Release v1.2.0

[tkircsi]

Release v1.2.0

🚀 AGNTCY Dir v1.2.0 Release

This release introduces standard OIDC authentication, alongside daemon and runtime improvements, SDK auth support, Helm and packaging enhancements, importer improvements, and continued dependency and security updates.

🌟 What's New

Authentication

• Introduce OIDC-based external authorization and Dex as the shipped OIDC provider (feat(dir): multiprovider OIDC-based external authorization module #1034, refactor(dir): replace Zitadel with Dex as OIDC provider #1216)
• Simplify the OIDC client and add device flow support (refactor(cli/client): simplify OIDC client and add device flow support #1220)
• Add OIDC auth support for the TypeScript SDK (feat(sdk/js): add OIDC auth support for TypeScript SDK #1219)
• Add OIDC auth support for the Python SDK (feat(sdk/python): add OIDC auth support for Python SDK #1201)
• Support constrained wildcard matching for GitHub workflow principals (feat(dir): support constrained wildcard matching for GitHub workflow principals #1167)

CLI, Runtime, and Developer Experience

• Add the dirctl daemon command (feat(cli): add daemon command #1200)
• Add daemon configuration file support (feat(cli/daemon): daemon configuration file support #1218)
• Wire in the runtime discovery component (feat(daemon): wire in runtime discovery component #1277)
• Add runtime client methods and daemon tests (chore(runtime): add runtime client methods and daemon tests #1283)
• Add pre-commit hooks (feat(dir): add pre-commit hooks #1209)
• Publish dir-apiserver binaries for multiple platforms (feat(release): publish dir-apiserver binary for multiple platforms #1179)

APIs, Storage, and Helm

• Add DeleteReferrer support (feat(dir): add DeleteReferrer #993)
• Add SQLite support and configuration (feat(server/database): add SQLite support and configuration #1195)
• Add the latest Helm releases support (feat(dir): add latest Helm releases #1290)
• Render routing service annotations in Helm (feat(dir/helm): render routing service annotations #1309)
• Add OASF SDK 1.0.5 support (feat(deps): oasf-sdk 1.0.5 support #1298)

Importer and Automation

• Revamp the importer module (refactor(importer): revamp importer module #1092)
• Add importer file fetcher support (feat(importer): implement file fetcher #1217)
• Import agent skill definitions from file (feat(importer): import agent skill from file #1276)
• Follow the new OIDC pattern in the import-records workflow (feat(dir/ci): follow the new OIDC pattern in import records wf #1177)

Security and Maintenance

• Replace Docker with Moby for security hardening (chore(deps): replace docker with moby [security] #1299)
• Fix security alerts by package upgrade (chore(dir): fix security alerts by package upgrade #1291)
• Extend the security scanner to support more tags (ci(dir): extend security scanner to support more tag #1055)
• Continue dependency, action, and image refreshes across the stack

