v0.9.0-beta3

What's Changed

• feat: agent sandbox support by @peterj in #1640
• Add sandbox network allowlists for Go and Python by @EItanya in #1648

Full Changelog: v0.9.0-beta2...v0.9.0-beta3

v0.9.0-beta2

What's Changed

• OIDC proxy auth by @lets-call-n-walk in #1293

Full Changelog: v0.9.0-beta1...v0.9.0-beta2

v0.9.0-beta1

What's Changed

• fix(adk): set OTLP exporter timeout in milliseconds by @supreme-gg-gg in #1639
• Replace GORM + AutoMigrate with golang-migrate + sqlc by @iplay88keys in #1561

Full Changelog: v0.8.6...v0.9.0-beta1

v0.8.6

What's Changed

• chore(deps): bump the npm-minor-patch group in /ui with 15 updates by @dependabot[bot] in #1628
• fix: upgrade alpine packages in skills-init to resolve CVE-2026-22184 by @jsonmp-k8 in #1613
• chore(deps): bump astral-sh/setup-uv from 5 to 7 by @dependabot[bot] in #1624
• chore(deps): bump chromaui/action from 16.0.0 to 16.1.0 in the actions group by @dependabot[bot] in #1623
• chore(deps): bump azure/setup-helm from 4.2.0 to 5.0.0 by @dependabot[bot] in #1625
• Preserve Gemini thought_signature across OpenAI-compatible tool-call round trips by @AdminTurnedDevOps in #1631
• fix: make A2A client timeout configurable in MCP handler by @papagala in #1617

New Contributors

• @AdminTurnedDevOps made their first contribution in #1631
• @papagala made their first contribution in #1617

Full Changelog: v0.8.5...v0.8.6

v0.8.5

What's Changed

• fix(adk-go): capture message content by default in spans by @supreme-gg-gg in #1619
• chore(deps): bump ruff from 0.12.7 to 0.15.9 in /python in the python-minor-patch group across 1 directory by @dependabot[bot] in #1630
• chore(deps): bump google-adk from 1.28.0 to 1.28.1 in /go/core/test/e2e/agents/kebab in the samples-minor-patch group across 1 directory by @dependabot[bot] in #1627
• chore(deps): bump the go-minor-patch group across 1 directory with 16 updates by @dependabot[bot] in #1626
• feat(skills-init): add securityContext + resources configuration to i… by @jholt96 in #1539

Full Changelog: v0.8.4...v0.8.5

v0.8.4

What's Changed

• agentsts: add debug logs to MCP tool handlers by @shashankram in #1606
• fix: don't set Privileged when AllowPrivilegeEscalation is false for skills by @skhedim in #1551
• fix(helm): make bundled postgres PSA restricted compliant by @officialasishkumar in #1604
• add chromatic and publish the storybook by @peterj in #1609
• chore(deps): bump a2a-go v0.3.6 to v0.3.13 by @jsonmp-k8 in #1599
• Fix: add node-gpy to fix arm64 builds by @iplay88keys in #1616
• feat(telemetry): Go runtime tracing and go-adk 1.0.0 by @supreme-gg-gg in #1618

New Contributors

• @officialasishkumar made their first contribution in #1604

Full Changelog: v0.8.3...v0.8.4

v0.8.3

What's Changed

• feat: go adk enhancements and hitl by @supreme-gg-gg in #1538
• feat: configurable storage class by @munin92 in #1565
• chore: enable Dependabot for automated dependency updates by @jsonmp-k8 in #1498
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #1569
• chore(deps): bump google-adk from 1.9.0 to 1.28.0 in /go/core/test/e2e/agents/kebab in the samples-minor-patch group across 1 directory by @dependabot[bot] in #1581
• chore(deps): bump the docker-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #1567
• chore(deps): bump github.com/charmbracelet/bubbles from 0.21.0 to 1.0.0 in /go by @dependabot[bot] in #1580
• chore(deps): bump vite from 7.3.1 to 8.0.3 in /ui by @dependabot[bot] in #1583
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1570
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #1576
• chore(deps): bump pytest from 8.4.1 to 9.0.2 in /python by @dependabot[bot] in #1590
• chore(deps): upgrade metallb by @supreme-gg-gg in #1597
• chore: bump tools and kmcp by @supreme-gg-gg in #1595
• chore(deps): bump start-server-and-test from 2.1.5 to 3.0.0 in /ui by @dependabot[bot] in #1585
• chore(deps): bump the npm-minor-patch group across 1 directory with 19 updates by @dependabot[bot] in #1582
• chore(deps): bump helm/kind-action from b72c923563e6e80ea66e8e8c810798cc73e97e5e to ef37e7f390d99f746eb8b610417061a60e82a6cc by @dependabot[bot] in #1568
• chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1577
• chore(deps): bump actions/setup-node from 4 to 6 by @dependabot[bot] in #1575
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #1574
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1573
• chore(deps): bump actions/labeler from 5 to 6 by @dependabot[bot] in #1572
• chore(deps): bump actions/stale from 9 to 10 by @dependabot[bot] in #1571

New Contributors

• @munin92 made their first contribution in #1565
• @dependabot[bot] made their first contribution in #1569

Full Changelog: v0.8.2...v0.8.3

v0.8.2

What's Changed

• agentsts: allow subject token lookup from session state by @shashankram in #1559

