Skip to content

changelogs and go upgrade to 1.26.4 - #4096

Merged
akshaydeo merged 1 commit into
devfrom
06-06-changelogs_and_go_upgrade_to_1.26.4
Jun 6, 2026
Merged

changelogs and go upgrade to 1.26.4#4096
akshaydeo merged 1 commit into
devfrom
06-06-changelogs_and_go_upgrade_to_1.26.4

Conversation

@akshaydeo

@akshaydeo akshaydeo commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

Summary

This PR bumps the Go toolchain version from 1.26.3 to 1.26.4 across all modules and CI workflows, and cuts a new release (core v1.5.17, framework v1.3.17, transports v1.5.9, plugins/compat v0.1.16, plugins/governance v1.5.17, and associated plugin versions) incorporating a large batch of features and fixes accumulated since the previous release.

Changes

  • Go 1.26.4 — Updated go-version in all GitHub Actions workflows (e2e-tests, helm-release, pr-tests, release-cli, release-pipeline, snyk) and all go.mod files (core, framework, transports, cli, all plugins, examples, and test modules).
  • Core (v1.5.17) — OpenAI compaction support, multi-customer logs and usage tracking, multiple team/business unit support, request_headers wildcard pattern capture for OTel and Maxim plugins, xAI x_search tool, fetch URL validation with SSRF hardening, file:// pricing URL scheme, virtual key provider fan-out filtering, and a broad set of fixes including Anthropic prompt cache key, empty thinking block stripping, OpenAI stream usage event cleanup, Gemini numeric schema constraints, stale connection retries, Azure Claude diagnostic strip, and passthrough budget handling.
  • Framework (v1.3.17) — Scope-aware budgets and limits wired from model configs, provider-level governance, multiple customer budget support with calendar_aligned windows, paginated virtual key fetch, config.json source-of-truth flow, FTS index cap reduction, sync worker drift fix, cascade deletes for model configs, and high-scale virtual key flow improvements.
  • Transports (v1.5.9) — Full changelog covering all of the above plus UI improvements (log navigation, customer detail sheet, BudgetDisplay component, inline loading shell, materialized view alias), SCIM provisioning fields, Helm/config schema additions (roles, per_user_oauth), client IP resolution from forwarded headers, and dependency upgrades (recharts to 3.8.1, golang.org/x CVE remediation).
  • Pluginsgovernance v1.5.17 adds team budget/rate-limit exporters, ghost node reconciliation fix, and VK double usage counting fix; logging v1.5.17 adds wildcard header capture and file attachment rendering; otel v1.2.17 adds disable_content_logging and multiple collectors support; maxim v1.6.17 adds request_headers wildcard capture; compat v0.1.16 fixes max_tokens preservation during param filtering.

Type of change

  • Bug fix
  • Feature
  • Refactor
  • Documentation
  • Chore/CI

Affected areas

  • Core (Go)
  • Transports (HTTP)
  • Providers/Integrations
  • Plugins
  • UI (React)
  • Docs

How to test

# Verify Go version
go version  # should report go1.26.4

# Run core tests
cd core && go test ./...

# Run framework tests
cd framework && go test ./...

# Run transports tests
cd transports && go test ./...

# Run plugin tests
cd plugins/governance && go test ./...
cd plugins/logging && go test ./...
cd plugins/otel && go test ./...

# UI
cd ui
pnpm i
pnpm build
pnpm test

Breaking changes

  • Yes
  • No

Related issues

#4053, #4066, #4041, #4012, #3976, #3947, #3991, #4045, #3957, #3938, #3937, #3939, #3981, #3998, #3997, #4092, #4091, #4079, #4080, #4086, #3929, #3994, #4028, #3970, #3919, #3861, #3664, #3999, #4088, #4070, #4051, #4043, #4057, #4023, #3941, #3955, #4024, #3956, #3967, #3925, #3992, #3900

Security considerations

Checklist

  • I read docs/contributing/README.md and followed the guidelines
  • I added/updated tests where appropriate
  • I updated documentation where needed
  • I verified builds succeed (Go and UI)
  • I verified the CI pipeline passes locally if applicable

Summary by CodeRabbit

  • New Features

    • OpenAI compaction, multi-customer/team logstore support, request-header wildcard capture, enhanced governance (provider-level & scope-aware limits), disable-content-logging option, support for multiple OpenTelemetry collectors, SSRF hardening and URL validation.
  • Chores

    • Bumped Go toolchain across modules and updated component/plugin version releases.

