Releases: agntcy/dir
Release v1.0.0
🚀 AGNTCY Dir v1.0.0 Release
We are happy to announce the release of Directory v1.0.0, marking a significant
milestone in our commitment to provide a robust and scalable directory service for
publication, exchange, and discovery of information about multi-agentic systems over
a distributed peer-to-peer network.
This release consolidates improvements to the schema, tooling, synchronization mechanisms,
security features, and production deployment setup, ensuring enhanced reliability, better
integration capabilities, and support for a wider range of use cases.
🌟 Key Features
- Capability-Based Discovery: Agents publish structured metadata describing their
functional characteristics as described by the OASF.
The system organizes this information using hierarchical taxonomies, enabling efficient
matching of capabilities to requirements. - Verifiable Claims: While agent capabilities are often subjectively evaluated,
DIR provides cryptographic mechanisms for naming resolution, data integrity and
provenance tracking. This allows users to make informed decisions about agent selection. - Semantic Linkage: Components can be securely linked to create various relationships
like version histories for evolutionary development, collaborative partnerships where
complementary skills solve complex problems, and dependency chains for composite
agent workflows. - Distributed Architecture: Built on proven distributed systems principles, DIR uses
content-addressing for global uniqueness and implements distributed hash tables (DHT)
for scalable content discovery and synchronization across decentralized networks. - Runtime Capabilities: Provides agents the ability to register and discover
at runtime, allowing dynamic adaptation and interaction between agents in live environments. - Tooling and Integration: Provides a suite of command-line tools, SDKs, and APIs
to facilitate interaction with the system, enabling developers to manage Directory
records, node operations, and cross-system interactions programmatically.
Out-of-box integration with exiting OCI registries with full synchronization support
to keep data up-to-date across DIR deployments and networks. - Security and Trust: Incorporates robust security measures including cryptographic
signing, verification of claims, secure communication protocols, and access controls
to ensure the integrity and authenticity of Directory records and nodes. - Live Public Deployment: The Directory service is now live and publicly accessible,
allowing organizations, developers and users to interact with the system in real-world scenarios.
Find more details at agntcy/dir-staging.
Check out the DIR v1.0 Blog Post for an in-depth summary of the DIR v1.0 release,
including the motivation behind the project, key features, and future roadmap.
Full Changelog: v1.0.0-rc.4...v1.0.0
🚀 Getting Started
| Tool | Install | Prerequisite | Usage |
|---|---|---|---|
| dirctl | brew tap agntcy/dir https://github.com/agntcy/dir/brew install dirctl |
- | CLI Documentation |
| Go SDK | go get github.com/agntcy/dir/client |
- | Go SDK Documentation |
| Python SDK | pip install agntcy-dir |
dirctl (sign/verify) | Python SDK Documentation |
| JS/TS SDK | npm install agntcy-dir |
dirctl (sign/verify) | JS/TS SDK Documentation |
| MCP Server | dirctl mcp serve |
dirctl | Directory MCP Server Blog Post MCP Integration Documentation |
| Deployment | - | - | Getting Started |
🤝 Community & Support
🙏 Acknowledgments
Thank you to all contributors who made this release possible! Special thanks to the community for
feedback, bug reports, and feature requests that helped shape this release.
#dir #release #v1.0.0
Release v1.0.0-rc.4
🚀 AGNTCY Dir v1.0.0-rc.4 Release
This maintenance release focuses on signing and verification improvements, registry and Helm deployment refinements, and CI/CD robustness.
