v1.18.4

Changelog

• 16d670f Reduce trace span noise: HTTP semconv health probes and revlink Neo4j spans (#5323)
• 616ea4f Run go mod tidy
• d51be8f [ENG-4615] Add MCP OAuth proxy and Cursor authorization completion page (#5305)
• 61ed031 chore(deps): update dependency goreleaser/goreleaser to v2.16.0 (#5280)
• d7966ee chore(deps): update github actions (#5268)
• cc9ea21 feat(brent): dedicated Auth0 tenant pair and operator scope split (BRENT-190) (#5247)
• ef80571 fix(aws-source): redact Lambda environment variables from SDP attributes (#5358)
• a75b5c4 fix(azure): exclude Key Vault secret value from SDP attributes (ENG-4863) (#5359)
• 4a55bbc fix(deps): update aws sdk (#5274)
• 4b82fe3 fix(deps): update azure sdk (#5276)
• d2912d6 fix(deps): update gcp sdk (#5290)
• 337429e fix(deps): update github.com/gocarina/gocsv digest to c264028 (#5261)
• b2f8cab fix(deps): update go (#5291)
• b9c1014 fix(discovery): inline health-probe middleware to unblock cli sync (#5405)
• f259718 fix(gcp): exclude service account key material from SDP attributes (ENG-4762) (#5365)
• 6d47a3d fix(security): remove committed Auth0 dev secrets (ENG-4866) (#5361)

v1.18.2

Changelog

• f9ce74c Eliminate redundant item/edge storage on blast-radius hot paths (#5057)
• 647f2df Feat, initial migration to using principals (#5129)
• c924a04 Run go mod tidy
• 1019d27 Update AWS SDK (#5138)
• 9334df5 Update AWS SDK (#5147)
• 158ac57 Update GCP SDK (#5145)
• a26c438 Update Ginkgo test utils (#5148)
• 5154d6c Update Go (#5150)
• 872971c Update Go (#5159)
• 99bdd14 Update River Queue (#5158)
• 3861f10 Update kubernetes packages (#4956)
• f78e2b6 Update module github.com/nats-io/nats-server/v2 to v2.14.1 (#5142)
• 27cb178 Version pinning (#5047)
• 660ab4e [ENG-4231] Drop cel-go replace directive and upgrade to v0.28.1 (#5065)
• 54a3423 [ENG-4317] Retire team-members.md and migrate downstream consumers (#5178)
• e21be4f [ENG-4371] Reject empty account_name custom claim in ExtractAccount (#5068)
• 8a32dd7 [ENG-4386] Add depot-usage CLI and April→May spend investigation (#5083)
• 346cf25 feat, riverqueue ui for brent and auth wiring (#5003)
• 51f7214 fix(deps): update aws sdk (#5035)
• 7b546c4 fix(deps): update go (#5024)
• a1f3f97 fix(deps): update module github.com/slack-go/slack to v0.23.1 [security] (#5022)
• d15aef9 fix: close SSRF gaps in the HTTP adapter (ENG-4205) (#5046)

v1.18.1

Changelog

• 1ed6387 Lock file maintenance (#4751)
• 7991553 Run go mod tidy
• 272581d Update AWS SDK (#4941)
• d42522f Update Docker Images (#4936)
• 1a9bacd Update GCP SDK (#4952)
• b48f757 Update Ginkgo test utils (#4938)
• 5c3ac54 Update Go (#4939)
• 0829df6 Update NATS modules (#4960)
• 1a844a3 Update River Queue to v0.35.1 (#4962)
• 7b26a9d Update module github.com/getsentry/sentry-go to v0.46.2 (#4957)
• 6c0ef6a Update module github.com/overmindtech/otelpgx to v0.10.0 (#4958)
• 7c55cde WA5b: Slack Events API receiver — parse + dispatch to Translator (#4974)
• c1b8f98 [ENG-4119] Consume otelpgx fork via go.mod replace (#4892)
• 3414505 refactor(auth): extract WithAnyScope into go/auth package (#4917)

v1.18.0

Changelog

• 01aca8e CLI: Support multiple knowledge file directories (#4870)
• 34f618f Enhance Azure integration tests with SQL Server credentials and setup checks (#4831)
• 0fa7a39 Fix ELB DescribeTags batching (#4841)
• c4fae77 Run go mod tidy
• c921ef0 [ENG-4069] Reclaim heap between change-analysis jobs and shrink blast-radius allocations (#4866)
• 1c3e024 [ENG-4083] Bump aws-sdk-go-v2 to v1.41.7 (Snyk hygiene) (#4873)
• 0b7703b [ENG-4088] Add SLSA build-provenance attestations and SPDX SBOMs to CLI releases (#4883)
• 17350ee fix(deps): update aws sdk (#4884)