@coderabbitai

coderabbitai Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

Too many files changed? Review this PR in Change Stack to see how the pieces fit before you dive in.

Review Change Stack

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

Bump Go toolchain pins to 1.26.4 across workflows, go.mod files, Docker builder images, and Makefiles; pin CI service images in docker-compose; and update changelogs and version markers for a coordinated patch release.

Changes

Go toolchain 1.26.4 upgrade and release metadata sync

Layer / File(s) Summary
Repository-wide toolchain and workflows
.github/workflows/*.yml, .github/workflows/snyk.yml, .github/workflows/scripts/release-bifrost-http-prep.sh
All GitHub Actions jobs and helper scripts updated to use Go 1.26.4 via actions/setup-go and script-normalized go mod edit calls.
Pinned CI service images
.github/workflows/configs/docker-compose.yml
CI Compose file pins Postgres, Weaviate, Redis Stack, and Qdrant images to sha256 digests.
Module go directive updates
*/go.mod across core, framework, transports, plugins/*, examples/*, tests/*, workflow helper modules
Many module go directives updated from 1.26.3 (and one 1.23) to 1.26.4 for consistent toolchain declaration.
Builder images and Makefiles
transports/Dockerfile*, Makefile, examples/plugins/hello-world/Makefile
Golang builder images for containerized builds and cross-compilation bumped to golang:1.26.4-alpine3.23 (digest-pinned).
Release versions and plugin bumps
core/version, framework/version, transports/version, plugins/*/version
Patch version files incremented (e.g., core 1.5.16→1.5.17, framework 1.3.16→1.3.17, transports 1.5.8→1.5.9, plugin versions updated).
Changelogs and release notes
core/changelog.md, framework/changelog.md, transports/changelog.md, plugins/*/changelog.md
Changelog files expanded/rewritten to record new features, fixes, and maintenance notes associated with this release.
Tests and seed tooling
tests/cmd/seed/go.mod, tests/cmd/seed/seed.go, tests/cmd/e2eseed/main.go
Add new seed module manifest, change seed package name, and refactor e2eseed CLI to call local helpers and improve error context when opening DBs.

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly Related PRs

Suggested Reviewers

  • danpiths
  • Pratham-Mishra04

Poem

🐰 A rabbit hops through versions bright,
Go 1.26.4 now gleams in CI light,
Changelogs swell and versions climb,
Modules sync and builds align,
Hooray — a tidy, tiny release-time rhyme!

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title 'changelogs and go upgrade to 1.26.4' accurately describes the two main changes: Go version bump and changelog updates across the repository.
Description check ✅ Passed The PR description is comprehensive and well-structured, covering summary, changes, type of change, affected areas, testing instructions, breaking changes, related issues, security considerations, and a checklist aligned with the template requirements.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch 06-06-changelogs_and_go_upgrade_to_1.26.4

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.12.2)

level=error msg="[linters_context] typechecking error: pattern ./...: directory prefix . does not contain main module or its selected dependencies"


Comment @coderabbitai help to get the list of available commands and usage tips.

@akshaydeo
akshaydeo marked this pull request as ready for review June 5, 2026 22:16
@akshaydeo
akshaydeo requested a review from a team as a code owner June 5, 2026 22:16
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Copy link
Copy Markdown
Contributor Author

This stack of pull requests is managed by Graphite. Learn more about stacking.

@greptile-apps

greptile-apps Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

Confidence Score: 4/5

The version-bump and changelog changes are mechanical and safe to merge; the test seeder refactor introduced a broken binary that will not compile.

The vast majority of the 79 changed files are straightforward Go version and version-file bumps with no logic changes. The one substantive code change — extracting the e2e seeder into its own module — left tests/cmd/e2eseed/main.go calling functions from package seed without importing that package, and with an empty go.mod, so the binary cannot be built. This does not break any CI workflow that runs on this PR (no workflow invokes the seeder directly), but it leaves the developer tooling in a broken state that will need a follow-up fix.

tests/cmd/e2eseed/main.go and tests/cmd/e2eseed/go.mod — the seeder binary is missing its import and has an invalid (empty) module file.