What's Changed

• fix(ci): enable hidden paths (fix(ci): enable hidden paths #1314)
• release(dir): prepare release v1.2.0 (release(dir): prepare release v1.2.0 #1313)
• chore(deps): update postgresql (chore(deps): update postgresql #1301)
• chore(deps): update docker/dockerfile:1 docker digest to 2780b5c (chore(deps): update docker/dockerfile:1 docker digest to 2780b5c #1300)
• feat(dir/helm) render routing service annotations (feat(dir/helm): render routing service annotations #1309)
• chore(deps): update dependency astral-sh/uv to v0.11.6 (chore(deps): update dependency astral-sh/uv to v0.11.6 #1302)
• feat(importer): import agent skill from file (feat(importer): import agent skill from file #1276)
• chore(deps): update helm release zot to v0.1.104 (chore(deps): update helm release zot to v0.1.104 #1304)
• chore(deps): update javascript (chore(deps): update javascript #1305)
• chore(deps): update module golang.org/x/crypto to v0.50.0 (chore(deps): update module golang.org/x/crypto to v0.50.0 #1307)
• chore(deps): update go patches (chore(deps): update go patches #1303)
• chore(deps): update github actions (chore(deps): update github actions #1306)
• chore(deps): replace docker with moby [security] (chore(deps): replace docker with moby [security] #1299)
• feat(deps): oasf-sdk 1.0.5 support (feat(deps): oasf-sdk 1.0.5 support #1298)
• chore(dir): fix security alerts by package upgrade (chore(dir): fix security alerts by package upgrade #1291)
• fix(dir): fix Helm version (fix(dir): fix Helm version #1294)
• feat(dir): add latest Helm releases (feat(dir): add latest Helm releases #1290)
• chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security] (chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security] #1288)
• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] #1289)
• feat(sdk/js): add OIDC auth support for TypeScript SDK (feat(sdk/js): add OIDC auth support for TypeScript SDK #1219)
• feat(sdk/python): add OIDC auth support for Python SDK (feat(sdk/python): add OIDC auth support for Python SDK #1201)
• fix(dirctl): use utc timestamps for cached tokens with milliseconds (fix(dirctl): use utc timestamps for cached tokens with milliseconds #1284)
• chore(runtime): add runtime client methods and daemon tests (chore(runtime): add runtime client methods and daemon tests #1283)
• feat(daemon): wire in runtime discovery component (feat(daemon): wire in runtime discovery component #1277)
• chore(deps): update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [security] (chore(deps): update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [security] #1279)
• feat(cli/daemon): peer-ready defaults for routing (feat(cli/daemon): peer-ready defaults for routing #1268)
• refactor(tests): remove e2e-production tests and update README (refactor(tests): remove e2e-production test suite #1241)
• chore(deps/renovate): group postgresql bumps (chore(deps/renovate): group postgresql bumps #1261)
• test(dir/daemon): add cross platform tests (test(dir/daemon): add cross platform tests #1264)
• docs(dir): add dirctl daemon to README deployment section (docs(dir): add dirctl daemon to README deployment section #1263)
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 (chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 #1262)
• chore(deps): update dependency astral-sh/uv to v0.11.3 (chore(deps): update dependency astral-sh/uv to v0.11.3 #1253)
• chore(deps): update module github.com/zitadel/oidc/v3 to v3.46.0 (chore(deps): update module github.com/zitadel/oidc/v3 to v3.46.0 #1258)
• chore(deps): update docker.io/bitnami/postgresql:latest docker digest to c30c796 (chore(deps): update docker.io/bitnami/postgresql:latest docker digest to c30c796 #1251)
• chore(deps): update helm release postgresql to v18.5.15 (chore(deps): update helm release postgresql to v18.5.15 #1255)
• chore(deps): update python docker tag to v3.14 (chore(deps): update python docker tag to v3.14 #1260)
• chore(deps): update javascript (chore(deps): update javascript #1257)
• chore(deps): update github actions (chore(deps): update github actions #1256)
• chore(deps): update go patches (chore(deps): update go patches #1254)
• chore(deps): update module google.golang.org/grpc to v1.80.0 (chore(deps): update module google.golang.org/grpc to v1.80.0 #1259)
• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] #1246)
