feat: EDDI 6.2.0 release

.github/workflows/redhat-certify.yml

@@ -4,9 +4,9 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: "EDDI version (e.g. 6.1.2)"
+        description: "EDDI version (e.g. 6.2.0)"
         required: true
-        default: "6.1.2"
+        default: "6.2.0"
       release:
         description: "Release number (e.g. 1, 2, 3)"
         required: true

docs/agent-father-deep-dive.md

@@ -1,6 +1,6 @@
 # The Agent Father: A Deep Dive
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 ## Overview
 

docs/agent-father-langchain-tools-guide.md

@@ -341,5 +341,5 @@ When Agent Father creates the langchain configuration, it generates:
 ---
 
 **Last Updated:** March 2026  
-**EDDI Version:** 6.0.0  
+**EDDI Version:** 6.2.0  
 **Agent Father Version:** 3.0.1

docs/agent-manager-gui.md

@@ -1,6 +1,6 @@
 # Agent Manager Dashboard
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 ## Overview
 

docs/architecture.md

@@ -1,6 +1,6 @@
 # EDDI Architecture
 
-**Version: 6.1.2**
+**Version: 6.2.0**
 
 This document provides a comprehensive overview of EDDI's architecture, design principles, and internal workflow.
 

docs/conversation-memory.md

@@ -1,6 +1,6 @@
 # Conversation Memory and State Management
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 ## Overview
 

docs/developer-quickstart.md

@@ -1,6 +1,6 @@
 # Developer Quickstart Guide
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 This guide helps developers quickly understand EDDI's architecture and start building agents.
 

docs/getting-started.md

@@ -1,6 +1,6 @@
 # Getting started
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 Welcome to **EDDI**!
 

docs/langchain.md

@@ -1,6 +1,6 @@
 # LLM Integration
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 ## Overview
 

docs/properties.md

@@ -1,6 +1,6 @@
 # Properties
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 ## Overview
 

docs/putting-it-all-together.md

@@ -1,6 +1,6 @@
 # Putting It All Together
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 This guide shows how all of EDDI's components work together to create a complete, functional agent. We'll build a real-world example step-by-step, explaining how each piece connects.
 

docs/redhat-openshift.md

@@ -61,7 +61,7 @@ The certification release process is fully automated:
 
 To trigger a certification release, go to **Actions → Red Hat Certification Release → Run workflow** and provide:
 
