Skip to main content

Release 0.5.48 — Okta Federated Identity, Slack Name Parsing, NoSQL Injection Fix

Erik Lutz
Erik Lutz
Sri Aradhyula
Sri Aradhyula

Released: 2026-07-10 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.48 Previous release: 0.5.47

Highlights​

0.5.48 fixes a critical gap in Okta directory sync (synced users lacked a Keycloak federated identity and couldn't SSO login), stops Slack bot/user names with spaces from being parsed as multiple entries, and patches a NoSQL injection vulnerability in the GridFS store.

Bug Fixes​

Okta-sync users now get a real Keycloak federated identity​

Okta directory sync was provisioning shell users in Keycloak but never writing a federatedIdentities record for them. That record was previously only created by Keycloak's idp-auto-link authenticator during an actual interactive SSO login, leaving sync-provisioned users unable to complete SSO sign-in without first logging in manually. The sync now registers the federated identity directly during provisioning.

(#2181)

Slack bot/user names with spaces no longer split into multiple entries​

Slack route allow-lists (bots, users) and escalation user lists (ping users, delete admins) are now stored and edited as arrays end-to-end instead of comma/space-joined strings. A multi-word name like "My Bot" can no longer be parsed into separate entries ("My", "Bot") when typed or re-read from the database.

(#2180)

Security​

NoSQL injection fix in GridFS store​

delete_by_key_prefix in gridfs_store.py was interpolating a caller-supplied prefix directly into a MongoDB $regex pattern without escaping. Added re.escape() to sanitize the input before regex construction. Also upgrades Playwright Node CVEs and bumps APK packages in ingestor images.

(#2160)

Breaking Changes​

No breaking changes. Drop-in upgrade from 0.5.47.

Upgrade Guide: 0.5.47 → 0.5.48​

No values changes required.

helm upgrade ai-platform-engineering \
  oci://ghcr.io/cnoe-io/charts/ai-platform-engineering \
  --version 0.5.48 \
  -f your-values.yaml