🌟 What's New
Signing & Verification
- Local trust chain verification for record signing (#921)
- Extended client options for record signing and verification (#930)
- Improved verification details parsing and verification result widget in the GUI (#932)
Helm & Deployment
- Topology-aware StorageClass support for Zot configuration (#937)
Registry & Zot
- Improved registry URL handling and validation for Zot (#944)
- Fix for resolving latest tag (without slash) instead of release (#934)
CI/CD & Automation
- Push record and validate record GitHub Actions for directory workflows (#935)
- GH token environment for
ghCLI in directory workflows (#939) - Simplified image security scanning GitHub Action (#940)
- Command execution error handling in the import-records workflow (#938)
- Demo-dir workflow token timing fix and removal of demo-dirctl (#928)
Security & Dependencies
- Go 1.25.7 and package version bumps (#945)
- Bitnami PostgreSQL Helm chart 18.2.3 → 18.2.6 (#927)
- Python cryptography dependency update in SDK (#933)
- Go module updates across directory components (#943)
Refinements
What's Changed
- chore(release): update version to v1.0.0-rc.3 by @ramizpolic in #920
- refactor(dir): remove unused OCI annotations by @tkircsi in #923
- feat(sign): switch to local trust chain verification by @ramizpolic in #921
- refactor(ci/demo): fix token timing in demo-dir workflow and remove demo-dirctl by @paralta in #928
- feat(client): extend options for record signing/verification by @ramizpolic in #930
- chore(dir): bump bitnami postgres chart version 18.2.3 -> 18.2.6 by @tkircsi in #927
- chore(dir): add hardcoded expected cid for e2e test by @arpad-csepi in #931
- fix(gui): improve verification details parsing and add verification result widget by @muscariello in #932
- chore(sdk): update python cryptography by @arpad-csepi in #933
- fix(dir): get latest tag without slash instead of release by @arpad-csepi in #934
- feat(helm): topology-aware StorageClass support for Zot config by @tkircsi in #937
- refactor(ci/import): handle command execution errors in import workflow by @paralta in #938
- ci(dir): add gh token env for gh cli by @arpad-csepi in #939
- ci(dir): add push record and validate record GH actions by @adamtagscherer in #935
- chore(ci): simplify image security scanning github action by @ramizpolic in #940
- chore(dir): update go mods by @arpad-csepi in #943
- fix(dir/zot): registry url handling and validation by @paralta in #944
- chore(security): bump go v1.25.7 and package versions by @ramizpolic in #945
- release(dir): prepare v1.0.0 rc.4 by @paralta in #947
Full Changelog: v1.0.0-rc.3...v1.0.0-rc.4
Contributors
GUI v1.0.0
GUI v1.0.0
Release v1.0.0-rc.3
🚀 AGNTCY Dir v1.0.0-rc.3 Release
This maintenance release focuses on runtime capabilities to enable agentic
application usage in live environments, as well as stability improvements
to integration tooling.
🌟 What's New
Runtime Capabilities
- Event-based Docker container discovery with real-time monitoring
- Containerd runtime support for container lifecycle tracking
- Kubernetes workload discovery via CRD-based integration
- gRPC API for querying discovered processes and workloads
- Helm chart and installation scripts for deployment
- CRD (CustomResourceDefinition) for DiscoveredWorkload resources
- ETCD-based storage backend for workload state persistence
Importer Optimizations
- Rate limiting for LLM API calls to prevent quota exhaustion
- Enhanced dry-run functionality to save output records to file for debugging
- Max-steps parameter for model configuration control
Integration Enablement
- Signature verification tool for validating signed records
- Record signature verification support in Flutter UI
- Scheduled MCP import workflow for automated registry population
What's Changed
- feat(dir/importer): rate limiting, debug dry-run and clear session by @paralta in #888
- feat(runtime): add runtime process discovery service by @ramizpolic in #808
- test(dir): add E2E tests for remote name resolution by @adamtagscherer in #895
- feat(ci): add scheduled MCP import workflow by @muscariello in #874
- fix(ci): workflow inputs by @adamtagscherer in #900
- release(dir/helm/runtime/ci): prepare release v1.0.0 by @tkircsi in #901
- feat(mcp): add signature verification tool by @muscariello in #906
- docs(runtime): extend docs around discovery and runtime by @ramizpolic in #903
- chore(deps): bump OASF and oasf-sdk 1.0.0-rc.1 -> 1.0.0 by @akijakya in #908
- fix(gui): restrict mcp write access to agent directory by @muscariello in #902
- fix(runtime): enable oasf resolvers with annotations by @ramizpolic in #910
- feat(mcp,gui): add record signature verification support by @muscariello in #909
- fix(runtime): enable oasf resolvers with annotations by @ramizpolic in #911
- chore(ci): add security scanning for runtime images by @ramizpolic in #912
- release(dir): prepare release v1.0.0 by @tkircsi in #913
- chore(dirctl): update brew formula to v1.0.0 by @build-agntcy in #914
- release(dir): prepare release v1.0.0-rc.3 by @ramizpolic in #919
- feat(sign): propagate signer metadata in verification response by @muscariello in #917
Full Changelog: v1.0.0-rc.2...v1.0.0-rc.3
Release v1.0.0-rc.2
🚀 AGNTCY Dir v1.0.0-rc.2 Release
This maintenance release focuses on SDK enhancements and critical bug fixes for production deployments. v1.0.0-rc.2 builds on the foundation established in rc.1, adding essential naming service capabilities and resolving critical connectivity issues affecting production environments.
