Skip to main content
This page tracks notable changes for each Bud-Stack release. The latest tagged release is 1.1.0 (the published Helm chart appVersion remains 0.14.5). For the complete commit-level history, see the GitHub releases page.

​
1.1.0

Released 2026-07-16. Full changelog The first minor release on the 1.x line. Highlights are event-trigger authoring with a durable run engine, end-to-end CPU model quantization, and a broad hardening pass on the multi-portal (client-user) BFF separation, gateway error handling, and observability infrastructure. Features
  • triggers (budapp / budadmin / budprompt / budevent) — event-trigger authoring plus a durable run engine.
  • quantization — CPU model quantization end-to-end: engine reconcile, valid vLLM configs, wizard simplification, and completion/ETA/status fixes.
  • budadmin — allow deleting active users from user management.
Multi-Portal & Client-User Separation
  • budapp — grant client-user permissions, gate admin login, and route reset emails by portal.
  • budapp / budadmin — harden client-user portal separation with an invite-email fallback and a budadmin admin gate.
  • budapp — give client users real exits when refused at the admin gate.
  • budadmin — exclude client users from the project Add Members list.
  • budapp — playground token validation for the multi-portal BFF (fixes budcustomer 401).
  • budapp — resolve the OIDC client by token azp for the multi-client BFF (fixes playground /deployments 401).
Gateway
  • budgateway — surface the real provider error instead of an opaque 502 “All variants failed”.
  • budgateway — don’t 502 on truncated <think> blocks (Together / Fireworks).
Frontend & UI
  • budadmin — dashboard charts, observability filters, and reset-password checks.
  • budapp — make the dashboard project count match the Projects page.
  • budadmin — benchmark result UI corrections.
  • budprompt / budadmin — prompt_version + ResponseUsage; refactor the Connectors tab down to triggers only.
  • budadmin — agent MCP UX UI refactor.
  • budadmin — design-sync inputs for Bud Primitives.
Infrastructure
  • infra — initial Kata Containers support.
  • infra — slim the per-namespace Prometheus scrape config to stop 10GB+ RAM bloat.
Build & CI
  • ci — stop the Python dependency security check from hanging for hours.

​
1.0.2

Released 2026-07-12. Full changelog A build-fix patch release on top of 1.0.1. Build & CI
  • budsim — pin pip<24.1 to fix a Docker build “resolution-too-deep” failure.
  • budmodel — pin pip<24.1 to fix a Docker build “resolution-too-deep” failure.

​
1.0.1

Released 2026-07-12. Full changelog The 1.0 milestone release. A large rollup centred on the OpenTelemetry observability refactor, agent-builder and prompt-editor improvements, provider-aware identity/invite flows, and a broad set of guardrails, governance, and reliability fixes. (This release also folds in the 0.14.5 chart-release and docs work.) Observability & Telemetry
  • gateway / budadmin / budprompt / budevent — Phase 1+2 OpenTelemetry trace refactor with a new budmetrics analytics pipeline and dashboard fixes.
  • telemetry — propagate W3C trace context through to bud-sentinel (Gap 1 + Phase 2 mirror).
  • budmetrics / infra — default the fact pipelines on and wire the settle cron (fixes observability 500s).
  • budadmin — render agent p95 latency as a duration (not 11.3Kms); live observability chart counts requests, not spans; trace-detail scan, service badge, compression, trace rooting, live-merge, and rollup-inflation fixes.
Agent Builder & Prompts
  • budadmin — agent-builder variable setup and schema-settings updates; relabel agent-type options in the Add Agent wizard; add image & document attachments to agent prompt messages; redesign the agent prompt message editor; agent MCP UX refactor; UI fixes for agent schema, guardrails, and form components.
  • buddoc — process any-size documents without OOM (guardrails + streaming spreadsheets + multipart).
Identity & Auth
  • budapp / budadmin / infra — provider-aware, IdP-hosted invite & password flow (Option B).
  • keycloak / budapp — friendlier set-password info page with a seamless return to the app.
Guardrails & Governance
  • guardrails — stop dropping profiles on an empty api_key; accept the canonical 4-hook guard_types in profile config; give the Bud Sentinel endpoint an HTTP scheme across the profile, governance, and profile-sync paths.
  • budapp — allow deploying preset agent-governance policies; drop the include_governance filter when listing probe rules.
  • budadmin — GuardRails multi-deployment flow, probe persistence, and related UI fixes.
Reliability & Data
  • budapp — scope GET /prompts by project_id when search=true; return an empty distribution instead of a 404 for benchmarks without metrics.
  • db — make asyncpg engines and advisory locks safe under PgBouncer transaction pooling.
  • budnotify — schedule the coroutine in the dispatch_async running-loop branch.
  • event-path — autoscale on in-flight concurrency and fix the budevent OOM-cascade.
Infrastructure
  • budcluster — install HAMI / GPU-Operator on GPU clusters with self-healing onboarding.
  • charts/otel — use k8s.node.name instead of a dynamic host.name, stop overriding the cluster UID, use a direct Postgres connection, and add lookup fallbacks.
  • seaweedfs — bump storage.
  • ci(charts) — make the dependency-chart publish manual and versioned.
Docs
  • Add per-tier reference architectures (T0–T4); document SeaweedFS as the object store (removing MinIO/TensorZero mentions); add and restructure the router-module documentation.

