Release Notes
A list of changes and service versions for each release of the AGENTIC STAR Marketplace edition. For update instructions, see the Application Update Guide.
v2.6.0
Latest2026-07-04Update including full export of audit logs, bot protection via Cloudflare Turnstile, strengthened accessibility and multilingual support, and various stability improvements.
| Category | Changes | Services |
|---|---|---|
| Feature | Added a full-export feature for audit logs | agenticai-admin |
| Added bot protection at signup using Cloudflare Turnstile | librechat-auth | |
| Security | Strengthened verification across authentication / authorization paths and protected confidential information in log output across multiple services | librechatlibrechat-authagenticai-adminextauth-service |
| Improvement | Optimized container resource settings across services | gate-servicesagenticai-extapiqdrantlibrechat-auth |
| Comprehensively strengthened accessibility and multilingual support | librechatagenticai-admin | |
| Prevented garbled characters in CSV export (added UTF-8 BOM) and stabilized sort order | agenticai-admin | |
| Made DB migration processing idempotent to avoid registration conflicts on re-run | db-migration | |
| Fixed an ownership-loss issue that occurred during Warmpool Sandbox deletion | agent-sandbox-controller | |
| Fixed a false positive in ConfigMap drift detection | upgrade-controller |
v2.5.0
2026-06-21Update including a full expansion of multilingual support adding Korean (ko) and Vietnamese (vi), extension of the audit log retention period to two years, and UI improvements from the upgrade to the @agentic/ui 1.0 line.
| Category | Changes | Services |
|---|---|---|
| Feature | Added a resend button for the verification code (OTP) | librechat-auth |
| Fully expanded multilingual support, including Korean (ko) and Vietnamese (vi) | agenticai-adminlibrechatlibrechat-auth | |
| Changed the default audit log retention period to two years (24 months) and expanded the Qdrant preset long-term memory from 329 to 451 entries | db-migrationqdrant | |
| Added sort / order query parameters to the extauth-service access_logs list API | extauth-service | |
| Improved app version display and unified multilingual support based on the @agentic/ui availableCodes approach | agenticai-adminlibrechatlibrechat-auth | |
| Improvement | Updated @agentic/ui to the 1.0 line to improve the UI | agenticai-adminlibrechatlibrechat-auth |
| Output structured logs when an exception occurs in the SES health check | gate-services | |
| Retry with exponential backoff on HTTP 503 during email sending | librechat-auth | |
| Stability improvements for upgrade-controller SSE disconnection handling and various data consistency issues | upgrade-controller |
v2.4.0
2026-06-08Update including the addition of five languages to multilingual support, migration of the Sandbox CRD to v1beta1 / operatingMode with KEDA warm pool autoscaling, and Chat API outputFormat support.
| Category | Changes | Services |
|---|---|---|
| Feature | Expanded multilingual support to five languages (zh-Hans / zh-Hant / de-DE / pt-BR / it-IT). Bulk-added 24 missing email template and i18n translation keys across 12 languages | librechat-authagenticai-admin |
| Added an outputFormat parameter to the Chat API | agenticai-extapi | |
| Synced the Sandbox CRD to v1beta1 / operatingMode and introduced suspend / resume. Added a Pod OOMKilled detection helper and KEDA warm pool autoscaling RBAC behind a gate | agent-sandbox-controller | |
| Added a platform-version tooltip hint and a "cache reflection delay" note for system-settings to the admin screen | agenticai-admin | |
| Added and made mandatory a parallel deployment job to the AWS Marketplace dev environment | extauth-servicegate-servicesagent-executoragent-sandbox-controlleragenticai-adminagenticai-extapilibrechat-auth | |
| Security | Fixed an infinite redirect loop when the account limit is reached in an SSO environment | librechat-auth |
| Improvement | Optimized the Qdrant CPU request from 1200m to 300m and auto-complete initContainer resource limits via the namespace LimitRange | qdrant |
| Resolved a DB migration registration defect and a master overwrite issue when upgrading master_data_common.sql | db-migration | |
| Added sort / order query parameters to the banned_urls list API | extauth-service | |
| Added prometheus-operator labels to ServiceMonitor / PrometheusRule to correct the monitoring configuration | agent-executoragenticai-extapi | |
| Synced the Helm chart CRD to v1beta1 + operatingMode and added a CRD drift detection guard to CI | agent-sandbox-controller | |
| Breaking Change | Removed spec.replicas from the Sandbox CRD API and introduced spec.operatingMode for suspend / resume | agent-sandbox-controller |
| With the migration of the Sandbox CRD from v1alpha1 to v1beta1, upgrading to this version requires uninstalling and reinstalling the Sandbox CRD beforehand | agent-sandbox-controller |
v2.3.0
2026-05-22Update including expanded administration features such as admin user creation (with CSV bulk import), announcements, and notification settings, along with security hardening via Redis authentication and X-Forwarded-For spoofing countermeasures.