Important Files Changed

Filename Overview
tests/cmd/e2eseed/main.go New entry-point binary for OSS e2e seeding — missing import for the seed package; all called functions are undefined, so this binary does not compile. The accompanying go.mod is empty (invalid).
tests/cmd/seed/seed.go Seed library extracted from framework/e2eseed into its own module; logic is sound but uses the deprecated strings.Title and the module's go.mod pins an older Go version and stale dependency versions.
tests/cmd/seed/go.mod New Go module for the seed library; declares go 1.26.3 and pins core v1.5.16 / framework v1.3.16 despite this PR bumping everything to go 1.26.4 and cutting v1.5.17 / v1.3.17.
.github/workflows/release-pipeline.yml All six Go setup steps bumped from 1.26.3 to 1.26.4; no logic changes.
.github/workflows/configs/docker-compose.yml All four service images are now pinned with SHA-256 digests in addition to their tags, improving supply-chain security.
transports/Dockerfile Builder stage updated to golang:1.26.4-alpine3.23 with the new pinned SHA digest; straightforward bump.
.github/workflows/scripts/release-bifrost-http-prep.sh Calls go mod edit -go=1.26.4 to normalize the transports go.mod toolchain directive before tidy; safe improvement.
core/changelog.md Changelog entries for v1.5.17 covering OpenAI compaction, SSRF hardening, multi-customer support, and a broad set of bug fixes.
transports/changelog.md Large changelog entry for v1.5.9 summarising all features and fixes shipped in this release cycle.

Comments Outside Diff (1)

  1. tests/cmd/e2eseed/main.go, line 1-71 (link)

    P1 Missing import — binary will not compile

    The old tests/e2e/cmd/e2eseed/main.go imported "github.com/maximhq/bifrost/framework/e2eseed" and called every function with the e2eseed. prefix (e2eseed.DefaultOptions(), e2eseed.InitEncryption(), e2eseed.SeedBase(), etc.). The refactor moved those functions into the new tests/cmd/seed module as package seed, but the import was dropped entirely instead of being updated. All 8+ call sites now reference unqualified identifiers (DefaultOptions(), NormalizeOptions(), InitEncryption(), OpenDB(), SeedBase(), WriteJSONFile()) that are not defined anywhere in package main, causing a compilation failure. The go.mod for this package is also completely empty (no module declaration), making the module invalid.

Reviews (4): Last reviewed commit: "changelogs and go upgrade to 1.26.4" | Re-trigger Greptile

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
transports/go.mod (1)

134-134: ⚠️ Potential issue | 🔴 Critical | ⚡ Quick win

Fix unresolved merge-conflict marker in transports/go.mod (line 134).

<<<<<<< HEAD is still present, leaving the go.mod in an invalid state for go mod tidy/build.

💡 Proposed fix
-	github.com/mattn/go-sqlite3 v1.14.32 // indirect; indirect<<<<<<< HEAD
+	github.com/mattn/go-sqlite3 v1.14.32 // indirect
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@transports/go.mod` at line 134, Remove the leftover merge conflict marker
from the dependency line containing "github.com/mattn/go-sqlite3 v1.14.32 //
indirect; indirect<<<<<<< HEAD" by editing that declaration to a valid go.mod
entry (e.g., keep a single "// indirect" comment and remove "<<<<<<< HEAD" and
any duplicate "indirect"), then save and run go mod tidy to ensure the module
file is valid; locate the string "github.com/mattn/go-sqlite3 v1.14.32 //
indirect; indirect<<<<<<< HEAD" to find the exact spot to correct.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/release-pipeline.yml:
- Line 122: The workflow pins Go to 1.26.4 but the container/build pins still
reference golang:1.26.3-alpine3.23, causing mixed Go patch versions; update any
occurrences of the Docker base image tag "golang:1.26.3-alpine3.23" and any
Makefile Go version variables currently set to 1.26.3 so they match "1.26.4" (or
explicitly document/justify why that file should remain at 1.26.3).

