changelog

[akshaydeo]

Summary

This PR cuts the v1.5.11 / v1.3.11 release across core, framework, and all plugins, and introduces a new Claude skill (release-checklist) for pre-release migration safety auditing.

Changes

• release-checklist skill — Adds .claude/skills/release-checklist/SKILL.md, a read-only pre-release audit tool that scans Go-defined database migrations changed in a release for high-scale deadlock/lock-contention risks and boot-time-blocking operations. It produces a structured PASS/WARN/FAIL report with a concrete remediation plan per finding. The skill is designed to grow via an extensible Checks Registry.
• Version bumps — core → 1.5.11, framework → 1.3.11, transports → 1.5.3, plugins/governance → 1.5.11, plugins/logging → 1.5.11, plugins/semanticcache → 1.5.11, plugins/otel → 1.2.11, plugins/maxim → 1.6.11, plugins/prompts → 1.0.11, and remaining plugins bumped accordingly.
• Changelogs populated — All per-package changelogs updated with the full set of features and fixes shipping in this release.

Key highlights in this release:

• Temporary access tokens for scoped, time-limited API access
• MCP per-user OAuth flow refactor
• Bedrock Mantle inference engine support
• Azure Realtime provider with enriched session tracking
• Direct access control (DAC) and virtual key rotation
• Cluster-aware log metadata and per-node usage aggregation
• Feature flag framework
• Config-hash-based file value override of DB on restart
• Semantic cache plugin rewrite
• Numerous streaming stability, Bedrock, Anthropic, and Gemini fixes
• AWS SDK and dependency security updates

Type of change

• Bug fix
• Feature
• Refactor
• Documentation
• Chore/CI

Affected areas

• Core (Go)
• Transports (HTTP)
• Providers/Integrations
• Plugins
• UI (React)
• Docs

How to test

# Verify version files reflect the new release
cat core/version          # expect 1.5.11
cat framework/version     # expect 1.3.11
cat transports/version    # expect 1.5.3

# Core/Transports
go test ./...

To exercise the new release-checklist skill, invoke it via Claude with:

/release-checklist origin/dev...HEAD

Expected output: a structured report with PASS/WARN/FAIL per check and a Remediation Plan table for any findings.

Screenshots/Recordings

N/A

Breaking changes

• Yes
• No

Related issues

#3603, #3565, #3489, #3334, #3335, #3435, #3554, #3590, #3444, #3198, #3581, #3610, #3599, #3567, #3382, #3461 and others listed in the changelogs.

Security considerations

• AWS SDK and dependency security updates are included (mod updates #3461).
• FullyRedacted() for proxy passwords and MarshalForStorage() for ProxyConfig prevent partial secret leakage in API responses (fix: add FullyRedacted() for proxy passwords and MarshalForStorage() for ProxyConfig to prevent partial value leakage in API responses #3445).
• The release-checklist skill is strictly read-only and never modifies files.

Checklist

• I read docs/contributing/README.md and followed the guidelines
• I added/updated tests where appropriate
• I updated documentation where needed
• I verified builds succeed (Go and UI)
• I verified the CI pipeline passes locally if applicable

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 51312331-5b0f-4d96-b0fc-a2effd1a7860

📥 Commits

Reviewing files that changed from the base of the PR and between bb0c74b and eb5ebe8.

📒 Files selected for processing (27)

• .claude/skills/release-checklist/SKILL.md
• core/changelog.md
• core/version
• framework/changelog.md
• framework/version
• plugins/compat/changelog.md
• plugins/compat/version
• plugins/governance/changelog.md
• plugins/governance/version
• plugins/jsonparser/changelog.md
• plugins/jsonparser/version
• plugins/logging/changelog.md
• plugins/logging/version
• plugins/maxim/changelog.md
• plugins/maxim/version
• plugins/mocker/changelog.md
• plugins/mocker/version
• plugins/otel/changelog.md
• plugins/otel/version
• plugins/prompts/changelog.md
• plugins/prompts/version
• plugins/semanticcache/changelog.md
• plugins/semanticcache/version
• plugins/telemetry/changelog.md
• plugins/telemetry/version
• transports/changelog.md
• transports/version

---

📝 Walkthrough

Summary by CodeRabbit

• New Features

  • Temporary access tokens for scoped permissions
  • Enhanced MCP OAuth authentication flow
  • Bedrock inference and tool support
  • Improved realtime routing capabilities
  • Feature flags framework
  • Direct access control support
  • Team-level calendar alignment
  • Server-side pagination for filter data
  • OTEL plugin selection for trace exports

• Bug Fixes

  • Streaming stability and cancellation handling
  • Provider-specific fixes (Bedrock, OpenAI, Anthropic, Gemini)
  • Pricing override corrections
  • Enhanced secret redaction
  • Migration and semantic cache improvements

• Chores

  • Security dependency updates

Walkthrough

This PR coordinates a multi-module release by bumping versions and updating changelogs across core, framework, ten plugins, and transports. It also introduces new skill documentation for a release-checklist auditing tool. All version changes follow semver patch/minor increments, with corresponding changelog entries documenting features, fixes, and dependency updates.

