TracecatHQ/tracecat 1.0.0-rc.1

Tracecat 1.0.0-rc.1

on GitHub

Breaking changes

• feat(api)!: Require an entitlement for additional workspaces (#3462)
• security(deps)!: Update runtime dependencies (#3471)

Security

• security: Fix polynomial regexes and dom xss (#3479)

Case management

• fix(cases): Return validation errors for internal attachment uploads (#3460)

Agents

• fix(agents): Classify LLM failures and diagnose read timeouts (#3432)
• feat(agents): Open source presets, skills, and MCP catalog connectors (#3461)
• feat(agents): Add Ollama, vLLM, LiteLLM, OpenRouter built-in providers (#3464)
• docs(agents): Mark presets, skills, secrets/variables, and MCP catalog as open source (#3465)
• refactor(agents): Unify dashboard selection and guide model setup (#3473)

Functions

• fix(functions): Extract escaped-dot defanged URLs (#3491)

Integrations

• fix(integrations): Bound registry discovery allocator arenas (#3488)
• docs(infra): Warn to back up compose file and Caddyfile on update (#3494)

Engine

• feat(engine): Add unsafe knob to disable secret error withholding (#3458)
• fix(engine): Preserve registry tool cancellation (#3486)

API

• fix(api): Return classified webhook failures without platform alerts (#3457)

Documentation

• docs: Add feature GIF grid to README (#3466)
• docs: Refresh air-gapped model guidance (#3493)

Dependencies

• build(deps): Patch js-yaml transitive dependencies (#3477)

Other changes

• chore: Add Codex local environment for development (#3478)
• chore: Trim AGENTS.md and move path-specific rules into nested notes (#3481)
• chore: Run uv sync and pnpm install in parallel in Codex setup (#3483)

Full changelog: 1.0.0-beta.53-rc.1...1.0.0-rc.1