---

Outside diff comments:
In `@transports/go.mod`:
- Line 134: Remove the leftover merge conflict marker from the dependency line
containing "github.com/mattn/go-sqlite3 v1.14.32 // indirect; indirect<<<<<<<
HEAD" by editing that declaration to a valid go.mod entry (e.g., keep a single
"// indirect" comment and remove "<<<<<<< HEAD" and any duplicate "indirect"),
then save and run go mod tidy to ensure the module file is valid; locate the
string "github.com/mattn/go-sqlite3 v1.14.32 // indirect; indirect<<<<<<< HEAD"
to find the exact spot to correct.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: d3cc289d-326e-4e49-b035-fc31f62e478b

📥 Commits

Reviewing files that changed from the base of the PR and between 6d964db and 04e4a64.

📒 Files selected for processing (66)
  • .github/workflows/e2e-tests.yml
  • .github/workflows/helm-release.yml
  • .github/workflows/pr-tests.yml
  • .github/workflows/release-cli.yml
  • .github/workflows/release-pipeline.yml
  • .github/workflows/scripts/schemasync/go.mod
  • .github/workflows/snyk.yml
  • cli/go.mod
  • core/changelog.md
  • core/go.mod
  • core/version
  • examples/mcps/auth-demo-server/go.mod
  • examples/mcps/edge-case-server/go.mod
  • examples/mcps/error-test-server/go.mod
  • examples/mcps/go-test-server/go.mod
  • examples/mcps/http-no-ping-server/go.mod
  • examples/mcps/oauth-demo-server/go.mod
  • examples/mcps/parallel-test-server/go.mod
  • examples/plugins/hello-world-wasm-go/go.mod
  • examples/plugins/hello-world/go.mod
  • examples/plugins/http-transport-only/go.mod
  • examples/plugins/llm-only/go.mod
  • examples/plugins/mcp-only/go.mod
  • examples/plugins/multi-interface/go.mod
  • framework/changelog.md
  • framework/go.mod
  • framework/version
  • plugins/compat/changelog.md
  • plugins/compat/go.mod
  • plugins/compat/version
  • plugins/governance/changelog.md
  • plugins/governance/go.mod
  • plugins/governance/version
  • plugins/jsonparser/changelog.md
  • plugins/jsonparser/go.mod
  • plugins/jsonparser/version
  • plugins/logging/changelog.md
  • plugins/logging/go.mod
  • plugins/logging/version
  • plugins/maxim/changelog.md
  • plugins/maxim/go.mod
  • plugins/maxim/version
  • plugins/mocker/changelog.md
  • plugins/mocker/go.mod
  • plugins/mocker/version
  • plugins/otel/changelog.md
  • plugins/otel/go.mod
  • plugins/otel/version
  • plugins/prompts/changelog.md
  • plugins/prompts/go.mod
  • plugins/prompts/version
  • plugins/semanticcache/changelog.md
  • plugins/semanticcache/go.mod
  • plugins/semanticcache/version
  • plugins/telemetry/changelog.md
  • plugins/telemetry/go.mod
  • plugins/telemetry/version
  • tests/async/go.mod
  • tests/e2e/clis/go.mod
  • tests/governance/go.mod
  • tests/scripts/1millogs/go.mod
  • tests/scripts/migration-checker/go.mod
  • tests/semanticcache/go.mod
  • transports/changelog.md
  • transports/go.mod
  • transports/version

Comment thread .github/workflows/release-pipeline.yml
@akshaydeo
akshaydeo force-pushed the 06-06-changelogs_and_go_upgrade_to_1.26.4 branch 2 times, most recently from cdec38b to d46a9f0 Compare June 5, 2026 22:30

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 8

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
transports/go.mod (1)

134-134: ⚠️ Potential issue | 🔴 Critical

Fix merge-conflict markers in transports/go.mod (line 134).
transports/go.mod contains <<<<<<< HEAD mid-line inside the require entry for github.com/mattn/go-sqlite3 (…// indirect; indirect<<<<<<< HEAD), which makes the module manifest invalid. Remove the conflict markers and keep the intended require stanza(s), then run go mod tidy in the transports module.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@transports/go.mod` at line 134, Remove the merge-conflict marker from the
go.mod require line so the stanza for github.com/mattn/go-sqlite3 reads normally
(keep the intended comment "// indirect" and remove "<<<<<<< HEAD"); then save
the cleaned transports/go.mod and run "go mod tidy" in the transports module to
regenerate a valid go.sum and ensure module manifests are consistent.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@plugins/jsonparser/changelog.md`:
- Line 1: Add a top-level H1 heading above the first changelog bullet so the
file no longer starts with a list item (e.g., insert a line like "# Changelog"
before the existing "chore: upgraded core to v1.5.17 and framework to v1.3.17"
entry) to satisfy markdownlint MD041.

