v0.5.1
Released September 25, 2026. Supported until March 25, 2027.
v0.5.1 ships one security update and one bug fix. The most severe security issue cleared is HIGH.
A fully detailed version of these release notes (including artifact versions) is included in the Admin Console.
The full release notes are opened from the Admin Console, as described in Check the management plane version.
Upgrade and rollback
- The release carries no breaking change, and no operator action is required before upgrading.
- The upgrade rolls through without dropping traffic.
- Rollback to v0.5.0 is unconditional.
Security updates
Gateway
Bundled gRPC and networking dependencies are updated to address CVE-2026-84445.
Bug fixes
Gateway
A Model Context Protocol (MCP) server that needs a credential keeps its tools available between configuration syncs. Available once the data plane is on 0.5.1 or later.
Known issues
Gateway
A data plane keeps enforcing project isolation after its last project gateway is deleted (the v0.3.0 last-gateway fix), but that memory lives in the gateway process. A data plane restarted while it has no project gateways comes back open, accepting any API key on any hostname for any project, until a gateway is configured again. A data plane whose last project gateway has been removed should not be restarted before a replacement gateway is in place, or should be taken out of service until one is.