🌟 What's New
SDK Enhancements
- Naming service RPCs now available in Python and JavaScript SDKs for domain verification workflows
- Programmatic access to domain verification records via
get_verification_info()(Python) andgetVerificationInfo()(JavaScript)
Production Stability
- Fixed critical Reconciler connectivity issue preventing search indexer from accessing external OCI registries
- Enhanced Helm chart configuration logic to properly handle multi-registry deployments
- Security dependency updates (protobuf 6.33.5)
What's Changed
- feat(sdk): add naming service rpcs to SDKs by @adamtagscherer in #887
- fix(reconciler): prioritize explicit registry address over internal zot service by @paralta in #892
- chore(deps): bump protobuf from 6.32.1 to 6.33.5 in /sdk/examples/example-py by @app/dependabot in #893
- release(dir/helm): prepare release/v1.0.0-rc.2 by @tkircsi in #894
🔧 Key Fixes
Reconciler Zot Connectivity (#892)
Problem: The Reconciler's search indexer was failing with TLS handshake errors when attempting to access external OCI registries (GHCR, Docker Hub). The chart.oci.registryAddress Helm helper was incorrectly forcing the internal Zot service address when the Zot subchart configuration existed, ignoring the explicitly configured external config.store.oci.registry_address.
Impact: Critical for production deployments using external OCI registries. Search indexer tasks failed, preventing records from being searchable.
Fix: Updated Helm template logic to prioritize explicit registry address configuration, ensuring the Reconciler uses the same external registry configuration as the apiserver.
Result: Reconciler now successfully connects to external registries, search indexing works correctly.
📦 Compatibility Matrix
| Component | Version | Compatible With |
|---|---|---|
| dir-apiserver | v1.0.0-rc.2 | oasf v1.0.0-rc.1 |
| dirctl | v1.0.0-rc.2 | dir-apiserver >= v0.6.0 |
| dir-go | v1.0.0-rc.2 | dir-apiserver >= v0.6.0 |
| dir-py | v1.0.0-rc.2 | dir-apiserver >= v0.6.0 |
| dir-js | v1.0.0-rc.2 | dir-apiserver >= v0.6.0 |
| envoy-authz | v1.0.0-rc.2 | dir-apiserver v1.0.0-rc.2 |
| dir-reconciler | v1.0.0-rc.2 | dir-apiserver v1.0.0-rc.2 |
| helm-charts/dir | v1.0.0-rc.2 | dir-apiserver v1.0.0-rc.2 |
| helm-charts/dirctl | v1.0.0-rc.2 | dirctl v1.0.0-rc.2 |
🆙 Upgrade Guide
From v1.0.0-rc.1 to v1.0.0-rc.2
This is a drop-in replacement for v1.0.0-rc.1 with no breaking changes.