-- `version` — EDDI version (e.g., `6.1.0`)
+- `version` — EDDI version (e.g., `6.2.0`)
 - `release` — Incremental release number (e.g., `1`, `2`, `3`)
 - `submit` — Whether to submit results to Red Hat (`true`/`false`)
 - `registry` — Target registry (`docker.io` or `quay.io`)
@@ -171,5 +171,5 @@ For production deployments with MongoDB:
 docker run -d \
   -p 7070:7070 \
   -e QUARKUS_MONGODB_CONNECTION_STRING=mongodb://mongo:27017 \
-  labsai/eddi:6.1.0
+  labsai/eddi:6.2.0
 ```

docs/security.md

@@ -1,6 +1,6 @@
 # Security
 
-**Version: 6.0.0**
+**Version: 6.2.0**
 
 This document describes the security measures applied to EDDI's AI Agent Tooling system, particularly for tools that execute in response to LLM-generated arguments, as well as the Keycloak-based authentication layer.
 

helm/eddi/Chart.yaml

@@ -6,7 +6,7 @@ description: >-
   and integrate with LLM providers via a unified REST API.
 type: application
 version: 1.0.0
-appVersion: "6.1.2"
+appVersion: "6.2.0"
 home: https://eddi.labs.ai
 sources:
   - https://github.com/labsai/EDDI

k8s/base/eddi-deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   name: eddi
   labels:
     app.kubernetes.io/name: eddi
-    app.kubernetes.io/version: "6.1.2"
+    app.kubernetes.io/version: "6.2.0"
     app.kubernetes.io/component: server
     app.kubernetes.io/part-of: eddi
 spec:
@@ -23,7 +23,7 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: eddi
-        app.kubernetes.io/version: "6.1.2"
+        app.kubernetes.io/version: "6.2.0"
         app.kubernetes.io/component: server
         app.kubernetes.io/part-of: eddi
       annotations:

k8s/quickstart.yaml

@@ -169,7 +169,7 @@ metadata:
   namespace: eddi
   labels:
     app.kubernetes.io/name: eddi
-    app.kubernetes.io/version: "6.1.2"
+    app.kubernetes.io/version: "6.2.0"
     app.kubernetes.io/component: server
     app.kubernetes.io/part-of: eddi
 spec:
@@ -187,7 +187,7 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: eddi
-        app.kubernetes.io/version: "6.1.2"
+        app.kubernetes.io/version: "6.2.0"
         app.kubernetes.io/component: server
         app.kubernetes.io/part-of: eddi
       annotations:

pom.xml

@@ -5,7 +5,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>ai.labs</groupId>
     <artifactId>eddi</artifactId>
-    <version>6.1.2</version>
+    <version>6.2.0</version>
     <properties>
         <compiler-plugin.version>3.15.0</compiler-plugin.version>
         <maven.compiler.source>25</maven.compiler.source>
@@ -20,10 +20,10 @@
         <langchain4j-beta.version>1.18.0-beta28</langchain4j-beta.version>
         <langchain4j.version>1.18.0</langchain4j.version>
         <langchain4j-libs.version>1.18.0</langchain4j-libs.version>
-        <jandex-maven-plugin.version>3.5.3</jandex-maven-plugin.version>
+        <jandex-maven-plugin.version>3.6.0</jandex-maven-plugin.version>
         <maven.compiler.parameters>true</maven.compiler.parameters>
-        <surefire-plugin.version>3.5.5</surefire-plugin.version>
-        <failsafe-plugin.version>3.5.5</failsafe-plugin.version>
+        <surefire-plugin.version>3.5.6</surefire-plugin.version>
+        <failsafe-plugin.version>3.5.6</failsafe-plugin.version>
         <failsafe.useModulePath>false</failsafe.useModulePath>
         <war-plugin.version>3.4.0</war-plugin.version>
         <quarkus-mcp-server.version>1.13.1</quarkus-mcp-server.version>
@@ -56,12 +56,13 @@
                 <artifactId>reactor-netty-http</artifactId>
                 <version>1.2.8</version>
             </dependency>
-            <!-- Override postgresql to fix CVE-2026-42198 (client-side DoS via SCRAM iteration count).
-                 Vulnerable: 42.2.0–42.7.10. Pulled by langchain4j-pgvector (42.7.7) and Quarkus BOM. -->
+            <!-- Override postgresql to fix CVE-2026-42198 (SCRAM iteration count DoS, ≤42.7.10)
+                 and CVE-2026-54291 (auth downgrade, ≤42.7.11).
+                 Pulled by langchain4j-pgvector (42.7.7) and Quarkus BOM. -->
             <dependency>
                 <groupId>org.postgresql</groupId>
                 <artifactId>postgresql</artifactId>
-                <version>42.7.11</version>
+                <version>42.7.13</version>
             </dependency>
         </dependencies>
     </dependencyManagement>
@@ -266,7 +267,7 @@
         <dependency>
             <groupId>org.apache.pdfbox</groupId>
             <artifactId>pdfbox</artifactId>
-            <version>3.0.7</version>
+            <version>3.0.8</version>
         </dependency>
         <dependency>
             <groupId>org.jsoup</groupId>
@@ -285,7 +286,7 @@
         <dependency>
             <groupId>io.swagger.core.v3</groupId>
             <artifactId>swagger-annotations</artifactId>
-            <version>2.2.50</version>
+            <version>2.2.52</version>
         </dependency>
         <dependency>
             <groupId>de.undercouch</groupId>
@@ -425,7 +426,7 @@
         <dependency>
             <groupId>io.nats</groupId>
             <artifactId>jnats</artifactId>
-            <version>2.25.3</version>
+            <version>2.26.0</version>
         </dependency>
         <!-- PostgreSQL JDBC driver + Agroal connection pool (Phase 6.31) -->
         <dependency>
@@ -446,7 +447,7 @@
         <dependency>
             <groupId>io.swagger.parser.v3</groupId>
             <artifactId>swagger-parser</artifactId>
