Skip to main content

Release 0.5.24 — MCP Secrets Rename, Private Chat Fix, and Slack Bot Allowlist Repair

Sri Aradhyula
Sri Aradhyula

Released: 2026-06-26 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.24 Previous release: 0.5.23

Highlights​

0.5.24 renames the Helm secret key for MCP credentials to mcpSecrets (with agentSecrets kept as a deprecated alias), fixes a privacy issue where private chats could be seen by unintended users, corrects Slack bot identity matching, and wires the AgentGateway targets token into the UI chart.

What's New​

mcpSecrets alias for Helm secret configuration​

The Helm chart now accepts mcpSecrets as the canonical key for MCP server credentials, replacing agentSecrets. The old name continues to work as a deprecated alias so existing deployments are not broken. Additionally, ExternalSecret resources with empty data fields are now correctly rejected rather than silently creating unusable secrets. (#2027)

AgentGateway targets token wired into UI chart​

The AGENTGATEWAY_TARGETS_TOKEN environment variable is now correctly propagated into the caipe-ui chart. A dev-mode default is also provided so local development environments work without manual token configuration. (#2007)

Bug Fixes​

  • Private conversations visible to wrong users: Under certain conditions, a user could see conversations that were not shared with them. Chat visibility is now scoped correctly to the owning user and explicitly shared recipients. (#2018)
  • Slack bot rejected valid messages due to allowlist mismatch: The Slack bot middleware was attempting to resolve bot identity before checking the allowlist, which caused valid messages to be dropped when identity resolution was slow or failed. Identity resolution is now skipped in the middleware layer and the allowlist matching is fixed. (#2020)

Breaking Changes​

agentSecrets is deprecated but still functional. If you use this key in your values.yaml, it continues to work. Migrating to mcpSecrets is recommended for forward compatibility.

Upgrade Guide: 0.5.23 → 0.5.24​

Helm Values Changes​

No required changes. To adopt the new canonical name ahead of the eventual removal:

# Before (deprecated, still works)
agentSecrets: ...

# After (recommended)
mcpSecrets: ...

Upgrade Runbook​

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.24 \
  -f your-values.yaml

Verify:

kubectl get pods -n <namespace>