Recommended upgrade path:
-
Update Helm values (if needed):
# No configuration changes required # Existing v1.0.0-rc.1 values work with rc.2
-
Update chart version in your ArgoCD/GitOps configuration:
{ "chart_version": "v1.0.0-rc.2" } -
Update image tags in values files:
image: tag: v1.0.0-rc.2
-
Deploy via ArgoCD:
- Sync the application
- Monitor Reconciler logs to verify search indexer connectivity
- Verify SDK naming service functionality if used
SDK Users
Python SDK:
pip install --upgrade agntcy-dir-sdk==1.0.0rc2JavaScript SDK:
npm install @agntcy/dir-sdk@1.0.0-rc.2New Features Available:
# Python - Domain verification
verification_info = client.get_verification_info(domain="example.com")// JavaScript - Domain verification
const verificationInfo = await client.getVerificationInfo({ domain: "example.com" });🐛 Known Issues
None identified in this release.
If you encounter issues, please report them on GitHub Issues.
📝 Full Changelog
Full Changelog: v1.0.0-rc.1...v1.0.0-rc.2
👥 Contributors
- @adamtagscherer
- @paralta
- @tkircsi
- @app/dependabot
Released: 2026-02-02
Previous Release: v1.0.0-rc.1 (2026-01-30)
Release v1.0.0-rc.1
🚀 AGNTCY Dir v1.0.0-rc.1 Release
We're excited to announce the v1.0.0-rc.1 release candidate, marking a major milestone with production-ready authentication, authorization, database scalability, and async operations support. This release transitions Directory to a multi-user platform with enterprise-grade security and performance capabilities.
🌟 What's New
Authentication & Authorization
- Multi-provider authentication via Envoy External Authorization with GitHub OAuth2 and PAT support
- Role-Based Access Control (RBAC) powered by Casbin policy engine
- Dynamic authorization policies with user/organization/role-based permissions
- CLI authentication flows with
dirctl auth login/logout/statuscommands - Server-side signature verification for enhanced security
Database & Scalability
- PostgreSQL as default database (replaces SQLite for production deployments)
- Bitnami PostgreSQL Helm subchart integration with automated credential management
- Reconciler service for async operations with task-based architecture
- Cross-registry sync support (GHCR, Docker Hub, Zot) via regsync task
- Database-backed search indexer for improved query performance
Domain Verification & Compliance
- Domain ownership verification system for publisher trust
- Re-verification service with automated verification storage
- Removal of legacy DNS name verification (replaced with domain ownership)
Developer Experience
- Enhanced CLI with
dirctl pull by nameanddirctl validatecommands --signflag for import command to sign records during import- JavaScript SDK with npm trusted publishers
- Decoupled SDK releases from main CI/CD pipeline
- Abstract OCI registry interface for multi-backend support
GUI & Observability
- Initial Flutter UI implementation with MCP integration
- Google Analytics via Measurement Protocol with runtime GA4 configuration
- Enhanced MCP tools with GitHub authentication documentation
Compatibility
- OASF 1.0.0-rc.1 support across all components
- Updated dependencies including zot, go-tuf/v2 2.4.1, cosign v3.0.4
What's Changed
- feat(dir/dirctl/helm): add Envoy external authorization with multi-provider authentication by @tkircsi in #807
- feat(dir): domain ownership verification by @adamtagscherer in #803
- feat(gui): implement initial flutter ui with mcp integration by @muscariello in #804
- ci(paths): optimize workflow paths to skip non-backend changes by @muscariello in #806
- refactor(dir): move signature verification from client to server by @paralta in #809
- release(dir): prepare v0.6.1 by @paralta in #813
- chore(deps): bump github.com/sigstore/cosign/v3 from 3.0.3 to 3.0.4 in /utils by @app/dependabot in #817
- test(e2e): add initial http for record name validation by @arpad-csepi in #818
- chore(dirctl): update brew formula to v0.6.1 by @build-agntcy in #819
- chore(dir): update versions across the project by @arpad-csepi in #820
- chore(dir): fix security issues by @arpad-csepi in #821
