Skip to main content
View all authors

Release 0.5.56 — Insights RBAC Scoping and AD Group Sync Filtering

Released: 2026-07-21 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.56 Previous release: 0.5.55

Highlights

0.5.56 tightens who can see what in Admin Insights: non-admins now only see data for resources they own, with a new agent filter to narrow further. Operators syncing Active Directory / OIDC groups into CAIPE teams can now include or exclude specific groups by regex instead of syncing every group a user belongs to. The MCP tool picker in the admin lab is now a searchable combobox instead of a plain dropdown, and two unreliable Insights stats (self-resolution, estimated hours saved) have been removed.

Release 0.5.55 — Multiple Webex Bots and Per-Surface Default Agents

Released: 2026-07-17 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.55 Previous release: 0.5.54

Highlights

0.5.55 significantly expands the Webex integration: a single deployment can now host multiple distinct Webex bots, each routing to different agents and enforcing independent direct-message access policies. Separately, users can now set independent default agents for the web interface, Slack, and Webex rather than sharing one platform-wide DM default.

Webex bot operators: this release changes the bot configuration format. See the upgrade guide for migration steps.

Release 0.5.54 — Admin Access Preview and Slack Bot Reliability

Released: 2026-07-16 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.54 Previous release: 0.5.53

Highlights

0.5.54 delivers a fully rebuilt admin access preview that accurately simulates what any user or team can see without touching their session, consolidates default agent settings into a single organized surface, and fixes a set of Slack bot reliability issues that were causing escalation and on-call flows to fail silently.

Release 0.5.52 — Deep Links, Session Refresh Fix, Slack Escalation Fix, Configurable Metrics Port

Released: 2026-07-15 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.52 Previous release: 0.5.51

Highlights

0.5.52 adds deep links across the Agents surface so resource editors can be shared and bookmarked, fixes a session expiry bug that was logging users out despite a successful silent refresh, corrects Slack escalation and message-delete failures caused by a missing agent_id, and makes the dynamic-agents Prometheus metrics port configurable.

0.4.18 → 0.5.52 Upgrade Guide — Workflow Engine, Webex Bot, BYO Credentials, Custom Agents, Fine-Grained Authorization, and Scheduled Agents

Released: 2026-07-15 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.52 Previous release: 0.4.18

Highlights

0.5.52 marks a major milestone for the platform. The 0.5.x series ships six headline capabilities that fundamentally expand what you can build and how the platform governs access: a new agentic workflow engine, a configurable Webex bot, bring-your-own credentials and impersonation tokens for MCP servers, fully custom agent definitions, relationship-based fine-grained authorization, and agent-driven scheduled jobs. This post summarizes what changed from 0.4.18 to 0.5.52.

The entire authorization stack ships disabled by default — upgrading from 0.4.18 requires no values.yaml changes if you are not opting into RBAC, Webex, or credentials.

Release 0.5.53 — Configurable Session Lifetime and Deprecated-Agent Recovery

Released: 2026-07-15 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.53 Previous release: 0.5.52

Highlights

0.5.53 extends default SSO session lifetimes so users are no longer signed out after eight hours of inactivity, and improves the experience when an agent has been deprecated — users can now pick a replacement or pick up a conversation where they left off without losing context.

Release 0.5.51 — Okta Baseline Bootstrap, Slack Routing Performance, IdP Sync Observability

Released: 2026-07-13 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.51 Previous release: 0.5.50

Highlights

0.5.51 fixes a critical gap where directory-synced users couldn't pass the AgentGateway ext_authz gate on their first login, hardens Slack event routing with per-stage timing logs and server-side OpenFGA filtering, and makes IdP sync progress observable through structured stage logs.

Release 0.5.48 — Okta Federated Identity, Slack Name Parsing, NoSQL Injection Fix

Released: 2026-07-10 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.48 Previous release: 0.5.47

Highlights

0.5.48 fixes a critical gap in Okta directory sync (synced users lacked a Keycloak federated identity and couldn't SSO login), stops Slack bot/user names with spaces from being parsed as multiple entries, and patches a NoSQL injection vulnerability in the GridFS store.

Release 0.5.49 — Okta Sync Reliability, Tool Result Invariants, Mention-Only Onboarding Default

Released: 2026-07-10 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.49 Previous release: 0.5.48

Highlights

0.5.49 makes Okta IdP sync resilient to invalid display names, already-linked identities, and event-loop stalls in large orgs; restores correct tool result invariants for dynamic agents on Bedrock; and changes the default channel/space onboarding mode to mention-only to prevent bots from responding to every message in newly connected channels.

Release 0.5.50 — Slack Workflow Builder Mentions, General-Purpose Tool Results

Released: 2026-07-10 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.50 Previous release: 0.5.49

Highlights

0.5.50 fixes two agent reliability issues: Slack Workflow Builder @mentions now resolve the bot identity correctly instead of crashing on a missing user field, and the general-purpose deep-agent subagent correctly applies tool result invariants after the 0.5.49 fix.