txlog/agent v1.19.0

on GitHub

Removed: kernel vulnerability flags

This release removes the Copy Fail (CVE-2026-31431), Dirty Frag and Fragnesia detection from the agent, along with the txlog failures command.

These three were only the first of a large and still growing group of kernel vulnerabilities. Keeping up with all of them was not feasible, and tracking only the first three gave a false sense of coverage. Vulnerability tracking is now handled exclusively by the OSV pipeline on the server side.

What changed:

• The txlog failures command no longer exists. Remove it from any scripts,
  cron jobs or automation that invoke it.
• txlog build no longer sends the copy_fail, copy_fail_escalation,
  copy_fail_details, dirty_frag and fragnesia fields in the execution
  payload.
• Txlog Server 1.32.0 dropped the matching database columns, so historical
  values for these flags are discarded on server upgrade.

Compatibility: no coordinated upgrade is required. Older agents that still send these fields keep working against the new server, since the unknown JSON keys are ignored.

Maintenance

• Built with Go 1.26.6.
• Updated dependencies: go-isatty 0.0.24, go-toml/v2 2.4.3, yaml/v3 3.0.5,
  golang.org/x/net 0.58.0, golang.org/x/sys 0.47.0, golang.org/x/text 0.41.0.
• golang.org/x/sys is now an indirect dependency.
• Documentation: dropped the stale Model Context Protocol section from the README
  and bumped the pandoc version in the development setup instructions.

Full Changelog: v1.18.0...v1.19.0