> ## Documentation Index
> Fetch the complete documentation index at: https://docs.budecosystem.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Release Notes

> Version history and changelog for Bud-Stack releases

This page tracks notable changes for each Bud-Stack release. The latest tagged
release is **1.1.0** (the published Helm chart `appVersion` remains **0.14.5**).
For the complete commit-level history, see the
[GitHub releases page](https://github.com/BudEcosystem/bud-runtime/releases).

## 1.1.0

*Released 2026-07-16.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/1.0.2...1.1.0)

The first minor release on the 1.x line. Highlights are event-trigger authoring
with a durable run engine, end-to-end CPU model quantization, and a broad
hardening pass on the multi-portal (client-user) BFF separation, gateway error
handling, and observability infrastructure.

**Features**

* **triggers (budapp / budadmin / budprompt / budevent)** — event-trigger authoring plus a durable run engine.
* **quantization** — CPU model quantization end-to-end: engine reconcile, valid vLLM configs, wizard simplification, and completion/ETA/status fixes.
* **budadmin** — allow deleting active users from user management.

**Multi-Portal & Client-User Separation**

* **budapp** — grant client-user permissions, gate admin login, and route reset emails by portal.
* **budapp / budadmin** — harden client-user portal separation with an invite-email fallback and a budadmin admin gate.
* **budapp** — give client users real exits when refused at the admin gate.
* **budadmin** — exclude client users from the project Add Members list.
* **budapp** — playground token validation for the multi-portal BFF (fixes budcustomer 401).
* **budapp** — resolve the OIDC client by token `azp` for the multi-client BFF (fixes playground `/deployments` 401).

**Gateway**

* **budgateway** — surface the real provider error instead of an opaque 502 "All variants failed".
* **budgateway** — don't 502 on truncated `<think>` blocks (Together / Fireworks).

**Frontend & UI**

* **budadmin** — dashboard charts, observability filters, and reset-password checks.
* **budapp** — make the dashboard project count match the Projects page.
* **budadmin** — benchmark result UI corrections.
* **budprompt / budadmin** — `prompt_version` + `ResponseUsage`; refactor the Connectors tab down to triggers only.
* **budadmin** — agent MCP UX UI refactor.
* **budadmin** — design-sync inputs for Bud Primitives.

**Infrastructure**

* **infra** — initial Kata Containers support.
* **infra** — slim the per-namespace Prometheus scrape config to stop 10GB+ RAM bloat.

**Build & CI**

* **ci** — stop the Python dependency security check from hanging for hours.

## 1.0.2

*Released 2026-07-12.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/1.0.1...1.0.2)

A build-fix patch release on top of 1.0.1.

**Build & CI**

* **budsim** — pin `pip<24.1` to fix a Docker build "resolution-too-deep" failure.
* **budmodel** — pin `pip<24.1` to fix a Docker build "resolution-too-deep" failure.

## 1.0.1

*Released 2026-07-12.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.5...1.0.1)

The **1.0 milestone** release. A large rollup centred on the OpenTelemetry
observability refactor, agent-builder and prompt-editor improvements, provider-aware
identity/invite flows, and a broad set of guardrails, governance, and reliability
fixes. (This release also folds in the 0.14.5 chart-release and docs work.)

**Observability & Telemetry**

* **gateway / budadmin / budprompt / budevent** — Phase 1+2 OpenTelemetry trace refactor with a new budmetrics analytics pipeline and dashboard fixes.
* **telemetry** — propagate W3C trace context through to bud-sentinel (Gap 1 + Phase 2 mirror).
* **budmetrics / infra** — default the fact pipelines on and wire the settle cron (fixes observability 500s).
* **budadmin** — render agent p95 latency as a duration (not `11.3Kms`); live observability chart counts requests, not spans; trace-detail scan, service badge, compression, trace rooting, live-merge, and rollup-inflation fixes.

**Agent Builder & Prompts**

* **budadmin** — agent-builder variable setup and schema-settings updates; relabel agent-type options in the Add Agent wizard; add image & document attachments to agent prompt messages; redesign the agent prompt message editor; agent MCP UX refactor; UI fixes for agent schema, guardrails, and form components.
* **buddoc** — process any-size documents without OOM (guardrails + streaming spreadsheets + multipart).

**Identity & Auth**

* **budapp / budadmin / infra** — provider-aware, IdP-hosted invite & password flow (Option B).
* **keycloak / budapp** — friendlier set-password info page with a seamless return to the app.