​
0.14.5

Released 2026-07-02. Full changelog A security-hardening and feature release centred on budgateway request-boundary protections, agent governance policies, and budevent memory stability. (Chart 0.14.4 was an infrastructure-only bump for the budevent crypto-key fix and had no separate GitHub release.) Security
  • budgateway — block SSRF via user-controlled image_url; strip client-supplied x-tensorzero-* identity headers at ingress; trusted-proxy client-IP derivation with forged country-header stripping; take the governance profile id only from a trusted header under auth; enforce tenant ownership on /v1/files and /v1/batches; remove native unauthenticated routes and unused feature code.
  • buddoc — block SSRF in the OCR remote-document fetch.
  • infra/bud — require a stable budevent crypto key and remove the random fallback.
Agent Governance
  • budapp — agent governance policies: catalog, sync, and probe-list isolation; policy list filters with name reuse after delete; free unique URIs on policy delete (fixes name-reuse 500); agent-governance lifecycle, detector ref-name, and RAA scanner-rename fixes.
  • budadmin — guardrail deploy button and status toggle; governance policy ordering and search isolation.
Features
  • budprompt / budadmin — reasoning/thinking toggle in prompt and model settings; contextual LLM-generated tool-call status messages for bot conversations; inline variable autocomplete in the system-prompt editor.
  • budevent — add the Workvivo conversational chat-bot provider; suppress “Calling <tool>…” status on Teams only.
  • buddoc / budgateway — honor to_formats with docling-serve parity (docling 2.107) plus scaling.
  • budapp — make the customer token quota unlimited by default; preserve cloud-catalog supported_endpoints for embedding models.
Stability & Infrastructure
  • budevent — bound concurrent turns (OOM fix) and add an HPA for the webhook ingress; use mimalloc and cap glibc arenas so memory is returned to the OS.
  • budmodel — user-friendly registry capacity pre-flight messages.
  • budcluster — don’t enable GPU-only Infinity options on CPU latentbud.
  • infra — new valkey-cluster chart; Keycloak multi-realm import with drift fix; ClickHouse storage bump; Valkey memory-limit bump.
Docs
  • hardware-requirements — clarify storage sizing (platform vs. model registry).