v1.17.8

Changelog

• 7ce82d8 Eng 3456 fix azure integration test federated identity failure (#4820)
• f09ffdc Lock file maintenance (#4712)
• 908ac0f Run go mod tidy
• de1f845 Update AWS SDK (#4727)
• 375a2c9 Update AWS SDK (#4809)
• 12d62ab Update Docker Images (#4730)
• db35b0b Update GCP SDK (#4741)
• e650116 Update Go (#4732)
• a4f8790 Update NATS modules (#4737)
• b4cbebd Update dependency goreleaser/goreleaser to v2.15.3 (#4729)
• c7c7c1b Update dependency goreleaser/goreleaser to v2.15.4 (#4811)
• 6408e10 Update kubernetes packages (#4734)
• 3c5d4dc Update module github.com/Azure/azure-sdk-for-go/sdk/azcore to v1.21.1 (#4744)
• a00dd24 Update module github.com/getsentry/sentry-go to v0.45.1 (#4736)
• 457decc Update module github.com/jackc/pgx/v5 to v5.9.2 [SECURITY] (#4796)
• 1c83ac1 [ENG-3936] Stop dropping OTel batches at otelcol-node (#4805)
• 45d64ec feat(deploy): AWS provider v6 and module upgrades (ENG-3804) (#4747)
• e38ec3b feat: Phase 1 brentdb infrastructure (ENG-3834) (#4763)

v1.17.7

Changelog

• c294968 (feat) new icons for PR markdown (#4710)
• 6dff1c3 Create Azure adapter: MaintenanceMaintenanceConfiguration (#4537)
• 48fd2eb Create Azure adapter: NetworkVirtualNetworkGatewayConnection (#4543)
• 93061bc Force upgrade of github.com/go-git/go-git to v5.17.1 for security fix (#4699)
• 505f422 Instrument brent-be LLM calls with OTel GenAI semantic conventions (#4689)
• 274257f Run go mod tidy
• 8641120 [ENG-3665] Fix AWS source dying when a single region times out (#4670)
• 24a145c [ENG-3671] Remove outage tracker service (#4651)
• 0cd6a9e [ENG-3715] Fix ExecuteQuery responses channel close race (#4684)
• 98d85d4 [ENG-3750] Pin Docker image tags and modernise Renovate config (#4701)
• c1b2877 chore(deps): update github actions (major) (#4660)
• f610f8b chore(deps): update terraform (#4632)
• 8683f66 discovery: fold first QueryError per Execute span (Honeycomb cost) (#4645)
• 4fa45c5 feat(customermcp): Phase 3 — Infrastructure Context Resources and Inventory Tools (#4597)
• ffb906a fix(deps): update go (#4628)
• aa354b3 fix(deps): update go (#4643)
• 249a3cf fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 6f92a3b (#4630)
• a94e2d7 fix: add go/audit package to Copybara sync for CLI and terraform-prov… (#4588)
• 87a1f5f refactor: consolidate MCP OAuth handlers and add Area51 DCR support (#4679)

v1.17.6

Changelog

• 09e8048 Blind Spots Phase 2: api-server shared middleware builder + global otelhttp (#4510)
• 054b78b Check Run Settings UI + Opt-In Gate (ENG-3422) (#4508)
• c9f6a6a Create Azure adapter: AuthorizationRoleDefinition (#4541)
• 7772854 Create Azure adapter: BatchBatchPrivateEndpointConnection (#4532)
• 18e88f8 Create Azure adapter: DBforPostgreSQLFlexibleServerAdministrator (#4534)
• 98b7df8 Create Azure adapter: DBforPostgreSQLFlexibleServerVirtualEndpoint (#4533)
• a740e34 Create Azure adapter: ElasticSanVolume (#4535)
• c715dfc Create Azure adapter: ManagedIdentityFederatedIdentityCredential (#4531)
• b13ef0b Create Azure adapter: NetworkIPGroup (#4536)
• 380ba20 Create Azure adapter: NetworkLocalNetworkGateway (#4529)
• 727088a Create Azure adapter: NetworkNetworkInterfaceIPConfiguration (#4542)
• 51b06a4 Create Azure adapter: NetworkNetworkWatcher (#4530)
• 87bc65c Create Azure adapter: NetworkPrivateLinkService (#4538)
• cb7843a Create Azure adapter: OperationalInsightsWorkspace (#4540)
• 95618cc Create Azure adapter: SQLServerFailoverGroup (#4539)
• 8e7cc00 Create Azure adapter: SQLServerKey (#4544)
• b24df06 Remove auto-tagging timeline entry (ENG-2436) (#4512)
• cfcbeee Run go mod tidy
• ae9bf73 [ENG-3408] fix: delete Auth0 user on Area51 user/account deletion (#4484)
• 996528a [ENG-3584] WinGet: ReleaseNotesUrl only; drop embedded changelog (#4584)
• 05da71f chore(deps): update dependency goreleaser/goreleaser to v2.15.2 (#4560)
• ba6bb63 chore(deps): update terraform (#4564)
• 3bb1bb7 feat(otel): replace cache span duration filter with probabilistic sampler (#4572)
• ade289a feat: add benchmark compare command for side-by-side model/prompt (#4493)
• 2a6fae7 feat: delete GitHub App installation when disabling integration (#4496)
• 81dfcb5 fix(deps): update go (#4565)
• 18d2595 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 (#4558)
• 5054441 fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (#4568)
• 0bc56ae fix(deps): update otel to v1.43.0 (#4573)
• f94d0c9 fix: audit middleware logs after auth to capture identity fields (#4502)
• 2da8833 fix: reconnect orphan otelhttp spans in heartbeat and init health check (#4556)
• 3a5f50e fix: reduce Honeycomb column bloat from otellogrus and dynamic span attributes (#4481)
• cfb2309 refactor: Dockerfile build optimizations for Depot caching (#4575)

