v1.17.7

Changelog

• c294968 (feat) new icons for PR markdown (#4710)
• 6dff1c3 Create Azure adapter: MaintenanceMaintenanceConfiguration (#4537)
• 48fd2eb Create Azure adapter: NetworkVirtualNetworkGatewayConnection (#4543)
• 93061bc Force upgrade of github.com/go-git/go-git to v5.17.1 for security fix (#4699)
• 505f422 Instrument brent-be LLM calls with OTel GenAI semantic conventions (#4689)
• 274257f Run go mod tidy
• 8641120 [ENG-3665] Fix AWS source dying when a single region times out (#4670)
• 24a145c [ENG-3671] Remove outage tracker service (#4651)
• 0cd6a9e [ENG-3715] Fix ExecuteQuery responses channel close race (#4684)
• 98d85d4 [ENG-3750] Pin Docker image tags and modernise Renovate config (#4701)
• c1b2877 chore(deps): update github actions (major) (#4660)
• f610f8b chore(deps): update terraform (#4632)
• 8683f66 discovery: fold first QueryError per Execute span (Honeycomb cost) (#4645)
• 4fa45c5 feat(customermcp): Phase 3 — Infrastructure Context Resources and Inventory Tools (#4597)
• ffb906a fix(deps): update go (#4628)
• aa354b3 fix(deps): update go (#4643)
• 249a3cf fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 6f92a3b (#4630)
• a94e2d7 fix: add go/audit package to Copybara sync for CLI and terraform-prov… (#4588)
• 87a1f5f refactor: consolidate MCP OAuth handlers and add Area51 DCR support (#4679)

v1.17.6

Changelog

• 09e8048 Blind Spots Phase 2: api-server shared middleware builder + global otelhttp (#4510)
• 054b78b Check Run Settings UI + Opt-In Gate (ENG-3422) (#4508)
• c9f6a6a Create Azure adapter: AuthorizationRoleDefinition (#4541)
• 7772854 Create Azure adapter: BatchBatchPrivateEndpointConnection (#4532)
• 18e88f8 Create Azure adapter: DBforPostgreSQLFlexibleServerAdministrator (#4534)
• 98b7df8 Create Azure adapter: DBforPostgreSQLFlexibleServerVirtualEndpoint (#4533)
• a740e34 Create Azure adapter: ElasticSanVolume (#4535)
• c715dfc Create Azure adapter: ManagedIdentityFederatedIdentityCredential (#4531)
• b13ef0b Create Azure adapter: NetworkIPGroup (#4536)
• 380ba20 Create Azure adapter: NetworkLocalNetworkGateway (#4529)
• 727088a Create Azure adapter: NetworkNetworkInterfaceIPConfiguration (#4542)
• 51b06a4 Create Azure adapter: NetworkNetworkWatcher (#4530)
• 87bc65c Create Azure adapter: NetworkPrivateLinkService (#4538)
• cb7843a Create Azure adapter: OperationalInsightsWorkspace (#4540)
• 95618cc Create Azure adapter: SQLServerFailoverGroup (#4539)
• 8e7cc00 Create Azure adapter: SQLServerKey (#4544)
• b24df06 Remove auto-tagging timeline entry (ENG-2436) (#4512)
• cfcbeee Run go mod tidy
• ae9bf73 [ENG-3408] fix: delete Auth0 user on Area51 user/account deletion (#4484)
• 996528a [ENG-3584] WinGet: ReleaseNotesUrl only; drop embedded changelog (#4584)
• 05da71f chore(deps): update dependency goreleaser/goreleaser to v2.15.2 (#4560)
• ba6bb63 chore(deps): update terraform (#4564)
• 3bb1bb7 feat(otel): replace cache span duration filter with probabilistic sampler (#4572)
• ade289a feat: add benchmark compare command for side-by-side model/prompt (#4493)
• 2a6fae7 feat: delete GitHub App installation when disabling integration (#4496)
• 81dfcb5 fix(deps): update go (#4565)
• 18d2595 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 (#4558)
• 5054441 fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (#4568)
• 0bc56ae fix(deps): update otel to v1.43.0 (#4573)
• f94d0c9 fix: audit middleware logs after auth to capture identity fields (#4502)
• 2da8833 fix: reconnect orphan otelhttp spans in heartbeat and init health check (#4556)
• 3a5f50e fix: reduce Honeycomb column bloat from otellogrus and dynamic span attributes (#4481)
• cfb2309 refactor: Dockerfile build optimizations for Depot caching (#4575)