- fix(sdk): update python packages by @arpad-csepi in #824
- feat(dir): re-verification service & verification storage by @adamtagscherer in #826
- fix(cli): unit tests with oasf-server update by @akijakya in #827
- refactor(dir): remove dns name verification by @adamtagscherer in #833
- feat(dir): dynamic policy for authz by @arpad-csepi in #834
- feat(dir): add reconciler service and regsync task for external registry sync by @paralta in #835
- feat(gui): ui/ux improvements for Agent Directory GUI by @vaesposito in #837
- chore(deps): update go-tuf/v2 to v2.4.0 across all modules by @paralta in #838
- chore(dir): update go packages to fix vulns by @arpad-csepi in #839
- feat(dir): dirctl pull by name by @adamtagscherer in #842
- test(gui): improve coverage and fix flaky tests by @muscariello in #843
- feat(dir/helm): implement Casbin-based RBAC for multi-provider authentication by @tkircsi in #845
- feat(deps): update with OASF SDK v0.0.16 by @akijakya in #847
- fix(dir/server/sync): worker authentication with remote directory nodes by @paralta in #848
- feat(dir): add postgresql support by @paralta in #849
- feat(gui): add Google Analytics via Measurement Protocol by @muscariello in #850
- docs(mcp): add GitHub authentication setup with PAT recommendation by @tkircsi in #853
- fix(authz): resolve federation e2e authz config by @ramizpolic in #854
- fix(ci): fix release upload permissions and macOS app signing by @muscariello in #855
- feat(dir/importer): add --sign flag to import command by @paralta in #858
- fix(ci): robust macOS signing, mcp-server perms, and release upload by @muscariello in #859
- fix(importer): mandatory enrichment, mcp fixes by @akijakya in #860
- fix(ci): robust macOS signing and release upload by @muscariello in #861
- fix(ci): release upload paths and signature verification by @muscariello in #862
- fix(ci): post-release tag filtering and robust windows build by @muscariello in #864
- fix(sdk): resolve python versions for SDK tests by @ramizpolic in #865
- fix(gui): handle mcp-server.exe extension on Windows by @muscariello in #866
- chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.4.0 to 2.4.1 in /utils by @app/dependabot in #868
- chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 in /sdk/dir-js by @app/dependabot in #869
- feat(dir/reconciler): add indexer reconciler task for search enablement by @paralta in #875
- feat(apiserver): update database configuration to default to PostgreSQL by @paralta in #876
- chore(deps): bump zot by @paralta in #879
- fix(gui): allow runtime configuration of GA4 analytics by @muscariello in #883
- feat(deps): add OASF 1.0.0-rc.1 support by @akijakya in #884
- fix(reconciler): docker warning with regsync version by @paralta in #885
- release(dir/cli): prepare v1.0.0-rc.1 by @tkircsi in #886
- feat(sdk): add naming service rpcs to SDKs by @adamtagscherer in #887
- fix(ci): skip change detection for tag pushes to ensure releases run by @paralta in #889
- fix(ci): no duplicate cli upload during releases by @tkircsi in #891
New Contributors
- @vaesposito made their first contribution in #837
Full Changelog: v0.6.0...v1.0.0-rc.1
Contributors
Release v0.6.1
What's Changed
- chore(dirctl): update brew formula to v0.6.0 by @build-agntcy in #789
- fix(dir/sdk): fix JS SDK example and add example validation to CI by @paralta in #794
- feat(dir/server): validation configuration by @akijakya in #785
- ci(paths): optimize workflow paths to skip non-backend changes by @muscariello in #806
- feat(release): migrate js sdk to npm trusted publishers and decouple sdk releases from ci by @paralta in #800
- feat(cli): dirctl validate by @akijakya in #793
- refactor(server/store): abstract oci registry interface by @paralta in #801
- feat(gui): implement initial flutter ui with mcp integration by @muscariello in #804
- chore(deps): bump github.com/sigstore/cosign/v3 from 3.0.3 to 3.0.4 in /utils by @dependabot[bot] in #817
- release(dir): prepare v0.6.1 by @paralta in #813
Full Changelog: v0.6.0...v0.6.1
Release v0.6.0
🚀 AGNTCY Dir v0.6.0 Release
This release consolidates improvements from v0.5.1 through v0.5.7, focusing on operational
reliability, integration enhancements, and cross-registry support, including:
🌟 What's New
Tooling & Integration
- Enhanced local search implementation with wildcard support
- Configurable server-side OASF validation with auto-deployment support
- Extended MCP tools for record enrichment and import/export workflows
- Domain-based enrichment capabilities for importer service
- Support across different OCI Registry storage backends
Observability & Operations
- Enhanced SPIRE support for reliability and multi-SPIRE deployments
- Prometheus metrics with ServiceMonitor and gRPC interceptors
What's Changed
- feat(mcp): tools for importer enricher by @akijakya in #680
- chore(brew): update brew formula to v0.5.0 by @ramizpolic in #684
- chore(dir): update readme versions by @arpad-csepi in #685
- feat(dir/helm): add dnsNameTemplates support to DIR API by @tkircsi in #681
- feat(dir/helm): enable external secret config for api server and zot by @tkircsi in #691
- feat(importer): use oasf-sdk/translator by @akijakya in #624
- release(dir): prepare release v0.5.1 by @tkircsi in #695
- feat(importer): enrichment with domains by @akijakya in #696
- chore(dirctl): update brew formula to v0.5.1 by @github-actions[bot] in #702
- feat(mcp): add import/export tools and prompts by @akijakya in #705
- fix(brew): use brew updater after release is public by @arpad-csepi in #686
- feat(dir/helm): add pvc configuration to sqlite and fix unit tests by @tkircsi in #713
- release(dir): prepare release v0.5.2 by @tkircsi in #716
- chore(dirctl): update brew formula to v0.5.2 by @build-agntcy in #717
- fix(dir/helm): add tmp volume when rootfs is readonly by @tkircsi in #718
- feat(sdk): add missing grpc calls to sdk by @arpad-csepi in #709
- release(dir): prepare release v0.5.2 by @tkircsi in #719
- feat(dir/helm): add Recreate deployment strategy to prevent PVC lock conflicts by @tkircsi in #720
- release(dir/helm): release v0.5.2 by @tkircsi in #721
- feat(dir/dirctl): add SPIFFE CSI driver support and auto home-dir volume by @tkircsi in #724
- chore(dirctl): update brew formula to v0.5.2 by @build-agntcy in #723
- release(dir/helm): prepare release/v0.5.3 by @tkircsi in #729
- chore(dirctl): update brew formula to v0.5.3 by @build-agntcy in #731
- chore(dir): turn off go workspace for go toolchain by @arpad-csepi in #732
- fix(client): add retry logic for X509-SVID availability in SPIRE auth by @tkircsi in #735
- release(client): prepare release/v0.5.4 by @tkircsi in #736
- ci(dir): fix no unit test in CI by @arpad-csepi in #733
- chore(dirctl): update brew formula to v0.5.4 by @build-agntcy in #738
- fix(dir): add cleanup and sudo to spire task by @arpad-csepi in #734
- feat(dir): add workflow for building images and charts from feature branches by @tkircsi in #739
- fix(dir): reusable build workflow use the component tag if presented by @tkircsi in #742
- chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /server by @dependabot[bot] in #744
- chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 in /sdk/dir-js by @dependabot[bot] in #745
- feat(mcp, dir/server): add OASF API validation by @akijakya in #711
- feat(importer): prioritize dedup checker by @akijakya in #743
- feat(dir): add job to fetch latest release version for container security scan workflow by @paralta in #746
- fix(client): fix SPIFFE X509-SVID retry logic for timing issues by @tkircsi in #741
- fix(dir): release/v0.5.5 by @tkircsi in #750
- chore(dirctl): update brew formula to v0.5.5 by @build-agntcy in #752
- ci(dir): avoid no space left in runner by @arpad-csepi in #749
- feat(dir): add basic prometheus metrics by @tkircsi in #757
- ci(dir): use fixed code for avoid pr label duplication by @arpad-csepi in #755
- refactor(dir): local search by @adamtagscherer in #747
- chore(dir/server): update oasf api validation envs and remaining invalid records by @akijakya in #754
- refactor(dir): remove search subcommands by @adamtagscherer in #759
- release(dir/client): prepare release/v0.5.6 by @tkircsi in #760
- chore(dirctl): update brew formula to v0.5.6 by @build-agntcy in #763
- chore(deps): update zot and fix codeql workflow warning by @paralta in #761
- chore(deps): bump github.com/sigstore/cosign by @paralta in #773
- feat(helm/dir): add OASF configuration by @akijakya in #769
- fix(helm/dir/dirctl): add className field to ClusterSPIFFEID resources by @tkircsi in #774
- release(helm/dir/dirctl): prepare release/v0.5.7 by @tkircsi in #775
- release(helm/dir/dirctl): prepare release v0.5.7 by @tkircsi in #776
- chore(dirctl): update brew formula to v0.5.7 by @build-agntcy in #778
- chore(ci): add helm linting to lint task by @paralta in #780
- chore(cleanup): remove outdated components by @ramizpolic in #783
- release(dir): prepare release v0.6.0 by @ramizpolic in #787
New Contributors
- @build-agntcy made their first contribution in #717
Full Changelog: v0.5.0...v0.6.0
Release v0.5.7
🚀 AGNTCY Dir v0.5.7 Release
We're excited to announce the release of AGNTCY Dir v0.5.7, a patch release that fixes a critical SPIRE integration bug and adds OASF configuration support for improved API validation.
🌟 What's New
Critical SPIRE Fix
- Added mandatory
classNamefield to ClusterSPIFFEID resources in bothapiserveranddirctlHelm charts - Critical fix for SPIRE authentication failures, especially when SPIRE and workloads share the same namespace
- Fixes issue #770 where workloads failed to authenticate due to missing className
OASF Configuration Support
- Added OASF configuration support for API validation settings in Helm chart
- OASF server deployment option with directory for local development and testing
- Enhanced API validation capabilities with configurable OASF settings
Dependencies & Maintenance
- Updated github.com/sigstore/cosign dependency for improved security
- Updated zot dependency for better OCI registry support
- Fixed CodeQL workflow version mismatch issue
CI/CD Improvements
- Automated Homebrew formula update
What's Changed
- fix(helm/dir/dirctl): add className field to ClusterSPIFFEID resources by @tkircsi in #774
- feat(helm/dir): add OASF configuration by @ajaky in #769
- chore(deps): bump github.com/sigstore/cosign by @paralta in #773
- chore(deps): update zot and fix codeql workflow warning by @paralta in #761
- chore: update brew formula version by @github-actions in #763
Full Changelog: v0.5.6...v0.5.7
Release v0.5.6
🚀 AGNTCY Dir v0.5.6 Release
We're excited to announce the release of AGNTCY Dir v0.5.6, a patch release that introduces Prometheus metrics for observability, improves search functionality, and updates OASF API validation configuration.
🌟 What's New
Observability & Monitoring
- Prometheus metrics support with gRPC interceptors
- ServiceMonitor resource for Kubernetes deployments
- Comprehensive metrics E2E tests
- HTTP metrics endpoint for scraping
Search Improvements
- Added
--formatflag to search command for flexible output formatting - Improved local search implementation with better performance
- Enhanced search query handling and testing
Configuration Updates
- Updated OASF API validation environment variable names for clarity
- Aligned server configuration with environment variable naming
- Updated remaining invalid OASF module references in test data
CI/CD Improvements
- Fixed PR label duplication issues
- Addressed disk space problems in CI runners
- Improved build stability and reliability
Dependencies
- Automated Homebrew formula update
What's Changed
- feat(dir): add basic prometheus metrics by @tkircsi in #757
- refactor(dir): local search by @adamtagscherer in #747
- refactor(dir): remove search subcommands by @adamtagscherer in #759
- chore(dir/server): update oasf api validation envs and remaining invalid records by @ajaky in #754
- ci(dir): use fixed code for avoid pr label duplication by @arpad-csepi in #755
- ci(dir): avoid no space left in runner by @arpad-csepi in #749
- chore: update brew formula version by @tkircsi in #752
- release(dir/client): prepare release/v0.5.6 by @tkircsi in #760
Full Changelog: v0.5.5...v0.5.6