Breaking changes
- security(agents)!: Block SSRF in MCP and custom LLM requests (#3499)
Agents
- fix(agents): Preserve original errors during runtime cleanup (#3492)
Integrations
- fix(ui+integrations): Label MCP OAuth picker by provider grant type (#3451)
- fix(integrations): Let RunReveal MCP connect to a self-hosted server URL (#3455)
- feat(integrations): Add AWS role chaining to boto3, S3, and DuckDB (#3516)
User interface
- feat(ui): Add connected status filter and sort connected MCP servers first (#3510)
Infrastructure
- docs(infra): Add Docker Compose action throughput sizing guide (#3511)
- infra: Tune Compose executor concurrency (#3513)
- infra: Pull MinIO image from quay.io instead of Docker Hub (#3517)
Full changelog: 1.0.0-rc.1...1.0.0-rc.2