v1.17.3

Changelog

• 361e860 Enhance Azure integration tests with automatic remediation for ghost resource conflicts (#4389)
• d09ef00 GitHub Webhook Lifecycle Events (deleted / suspend / unsuspend) (#4432)
• e58d4b5 Run go mod tidy
• 9a52b35 [ENG-3353] Add GitHub App Check Runs for risk analysis results (#4417)
• 5fee410 [ENG-3365] feat: area51 export-archive with host trust validation (#4440)
• a5a21f1 [ENG-3365] refactor: extract CLI auth logic to shared go/cliauth package (#4438)
• 02ad913 [ENG-3461] fix: bump buger/jsonparser to v1.1.2 (CVE-2026-32285) (#4478)
• c10ac12 chore(deps): update terraform (#4456)
• ae7d725 chore: move oql-prototype into tools/ and integrate with monorepo (#4439)
• e4ccfaa feat(azure): Add DBforPostgreSQLFlexibleServerReplica adapter (#4416)
• 18ca9c2 feat(azure): add NetworkLoadBalancerBackendAddressPool adapter (#4393)
• 434db05 feat(azure): add SQLDatabaseSchema adapter (#4415)
• 65fc163 feat: Add Azure adapter for DBforPostgreSQLFlexibleServerConfiguration (#4413)
• 7ebdf6e feat: add Azure NetworkLoadBalancerProbe adapter (#4402)
• 17ad6ef fix(deps): update go (#4433)

v1.17.2

Changelog

• fa02457 Eng 3205 phase 3 cursor cloud agent execution with credentials (#4339)
• 6b3ceb2 Fix all azure integration tests (#4367)
• 468ba73 Otel SDK span loss (#4286)
• 2b8d560 Pin GoReleaser version to v2.14.3 in all workflows (#4333)
• 529282b Run go mod tidy
• 620321e [ENG-3154] Add self-review step to Azure adapter skill and validate with BatchApplicationPackage adapter (#4287)
• 1549482 [ENG-3222] Add GCP Dataflow Job adapter with comprehensive link rules (#4302)
• 46986bc [ENG-3227] Add Dataflow aggregated LIST support (#4306)
• 136aa43 [ENG-3233] Phase 1: GitHub App Installation Requests — Schema, Config, and Plumbing (#4312)
• 3afb1f4 [ENG-3281] feat(api-server): DB-backed state parameter for GitHub App install flow (#4338)
• 074ddba chore(deps): update terraform (#4352)
• 84e86cb feat: Add Dockerfile for snapshot source (ENG-3240) (#4331)
• 0da82af feat: Implement all-locations LIST support for 8 GCP adapters (#4305)
• 2184202 feat: add --no-ping flag to skip health check in inject-secrets (#4342)
• 151278d feat: add Azure DBforPostgreSQL Flexible Server Backup adapter (#4318)
• 6413229 feat: add Azure NetworkFlowLog adapter (#4319)
• 0090692 feat: add Azure NetworkLoadBalancerFrontendIPConfiguration adapter (#4322)
• 91a4565 feat: rename SDP proto fields for naming consistency (non-persisted) (#4300)
• 2f28f5a fix(deps): update go (#4353)
• 1cc70b1 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to d00831a (#4348)
• f617cc2 fix(deps): update module github.com/modelcontextprotocol/go-sdk to v1.4.1 [security] (#4347)
• 17d8c78 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#4328)
• 2ab3877 refactor(sdpcache): restructure cache package into focused, testable layers (#4175)