In `@plugins/logging/changelog.md`:
- Line 1: The changelog starts with a list item "feat: multiple customers logs
and usage tracking (`#4066`)" and lacks a top-level heading; update the file by
inserting a single H1 heading (e.g., "Changelog" or "Unreleased") above that
list item so the file satisfies markdownlint MD041 and the existing entry
remains unchanged.

In `@plugins/maxim/changelog.md`:
- Line 1: The changelog currently starts with a bullet item ("feat:
`request_headers` pattern capture with wildcard support (`#4012`)"), which
violates markdownlint MD041; fix it by inserting an H1 heading as the very first
line of plugins/maxim/changelog.md (for example: "# Changelog") so the file
begins with a top-level heading before the existing bullet content.

In `@plugins/mocker/changelog.md`:
- Line 1: The top of changelog.md currently begins with a list item which
triggers markdownlint MD041; add a top-level heading (for example insert a
single line "# Changelog" or similar) above the existing "- chore: upgraded core
to v1.5.17 and framework to v1.3.17" entry so the file starts with an H1 heading
and the lint rule is satisfied.

In `@plugins/otel/changelog.md`:
- Line 1: Add a top-level heading to the changelog by inserting an H1 (e.g., "#
Changelog" or "# Release Notes") above the existing list item so the file begins
with a top-level heading instead of a list; update plugins/otel/changelog.md by
placing the heading on line 1 and leaving the existing list entry below it to
resolve markdownlint MD041.

In `@plugins/prompts/changelog.md`:
- Line 1: The file plugins/prompts/changelog.md starts with a list item which
triggers markdownlint MD041; add a top-level heading before the bullet list (for
example add an H1 like "# Changelog" or another appropriate title) so the first
line is a heading rather than a list item; update the file changelog.md
accordingly to place the H1 above the existing "chore: upgraded core to v1.5.17
and framework to v1.3.17" list entry.

In `@plugins/semanticcache/changelog.md`:
- Line 1: Add an H1 heading at the top of changelog.md to satisfy markdownlint
MD041: insert a top-level title (e.g., "Changelog" or a relevant release
heading) above the existing list item so the file no longer begins with a list;
ensure the new heading precedes the line "- chore: upgraded core to v1.5.17 and
framework to v1.3.17".

In `@plugins/telemetry/changelog.md`:
- Line 1: The changelog is missing a top-level H1 heading causing markdownlint
MD041; open the changelog.md content (the line starting with "chore: upgraded
core...") and insert a single H1 heading like "# Changelog" as the first line
above the existing entry so the file begins with that heading and the existing
bullet/entry follows it.

---

Outside diff comments:
In `@transports/go.mod`:
- Line 134: Remove the merge-conflict marker from the go.mod require line so the
stanza for github.com/mattn/go-sqlite3 reads normally (keep the intended comment
"// indirect" and remove "<<<<<<< HEAD"); then save the cleaned
transports/go.mod and run "go mod tidy" in the transports module to regenerate a
valid go.sum and ensure module manifests are consistent.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 3097cc57-7b68-45fd-82fd-53aff3bdfacf

📥 Commits

Reviewing files that changed from the base of the PR and between 04e4a64 and d46a9f0.

