Skip to main content

Release notes

Version history for Tetrate Agent Router. Each release lists its security updates, new features, bug fixes, and deprecations, together with upgrade and rollback notes for platform operators.

Releases are cut every Wednesday, and a patch ships when it is needed rather than waiting for the next cut. Each release is supported for six months from the day it ships, and every entry below carries its end-of-support date. The window applies to the release an operator runs, the self-hosted data plane and the tare CLI, since the Tetrate-hosted management plane is always current. Supported means the management plane keeps working with that release until the date; fixes are not backported, so getting a fix means upgrading to a release that contains it. This page is the published list of versions that the Maintenance and Support Terms refer to as Supported Software.

What each supported release requires and ships is listed on Release compatibility, and deprecations across releases are tracked on Deprecations.

v0.2.1​

Released September 4, 2026. Supported until March 4, 2027.

v0.2.1 is a security patch on top of v0.2.0. Every data plane and management plane image is rebuilt on updated Go dependencies and a patched Go toolchain to clear reported vulnerabilities. Only dependency and toolchain versions change: the release carries no source, API, configuration, or behavior change, and contains no new features, bug fixes, or deprecations.

Upgrade and rollback​

  • No breaking changes. No operator action is required before upgrading.
  • The upgrade rolls through without dropping traffic.
  • Rollback to v0.2.0 is unconditional.

Security updates​

Data plane images​

The gateway, the rate limit service, the AI gateway controller and its ext-proc, and the bundled kubectl and helm are rebuilt to clear reported vulnerabilities in their bundled Go dependencies:

Management plane and CLI images​

The management plane components, the tare CLI and liaison images, and the berglas secret resolver are rebuilt on updated golang.org/x/crypto, golang.org/x/net, golang.org/x/text, golang.org/x/mod (CVE-2026-56864, CVE-2026-56865), and google.golang.org/grpc, and on a patched Go toolchain that clears the Go standard library CVEs.

Telemetry​

The bundled OpenTelemetry collector image is updated to clear a high-severity issue in Apache Thrift (CVE-2026-43871).

v0.2.0​

Released September 2, 2026. Supported until March 2, 2027.

v0.2.0 ships 1 breaking change, 2 security updates, 8 new features, and 15 bug fixes. The release contains a breaking change, and operator action is required before upgrading. Behavior between the management plane and the data plane changed in this release. The most severe security issue cleared is high.

Upgrade and rollback​

  • Breaking change: operator action is required before upgrading. See the warning below.
  • The upgrade rolls through without dropping traffic.
  • Rollback to v0.1.5 is unconditional.
Action required before upgrading

Provider creation through the catalog API changed. UpsertProvider previously asserted "enabled" on every write; a provider created without is_enabled now arrives disabled, and registering a model under it is refused with FailedPrecondition until the provider is enabled. Scripts that create providers must pass is_enabled explicitly. Existing providers are unaffected, and enabling an already created provider is a single further call.

The per-entry change list for this release predates this page. Change lists are published from v0.2.1 onward.

v0.1.5​

Released August 28, 2026. Supported until February 28, 2027.

v0.1.5 ships 1 breaking change, 11 security updates, 27 new features, 102 bug fixes, and 1 deprecation. Behavior between the management plane and the data plane changed in this release. The most severe security issue cleared is high.

Upgrade and rollback​

  • The release carries a breaking change, but no operator action is required before upgrading.
  • The upgrade rolls through without dropping traffic.
  • Rollback to the previous release is unconditional.

The per-entry change list for this release predates this page. Change lists are published from v0.2.1 onward.

Where to go next

Release compatibility

What each supported release requires and ships, one row per release.

Deprecations

The removal policy and the running list of what is deprecated today.

tare upgrade

Upgrades an installed data plane to the current release.

Maintenance and Support Terms

Service levels, severity definitions, and response times.