v1.17.1

Changelog

• ecf8638 (maint) rename StoreError for caching to StoreUnavailableItem (#4274)
• 2118898 ENG-3061 Risk feedback backend (#4208)
• bce682c Eng 3140 phase 1 single adapter integration test pr (#4281)
• a12b067 Run go mod tidy
• 3f6838e chore(deps): update dependency golangci/golangci-lint to v2.11.3 (#4261)
• 8e1ba83 chore(deps): update terraform (#3954)
• 5b983a6 fix(deps): update go (#4260)
• 1bc2675 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 84a4fc4 (#4253)

v1.17.0

Changelog

• 0b1566c ENG-2804 add webflow changelog webhook handler to api server (#4189)
• 3eebe94 ENG-3047 Phase 1 — UTM Attribution on External Links (#4214)
• 7109c15 Eng 3006 create an adapter for elasticsanvolumegroup (#4219)
• 7ec62f2 Eng 3123 cli action comment wait (#4245)
• fcf863c GitHub library upgrades (#4200)
• 002e7aa Run go mod tidy
• 846e7f1 [ENG-3089] Relax bbolt cache durability to fix goroutine pileup (#4221)
• 146168a [ENG-3098] Phase 1: Backend -- Accumulate Partial Plans (#4233)
• 76cb5ad [ENG-3104] Add --no-start flag to submit-plan and new start-analysis command (#4229)
• 55b2fd3 [ENG-3113] GitHub App PR commenting for change analysis results (#4231)
• b97cda1 feat: add RFC 9728 resource_metadata to MCP 401 responses (#4234)
• 53d9a0c feat: create Elastic SAN volume snapshot adapter (#4209)
• f5195ba feat: implement ComputeDiskAccessPrivateEndpointConnection adapter (#4217)
• 2aa632f feat: implement ElasticSanPool adapter (#4218)
• 8c9d23b feat: implement NetworkDefaultSecurityRule adapter (#4216)
• cb2b298 fix(deps): update module github.com/auth0/go-jwt-middleware/v2 to v3 (#4145)
• 9f38897 fix: pin Alpine to 3.23.3 and upgrade zlib to remediate CVE-2026-22184 (#4193)
• 4bb2b36 maint, add a BUGBOT rule to keep go.mod clean (#4198)

