Skip to main content

Release 0.5.13 — Service Accounts, RAG File Uploads, and Slack Identity Routing

Released: 2026-06-15 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.13 Previous release: 0.5.12

Highlights

0.5.13 ships Service Accounts — team-owned bot identities you can use to run agents and tools on behalf of your team without tying execution to a personal account. RAG now accepts local file uploads directly in the admin UI. Slack gains identity-aware routing so messages can be sent as a specific user or service account.

Release 0.5.14 — Admin UX Polish and Deep-Link Navigation

Released: 2026-06-15 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.14 Previous release: 0.5.13

Highlights

0.5.14 is a quality-of-life release focused on the admin experience. Admin panel sub-tabs now reflect in the URL so you can bookmark or share a direct link to any settings page. Agent creation is less noisy about required fields, and transferring agent ownership is now a single save action instead of a separate workflow.

Release 0.5.12 — Centralized Authorization, Workflow Permissions, and File Previews

Released: 2026-06-14 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.12 Previous release: 0.5.11

Highlights

0.5.12 introduces the Centralized Authorization Service (CAS) — a dedicated component that makes permission decisions faster and more consistent across agents, workflows, and MCP tools. Workflow access is now governed by CAS, and users can preview file contents directly inside agents and workflows without downloading them.

Release 0.5.11 — Setup Wizard, Ollama + LiteLLM, and RBAC Fixes

Released: 2026-06-11 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.11 Previous release: 0.5.10

Highlights

0.5.11 makes the self-hosted setup experience significantly smoother: the setup script now auto-installs missing tools so you no longer need to prepare your environment manually, and Ollama users can now configure a LiteLLM proxy during setup. This release also fixes a set of access-control edge cases that could prevent organization members from discovering skills or reaching RAG endpoints.

Release 0.5.10 — Okta Directory Sync, Slack Slash-Command Prefix, and UI Improvements

Released: 2026-06-08 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.10 Previous release: 0.5.9

Highlights

0.5.10 ships Okta directory sync using the Okta SDK with JIT provisioning and an admin UI for managing sync rules, derives Slack slash-command prefix from APP_NAME so multi-tenant installs can namespace commands, adds dynamic nav overflow and a compact right-cluster header, and makes config-driven agent panels expandable.

Release 0.5.8 — Skills FGA, catalog API keys BFF, and RBAC migrations

Released: 2026-06-04 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.8 Previous release: 0.5.7

Highlights

0.5.8 continues enterprise RBAC work: skill team shares reconcile through the shared OpenFGA shareable-resource module, catalog API keys can be minted from the CAIPE UI BFF without the supervisor, and admin ReBAC migrations cover agent/skill FGA backfills. See the upgrade guide below for the catalog API key hash change before upgrading production.

Release 0.5.9 — Slack Channel Management, Ownership Transfer, and RBAC Hardening

Released: 2026-06-05 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.9 Previous release: 0.5.8

Highlights

0.5.9 rounds out Slack channel management (channel delete, in-place agent swap, config-team import), introduces unified ownership-transfer flows across agents, RAG knowledge bases, and MCP tools, and hardens local-dev RBAC so the org-admin bypass and Slack channel visibility work correctly out of the box. RAG embeddings are now preserved across non-interactive upgrades in setup-caipe.sh.

Release 0.5.7 — Keycloak PostgreSQL, AgentGateway Config-Bridge, and Setup Overhaul

Released: 2026-06-02 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.7 Previous release: 0.5.6

Highlights

0.5.7 is a substantial release. Keycloak gains optional PostgreSQL persistence (database.enabled), the AgentGateway Helm chart wires in the config-bridge sidecar for dynamic MCP route management, and setup-caipe.sh is significantly overhauled to support public-domain SSO, optional GitHub social login, a unified LiteLLM front for chat and embeddings, shared Postgres for Keycloak and OpenFGA, and a creds command for reprinting local logins.

Release 0.5.5 — Keycloak Role and Admin UI Fixes

Released: 2026-06-01 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.5 Previous release: 0.5.4

Highlights

0.5.5 is a targeted maintenance release fixing Keycloak service-account roles and admin UI noise. The caipe-platform service account role list is corrected (view-realm and manage-realm added, then manage-realm removed in the follow-up 0.5.6 patch — see those notes). Bootstrap admin log spam is silenced and Keycloak warning blocks are consolidated into a single amber UI section.

Release 0.5.6 — Keycloak manage-realm Role Patch

Released: 2026-06-01 Chart: oci://ghcr.io/cnoe-io/charts/ai-platform-engineering:0.5.6 Previous release: 0.5.5

Highlights

0.5.6 is a single-fix patch. The manage-realm role is restored to the caipe-platform service account desired roles after it was incorrectly removed in 0.5.5. This role is required for the BFF migration to manage realm configuration.