchellh/reflectwalk v1.0.2 // indirect github.com/moby/docker-image-spec v1.3.1 // indirect github.com/moby/go-archive v0.1.0 // indirect github.com/moby/patternmatcher v0.6.0 // indirect github.com/moby/sys/sequential v0.6.0 // indirect github.com/moby/sys/user v0.4.0 // indirect github.com/moby/sys/userns v0.1.0 // indirect github.com/moby/term v0.5.2 // indirect github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect github.com/morikuni/aec v1.0.0 // indirect github.com/muesli/reflow v0.2.1-0.20210115123740-9e1d0d53df68 // indirect github.com/muesli/termenv v0.15.1 // indirect github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect github.com/nwaples/rardecode/v2 v2.2.2 // indirect github.com/oapi-codegen/runtime v1.1.1 // indirect github.com/oklog/ulid v1.3.1 // indirect github.com/opencontainers/go-digest v1.0.0 // indirect github.com/opencontainers/image-spec v1.1.1 // indirect github.com/outcaste-io/ristretto v0.2.3 // indirect github.com/pelletier/go-toml/v2 v2.2.3 // indirect github.com/philhofer/fwd v1.2.0 // indirect github.com/pierrec/lz4/v4 v4.1.21 // indirect github.com/pinecone-io/go-pinecone/v5 v5.3.0 // indirect github.com/pion/datachannel v1.6.0 // indirect github.com/pion/dtls/v3 v3.1.2 // indirect github.com/pion/ice/v4 v4.2.1 // indirect github.com/pion/interceptor v0.1.44 // indirect github.com/pion/logging v0.2.4 // indirect github.com/pion/mdns/v2 v2.1.0 // indirect github.com/pion/randutil v0.1.0 // indirect github.com/pion/rtcp v1.2.16 // indirect github.com/pion/rtp v1.10.1 // indirect github.com/pion/sctp v1.9.2 // indirect github.com/pion/sdp/v3 v3.0.18 // indirect github.com/pion/srtp/v3 v3.0.10 // indirect github.com/pion/stun/v3 v3.1.1 // indirect github.com/pion/transport/v4 v4.0.1 // indirect github.com/pion/turn/v4 v4.1.4 // indirect github.com/pion/webrtc/v4 v4.2.9 // indirect github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect github.com/pkg/errors v0.9.1 // indirect github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect github.com/prometheus/client_golang v1.23.2 // indirect github.com/prometheus/client_model v0.6.2 // indirect github.com/prometheus/common v0.66.1 // indirect github.com/prometheus/procfs v0.17.0 // indirect github.com/puzpuzpuz/xsync/v3 v3.5.1 // indirect github.com/qdrant/go-client v1.16.2 // indirect github.com/redis/go-redis/v9 v9.17.2 // indirect github.com/rivo/uniseg v0.2.0 // indirect github.com/rs/zerolog v1.34.0 // indirect github.com/sagikazarmark/locafero v0.7.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect github.com/savsgio/gotils v0.0.0-20250408102913-196191ec6287 // indirect github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect github.com/secure-systems-lab/go-securesystemslib v0.9.0 // indirect github.com/shirou/gopsutil/v4 v4.25.10 // indirect github.com/shopspring/decimal v1.4.0 // indirect github.com/sirupsen/logrus v1.9.4 // indirect github.com/sorairolake/lzip-go v0.3.5 // indirect github.com/sourcegraph/conc v0.3.0 // indirect github.com/spf13/afero v1.15.0 // indirect github.com/spf13/cast v1.10.0 // indirect github.com/spf13/pflag v1.0.6 // indirect github.com/spf13/viper v1.19.0 // indirect github.com/spiffe/go-spiffe/v2 v2.6.0 // indirect github.com/stoewer/go-strcase v1.3.0 // indirect github.com/subosito/gotenv v1.6.0 // indirect github.com/theckman/httpforwarded v0.4.0 // indirect github.com/therootcompany/xz v1.0.1 // indirect github.com/tidwall/gjson v1.18.0 // indirect github.com/tidwall/match v1.1.1 // indirect github.com/tidwall/pretty v1.2.0 // indirect github.com/tidwall/sjson v1.2.5 // indirect github.com/tinylib/msgp v1.3.0 // indirect github.com/tklauser/go-sysconf v0.3.16 // indirect github.com/tklauser/numcpus v0.11.0 // indirect github.com/twitchyliquid64/golang-asm v0.15.1 // indirect github.com/ulikunitz/xz v0.5.15 // indirect github.com/valyala/bytebufferpool v1.0.0 // indirect github.com/wasilibs/go-re2 v1.9.0 // indirect github.com/wasilibs/wazero-helpers v0.0.0-20240620070341-3dff1577cd52 // indirect github.com/weaviate/weaviate v1.36.5 // indirect github.com/weaviate/weaviate-go-client/v5 v5.7.1 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/wlynxg/anet v0.0.5 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/yosida95/uritemplate/v3 v3.0.2 // indirect github.com/yusufpapurcu/wmi v1.2.4 // indirect github.com/zeebo/xxh3 v1.0.2 // indirect go.etcd.io/etcd/api/v3 v3.6.6 // indirect go.etcd.io/etcd/client/pkg/v3 v3.6.6 // indirect go.mongodb.org/mongo-driver v1.17.6 // indirect go.opencensus.io v0.24.0 // indirect go.opentelemetry.io/auto/sdk v1.2.1 // indirect go.opentelemetry.io/collector/component v1.39.0 // indirect go.opentelemetry.io/collector/featuregate v1.39.0 // indirect go.opentelemetry.io/collector/internal/telemetry v0.133.0 // indirect go.opentelemetry.io/collector/pdata v1.39.0 // indirect go.opentelemetry.io/contrib/bridges/otelzap v0.12.0 // indirect go.opentelemetry.io/contrib/detectors/gcp v1.40.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect go.opentelemetry.io/otel v1.43.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 // indirect go.opentelemetry.io/otel/log v0.14.0 // indirect go.opentelemetry.io/otel/metric v1.43.0 // indirect go.opentelemetry.io/otel/sdk v1.43.0 // indirect go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect go.opentelemetry.io/otel/trace v1.43.0 // indirect go.opentelemetry.io/proto/otlp v1.10.0 // indirect go.starlark.net v0.0.0-20260102030733-3fee463870c9 // indirect go.uber.org/atomic v1.11.0 // indirect go.uber.org/multierr v1.11.0 // indirect go.uber.org/zap v1.27.0 // indirect go.yaml.in/yaml/v2 v2.4.2 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect go4.org v0.0.0-20230225012048-214862532bf5 // indirect golang.org/x/arch v0.23.0 // indirect golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect golang.org/x/mod v0.33.0 // indirect golang.org/x/net v0.52.0 // indirect golang.org/x/sys v0.42.0 // indirect golang.org/x/telemetry v0.0.0-20260209163413-e7419c687ee4 // indirect golang.org/x/term v0.41.0 // indirect golang.org/x/text v0.35.0 // indirect golang.org/x/time v0.15.0 // indirect golang.org/x/tools v0.42.0 // indirect golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect google.golang.org/genproto v0.0.0-20260316180232-0b37fe3546d5 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect gopkg.in/ini.v1 v1.67.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect gorm.io/driver/postgres v1.6.0 // indirect k8s.io/klog/v2 v2.130.1 // indirect k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/randfill v1.0.0 // indirect sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect sigs.k8s.io/yaml v1.6.0 // indirect ) ```