v2026.7.8

July 08, 2026

Security

• Bumped golang.org/x/crypto from v0.37.0 to v0.53.0 to patch 10 critical CVEs in x/crypto/ssh (GHSA-vgwf-h737-ff37, GHSA-5cgq-3rg8-m6cv, GHSA-rm3j-f69w-wqmq, GHSA-x527-x647-q7gg, GHSA-89gr-r52h-f8rx, GHSA-jppx-rxg9-jmrx, GHSA-f5wc-c3c7-36mc, GO-2026-5005, GO-2026-5019, GO-2026-5020). Requires Go 1.25.0.

Dependency

• Bumped the minimum required Go version from 1.24.0 to 1.25.0. Building the agent from source now requires Go 1.25+.
• Bump github.com/buger/jsonparser from v1.1.1 to v1.1.2 to fix CVE-2026-32285 (DoS vulnerability)

v2025.8.29

August 29, 2025

Refactor

• BREAKING CHANGE: Refactor the automatic external_kind calculation for when posting to custom data integration so that "/" are not turned into "_"
• Remove the --extended configuration as the default configuration now matches the integration settings in OpsLevel

Dependency

• Bump actions/checkout from 4 to 5

v2025.7.23

July 23, 2025

Added

• Add ability to give --integration flag a custom integration webhook end point - see our docs for more information

Fixed

• If no --integration flag is given present the user with an error

Dependency

• Bump golang.org/x/net from 0.28.0 to 0.33.0
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
• Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0

v2024.11.22

November 22, 2024

Fixed

• Fix signal shutdown to actually shutdown all informers