Release notes from agent-bom
Articles about Release notes from agent-bom
Agent-bom v0.108.4
Highlights ClickHouse analytics now creates its database before selecting it for HTTP queries. Connecting to a fresh server no longer fails with UNKNOWN_DATABASE; bootstrap retains credentials and stops on authorization errors.
Release v0 · koda-ai-studio/agent-bom
Release 0.108.4
Agent-bom v0.108.3
Highlights Postgres job reads no longer transfer and decode every job payload on each call. A read sends the row versions this process already holds, and the database returns a payload only for rows that changed, so another replica's write is always seen. Payloads are cached as JSON text per tenant, with a byte limit (AGENT_BOM_POSTGRES_JOB_PAYLOAD_CACHE_MB, default 256). Reads outside one request's aggregate read still parse a fresh job.
Agent-bom v0.108.2
Highlights Move the PyPI and Docker Hub front doors to docs/registry/, the repository map to docs/PROJECT_STRUCTURE.md, the image exception register to docs/security/image-exceptions.yaml, the project-config template to examples/agent-bom.yaml.example, and the fuzz harnesses to .clusterfuzzlite/fuzz/.
Release v0 · msaad00/agent-bom
perf(api): let first reads after restart run without background conte
Agent-bom v0.108.1
Highlights Reconcile default inventory and graph reads with the current tenant estate across REST, MCP and the dashboard. Retain clean assets, unrelated targets and partial evidence; preserve explicit historical views and reject stale pagination generations.
Agent-bom v0.108.0
Highlights Inspect component hierarchy, recorded relationships, collector names and timestamps through bounded REST/MCP inventory pages and the dashboard. Snapshot-generation checks reject stale continuations; page completeness remains distinct from source collection coverage.
Agent-bom v0.107.2
Highlights Query release CI by the candidate commit so unrelated workflow history cannot hide its successful main run; retain exact-main and completed-success checks. Queue same-process SQLite gra
Release v0.107.1 · koda-ai-studio/agent-bom
agent-bom 0.107.1
Release v0.107.1 · msaad00/agent-bom
agent-bom 0.107.1
Agent-bom v0.107.0
Highlights Guided first scans connect an empty workspace to scan and connection actions, with browser-local report previews and an explicit return to live evidence. CLI quickstart prints the saved report, package-CVE coverage boundary and exact graph snapshot link.
Agent-bom v0.106.1
Highlights Scope GET /v1/graph/exposure-paths and POST /v1/graph/should-i-deploy to the authenticated request tenant. These REST routes previously resolved the MCP process tenant, so on SQLite every tenant received the default tenant's credential-exposure paths and deploy verdict, and on Postgres with row-level security every tenant received an empty result.
Release v0.106.0 · msaad00/agent-bom
agent-bom 0.106.0
Agent-bom v0.105.0
Highlights Opt-in agent-bom secrets --validate-credentials checks for supported GitHub and Stripe credentials, with bounded read-only requests and valid/invalid/unknown verdicts. Default scans make no validation requests; unsupported credentials remain unknown and finding severity is preserved.