v1.16.5

Changelog

• 0f4ec73 Add Azure DNS Record Sets Client and Adapter Implementation (#4108)
• d7930a1 Add Azure Gallery Applications Client and Adapter (#3986)
• e1bffef Add Azure Key Vault Key Client and Adapter (#4042)
• 1a8fd6c Add Azure Private Endpoint Client and Adapter (#3998)
• 16ecef0 Add Azure SQL Server Firewall Rule Client and Adapter (#3989)
• 8325181 Add Azure SQL Server Virtual Network Rule Client and Adapter (#4024)
• daeaef9 Add Azure Security Rules Client and Adapter (#4021)
• bd0df2f Add Azure Storage Encryption Scope Client and Adapter (#4014)
• 5904902 Add Azure Virtual Network Peerings Client and Adapter (#4016)
• 5ad0d8d Add Azure documentation for configuration and category (#4015) (#4017)
• 00808d4 Add PostgreSQL Flexible Server Firewall Rule Client and Adapter (#4040)
• b4bd26b Add SQL Elastic Pool Client and Adapter (#4050)
• 08cae93 Add SQL Server Private Endpoint Connection Adapter and Tests (#4090)
• 1ae072a Add a CI check for go fix (#4023)
• cf7f0a8 Area51 snapshot JSON format (#4075)
• b1c0766 Blast propagation documentation (#3979)
• 825f4a2 CI updates and outage-tracker db test fix (#4045)
• 3cfd55f ENG-2778 update and automate outdated screenshots and instructions on docs (#4064)
• 41a5145 Eng 2204 create microsoftnetworkprivatednszones adapter (#4111)
• e8293cd Eng 2435 create networksubnet adapter (#3978)
• 3098108 Eng 2708 create documentdbprivateendpointconnection adapter (#4060)
• 6598815 Eng 2816 create networkroute adapter (#4020)
• db781ea Eng 2871 create batchbatchpool adapter (#4068)
• ea913a7 Eng 2872 create batchbatchapplication adapter (#4063)
• b13fad6 Eng 2874 create computededicatedhost adapter (#4080)
• 753698c Eng 2875 create computecapacityreservation adapter (#4081)
• c9a0455 Eng 2881 create keyvaultmanagedhsmprivateendpointconnection adapter (#4093)
• e56a06e Eng 2882 create dbforpostgresqlflexibleserver private endpoint connection adapter (#4092)
• 54fc773 Eng 2886 create networkddosprotectionplan adapter (#4129)
• 2523ea5 Final blast propagation cleanup (#3985)
• 9fe1ae2 Fix paths in .goreleaser.yaml for tracing version (#4187)
• d96c041 GitHub Actions script injection (#4088)
• 5e38877 Go fix (#3996)
• aa3845f Go library updates (#4083)
• 7a1df76 Implement Azure Application Security Groups Client and Adapter (#4114)
• 1f04c59 Implement Azure Storage Private Endpoint Connection Client (#4048)
• d715bc0 Implement NAT Gateways Client and Adapter for Azure (#4169)
• 244cff7 Network tag relationship follow-up (#4004)
• d7ab74d Overmind knowledge list (#4079)
• bd2ff32 Review prompt and feedback (#4041)
• c672c0d Run go mod tidy
• bdd2f33 Source image promotion (#4046)
• ab48f1d [ENG-2667] Fix copybara no-op failures for go/ package replacements (#3980)
• 52a19e6 [ENG-2678] Add OpenTofu registry links to customer docs (#4091)
• 9c9d848 [ENG-2763] Add GCP network tag relationship discovery (#4000)
• 3d8b571 [ENG-2781] Walk up directory tree to discover knowledge files (#4009)
• fa24d20 [ENG-2789] Prevent sources reporting healthy before adapters are init… (#4013)
• e1b3f9d [ENG-2893] Migrate charmbracelet/lipgloss/v2 to charm.land/lipgloss/v2 (#4107)
• a01de45 [ENG-2935] Add tracing instrumentation for Source WaitGroups stuck diagnosis (#4089)
• 95c09e2 [ENG-2935] Fix captureGoroutineSummary thundering herd with singleflight (#4119)
• 404c2aa [ENG-2943] Switch to overmindtech/otelpgx fork (no acquire/prepare spans) (#4103)
• 5ffcd2d [ENG-2960] Fix K8s Endpoints/EndpointSlice adapter links and backward compatibility (#4113)
• 48da231 [ENG-2975] Increase ResponseSender heartbeat interval to 30s with jitter (#4154)
• 2c1c079 [ENG-2977] Implement BoltDB hash-based sharding for sdpcache (#4157)
• 7344416 chore(deps): lock file maintenance (#3969)
• 5ebeb2a chore(deps): lock file maintenance (#4055)
• 749afad chore(deps): lock file maintenance (#4182)
• c0bf361 chore(deps): update github actions (major) (#4139)
• 210d849 chore(deps): update golang docker tag to v1.26 (#3869)
• c49b3a1 ci: fix markdownlint CI step and resolve all docs lint violations (#4003)
• dfa5c0d docs(gcp): fix generated markdown lint issues (#4044)
• bd55ec3 feat(cli): exit non-zero from knowledge list when invalid files (#4109)
• 6219c34 feat(sdp): add mappedItemRef to ItemDiff for LLM-mapped blast radius … (#4059)
• c2edf6e feat: add Azure Public IP Prefixes client and adapter (#4124)
• 4b5ca8f feat: add Azure Virtual Network Gateways client and adapter (#4150)
• b57ecf3 feat: add MCP server skeleton with OAuth PRM and JWT auth (#4131)
• ffbe0a9 fix(deps): update azure-sdk-for-go monorepo (major) (#4144)
• ce2dc87 fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 813a975 (#4029)
• 4f9281d fix(deps): update go (#3952)
• 1a57b2d fix(deps): update go (#4163)
• 0c73967 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 2f722ef (#3951)
• 2874544 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to a57be14 (#4030)
• 4d88848 fix: always attach goroutine profile on stuck waitgroup detection (#4185)
• c69958f perf: replace protojson.Format with proto.Size in publish tracing (#4121)