📒 Files selected for processing (73)
  • .github/workflows/configs/docker-compose.yml
  • .github/workflows/e2e-tests.yml
  • .github/workflows/helm-release.yml
  • .github/workflows/pr-tests.yml
  • .github/workflows/release-cli.yml
  • .github/workflows/release-pipeline.yml
  • .github/workflows/scripts/release-bifrost-http-prep.sh
  • .github/workflows/scripts/schemasync/go.mod
  • .github/workflows/snyk.yml
  • Makefile
  • cli/go.mod
  • core/changelog.md
  • core/go.mod
  • core/version
  • examples/mcps/auth-demo-server/go.mod
  • examples/mcps/edge-case-server/go.mod
  • examples/mcps/error-test-server/go.mod
  • examples/mcps/go-test-server/go.mod
  • examples/mcps/http-no-ping-server/go.mod
  • examples/mcps/oauth-demo-server/go.mod
  • examples/mcps/parallel-test-server/go.mod
  • examples/plugins/hello-world-wasm-go/go.mod
  • examples/plugins/hello-world/Makefile
  • examples/plugins/hello-world/go.mod
  • examples/plugins/http-transport-only/go.mod
  • examples/plugins/llm-only/go.mod
  • examples/plugins/mcp-only/go.mod
  • examples/plugins/multi-interface/go.mod
  • framework/changelog.md
  • framework/go.mod
  • framework/version
  • plugins/compat/changelog.md
  • plugins/compat/go.mod
  • plugins/compat/version
  • plugins/governance/changelog.md
  • plugins/governance/go.mod
  • plugins/governance/version
  • plugins/jsonparser/changelog.md
  • plugins/jsonparser/go.mod
  • plugins/jsonparser/version
  • plugins/logging/changelog.md
  • plugins/logging/go.mod
  • plugins/logging/version
  • plugins/maxim/changelog.md
  • plugins/maxim/go.mod
  • plugins/maxim/version
  • plugins/mocker/changelog.md
  • plugins/mocker/go.mod
  • plugins/mocker/version
  • plugins/otel/changelog.md
  • plugins/otel/go.mod
  • plugins/otel/version
  • plugins/prompts/changelog.md
  • plugins/prompts/go.mod
  • plugins/prompts/version
  • plugins/semanticcache/changelog.md
  • plugins/semanticcache/go.mod
  • plugins/semanticcache/version
  • plugins/telemetry/changelog.md
  • plugins/telemetry/go.mod
  • plugins/telemetry/version
  • tests/async/go.mod
  • tests/e2e/clis/go.mod
  • tests/governance/go.mod
  • tests/scripts/1millogs/go.mod
  • tests/scripts/migration-checker/go.mod
  • tests/semanticcache/go.mod
  • transports/Dockerfile
  • transports/Dockerfile.local
  • transports/Dockerfile.redhat
  • transports/changelog.md
  • transports/go.mod
  • transports/version

@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- chore: upgraded core to v1.5.17 and framework to v1.3.17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add a top-level heading before the first changelog bullet.

Line 1 starts with a list item, which triggers markdownlint MD041. Add an H1 at the top.

Suggested fix
+# Changelog
+
 - chore: upgraded core to v1.5.17 and framework to v1.3.17
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/jsonparser/changelog.md` at line 1, Add a top-level H1 heading above
the first changelog bullet so the file no longer starts with a list item (e.g.,
insert a line like "# Changelog" before the existing "chore: upgraded core to
v1.5.17 and framework to v1.3.17" entry) to satisfy markdownlint MD041.

Comment thread plugins/logging/changelog.md
@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- feat: `request_headers` pattern capture with wildcard support (#4012)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Insert an H1 heading at the top of this changelog.

Line 1 currently starts with a bullet and violates markdownlint MD041.

Suggested fix
+# Changelog
+
 - feat: `request_headers` pattern capture with wildcard support (`#4012`)
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- feat: `request_headers` pattern capture with wildcard support (#4012)
# Changelog
- feat: `request_headers` pattern capture with wildcard support (`#4012`)
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/maxim/changelog.md` at line 1, The changelog currently starts with a
bullet item ("feat: `request_headers` pattern capture with wildcard support
(`#4012`)"), which violates markdownlint MD041; fix it by inserting an H1 heading
as the very first line of plugins/maxim/changelog.md (for example: "#
Changelog") so the file begins with a top-level heading before the existing
bullet content.

@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- chore: upgraded core to v1.5.17 and framework to v1.3.17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add a top-level changelog heading.

Line 1 starts with a list item and fails markdownlint MD041.

Suggested fix
+# Changelog
+
 - chore: upgraded core to v1.5.17 and framework to v1.3.17
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/mocker/changelog.md` at line 1, The top of changelog.md currently
begins with a list item which triggers markdownlint MD041; add a top-level
heading (for example insert a single line "# Changelog" or similar) above the
existing "- chore: upgraded core to v1.5.17 and framework to v1.3.17" entry so
the file starts with an H1 heading and the lint rule is satisfied.

Comment thread plugins/otel/changelog.md
@@ -1 +1,3 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- feat: `disable_content_logging` option to drop message/tool content from exported spans (#4064)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Prepend a top-level heading to this changelog file.