• fix(importer): revert import command type in workflow (fix(importer): revert import command type in workflow #1238)
• fix(importer): flags (fix(importer): flags #1230)
• refactor(brew): add versioned formula for dirctl brew (refactor(brew): add versioned formula for dirctl brew #1232)
• fix(test): enhance config validation to check file accessibility (fix(test): enhance config validation to check file accessibility #1228)
• fix(dir): remove parallel lint runs (fix(dir): remove parallel lint runs #1227)
• fix(importer): workflow (fix(importer): workflow #1226)
• feat(cli/daemon): daemon configuration file support (feat(cli/daemon): daemon configuration file support #1218)
• feat: importer file fetcher (feat(importer): implement file fetcher #1217)
• refactor(cli/client): simplify OIDC client and add device flow support (refactor(cli/client): simplify OIDC client and add device flow support #1220)
• refactor(dir): replace Zitadel with Dex as OIDC provider (refactor(dir): replace Zitadel with Dex as OIDC provider #1216)
• refactor(workflow/renovate): improve scheduling to fast-track vulnerability fixes (refactor(workflow/renovate): improve scheduling to fast-track vulnerability fixes #1213)
• fix(dir): skip installing pre-commit if hooksPath is set (fix(dir): skip installing pre-commit if hooksPath is set #1215)
• fix(dir): test file instead of directory (fix(dir): test file instead of directory #1214)
• feat(cli): add daemon command (feat(cli): add daemon command #1200)
• feat(dir): add pre-commit hooks (feat(dir): add pre-commit hooks #1209)
• ci(dir): bump codecov reusable action (ci(dir): bump codecov reusable action #1206)
• refactor(workflow): pin demo and import workflows to dirctl version (refactor(workflow): pin demo and import workflows to dirctl version #1207)
• chore(deps): update github actions (chore(deps): update github actions #1205)
• chore(deps): update javascript (chore(deps): update javascript #1204)
• chore(deps): update go patches (chore(deps): update go patches #1203)
• chore(deps): update dependency astral-sh/uv to v0.11.2 (chore(deps): update dependency astral-sh/uv to v0.11.2 #1202)
• fix(ci): switch to native kind networking for e2e tests (fix(ci): switch to native kind networking for e2e tests #1199)
• feat(server/database): add SQLite support and configuration (feat(server/database): add SQLite support and configuration #1195)
• refactor(install/chart): remove chart tarballs (refactor(install/chart): remove chart tarballs #1190)
• chore(workflows): add envoy version for container image scan configuration (chore(workflows): add envoy version for container image scan configuration #1185)
• fix(ci): audience of ghwf token (fix(ci): audience of ghwf token #1189)
• feat(dir): add DeleteReferrer (feat(dir): add DeleteReferrer #993)
• feat(dir/ci): follow the new OIDC pattern in import records wf (feat(dir/ci): follow the new OIDC pattern in import records wf #1177)
• fix(tests): flaky e2e network tests due to shared test data and insufficient sync timeout (fix(tests): flaky e2e network tests due to shared test data and insufficient sync timeout #1182)
• refactor(dir): refactor PullReferrer (refactor(dir): refactor PullReferrer #1067)
• ci(dir): reduce e2e test artifact scope (ci(dir): reduce e2e test artifact scope #1091)
• chore(deps): update dependency astral-sh/uv to v0.11.1 (chore(deps): update dependency astral-sh/uv to v0.11.1 #1171)
• chore(cron): fix nightly security posture checks (chore(ci): fix latest push and security posture checks #1183)
• refactor(importer): revamp importer module (refactor(importer): revamp importer module #1092)
• feat(release): publish dir-apiserver binary for multiple platforms (feat(release): publish dir-apiserver binary for multiple platforms #1179)
• chore(renovate): update discovery config (chore(renovate): update discovery config #1169)
• refactor(dir/ci): add reusable build-dirctl and GitHub OIDC token actions (refactor(dir/ci): add reusable build-dirctl and GitHub OIDC token actions #1168)
• feat(authz): support constrained wildcard matching for GitHub workflow principals (feat(dir): support constrained wildcard matching for GitHub workflow principals #1167)
• chore(deps): update taskfile (chore(deps): update taskfile #1144)
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to d00831a (chore(deps): update google.golang.org/genproto/googleapis/rpc digest to d00831a #1131)