v1.16.4

Changelog

• 8c49436 Add BigQuery and Bigtable IAM Terraform mappings for blast radius ana… (#3976)
• 30f2492 Add EC2 transit gateway adapter and supporting helper adapters (#3898)
• 044f7cc Add IAM Terraform mappings for Pub/Sub subscription and topic adapters (ENG-2459, ENG-2460) (#3858)
• c1cbeb9 Add Terraform mappings for Compute Project and Storage Bucket adapters (#3862)
• b42d4b3 Blast propagation cleanup (#3940)
• d78a7d3 Blast propagation proto removal (#3971)
• 48f627a Cli direct change link (#3878)
• 05b6a60 Cli knowledge files (#3928)
• 666e255 Do start/end-change processing in the background (cli) (#3711)
• d9808cd Eng 2366 create computecapacityreservationgroup adapter (#3845)
• 7f3ea91 Eng 2430 create computesnapshot adapter (with cursor skill) (#3908)
• d9f93a0 Eng 2431 create computediskaccess adapter (#3829)
• 3a9934f Eng 2433 create computesharedgalleryimage adapter (#3931)
• 2eb64c2 Eng 2434 create computesharedgalleryapplicationversion adapter (#3848)
• d2e94df Eng 2461 create dedicated adapter for google storage bucket iam binding (#3863)
• 197d6b9 Eng 2463 create dedicated adapter for google certificate manager certificate (#3853)
• adfc04b Eng 2679 phase 6 documentation for terraform aws source module (#3960)
• 0b61224 Fix merge error (#3933)
• d7bb6b1 Go libraries directory structure (#3901)
• a9cd1fc Hypothesis status skipped state (#3973)
• 9897413 Implement Azure Compute Galleries Client and Adapter (#3941)
• f24ea86 Knowledge feature proto changes (#3922)
• c5c0e59 Minor fixes (#3961)
• 957fb84 Run go mod tidy
• 287912f Snapshot discovery source (#3904)
• f797a07 Software Architecting (#3886)
• a9f5f06 Stdlib DNS adapter timeout (#3828)
• 43e7457 Test the new terraform module module (and another k8s-source test fix) (#3962)
• 7a9ebe8 Update Go (#3867)
• 77d81fe Update Terraform (#3868)
• 4c72968 Update github.com/hashicorp/terraform-config-inspect digest to f4be3ba (#3864)
• 7517279 Update google.golang.org/genproto/googleapis/rpc digest to 4cfbd41 (#3865)
• 4b92470 Update k8s.io/utils digest to b8788ab (#3866)
• 0acca46 [ENG-2469] Improve LLM-based unmapped item mapping (#3861)
• d2b45c0 [ENG-2660] Add Terraform provider for managing AWS sources (#3955)
• bcd2c15 [ENG-2668] Add Terraform module for AWS source setup (#3956)
• 2a7b290 [ENG-2673] Add Copybara and publishing pipeline for Terraform provider and module (#3958)
• f5f5a17 [ENG-2684] Fix Terraform provider aws-regions serialization breaking frontend (#3963)
• af2ceb8 [ENG-2687] Make AWS trust policy account ID configurable for internal environments (#3964)
• b0e3676 [GCP shared + dynamic] Remove blast propagation; rename to link rules (#3874)
• a1b3f93 [GCP] Remove BlastPropagation from all GCP adapters (#3847)
• b96c9a1 [Stdlib + AWS] Remove BlastPropagation from stdlib and AWS adapters (#3835)
• 951c621 [Tests] Remove ExpectedBlastPropagation from shared test helpers and all adapter tests (#3890)
• 0a689d4 chore(deps): lock file maintenance (#3887)
• 1e1e3c0 create dedicated host groups adapter (#3844)
• 1cf57f0 feat(api-server): add GetOrCreateAWSExternalId RPC for per-account AW… (#3926)
• 03346e2 feat: cache not-found results for GCP (#3857)
• 3b3107d feat: cache not-found results stdlib adapters (#3827)
• 73f0e26 fix, cli uses get change's changeAnalysisStatus (#3842)
• 3451655 fix, remove unneeded \healthz startup probe from sources (#3832)
• 7c17499 review azure adapter terraform mappings (#3852)