​
0.14.3

Released 2026-06-23. Full changelog A maintenance release consolidating the ArgoCD/GitOps rollout with TLS-by-default networking, additional SSRF remediations, and backup/storage infrastructure. Security
  • budplayground — SSRF remediation with a configurable gateway allowlist.
  • budadmin — mitigate SSRF in /api/proxy-file.
  • budcustomer — move RSA decryption server-side to prevent key exposure.
Auth & Reliability
  • budgateway — return 402 for usage-limit Deny on the handler path.
  • budapp — crash-safe prompt deletion and gated code-interpreter env teardown; remove the identity email cache.
Infrastructure
  • infra — enable HTTPS by default for bud runtime with cert-manager; Harbor HA; Velero backups with scheduled runs; OpenEBS/Mayastor storage tuning; auto-onboarded cluster defaults to “Control Plane”.
Frontend & Docs
  • budplayground / budadmin — image-attachment text fix, duplicate bot-avatar fix during streaming, and an agent-details skeleton loader.
  • docs — cert-manager TLS installation guidance, ApplicationSet CRD troubleshooting, and helm-configuration/deployment alignment with the current chart.

​
0.14.2

Released 2026-06-11. Full changelog A maintenance release focused on security hardening, auth convergence, and UI bug fixes. Security
  • budmodel — block Zip Slip / path traversal in archive extraction.
  • buddoc — enforce max_file_size_mb on OCR intake paths.
  • budauth (Keycloak theme) — sanitize ErrorBanner HTML with kcSanitize (XSS fix).
  • ask-bud — make the kubectl destructive-command guard fail closed.
Auth & Identity
  • budapp — converge OIDC JIT provisioning and fix the Playground seed-admin flow.
  • budprompt — inject sender identity into the bot agent context.
  • budplayground — validate the API key against the gateway before login.
  • keycloak — never render realm-import client attributes as null; theme update-profile / idp-review pages (budtheme 0.2.0).
Frontend & Bug Fixes
  • budadmin — UI and API error-handling fixes, inference-table fixes, inference-list race conditions and sort-clear handling, socket.off no longer removes all listeners, and added missing router action icon mappings.
  • budCustomer — reject on 403 in the axios interceptor instead of returning false.
  • budnotify — return ErrorResponse with the correct HTTP status.
Infrastructure
  • budmodel — add the registry-cleanup-scheduler cron to the Helm chart.
  • budgateway — bump default CPU request to 1 and limit to 4.
  • budeval — disabled by default to unblock ArgoCD sync.

​
0.14.1

Released 2026-06-10. Full changelog A large release introducing the ArgoCD-based GitOps deployment model, agent governance, teams support, and numerous infrastructure and UI improvements. Features
  • Agent governance — new agent-governance control surface: budapp authoring/lifecycle plus budgateway /v1/governance.
  • Teams — added teams support across budapp.
  • Agent event triggers — auto-provisioned MCP-gateway webhooks (Slack/Linear).
  • budprompt — pydantic-ai hooks subsystem with a 1.98.0 upgrade; foreground Responses-API streaming timeout set to 30 minutes.
  • budapp — a2a_card support in the create-prompt workflow.
  • budgateway — lock-free model registry via ArcSwap to stop hot-path inference stalls.
  • budadmin — guardrails tab layout with governance policy CRUD; agent builder UI improvements.
  • infra — configurable Keycloak realm session/token lifespans; bot integration.
Infrastructure & GitOps (ArgoCD migration)
  • Multi-part ArgoCD initialization: cluster add-ons, prod apps, clients, and the pnap project migrations.
  • pgbouncer connection pooling, MongoDB 3-replica setup, SeaweedFS volume/PVC expansion.
  • Helm chart updated to 0.14.0; dependency Helm charts published to OCI.
Auth & Security
  • budapp — auth made OIDC-only with auto-seeded root user.
  • budapp/budnotify/budadmin — repaired auth flows broken by the BFF redirect change.
  • budeval — removed hardcoded ClickHouse Cloud credentials from config defaults.
  • ci — closed the chart packaging secret leak; publish charts with registry.bud.studio image refs.
Bug Fixes & Docs
  • budadmin — observability bar chart stabilized on live data; native tool details UI improvements.
  • budplayground — prompt-config loading and chat-route error handling fixes.
  • budapp — deployment deprecation driven by vendor deprecation_date.
  • docs — ArgoCD installation guide, budadmin-ui development skill, and Mintlify cleanup of orphaned pages.
  • feat — hide code interpreter and gate evaluations behind dev mode.