Line 1 starts with a list and triggers markdownlint MD041.

Suggested fix
+# Changelog
+
 - feat: `disable_content_logging` option to drop message/tool content from exported spans (`#4064`)
 - feat: `request_headers` pattern capture with wildcard support (`#4012`)
 - feat: multiple OTel collectors support (`#3894`)
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- feat: `disable_content_logging` option to drop message/tool content from exported spans (#4064)
# Changelog
- feat: `disable_content_logging` option to drop message/tool content from exported spans (`#4064`)
- feat: `request_headers` pattern capture with wildcard support (`#4012`)
- feat: multiple OTel collectors support (`#3894`)
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/otel/changelog.md` at line 1, Add a top-level heading to the
changelog by inserting an H1 (e.g., "# Changelog" or "# Release Notes") above
the existing list item so the file begins with a top-level heading instead of a
list; update plugins/otel/changelog.md by placing the heading on line 1 and
leaving the existing list entry below it to resolve markdownlint MD041.

@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- chore: upgraded core to v1.5.17 and framework to v1.3.17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add an H1 heading before the bullet list.

Line 1 begins with a list item and violates markdownlint MD041.

Suggested fix
+# Changelog
+
 - chore: upgraded core to v1.5.17 and framework to v1.3.17
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- chore: upgraded core to v1.5.17 and framework to v1.3.17
# Changelog
- chore: upgraded core to v1.5.17 and framework to v1.3.17
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/prompts/changelog.md` at line 1, The file
plugins/prompts/changelog.md starts with a list item which triggers markdownlint
MD041; add a top-level heading before the bullet list (for example add an H1
like "# Changelog" or another appropriate title) so the first line is a heading
rather than a list item; update the file changelog.md accordingly to place the
H1 above the existing "chore: upgraded core to v1.5.17 and framework to v1.3.17"
list entry.

@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- chore: upgraded core to v1.5.17 and framework to v1.3.17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add a top-level heading to resolve markdownlint MD041.

Line 1 starts with a list item instead of an H1.

Suggested fix
+# Changelog
+
 - chore: upgraded core to v1.5.17 and framework to v1.3.17
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- chore: upgraded core to v1.5.17 and framework to v1.3.17
# Changelog
- chore: upgraded core to v1.5.17 and framework to v1.3.17
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/semanticcache/changelog.md` at line 1, Add an H1 heading at the top
of changelog.md to satisfy markdownlint MD041: insert a top-level title (e.g.,
"Changelog" or a relevant release heading) above the existing list item so the
file no longer begins with a list; ensure the new heading precedes the line "-
chore: upgraded core to v1.5.17 and framework to v1.3.17".

@@ -1 +1 @@
- chore: upgraded core to v1.5.16 and framework to v1.3.16 No newline at end of file
- chore: upgraded core to v1.5.17 and framework to v1.3.17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Add an H1 heading at the top of the changelog.

Line 1 begins with a bullet and fails markdownlint MD041.

Suggested fix
+# Changelog
+
 - chore: upgraded core to v1.5.17 and framework to v1.3.17
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- chore: upgraded core to v1.5.17 and framework to v1.3.17
# Changelog
- chore: upgraded core to v1.5.17 and framework to v1.3.17
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 1-1: First line in a file should be a top-level heading

(MD041, first-line-heading, first-line-h1)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@plugins/telemetry/changelog.md` at line 1, The changelog is missing a
top-level H1 heading causing markdownlint MD041; open the changelog.md content
(the line starting with "chore: upgraded core...") and insert a single H1
heading like "# Changelog" as the first line above the existing entry so the
file begins with that heading and the existing bullet/entry follows it.

@akshaydeo
akshaydeo force-pushed the 06-06-changelogs_and_go_upgrade_to_1.26.4 branch from d46a9f0 to e8dd35d Compare June 6, 2026 06:16

akshaydeo commented Jun 6, 2026

Copy link
Copy Markdown
Contributor Author

Merge activity

  • Jun 6, 6:20 AM UTC: A user started a stack merge that includes this pull request via Graphite.
  • Jun 6, 6:20 AM UTC: @akshaydeo merged this pull request with Graphite.