v1.15.1

Changelog

• 9eb764e 1password retries (#3747)
• c78666b Cache "Not found" results in aws-source (#3661)
• 55a6b57 Do start/end-change processing in the background (backend) (#3710)
• 82787e4 ENG-2285 Update to sigs.k8s.io/controller-runtime v0.23.1 (#3706)
• 27e687e Eng 2242 Azure multi-scope adapter implementation (#3790)
• 7a78a03 Fixed mappings for a number of broken adapters (#3782)
• 51910c3 Fixed numeric project mapping (#3794)
• db1f554 Handle regions that are not enabled by default more gracefully.
• 04e9ed8 Handle regions that are not enabled by default more gracefully. (#3781)
• c773547 Improve mapping UI (#3795)
• a3fb6bd Info log output stream (#3779)
• 33eb090 Integrate the riverui in area51 (#3745)
• d10e509 K8s-source chart probes (#3826)
• 1727bbe Revert "Handle regions that are not enabled by default more gracefully."
• af09634 Run go mod tidy
• 4966ea3 Source config error handling (#3803)
• afda713 aws-source: fix kms-grant issue with service principal (#3831)
• 6c51c24 chore(deps): update terraform (#3814)
• 1fc9197 fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 477360e (#3808)
• 0fb6ec7 fix(deps): update go (#3815)
• e5d1428 fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 546029d (#3809)
• 98f79bf maint, sources remove Cache() helper functions idiom (#3760)
• b4ff9fa more source config error handling (#3821)
• 16c4340 several small fixes (#3816)

v1.15.0

Changelog

• aaa533b Added links for templates (#3751)
• 1102ac3 Added logging library to copybara sync (#3692)
• 42c6ba0 Added regional adapter for instance template managers. (#3755)
• 2cb7b53 Capture the true ctx deadline in HandleQuery (#3714)
• 2ae97d8 Distill all impersonationHTTPClients into a utility method (#3709)
• acf1b69 Eng 2245 review all existing adapters and make sure theyre using the latest sdk (#3765)
• d726d3d Eng 2340 support cloud asset inventory in gcp migrate kms (#3722)
• b405ed4 Eng 2362 minimize the amount of data in the timeline (#3754)
• 4664f61 Eng 2364 create computeproximityplacementgroup adapter (#3774)
• cec7ffc Moved CLI JSON output format to ProtoJSON as it's much better (#3767)
• 01f4c4f Refactor AccountConfig: Unroll to columns and remove custom blast radius values (#3703)
• 207daa1 Run go mod tidy
• b2a261f Switch context for hypotheses collector (#3737)
• deb9d7b Update otel handling for SDP (#3717)
• d1c94c6 chore(deps): update alpine docker tag to v3.23.3 (#3731)
• e21303c chore(deps): update terraform (#3735)
• 691c198 fix(deps): update github.com/serpapi/serpapi-golang digest to 0e41c79 (#3728)
• 2cc527a fix(deps): update go (#3736)
• 65f8398 fix(deps): update google.golang.org/genproto digest to 8636f87 (#3729)
• ae34a4c fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 8636f87 (#3730)
• afafd63 fix, changetimeline entries have status sensitive names (#3688)
• 5114346 maint, api-server refactor into service/area51 (#3761)
• bf7c08b maint, sources centralise health http server setup (#3764)
• a6c7f68 maint, sources rename cacheField to cache (#3723)