| Category | Changes | Services |
|---|---|---|
| Feature | Added admin user creation (individual and CSV bulk import). Made displayName required and fixed username to the email address for accounts | agenticai-adminlibrechat-auth |
| Added announcement management (CRUD, admin screen, and portal display) | agenticai-adminlibrechatdb-migration | |
| Added a notification settings management screen | agenticai-admindb-migration | |
| Added support for registering and managing multiple (external) IdPs, with separated list/create/edit screens | agenticai-admin | |
| Added the ability to save local/private URLs for MCP servers | agenticai-admin | |
| Automatically generate a temporary password when none is specified at account creation (with temporary flag support) | librechat-auth | |
| Made the conversation area and panel area width resizable via a handle | librechat | |
| Implemented a Prometheus /metrics endpoint to enable up monitoring | agent-executor | |
| Security | Added password authentication for Redis / Redis Sentinel | gate-servicesagenticai-extapilibrechat |
| Strengthened X-Forwarded-For spoofing countermeasures by unifying on a shared getClientIp logic that trusts only the trailing hop | agenticai-adminlibrechat-auth | |
| Removed leakage of SQL and table names from audit-log metadata | agenticai-admin | |
| Fixed an authentication bypass on the Survey GET endpoint | agenticai-admin | |
| Made SMTP auth_method required and added enum validation | agenticai-admin | |
| Fixed a defect where an expired-password change could succeed even with an incorrect current password | librechat-auth | |
| Improvement | Set the Envoy forward proxy stream idle timeout to 1800 seconds | extauth-service |
| Pinned the Redis Docker image tag to 8.6.3 to improve stability | gate-services | |
| Fixed a silent failure in /send-async when all providers are unhealthy | gate-services | |
| Unified the notification UI on the design system toast | agenticai-admin | |
| Cleaned up multilingual translations (removed unused keys, filled in missing keys, and localized hardcoded Japanese) | librechat | |
| Increased MongoDB memory and PVC capacity | librechat | |
| Fixed a registration defect for the announcements / notification_settings / org_contexts / user_contexts tables in the v2.3.0 DB migration | db-migration |
v2.2.0
2026-05-09Major update including conversation archive overhaul with Cold Archive, enhanced A2A protocol support, and expanded multilingual coverage.
| Category | Changes | Services |
|---|---|---|
| Feature | Expanded multilingual support. Added Indonesian (id) and Arabic (ar), including 8 email templates | agent-executoragenticai-adminlibrechat-auth |
| Overhauled the archive feature. Completed the Cold Archive feature, migrated conversation data from MongoDB to PostgreSQL, and added archived conversation listing/restore/search to the S2S API | librechatagenticai-extapi | |
| Enhanced SandboxClaims operations. Added TTL-based automatic cleanup and claim UID label propagation | agent-sandbox-controller | |
| Added full-screen sortable DataTable to the Admin Console and migrated platform-version UI to @agentic/ui with Markdown release notes | agenticai-admin | |
| Implemented continuous deployment via automatic helm upgrade --install on develop merge in upgrade-controller | upgrade-controller | |
| Added archive_* tables and the execution_data.last_response_id column in DB migrations | db-migration | |
| Added auto-logout on Ban and a cancel option for the rectangular selection mode of image annotations | librechat | |
| Migrated authentication screens (profile-setup/OTP/reset-password) to the design system, introducing AuthSkeleton and CodeInput components | librechat-auth | |
| Automatically attach attributes.system="true" when registering service account clients | init-platform | |
| Security | Hardened audit logs against X-Forwarded-For spoofing and excluded tableName from exported audit logs to prevent information leakage | agenticai-admin |
| Removed SVG support for Marketplace Agent icons | agenticai-admin | |
| Added input validation to Keycloak Client create/update APIs | librechat-auth | |
| Prevented 401 errors caused by missing GITLAB_NPM_TOKEN propagation in npm ci jobs | agenticai-adminlibrechat-auth | |
| Improvement | Unified LibreChat/Auth UI under the design system. Migrated Toast, popover, code blocks, sidebar, ConfirmDialog, etc. | librechatlibrechat-authagenticai-admin |
| Unified cleanup processing and deliverables construction for chat in agenticai-extapi | agenticai-extapi | |
| Resolved cache N+1 problem and thundering herd to improve performance | librechat-auth | |
| Fixed chat response stack issue after 60 minutes idle and various streaming UI defects | librechat | |
| Progressively upgraded the @agentic/ui library | agenticai-adminlibrechatlibrechat-auth | |
| Changed Redis Sentinel readinessProbe to tcpSocket, improving Tilt/AKS environment resilience | gate-servicesagenticai-extapi | |
| Breaking Change | Completely removed the existing legacy archive feature based on the isArchived flag | librechat |
v2.1.0
2026-04-21Major update including platform version-up management, Agent Sandbox CRD controller, and enhanced authentication security.