Full Changelog: v0.8.1...v0.8.2

v0.8.1

What's Changed

• feat: add --default-agent-pod-labels flag for global agent pod labels by @EItanya in #1534
• chore: langgraph kebab agent for ci by @supreme-gg-gg in #1547
• update github.com/modelcontextprotocol/go-sdk to v1.4.1 by @dmitri-d in #1548
• Avoid unnecessary re-renders in react by @dobesv in #1537
• Add postgres service account by @iplay88keys in #1545
• feat(kagent-adk): remove litellm as dependency from kagent-adk by @jmhbh in #1540
• feat(helm): support namespaced RBAC in charts by @supreme-gg-gg in #1549
• add support for imagePullSecrets in postgres deployment by @dmitri-d in #1552

Full Changelog: v0.8.0...v0.8.1

v0.8.0

What's Changed

• refactor: restructure Go code into workspace with api, core, and adk modules by @EItanya in #1385
• fix: /thread_dump endpoint returns 500 due to faulthandler requiring real file descriptor by @iplay88keys in #1428
• docs: add comprehensive kagent-dev skill and streamline CLAUDE.md by @EItanya in #1439
• feat: bump kagent-tools v0.1.0 by @EItanya in #1448
• fix(ui): prevent duplicate ask_user card on session load by @Matcham89 in #1446
• pin down dependencies + fix mcp/agent template by @peterj in #1429
• fix: fix kagent-tools name override by @EItanya in #1450
• agentsts: allow dynamic fetching of actor token and enable caching by @shashankram in #1443
• add missing stateless_http to .run by @peterj in #1453
• feat: add runtime field to Declarative Agent CRD for Go/Python selection by @EItanya in #1452
• Front-end session type/function fixup by @dobesv in #1457
• Fixup sessionName -> sessionID by @dobesv in #1459
• Initial CLI testing by @EItanya in #1456
• Eitanya/runtime validation by @EItanya in #1454
• docs: add updated architecture docs for claude + people by @EItanya in #1461
• fix: resolve CVE-2025-15558 and improve image scan workflow by @EItanya in #1462
• Updates to the kagent-dev skill based on evals by @iplay88keys in #1464
• feat: add --token flag to kagent invoke for API key passthrough by @EItanya in #1465
• chore(ui): upgrade frontend dependencies by @jsonmp-k8 in #1470
• feat: instrument controller with distributed tracing and A2A trace propagation by @onematchfox in #1433
• feat: add global default serviceAccountName for agent deployments by @EItanya in #1463
• chore: replace bun with node since bun keeps crashing by @supreme-gg-gg in #1467
• agentsts: add use_issuer_host for token endpoint and fix MCP check by @shashankram in #1472
• fix(deps): pin httpx-sse>=0.4.2 to fix SSE line splitting on U+2028/U+2029 by @onematchfox in #1480
• chore: upgrade Go from 1.25.7 to 1.26.1 by @jsonmp-k8 in #1477
• chore: update supported models to latest versions by @jsonmp-k8 in #1479
• fix: add release tags for go modules by @EItanya in #1484
• refactor: replace Go workspace with single module by @EItanya in #1485
• fix: pass explicit platform to krane export to fix arm64 skill loading by @iplay88keys in #1487
• feat(security): enable secure defaults for kagent chart by @tzhukov in #1468
• feat: add context.Context to database client interface by @iplay88keys in #1489
• fix(ui): update .nvmrc from EOL Node 18 to Node 24 by @jsonmp-k8 in #1476
• feat: add kagent user skill for Claude Code by @EItanya in #1483
• fix(bash tool) implement proper command execution to not escape the sandbox by @jholt96 in #1493
• fix: update otel tracing config for langgraph agent to use agent specific service name by @xytian315 in #1497
• fix(adk): prevent session event duplication in KAgentSessionService by @onematchfox in #1500
• fix: remove accidental SQLite WAL artifact and add gitignore by @xytian315 in #1501
• chore(release): pin intra-repo dep lower bounds and keep them in sync by @onematchfox in #1482
• fix(file tools) implement directory restrictions to file tools by @jholt96 in #1496
• feat(sanitize envs): Remove Secrets from SRT by @jholt96 in #1504
• Remove SQLite and deploy Postgres by default by @iplay88keys in #1503
• chore: facilitate local dev overrides during helm installation by @onematchfox in #1508
• feat: human-in-the-loop (subagents) by @supreme-gg-gg in #1491
• fix(ui): correctly display token usage across sessions by @onematchfox in #1509
• fix: retry postgres connection with backoff in controller startup by @xytian315 in #1516
• Add storybook by @dobesv in #1361
• fix: bump dependency minimums to address active CVEs by @jsonmp-k8 in #1519
• fix: LangGraph Executor HITL and E2E Tests by @supreme-gg-gg in #1518
• feat: subagent activity viewing by @supreme-gg-gg in #1513
• docs: document KAGENT_DEFAULT_MODEL_PROVIDER in .env example by @dhruvilkotak in #1511
• feat: adding configurable ssh-hosts for git-based skills by @jmunozro in #1525
• fix: bump dependency minimums to address active CVEs by @EItanya in #1526
• code spaces by @dimetron in #1515
• Rework bundled postgres helm and templates by @iplay88keys in #1527

New Contributors

• @shashankram made their first contribution in #1443
• @jholt96 made their first contribution in #1493
• @xytian315 made their first contribution in #1497
• @dhruvilkotak made their first contribution in #1511

Full Changelog: v0.7.22...v0.8.0