-            <version>2.1.44</version>
+            <version>2.1.45</version>
         </dependency>
 
     </dependencies>
@@ -615,7 +616,7 @@
             <plugin>
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
-                <version>0.8.14</version>
+                <version>0.8.15</version>
                 <!-- Plugin-level excludes: applied to report AND check goals.
                      Excludes CDI bootstrap wiring, external integration adapters,
                      REST client libraries, and import/export services that require

src/main/docker/Dockerfile

@@ -81,7 +81,7 @@
 FROM registry.access.redhat.com/ubi9/openjdk-25-runtime:1.24@sha256:2aed9f3a5fac4def355ac36d5c59c7a3067857da424adaa9c6929ff71310467e
 
 ### Red Hat Container Certification — required labels
-ARG EDDI_VERSION=6.1.2
+ARG EDDI_VERSION=6.2.0
 ARG EDDI_RELEASE=1
 
 LABEL name="labsai/eddi" \

src/main/java/ai/labs/eddi/configs/OpenApiConfig.java

@@ -19,7 +19,7 @@
  *
  * @since 6.0.0
  */
-@OpenAPIDefinition(info = @Info(title = "EDDI API", version = "6.1.2"), tags = {
+@OpenAPIDefinition(info = @Info(title = "EDDI API", version = "6.2.0"), tags = {
         // ── Agents ───────────────────────────────────────────────────────
         @Tag(name = "Agents", description = "Agent configuration CRUD"),
         @Tag(name = "Agents / Administration", description = "Deploy, undeploy, trigger, and monitor agents"),

src/main/java/ai/labs/eddi/ui/IRestWelcomeResource.java

@@ -0,0 +1,33 @@
+/*
+ * Copyright EDDI contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package ai.labs.eddi.ui;
+
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.Produces;
+import jakarta.ws.rs.core.MediaType;
+import jakarta.ws.rs.core.Response;
+import org.eclipse.microprofile.openapi.annotations.Operation;
+import org.jboss.resteasy.reactive.Cache;
+
+/**
+ * Serves the welcome/landing page SPA shell.
+ * Users pick between Manager and Workforce here.
+ */
+@Path("/welcome")
+@Produces(MediaType.TEXT_HTML)
+public interface IRestWelcomeResource {
+
+    @GET
+    @Cache(noCache = true, mustRevalidate = true)
+    @Operation(hidden = true)
+    Response viewDefault();
+
+    @GET
+    @Cache(noCache = true, mustRevalidate = true)
+    @Path("{path:.*}")
+    @Operation(hidden = true)
+    Response viewHtml();
+}

src/main/java/ai/labs/eddi/ui/IRestWorkforceResource.java

@@ -0,0 +1,33 @@
+/*
+ * Copyright EDDI contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package ai.labs.eddi.ui;
+
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.Produces;
+import jakarta.ws.rs.core.MediaType;
+import jakarta.ws.rs.core.Response;
+import org.eclipse.microprofile.openapi.annotations.Operation;
+import org.jboss.resteasy.reactive.Cache;
+
+/**
+ * Serves the workforce SPA shell.
+ * Multi-agent collaboration workspace.
+ */
+@Path("/workforce")
+@Produces(MediaType.TEXT_HTML)
+public interface IRestWorkforceResource {
+
+    @GET
+    @Cache(noCache = true, mustRevalidate = true)
+    @Operation(hidden = true)
+    Response viewDefault();
+
+    @GET
+    @Cache(noCache = true, mustRevalidate = true)
+    @Path("{path:.*}")
+    @Operation(hidden = true)
+    Response viewHtml();
+}

src/main/java/ai/labs/eddi/ui/RestWelcomeResource.java

@@ -0,0 +1,28 @@
+/*
+ * Copyright EDDI contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package ai.labs.eddi.ui;
+
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.ws.rs.core.Response;
+
+import static ai.labs.eddi.utils.RuntimeUtilities.getResourceAsStream;
+
+/**
+ * Serves welcome.html for all /welcome/** paths.
+ * React Router handles client-side routing from there.
+ */
+@ApplicationScoped
+public class RestWelcomeResource implements IRestWelcomeResource {
+
+    @Override
+    public Response viewDefault() {
+        return viewHtml();
+    }
+
+    @Override
+    public Response viewHtml() {
+        return Response.ok(getResourceAsStream("/META-INF/resources/welcome.html")).build();
+    }
+}

src/main/java/ai/labs/eddi/ui/RestWorkforceResource.java

@@ -0,0 +1,28 @@
+/*
+ * Copyright EDDI contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package ai.labs.eddi.ui;
+
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.ws.rs.core.Response;
+
+import static ai.labs.eddi.utils.RuntimeUtilities.getResourceAsStream;
+
+/**
+ * Serves workforce.html for all /workforce/** paths.
+ * React Router handles client-side routing from there.
+ */
+@ApplicationScoped
+public class RestWorkforceResource implements IRestWorkforceResource {
+
+    @Override
+    public Response viewDefault() {
+        return viewHtml();
+    }
+
+    @Override
+    public Response viewHtml() {
+        return Response.ok(getResourceAsStream("/META-INF/resources/workforce.html")).build();
+    }
+}

src/main/resources/META-INF/resources/chat.html

@@ -36,8 +36,8 @@
            url('/fonts/noto-sans-v36-cyrillic_cyrillic-ext_devanagari_greek_greek-ext_latin_latin-ext_vietnamese-500.ttf') format('truetype');
     }
   </style>
-  <script type="module" crossorigin src="/scripts/js/chat-ui.DkbQxm6F.js"></script>
-  <link rel="stylesheet" crossorigin href="/scripts/css/chat-ui.CN68VwV9.css">
+  <script type="module" crossorigin src="/scripts/js/chat-ui.p4wYUapg.js"></script>
+  <link rel="stylesheet" crossorigin href="/scripts/css/chat-ui.D213XXZR.css">
 </head>
 <body>
   <div id="root"></div>