| Category | Changes | Services |
|---|---|---|
| Feature | Introduced platform version-up management. Realized self-upgrade by operators with real-time SSE progress, lock acquisition only during upgrade execution, and step-up upgrades across major versions | upgrade-controller |
| Introduced Agent Sandbox lifecycle management via Kubernetes CRDs. Supports suspend/resume via Pod Snapshot, agent startup latency reduction via Warm Pool, and flexible sandbox configuration through KEP-0174 label/annotation propagation | agent-sandbox-controlleragent-executor | |
| Separated Keycloak Extensions into an independent wrapper chart, clarifying version management and upgrade paths | keycloak-extensionslibrechat-auth | |
| Added GPT-5.4 model support and improved title generation through Azure integration | librechat | |
| Implemented WebPush browser notifications across frontend and backend. Supports Service Worker and VAPID configuration via environment variables | librechat | |
| Localized the platform version management screen into 5 languages. Restored brand tone and Japanese-priority copy on the template screen, and added Thai locale to MUI DataGrid | agenticai-admin | |
| Upgraded Qdrant vector database to v1.17.1 to improve performance | qdrant | |
| Strengthened the database migration foundation. Added qdrant-client v1.17.1 support and managed lifecycle of telemetry/audit log partitioned tables via pg_partman | db-migration | |
| Security | Standardized Azure CLI, Helm, and container base images to maintained pinned versions, strengthening supply-chain attack mitigation across all services | - |
| Hardened authentication processing. Added timing-attack mitigation via safeCompare, made cookies httpOnly, and removed PII from authentication logs | librechat-auth | |
| Introduced magic-bytes validation for PPTX template uploads to reject non-ZIP content | agenticai-admin | |
| Made Content Security Policy img-src extensible via environment variables for operational flexibility | librechat | |
| Applied security rules during Claude code generation to strengthen safe code output | agent-executoragenticai-adminlibrechat | |
| Improvement | Permanently fixed the Jaeger MEMORY_MAX_TRACES setting to resolve OOMKill issues | agenticai-datadogagenticai-observabilitypvc-lifecycle-manager |
| Changed the Grafana Deployment strategy to Recreate to resolve rollout stalls on Read-Write-Once PVC | agenticai-datadogagenticai-observabilitypvc-lifecycle-manager | |
| Unified service deployment to helm upgrade --install to improve rollout safety and reproducibility | - | |
| Disabled default generic rules of the Prometheus Adapter to optimize resource allocation and improve memory efficiency | - | |
| Breaking Change | Changed PPTX template format from HTML conversion to raw PPTX + metadata. Existing custom templates may need to be recreated | agenticai-admin |
| Migrated internal authentication keys to a service-token scheme. Operators with custom integrations are recommended to review their authentication configuration before upgrading | librechat-authagenticai-extapi |
v2.0.0
2026-04-01Major update including agent management and security enhancements.
| Category | Changes | Services |
|---|---|---|
| Feature | Added Marketplace agent management features and API | agenticai-adminlibrechatagenticai-extapi |
| Added device management. Supports bulk admin operations and remote logout | librechat-auth | |
| Added password expiration settings screen. Controls password menu visibility for SSO users | agenticai-adminlibrechat | |
| Security | Addressed Grafana security update CVE-2024-9264 | agenticai-datadogagenticai-observability |
| Resolved npm audit vulnerabilities across multiple services | - | |
| Strengthened CSP and security headers through helmet integration | librechat | |
| Added SecurityContext to deployments | gate-services | |
| Added Redis Sentinel authentication with NetworkPolicy | librechat-auth | |
| Added NetworkPolicy template for Qdrant | qdrant | |
| Improvement | Migrated session validation from token blacklist to Keycloak introspection | librechat-auth |
| Improved Envoy resilience. Added AntiAffinity and PodDisruptionBudget | extauth-service | |
| Added Helm cert-manager support. Supports self-signed certificates | agenticai-extapi |
v1.0.0
2026-01-15Initial release of AGENTIC STAR Marketplace edition.
| Category | Changes | Services |
|---|---|---|
| Feature | Initial release | - |