Changes

Release Notes and Version Bump Coordination

Layer / File(s)	Summary
Release-Checklist Skill Definition .claude/skills/release-checklist/SKILL.md	New skill documentation defining read-only auditing behavior, release change set determination (git ref or default origin/dev...HEAD), migration-system facts, two registry checks for deadlock/lock-contention risk and boot-time-blocking migrations, required report sections with Pass/Warn/Fail status and remediation tables, and guidance for extending the checks registry.
Core and Framework Release Notes core/version, core/changelog.md, framework/version, framework/changelog.md	Core bumped from 1.5.10→1.5.11 with 36 consolidated changelog entries (feat: scoped tokens, MCP OAuth, Bedrock inference/tools, realtime/provider routing, JSON-schema params, DAC; fix: streaming/cancellation/panic, provider headers/metadata, pricing/usage/events, schema/args). Framework bumped from 1.3.10→1.3.11 with 27 entries (feat: temporary tokens, per-user OAuth, calendar alignment, feature flags, config-hash DB overrides, model\_parameters\_url, virtual key profile IDs, governance team lookup; fix: migrations, pricing, proxy password, MCP logs, configstore, JSONB casting).
Plugin Versions and Changelogs plugins/{compat,governance,jsonparser,logging,maxim,mocker,otel,prompts,semanticcache,telemetry}/{version,changelog.md}	Ten plugins updated with consistent version increments (0.1.9→0.1.10 for compat; 1.5.10→1.5.11 for governance, jsonparser, logging, mocker, semanticcache, telemetry; 1.6.10→1.6.11 for maxim; 1.2.10→1.2.11 for otel; 1.0.10→1.0.11 for prompts). Changelogs document cluster-aware logging metadata, server-side pagination/search, realtime routing enrichment, streaming pricing-override fixes, OTEL plugin selection, semantic cache refactor/panic-guard fixes, and coordinated dependency/AWS SDK security updates.
Transports Release Notes transports/version, transports/changelog.md	Version bumped from 1.5.2→1.5.3. Changelog restructured from single bracketed entry to comprehensive Features section (temporary tokens, MCP per-user OAuth, Bedrock Mantle, Azure realtime improvements, feature flags, config-hash behavior, DAC, virtual key rotation, cluster logging, dashboard RBAC, onboarding widget, broker mode schema, server-side filter search, OTEL plugin selection, UI menus, chart polish) and Fixed section (streaming stability, provider fixes for Bedrock/OpenAI/Anthropic/Gemini, pricing overrides, secret redaction, migration corrections, semantic cache, filter queries, MCP log stats, configstore errors, JSONB safety, Azure batch fields, UI fixes, security dependencies).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• danpiths

Poem

🐰 Versions climb with gentle hops,
Changelogs bloom in bulleted crops,
From core to plugins, the release takes flight,
New skill audits the checklist—all right! ✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch 05-20-changelog

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[akshaydeo]

• changelog #3628 👈 (View in Graphite)
• dev

This stack of pull requests is managed by Graphite. Learn more about stacking.

[akshaydeo]

Merge activity

• May 20, 12:49 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• May 20, 12:50 PM UTC: @akshaydeo merged this pull request with Graphite.

[greptile-apps]

Confidence Score: 4/5

Safe to merge — changes are documentation, version metadata, and a new read-only skill definition with no runtime impact.

The only substantive observation is the format mismatch in transports/changelog.md versus every other module's changelog. If these files are consumed by a release-notes generator or aggregation script, the divergence could produce inconsistent output. All version bumps are internally consistent within their module series.

transports/changelog.md — format differs from all other changelogs in this PR and may affect downstream tooling.

Important Files Changed

Filename	Overview
.claude/skills/release-checklist/SKILL.md	New Claude skill definition for pre-release migration safety audits; well-structured read-only diagnostic tool
transports/changelog.md	Changelog replaced with rich markdown (emoji headers, bold titles) — format differs from all other changelog files in this PR which use a flat - feat:/- fix: list
core/changelog.md	Full release changelog with flat - feat:/- fix: format, replacing two prior entries; consistent with plugin changelog style
framework/changelog.md	New changelog entries for framework v1.3.11; consistent flat list format
core/version	Patch version bump 1.5.10 → 1.5.11
transports/version	Patch version bump 1.5.2 → 1.5.3

_{Reviews (1): Last reviewed commit: "changelog" | Re-trigger Greptile}

[greptile-apps]

Changelog format diverges from all other modules

transports/changelog.md uses rich markdown with emoji section headers (## ✨ Features, ## 🐞 Fixed) and bold-titled entries, while every other changelog in this PR (core, framework, and all plugins) uses a flat - feat: / - fix: prefix list. If any tooling parses or aggregates these files — for a release page, a release-notes generator, or a diff summary — the inconsistency will produce malformed output for the transports module.