v1.17.3

Changelog

• 361e860 Enhance Azure integration tests with automatic remediation for ghost resource conflicts (#4389)
• d09ef00 GitHub Webhook Lifecycle Events (deleted / suspend / unsuspend) (#4432)
• e58d4b5 Run go mod tidy
• 9a52b35 [ENG-3353] Add GitHub App Check Runs for risk analysis results (#4417)
• 5fee410 [ENG-3365] feat: area51 export-archive with host trust validation (#4440)
• a5a21f1 [ENG-3365] refactor: extract CLI auth logic to shared go/cliauth package (#4438)
• 02ad913 [ENG-3461] fix: bump buger/jsonparser to v1.1.2 (CVE-2026-32285) (#4478)
• c10ac12 chore(deps): update terraform (#4456)
• ae7d725 chore: move oql-prototype into tools/ and integrate with monorepo (#4439)
• e4ccfaa feat(azure): Add DBforPostgreSQLFlexibleServerReplica adapter (#4416)
• 18ca9c2 feat(azure): add NetworkLoadBalancerBackendAddressPool adapter (#4393)
• 434db05 feat(azure): add SQLDatabaseSchema adapter (#4415)
• 65fc163 feat: Add Azure adapter for DBforPostgreSQLFlexibleServerConfiguration (#4413)
• 7ebdf6e feat: add Azure NetworkLoadBalancerProbe adapter (#4402)
• 17ad6ef fix(deps): update go (#4433)

v1.17.2

Changelog

• fa02457 Eng 3205 phase 3 cursor cloud agent execution with credentials (#4339)
• 6b3ceb2 Fix all azure integration tests (#4367)
• 468ba73 Otel SDK span loss (#4286)
• 2b8d560 Pin GoReleaser version to v2.14.3 in all workflows (#4333)
• 529282b Run go mod tidy
• 620321e [ENG-3154] Add self-review step to Azure adapter skill and validate with BatchApplicationPackage adapter (#4287)
• 1549482 [ENG-3222] Add GCP Dataflow Job adapter with comprehensive link rules (#4302)
• 46986bc [ENG-3227] Add Dataflow aggregated LIST support (#4306)
• 136aa43 [ENG-3233] Phase 1: GitHub App Installation Requests — Schema, Config, and Plumbing (#4312)
• 3afb1f4 [ENG-3281] feat(api-server): DB-backed state parameter for GitHub App install flow (#4338)
• 074ddba chore(deps): update terraform (#4352)
• 84e86cb feat: Add Dockerfile for snapshot source (ENG-3240) (#4331)
• 0da82af feat: Implement all-locations LIST support for 8 GCP adapters (#4305)
• 2184202 feat: add --no-ping flag to skip health check in inject-secrets (#4342)
• 151278d feat: add Azure DBforPostgreSQL Flexible Server Backup adapter (#4318)
• 6413229 feat: add Azure NetworkFlowLog adapter (#4319)
• 0090692 feat: add Azure NetworkLoadBalancerFrontendIPConfiguration adapter (#4322)
• 91a4565 feat: rename SDP proto fields for naming consistency (non-persisted) (#4300)
• 2f28f5a fix(deps): update go (#4353)
• 1cc70b1 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to d00831a (#4348)
• f617cc2 fix(deps): update module github.com/modelcontextprotocol/go-sdk to v1.4.1 [security] (#4347)
• 17d8c78 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#4328)
• 2ab3877 refactor(sdpcache): restructure cache package into focused, testable layers (#4175)

v1.17.1

Changelog

• ecf8638 (maint) rename StoreError for caching to StoreUnavailableItem (#4274)
• 2118898 ENG-3061 Risk feedback backend (#4208)
• bce682c Eng 3140 phase 1 single adapter integration test pr (#4281)
• a12b067 Run go mod tidy
• 3f6838e chore(deps): update dependency golangci/golangci-lint to v2.11.3 (#4261)
• 8e1ba83 chore(deps): update terraform (#3954)
• 5b983a6 fix(deps): update go (#4260)
• 1bc2675 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 84a4fc4 (#4253)