What's Changed
Features
- feat(cli): improve the chat TUI rendering and input by @Charlesthebird in #3292
- feat(sandbox): adopt env guest service redesign by @thomasbarrett in #3148
- feat(outputschema): allow format, pattern and type lists, add opt-in outputSchemaStrict by @danielle-mustillo in #3284
- feat(auth): enforce owned-resource RBAC and scoped Substrate inventory by @supreme-gg-gg in #3299
- feat(adk): allow disabling ask_user through runtime defaults by @lexmass in #3298
- feat(auth): support human and machine principals by @EItanya in #3358
- feat(auth): add gateway Actor JWT credentials by @EItanya in #3359
- feat(api): resolve Agent metadata from scoped Actor tokens by @EItanya in #3362
- feat(controller): retry failed golden builds for Agents and SandboxTemplates by @danielle-mustillo in #3335
- feat(cli): export Helm installation with dry-run by @iplay88keys in #3432
Bug Fixes
- fix(substrate): scope Substrate reads and page tokens to the watched namespaces by @danielle-mustillo in #3261
- fix(session): expire abandoned input and auth waits by @adalundhe in #3254
- fix(ui): keep following a chat turn when its stream breaks by @garlicKim21 in #3198
- fix(a2a): deliver push notifications concurrently by @EItanya in #3366
- fix(build): set the version -X targets from the Go module path by @fiunchinho in #3376
- fix(codex): report the turn's error message by @fiunchinho in #3377
- fix(ui): show one loading state in the agent switcher by @vedantlavale in #3237
- fix: honor configured controller service account during install by @iplay88keys in #3406
- fix(ui): show consistent empty states for denied substrate inventory by @supreme-gg-gg in #3392
- fix(cli): preserve Substrate CLI access alongside controller grants by @iplay88keys in #3420
- fix: include image pull secrets in substrate worker pool service account by @jcopi in #3443
- fix(install): keep model credentials out of process arguments by @iplay88keys in #3446
- fix(api): remove unused Harness status and ADK fields by @EItanya in #3454
- fix(ci): enforce protobuf compatibility after pre-RC cleanup by @EItanya in #3455
Other Changes
- chore: fix stale issue close message by @timflannagan in #3308
- chore(helm): remove bundled grafana-mcp chart by @shaktisingh404 in #3294
- build(ui): serve the UI from distroless nginx with a Go entrypoint by @Charlesthebird in #3316
- chore(deps): update Substrate to v0.6.0 by @EItanya in #3325
- [Helm] Use full DNS name for kagent tools MCP server by @Stevenjin8 in #3334
- fix helm full DNS name tests by @Stevenjin8 in #3336
- chore(deps): upgrade Substrate to v0.7.0-alpha1 by @EItanya in #3338
- chore(deps): update setuptools requirement from >=84.0.0 to >=84.2.1 in /python by @dependabot[bot] in #3352
- build: Remove redundant Go module downloads by @timflannagan in #3346
- chore(deps): bump google-genai from 2.31.0 to 2.33.0 in /python in the python-google-ai group by @dependabot[bot] in #3349
- chore(deps): bump the python-minor-patch group in /python with 5 updates by @dependabot[bot] in #3351
- Add a helm configuration option for SandboxConfig ref by @jcopi in #3357
- chore(deps): update anthropic[vertex] requirement from >=1.15.0 to >=2.2.0 in /python by @dependabot[bot] in #3353
- chore(deps): bump the npm-minor-patch group in /ui with 5 updates by @dependabot[bot] in #3348
- build(ui): build the UI on node:24.22.1-alpine by @Charlesthebird in #3383
- build: decouple protobuf generation from builds by @timflannagan in #3381
- refactor(session)!: remove public suspend and resume controls by @EItanya in #3409
- refactor(cli): share chart name between rendering and installation by @iplay88keys in #3410
- core: support cross-namespace ModelConfig and RemoteMCPServer with allowedNamespaces by @shashankram in #3382
- refactor(cli): extract reusable installation library by @iplay88keys in #3427
- chore: remove generated env var docs and check by @timflannagan in #3434
- chore(deps): upgrade Substrate to v0.7.0-alpha2 by @EItanya in #3444
- refactor(api)!: make pre-RC API breaks for future machine principals by @EItanya in #3453
- chore: upgrade Substrate to v1.0.0-rc1 by @EItanya in #3457
New Contributors
- @shaktisingh404 made their first contribution in #3294
- @Stevenjin8 made their first contribution in #3334
- @lexmass made their first contribution in #3298
- @fiunchinho made their first contribution in #3376
- @chipfighter made their first contribution in #2998
Full Changelog: v1.0.0-alpha17...v1.0.0-rc1