**Guardrails & Governance**

* **guardrails** — stop dropping profiles on an empty `api_key`; accept the canonical 4-hook `guard_types` in profile config; give the Bud Sentinel endpoint an HTTP scheme across the profile, governance, and profile-sync paths.
* **budapp** — allow deploying preset agent-governance policies; drop the `include_governance` filter when listing probe rules.
* **budadmin** — GuardRails multi-deployment flow, probe persistence, and related UI fixes.

**Reliability & Data**

* **budapp** — scope `GET /prompts` by `project_id` when `search=true`; return an empty distribution instead of a 404 for benchmarks without metrics.
* **db** — make asyncpg engines and advisory locks safe under PgBouncer transaction pooling.
* **budnotify** — schedule the coroutine in the `dispatch_async` running-loop branch.
* **event-path** — autoscale on in-flight concurrency and fix the budevent OOM-cascade.

**Infrastructure**

* **budcluster** — install HAMI / GPU-Operator on GPU clusters with self-healing onboarding.
* **charts/otel** — use `k8s.node.name` instead of a dynamic `host.name`, stop overriding the cluster UID, use a direct Postgres connection, and add lookup fallbacks.
* **seaweedfs** — bump storage.
* **ci(charts)** — make the dependency-chart publish manual and versioned.

**Docs**

* Add per-tier reference architectures (T0–T4); document SeaweedFS as the object store (removing MinIO/TensorZero mentions); add and restructure the router-module documentation.

## 0.14.5

*Released 2026-07-02.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.3...0.14.5)

A security-hardening and feature release centred on budgateway request-boundary
protections, agent governance policies, and budevent memory stability. (Chart
`0.14.4` was an infrastructure-only bump for the budevent crypto-key fix and had
no separate GitHub release.)

**Security**

* **budgateway** — block SSRF via user-controlled `image_url`; strip client-supplied `x-tensorzero-*` identity headers at ingress; trusted-proxy client-IP derivation with forged country-header stripping; take the governance profile id only from a trusted header under auth; enforce tenant ownership on `/v1/files` and `/v1/batches`; remove native unauthenticated routes and unused feature code.
* **buddoc** — block SSRF in the OCR remote-document fetch.
* **infra/bud** — require a stable budevent crypto key and remove the random fallback.

**Agent Governance**

* **budapp** — agent governance policies: catalog, sync, and probe-list isolation; policy list filters with name reuse after delete; free unique URIs on policy delete (fixes name-reuse 500); agent-governance lifecycle, detector ref-name, and RAA scanner-rename fixes.
* **budadmin** — guardrail deploy button and status toggle; governance policy ordering and search isolation.

**Features**

* **budprompt / budadmin** — reasoning/thinking toggle in prompt and model settings; contextual LLM-generated tool-call status messages for bot conversations; inline variable autocomplete in the system-prompt editor.
* **budevent** — add the Workvivo conversational chat-bot provider; suppress "Calling \<tool>…" status on Teams only.
* **buddoc / budgateway** — honor `to_formats` with docling-serve parity (docling 2.107) plus scaling.
* **budapp** — make the customer token quota unlimited by default; preserve cloud-catalog `supported_endpoints` for embedding models.

**Stability & Infrastructure**

* **budevent** — bound concurrent turns (OOM fix) and add an HPA for the webhook ingress; use mimalloc and cap glibc arenas so memory is returned to the OS.
* **budmodel** — user-friendly registry capacity pre-flight messages.
* **budcluster** — don't enable GPU-only Infinity options on CPU latentbud.
* **infra** — new `valkey-cluster` chart; Keycloak multi-realm import with drift fix; ClickHouse storage bump; Valkey memory-limit bump.

**Docs**

* **hardware-requirements** — clarify storage sizing (platform vs. model registry).

## 0.14.3

*Released 2026-06-23.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.2...0.14.3)

A maintenance release consolidating the ArgoCD/GitOps rollout with TLS-by-default
networking, additional SSRF remediations, and backup/storage infrastructure.

**Security**

* **budplayground** — SSRF remediation with a configurable gateway allowlist.
* **budadmin** — mitigate SSRF in `/api/proxy-file`.
* **budcustomer** — move RSA decryption server-side to prevent key exposure.