@akshaydeo
akshaydeo merged commit 2c7f4a1 into dev Jun 6, 2026
14 of 16 checks passed
@akshaydeo
akshaydeo deleted the 06-06-changelogs_and_go_upgrade_to_1.26.4 branch June 6, 2026 06:20
@coderabbitai coderabbitai Bot mentioned this pull request Jun 7, 2026
17 tasks
akshaydeo added a commit that referenced this pull request Jun 7, 2026
This PR bumps the Go toolchain version from `1.26.3` to `1.26.4` across all modules and CI workflows, and cuts a new release (`core` v1.5.17, `framework` v1.3.17, `transports` v1.5.9, `plugins/compat` v0.1.16, `plugins/governance` v1.5.17, and associated plugin versions) incorporating a large batch of features and fixes accumulated since the previous release.

- **Go 1.26.4** — Updated `go-version` in all GitHub Actions workflows (`e2e-tests`, `helm-release`, `pr-tests`, `release-cli`, `release-pipeline`, `snyk`) and all `go.mod` files (core, framework, transports, cli, all plugins, examples, and test modules).
- **Core (v1.5.17)** — OpenAI compaction support, multi-customer logs and usage tracking, multiple team/business unit support, `request_headers` wildcard pattern capture for OTel and Maxim plugins, xAI `x_search` tool, fetch URL validation with SSRF hardening, `file://` pricing URL scheme, virtual key provider fan-out filtering, and a broad set of fixes including Anthropic prompt cache key, empty thinking block stripping, OpenAI stream usage event cleanup, Gemini numeric schema constraints, stale connection retries, Azure Claude diagnostic strip, and passthrough budget handling.
- **Framework (v1.3.17)** — Scope-aware budgets and limits wired from model configs, provider-level governance, multiple customer budget support with `calendar_aligned` windows, paginated virtual key fetch, `config.json` source-of-truth flow, FTS index cap reduction, sync worker drift fix, cascade deletes for model configs, and high-scale virtual key flow improvements.
- **Transports (v1.5.9)** — Full changelog covering all of the above plus UI improvements (log navigation, customer detail sheet, `BudgetDisplay` component, inline loading shell, materialized view alias), SCIM provisioning fields, Helm/config schema additions (`roles`, `per_user_oauth`), client IP resolution from forwarded headers, and dependency upgrades (`recharts` to 3.8.1, `golang.org/x` CVE remediation).
- **Plugins** — `governance` v1.5.17 adds team budget/rate-limit exporters, ghost node reconciliation fix, and VK double usage counting fix; `logging` v1.5.17 adds wildcard header capture and file attachment rendering; `otel` v1.2.17 adds `disable_content_logging` and multiple collectors support; `maxim` v1.6.17 adds `request_headers` wildcard capture; `compat` v0.1.16 fixes `max_tokens` preservation during param filtering.

- [ ] Bug fix
- [x] Feature
- [ ] Refactor
- [ ] Documentation
- [x] Chore/CI

- [x] Core (Go)
- [x] Transports (HTTP)
- [x] Providers/Integrations
- [x] Plugins
- [x] UI (React)
- [ ] Docs

```sh
go version  # should report go1.26.4

cd core && go test ./...

cd framework && go test ./...

cd transports && go test ./...

cd plugins/governance && go test ./...
cd plugins/logging && go test ./...
cd plugins/otel && go test ./...

cd ui
pnpm i
pnpm build
pnpm test
```

- [ ] Yes
- [x] No

- Fetch URL validation hardened against SSRF by tightening IP checks for private networks and link-local addresses (#4092, #3947, #3991).
- Transitive `golang.org/x` dependencies (crypto, net, sys, text) bumped to address Docker Scout CVEs (#3900).

- [x] I read `docs/contributing/README.md` and followed the guidelines
- [x] I added/updated tests where appropriate
- [x] I updated documentation where needed
- [x] I verified builds succeed (Go and UI)
- [x] I verified the CI pipeline passes locally if applicable

<!-- This is an auto-generated comment: release notes by coderabbit.ai -->

* **New Features**
  * OpenAI compaction, multi-customer/team logstore support, request-header wildcard capture, enhanced governance (provider-level & scope-aware limits), disable-content-logging option, support for multiple OpenTelemetry collectors, SSRF hardening and URL validation.

* **Chores**
  * Bumped Go toolchain across modules and updated component/plugin version releases.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
@coderabbitai coderabbitai Bot mentioned this pull request Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants