v1.18.6

Changelog

• cc61ea6 Lock file maintenance (#5574)
• 7f592b8 Run go mod tidy
• b80ff7d Update AWS SDK (#5693)
• 252bdab Update Azure SDK to v1.14.0 (#5695)
• d130f1a Update Docker Images (#5678)
• 309edb2 Update Docker Images to v3.24.0 (#5565)
• 8900dbc Update GCP SDK (#5566)
• 67e5792 Update GCP SDK (#5699)
• 3d883ca Update Ginkgo test utils (#5700)
• 34b372e Update GitHub Actions (major) (#5562)
• 81c01b5 Update GitHub Actions to v4.0.1 (#5542)
• 634988e Update Go (#5559)
• 10f2abd Update Go (#5687)
• 5b16958 Update Observability modules to v0.47.0 (#5705)
• cf532d6 Update River Queue to v0.10.0 (#5707)
• b437ff9 Update Terraform (#4963)
• 89d9d03 Update github.com/openrdap/rdap digest to 8fa7e50 (#5540)
• 45b47b4 Update kubernetes packages to v0.36.2 (#5689)
• fcb3315 Update module github.com/google/go-github/v84 to v88 (#5583)

v1.18.5

Changelog

• 33fcc62 ENG-5024: Enforce slug references in deviation acknowledgements (#5506)
• 23c0424 Run go mod tidy
• 7144acf chore(deps): lock file maintenance (#4977)
• 6bc79ef chore(deps): update docker images to v1.26.4 (#5436)
• c16a752 fix(deps): update aws sdk (#5440)
• b0339a9 fix(deps): update azure sdk to v1.22.0 (#5446)
• b9299c0 fix(deps): update gcp sdk (#5450)
• a3a3b26 fix(deps): update go (#5451)
• 5fbd050 fix(deps): update kubernetes packages to v0.32.0 (#5454)
• 25f63b5 fix(deps): update nats modules (#5441)
• e9ba1b3 fix(deps): update observability modules (#5455)
• 0a01393 fix(deps): update river queue (#5456)
• 8f46213 refactor(brent): move ResolvePrincipalID into principals aggregate (#5462)

v1.18.4

Changelog

• 16d670f Reduce trace span noise: HTTP semconv health probes and revlink Neo4j spans (#5323)
• 616ea4f Run go mod tidy
• d51be8f [ENG-4615] Add MCP OAuth proxy and Cursor authorization completion page (#5305)
• 61ed031 chore(deps): update dependency goreleaser/goreleaser to v2.16.0 (#5280)
• d7966ee chore(deps): update github actions (#5268)
• cc9ea21 feat(brent): dedicated Auth0 tenant pair and operator scope split (BRENT-190) (#5247)
• ef80571 fix(aws-source): redact Lambda environment variables from SDP attributes (#5358)
• a75b5c4 fix(azure): exclude Key Vault secret value from SDP attributes (ENG-4863) (#5359)
• 4a55bbc fix(deps): update aws sdk (#5274)
• 4b82fe3 fix(deps): update azure sdk (#5276)
• d2912d6 fix(deps): update gcp sdk (#5290)
• 337429e fix(deps): update github.com/gocarina/gocsv digest to c264028 (#5261)
• b2f8cab fix(deps): update go (#5291)
• b9c1014 fix(discovery): inline health-probe middleware to unblock cli sync (#5405)
• f259718 fix(gcp): exclude service account key material from SDP attributes (ENG-4762) (#5365)
• 6d47a3d fix(security): remove committed Auth0 dev secrets (ENG-4866) (#5361)

v1.18.2

Changelog

• f9ce74c Eliminate redundant item/edge storage on blast-radius hot paths (#5057)
• 647f2df Feat, initial migration to using principals (#5129)
• c924a04 Run go mod tidy
• 1019d27 Update AWS SDK (#5138)
• 9334df5 Update AWS SDK (#5147)
• 158ac57 Update GCP SDK (#5145)
• a26c438 Update Ginkgo test utils (#5148)
• 5154d6c Update Go (#5150)
• 872971c Update Go (#5159)
• 99bdd14 Update River Queue (#5158)
• 3861f10 Update kubernetes packages (#4956)
• f78e2b6 Update module github.com/nats-io/nats-server/v2 to v2.14.1 (#5142)
• 27cb178 Version pinning (#5047)
• 660ab4e [ENG-4231] Drop cel-go replace directive and upgrade to v0.28.1 (#5065)
• 54a3423 [ENG-4317] Retire team-members.md and migrate downstream consumers (#5178)
• e21be4f [ENG-4371] Reject empty account_name custom claim in ExtractAccount (#5068)
• 8a32dd7 [ENG-4386] Add depot-usage CLI and April→May spend investigation (#5083)
• 346cf25 feat, riverqueue ui for brent and auth wiring (#5003)
• 51f7214 fix(deps): update aws sdk (#5035)
• 7b546c4 fix(deps): update go (#5024)
• a1f3f97 fix(deps): update module github.com/slack-go/slack to v0.23.1 [security] (#5022)
• d15aef9 fix: close SSRF gaps in the HTTP adapter (ENG-4205) (#5046)

v1.18.1

Changelog

• 1ed6387 Lock file maintenance (#4751)
• 7991553 Run go mod tidy
• 272581d Update AWS SDK (#4941)
• d42522f Update Docker Images (#4936)
• 1a9bacd Update GCP SDK (#4952)
• b48f757 Update Ginkgo test utils (#4938)
• 5c3ac54 Update Go (#4939)
• 0829df6 Update NATS modules (#4960)
• 1a844a3 Update River Queue to v0.35.1 (#4962)
• 7b26a9d Update module github.com/getsentry/sentry-go to v0.46.2 (#4957)
• 6c0ef6a Update module github.com/overmindtech/otelpgx to v0.10.0 (#4958)
• 7c55cde WA5b: Slack Events API receiver — parse + dispatch to Translator (#4974)
• c1b8f98 [ENG-4119] Consume otelpgx fork via go.mod replace (#4892)
• 3414505 refactor(auth): extract WithAnyScope into go/auth package (#4917)

v1.18.0

Changelog

• 01aca8e CLI: Support multiple knowledge file directories (#4870)
• 34f618f Enhance Azure integration tests with SQL Server credentials and setup checks (#4831)
• 0fa7a39 Fix ELB DescribeTags batching (#4841)
• c4fae77 Run go mod tidy
• c921ef0 [ENG-4069] Reclaim heap between change-analysis jobs and shrink blast-radius allocations (#4866)
• 1c3e024 [ENG-4083] Bump aws-sdk-go-v2 to v1.41.7 (Snyk hygiene) (#4873)
• 0b7703b [ENG-4088] Add SLSA build-provenance attestations and SPDX SBOMs to CLI releases (#4883)
• 17350ee fix(deps): update aws sdk (#4884)

v1.17.8

Changelog

• 7ce82d8 Eng 3456 fix azure integration test federated identity failure (#4820)
• f09ffdc Lock file maintenance (#4712)
• 908ac0f Run go mod tidy
• de1f845 Update AWS SDK (#4727)
• 375a2c9 Update AWS SDK (#4809)
• 12d62ab Update Docker Images (#4730)
• db35b0b Update GCP SDK (#4741)
• e650116 Update Go (#4732)
• a4f8790 Update NATS modules (#4737)
• b4cbebd Update dependency goreleaser/goreleaser to v2.15.3 (#4729)
• c7c7c1b Update dependency goreleaser/goreleaser to v2.15.4 (#4811)
• 6408e10 Update kubernetes packages (#4734)
• 3c5d4dc Update module github.com/Azure/azure-sdk-for-go/sdk/azcore to v1.21.1 (#4744)
• a00dd24 Update module github.com/getsentry/sentry-go to v0.45.1 (#4736)
• 457decc Update module github.com/jackc/pgx/v5 to v5.9.2 [SECURITY] (#4796)
• 1c83ac1 [ENG-3936] Stop dropping OTel batches at otelcol-node (#4805)
• 45d64ec feat(deploy): AWS provider v6 and module upgrades (ENG-3804) (#4747)
• e38ec3b feat: Phase 1 brentdb infrastructure (ENG-3834) (#4763)

v1.17.7

Changelog

• c294968 (feat) new icons for PR markdown (#4710)
• 6dff1c3 Create Azure adapter: MaintenanceMaintenanceConfiguration (#4537)
• 48fd2eb Create Azure adapter: NetworkVirtualNetworkGatewayConnection (#4543)
• 93061bc Force upgrade of github.com/go-git/go-git to v5.17.1 for security fix (#4699)
• 505f422 Instrument brent-be LLM calls with OTel GenAI semantic conventions (#4689)
• 274257f Run go mod tidy
• 8641120 [ENG-3665] Fix AWS source dying when a single region times out (#4670)
• 24a145c [ENG-3671] Remove outage tracker service (#4651)
• 0cd6a9e [ENG-3715] Fix ExecuteQuery responses channel close race (#4684)
• 98d85d4 [ENG-3750] Pin Docker image tags and modernise Renovate config (#4701)
• c1b2877 chore(deps): update github actions (major) (#4660)
• f610f8b chore(deps): update terraform (#4632)
• 8683f66 discovery: fold first QueryError per Execute span (Honeycomb cost) (#4645)
• 4fa45c5 feat(customermcp): Phase 3 — Infrastructure Context Resources and Inventory Tools (#4597)
• ffb906a fix(deps): update go (#4628)
• aa354b3 fix(deps): update go (#4643)
• 249a3cf fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 6f92a3b (#4630)
• a94e2d7 fix: add go/audit package to Copybara sync for CLI and terraform-prov… (#4588)
• 87a1f5f refactor: consolidate MCP OAuth handlers and add Area51 DCR support (#4679)

v1.17.6

Changelog

• 09e8048 Blind Spots Phase 2: api-server shared middleware builder + global otelhttp (#4510)
• 054b78b Check Run Settings UI + Opt-In Gate (ENG-3422) (#4508)
• c9f6a6a Create Azure adapter: AuthorizationRoleDefinition (#4541)
• 7772854 Create Azure adapter: BatchBatchPrivateEndpointConnection (#4532)
• 18e88f8 Create Azure adapter: DBforPostgreSQLFlexibleServerAdministrator (#4534)
• 98b7df8 Create Azure adapter: DBforPostgreSQLFlexibleServerVirtualEndpoint (#4533)
• a740e34 Create Azure adapter: ElasticSanVolume (#4535)
• c715dfc Create Azure adapter: ManagedIdentityFederatedIdentityCredential (#4531)
• b13ef0b Create Azure adapter: NetworkIPGroup (#4536)
• 380ba20 Create Azure adapter: NetworkLocalNetworkGateway (#4529)
• 727088a Create Azure adapter: NetworkNetworkInterfaceIPConfiguration (#4542)
• 51b06a4 Create Azure adapter: NetworkNetworkWatcher (#4530)
• 87bc65c Create Azure adapter: NetworkPrivateLinkService (#4538)
• cb7843a Create Azure adapter: OperationalInsightsWorkspace (#4540)
• 95618cc Create Azure adapter: SQLServerFailoverGroup (#4539)
• 8e7cc00 Create Azure adapter: SQLServerKey (#4544)
• b24df06 Remove auto-tagging timeline entry (ENG-2436) (#4512)
• cfcbeee Run go mod tidy
• ae9bf73 [ENG-3408] fix: delete Auth0 user on Area51 user/account deletion (#4484)
• 996528a [ENG-3584] WinGet: ReleaseNotesUrl only; drop embedded changelog (#4584)
• 05da71f chore(deps): update dependency goreleaser/goreleaser to v2.15.2 (#4560)
• ba6bb63 chore(deps): update terraform (#4564)
• 3bb1bb7 feat(otel): replace cache span duration filter with probabilistic sampler (#4572)
• ade289a feat: add benchmark compare command for side-by-side model/prompt (#4493)
• 2a6fae7 feat: delete GitHub App installation when disabling integration (#4496)
• 81dfcb5 fix(deps): update go (#4565)
• 18d2595 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 (#4558)
• 5054441 fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (#4568)
• 0bc56ae fix(deps): update otel to v1.43.0 (#4573)
• f94d0c9 fix: audit middleware logs after auth to capture identity fields (#4502)
• 2da8833 fix: reconnect orphan otelhttp spans in heartbeat and init health check (#4556)
• 3a5f50e fix: reduce Honeycomb column bloat from otellogrus and dynamic span attributes (#4481)
• cfb2309 refactor: Dockerfile build optimizations for Depot caching (#4575)

v1.17.3

Changelog

• 361e860 Enhance Azure integration tests with automatic remediation for ghost resource conflicts (#4389)
• d09ef00 GitHub Webhook Lifecycle Events (deleted / suspend / unsuspend) (#4432)
• e58d4b5 Run go mod tidy
• 9a52b35 [ENG-3353] Add GitHub App Check Runs for risk analysis results (#4417)
• 5fee410 [ENG-3365] feat: area51 export-archive with host trust validation (#4440)
• a5a21f1 [ENG-3365] refactor: extract CLI auth logic to shared go/cliauth package (#4438)
• 02ad913 [ENG-3461] fix: bump buger/jsonparser to v1.1.2 (CVE-2026-32285) (#4478)
• c10ac12 chore(deps): update terraform (#4456)
• ae7d725 chore: move oql-prototype into tools/ and integrate with monorepo (#4439)
• e4ccfaa feat(azure): Add DBforPostgreSQLFlexibleServerReplica adapter (#4416)
• 18ca9c2 feat(azure): add NetworkLoadBalancerBackendAddressPool adapter (#4393)
• 434db05 feat(azure): add SQLDatabaseSchema adapter (#4415)
• 65fc163 feat: Add Azure adapter for DBforPostgreSQLFlexibleServerConfiguration (#4413)
• 7ebdf6e feat: add Azure NetworkLoadBalancerProbe adapter (#4402)
• 17ad6ef fix(deps): update go (#4433)