Skip to main content

Release 0.5.23 — Okta DPoP, Audit Performance, and CI Token Fixes

Sri Aradhyula
Sri Aradhyula

Released: 2026-06-25 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.23 Previous release: 0.5.22

Highlights​

0.5.23 is a focused patch addressing Okta DPoP compatibility, an audit store performance issue, and two CI authentication gaps that were blocking UI image pushes.

What's New​

Okta DPoP nonce handled automatically​

Okta's DPoP flow requires a nonce that changes with each request. The Okta sync integration now detects and handles the nonce requirement automatically, so Okta-backed identity sync no longer fails when DPoP is enforced on the tenant. (#2023)

Bug Fixes​

  • Audit store query blocked the event loop: The audit store's query call was running synchronously on the async event loop, which caused latency spikes and could stall other requests during busy periods. It now runs in a thread pool. (#2026)
  • Health-check audit lookback was unbounded: The platform health check was scanning the entire audit log history to determine health status, which was slow for deployments with long-running histories. The lookback is now narrowed to the last 24 hours. (#2026)
  • CI could not detect or push UI image tags: Two CI steps — UI tag detection and GHCR image push — were failing due to missing GitHub token authentication. Both steps now use the correct token. (#2022, #2024)

Breaking Changes​

No breaking changes. Drop-in upgrade from 0.5.22.

Upgrade Guide: 0.5.22 → 0.5.23​

No values changes required.

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.23 \
  -f your-values.yaml

Verify:

kubectl get pods -n <namespace>