Skip to main content
This page tracks notable changes for each Bud-Stack release. The current chart appVersion is 0.14.2. For the complete commit-level history, see the GitHub releases page.

​
0.14.2

Released 2026-06-11. Full changelog A maintenance release focused on security hardening, auth convergence, and UI bug fixes. Security
  • budmodel — block Zip Slip / path traversal in archive extraction.
  • buddoc — enforce max_file_size_mb on OCR intake paths.
  • budauth (Keycloak theme) — sanitize ErrorBanner HTML with kcSanitize (XSS fix).
  • ask-bud — make the kubectl destructive-command guard fail closed.
Auth & Identity
  • budapp — converge OIDC JIT provisioning and fix the Playground seed-admin flow.
  • budprompt — inject sender identity into the bot agent context.
  • budplayground — validate the API key against the gateway before login.
  • keycloak — never render realm-import client attributes as null; theme update-profile / idp-review pages (budtheme 0.2.0).
Frontend & Bug Fixes
  • budadmin — UI and API error-handling fixes, inference-table fixes, inference-list race conditions and sort-clear handling, socket.off no longer removes all listeners, and added missing router action icon mappings.
  • budCustomer — reject on 403 in the axios interceptor instead of returning false.
  • budnotify — return ErrorResponse with the correct HTTP status.
Infrastructure
  • budmodel — add the registry-cleanup-scheduler cron to the Helm chart.
  • budgateway — bump default CPU request to 1 and limit to 4.
  • budeval — disabled by default to unblock ArgoCD sync.

​
0.14.1

Released 2026-06-10. Full changelog A large release introducing the ArgoCD-based GitOps deployment model, agent governance, teams support, and numerous infrastructure and UI improvements. Features
  • Agent governance — new agent-governance control surface: budapp authoring/lifecycle plus budgateway /v1/governance.
  • Teams — added teams support across budapp.
  • Agent event triggers — auto-provisioned MCP-gateway webhooks (Slack/Linear).
  • budprompt — pydantic-ai hooks subsystem with a 1.98.0 upgrade; foreground Responses-API streaming timeout set to 30 minutes.
  • budapp — a2a_card support in the create-prompt workflow.
  • budgateway — lock-free model registry via ArcSwap to stop hot-path inference stalls.
  • budadmin — guardrails tab layout with governance policy CRUD; agent builder UI improvements.
  • infra — configurable Keycloak realm session/token lifespans; bot integration.
Infrastructure & GitOps (ArgoCD migration)
  • Multi-part ArgoCD initialization: cluster add-ons, prod apps, clients, and the pnap project migrations.
  • pgbouncer connection pooling, MongoDB 3-replica setup, SeaweedFS volume/PVC expansion.
  • Helm chart updated to 0.14.0; dependency Helm charts published to OCI.
Auth & Security
  • budapp — auth made OIDC-only with auto-seeded root user.
  • budapp/budnotify/budadmin — repaired auth flows broken by the BFF redirect change.
  • budeval — removed hardcoded ClickHouse Cloud credentials from config defaults.
  • ci — closed the chart packaging secret leak; publish charts with registry.bud.studio image refs.
Bug Fixes & Docs
  • budadmin — observability bar chart stabilized on live data; native tool details UI improvements.
  • budplayground — prompt-config loading and chat-route error handling fixes.
  • budapp — deployment deprecation driven by vendor deprecation_date.
  • docs — ArgoCD installation guide, budadmin-ui development skill, and Mintlify cleanup of orphaned pages.
  • feat — hide code interpreter and gate evaluations behind dev mode.