**Auth & Reliability**

* **budgateway** — return `402` for usage-limit Deny on the handler path.
* **budapp** — crash-safe prompt deletion and gated code-interpreter env teardown; remove the identity email cache.

**Infrastructure**

* **infra** — enable HTTPS by default for bud runtime with cert-manager; Harbor HA; Velero backups with scheduled runs; OpenEBS/Mayastor storage tuning; auto-onboarded cluster defaults to "Control Plane".

**Frontend & Docs**

* **budplayground / budadmin** — image-attachment text fix, duplicate bot-avatar fix during streaming, and an agent-details skeleton loader.
* **docs** — cert-manager TLS installation guidance, ApplicationSet CRD troubleshooting, and helm-configuration/deployment alignment with the current chart.

## 0.14.2

*Released 2026-06-11.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.1...0.14.2)

A maintenance release focused on security hardening, auth convergence, and
UI bug fixes.

**Security**

* **budmodel** — block Zip Slip / path traversal in archive extraction.
* **buddoc** — enforce `max_file_size_mb` on OCR intake paths.
* **budauth (Keycloak theme)** — sanitize `ErrorBanner` HTML with `kcSanitize` (XSS fix).
* **ask-bud** — make the `kubectl` destructive-command guard fail closed.

**Auth & Identity**

* **budapp** — converge OIDC JIT provisioning and fix the Playground seed-admin flow.
* **budprompt** — inject sender identity into the bot agent context.
* **budplayground** — validate the API key against the gateway before login.
* **keycloak** — never render realm-import client attributes as `null`; theme update-profile / idp-review pages (budtheme 0.2.0).

**Frontend & Bug Fixes**

* **budadmin** — UI and API error-handling fixes, inference-table fixes, inference-list race conditions and sort-clear handling, `socket.off` no longer removes all listeners, and added missing router action icon mappings.
* **budCustomer** — reject on `403` in the axios interceptor instead of returning `false`.
* **budnotify** — return `ErrorResponse` with the correct HTTP status.

**Infrastructure**

* **budmodel** — add the `registry-cleanup-scheduler` cron to the Helm chart.
* **budgateway** — bump default CPU request to 1 and limit to 4.
* **budeval** — disabled by default to unblock ArgoCD sync.

## 0.14.1

*Released 2026-06-10.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.0...0.14.1)

A large release introducing the ArgoCD-based GitOps deployment model, agent
governance, teams support, and numerous infrastructure and UI improvements.

**Features**

* **Agent governance** — new agent-governance control surface: budapp authoring/lifecycle plus budgateway `/v1/governance`.
* **Teams** — added teams support across budapp.
* **Agent event triggers** — auto-provisioned MCP-gateway webhooks (Slack/Linear).
* **budprompt** — pydantic-ai hooks subsystem with a 1.98.0 upgrade; foreground Responses-API streaming timeout set to 30 minutes.
* **budapp** — `a2a_card` support in the create-prompt workflow.
* **budgateway** — lock-free model registry via `ArcSwap` to stop hot-path inference stalls.
* **budadmin** — guardrails tab layout with governance policy CRUD; agent builder UI improvements.
* **infra** — configurable Keycloak realm session/token lifespans; bot integration.

**Infrastructure & GitOps (ArgoCD migration)**

* Multi-part ArgoCD initialization: cluster add-ons, prod apps, clients, and the `pnap` project migrations.
* pgbouncer connection pooling, MongoDB 3-replica setup, SeaweedFS volume/PVC expansion.
* Helm chart updated to 0.14.0; dependency Helm charts published to OCI.

**Auth & Security**

* **budapp** — auth made OIDC-only with auto-seeded root user.
* **budapp/budnotify/budadmin** — repaired auth flows broken by the BFF redirect change.
* **budeval** — removed hardcoded ClickHouse Cloud credentials from config defaults.
* **ci** — closed the chart packaging secret leak; publish charts with `registry.bud.studio` image refs.

**Bug Fixes & Docs**

* **budadmin** — observability bar chart stabilized on live data; native tool details UI improvements.
* **budplayground** — prompt-config loading and chat-route error handling fixes.
* **budapp** — deployment deprecation driven by vendor `deprecation_date`.
* **docs** — ArgoCD installation guide, budadmin-ui development skill, and Mintlify cleanup of orphaned pages.
* **feat** — hide code interpreter and gate evaluations behind dev mode.