• fix(cron): artifact names and permission for security scanning (fix(cron): artifact names and permission for security scanning #1152)
• chore(deps): update alpine docker tag to v3.23 (chore(deps): update alpine docker tag to v3.23 #1136)
• chore(deps): update go patches (chore(deps): update go patches #1143)
• chore(deps): update module github.com/libp2p/go-libp2p-kad-dht to v0.39.0 (chore(deps): update module github.com/libp2p/go-libp2p-kad-dht to v0.39.0 #1146)
• chore(deps): update helm release postgresql to v18.5.14 (chore(deps): update helm release postgresql to v18.5.14 #1134)
• chore(deps): update module github.com/libp2p/go-libp2p to v0.48.0 (chore(deps): update module github.com/libp2p/go-libp2p to v0.48.0 #1139)
• chore(deps): update dependency astral-sh/uv to v0.11.0 (chore(deps): update dependency astral-sh/uv to v0.11.0 #1137)
• chore(deps): update envoyproxy/envoy docker tag to v1.37 (chore(deps): update envoyproxy/envoy docker tag to v1.37 #1138)
• chore(deps): update quay.io/coreos/etcd docker tag to v3.6.9 (chore(deps): update quay.io/coreos/etcd docker tag to v3.6.9 #1148)
• chore(deps): update alpine:3.21 docker digest to c3f8e73 (chore(deps): update alpine:3.21 docker digest to c3f8e73 #1125)
• chore(deps): update gcr.io/distroless/static:nonroot docker digest to e3f9456 (chore(deps): update gcr.io/distroless/static:nonroot docker digest to e3f9456 #1129)
• chore(deps): update golang:1.26.1-bookworm docker digest to 8e8aa80 (chore(deps): update golang:1.26.1-bookworm docker digest to 8e8aa80 #1130)
• chore(deps): update ghcr.io/grpc-ecosystem/grpc-health-probe docker tag to v0.4.47 (chore(deps): update ghcr.io/grpc-ecosystem/grpc-health-probe docker tag to v0.4.47 #1132)
• chore(deps): update github actions (chore(deps): update github actions #1133)
• chore(deps): update javascript (chore(deps): update javascript #1145)
• chore(deps): update tonistiigi/xx docker tag to v1.9.0 (chore(deps): update tonistiigi/xx docker tag to v1.9.0 #1149)
• chore(deps): update github actions (major) (chore(deps): update github actions (major) #1150)
• chore(deps): update docker.io/bitnami/postgresql docker digest to 6213591 (chore(deps): update docker.io/bitnami/postgresql docker digest to 6213591 #1126)
• fix(renovate): remove api-gen from deps handling (fix(renovate): remove api-gen from deps handling #1147)
• chore(deps): update module github.com/buger/jsonparser to v1.1.2 [security] (chore(deps): update module github.com/buger/jsonparser to v1.1.2 [security] #1124)
• chore(deps): update docker/dockerfile:1 docker digest to 4a43a54 (chore(deps): update docker/dockerfile:1 docker digest to 4a43a54 #1127)
• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 (chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 #1128)
• fix(cron): update cron.yaml to include permissions (fix(cron): update cron.yaml to include permissions #1140)
• fix(ci): include package-lock.json in docker builds to fix sdk e2e tests (fix(ci): include package-lock.json in docker builds to fix sdk e2e tests #1142)
• chore(renovate): add explicit workflow configs (chore(renovate): add explicit workflow configs #1121)
• fix(renovate): resolve buf dependencies (fix(renovate): resolve buf dependencies #1109)
• chore(renovate): update discovery and cache config (chore(renovate): update discovery and cache config #1096)
• ci(dir): extend security scanner to support more tag (ci(dir): extend security scanner to support more tag #1055)
• feat(dir): multiprovider OIDC-based external authorization module (feat(dir): multiprovider OIDC-based external authorization module #1034)
• ci(dir): add renovate bot workflow (ci(dir): add renovate bot workflow #1095)
• fix(importer): update command paths in import-records.yaml to use .bin directory (fix(importer): update command paths in import-records.yaml to use .bin directory #1090)
• feat(dir): amend release commit automatically (feat(dir): amend release commit automatically #1084)
• chore(dir): move deps tasks to repo root (chore(dir): move deps tasks to repo root #1083)
• fix(dir): update image version in readme (fix(dir): update image version in readme #1085)
• chore: update brew formula version (chore(dirctl): update brew formula to v1.1.0 #1082)

Full Changelog: v1.1.0...v1.2.0

Contributors

• @adamtagscherer
• @agntcy-automation
• @akijakya
• @arpad-csepi
• @csirmazbendeguz
• @muscariello
• @paralta
• @ramizpolic
• @tkircsi

---

This discussion was created from the release Release v1.2.0.