> ## Documentation Index
> Fetch the complete documentation index at: https://docs.budecosystem.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Release Notes

> Version history and changelog for Bud-Stack releases

This page tracks notable changes for each Bud-Stack release. The current chart
`appVersion` is **0.14.2**. For the complete commit-level history, see the
[GitHub releases page](https://github.com/BudEcosystem/bud-runtime/releases).

## 0.14.2

*Released 2026-06-11.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.1...0.14.2)

A maintenance release focused on security hardening, auth convergence, and
UI bug fixes.

**Security**

* **budmodel** — block Zip Slip / path traversal in archive extraction.
* **buddoc** — enforce `max_file_size_mb` on OCR intake paths.
* **budauth (Keycloak theme)** — sanitize `ErrorBanner` HTML with `kcSanitize` (XSS fix).
* **ask-bud** — make the `kubectl` destructive-command guard fail closed.

**Auth & Identity**

* **budapp** — converge OIDC JIT provisioning and fix the Playground seed-admin flow.
* **budprompt** — inject sender identity into the bot agent context.
* **budplayground** — validate the API key against the gateway before login.
* **keycloak** — never render realm-import client attributes as `null`; theme update-profile / idp-review pages (budtheme 0.2.0).

**Frontend & Bug Fixes**

* **budadmin** — UI and API error-handling fixes, inference-table fixes, inference-list race conditions and sort-clear handling, `socket.off` no longer removes all listeners, and added missing router action icon mappings.
* **budCustomer** — reject on `403` in the axios interceptor instead of returning `false`.
* **budnotify** — return `ErrorResponse` with the correct HTTP status.

**Infrastructure**

* **budmodel** — add the `registry-cleanup-scheduler` cron to the Helm chart.
* **budgateway** — bump default CPU request to 1 and limit to 4.
* **budeval** — disabled by default to unblock ArgoCD sync.

## 0.14.1

*Released 2026-06-10.* [Full changelog](https://github.com/BudEcosystem/bud-runtime/compare/0.14.0...0.14.1)

A large release introducing the ArgoCD-based GitOps deployment model, agent
governance, teams support, and numerous infrastructure and UI improvements.

**Features**

* **Agent governance** — new agent-governance control surface: budapp authoring/lifecycle plus budgateway `/v1/governance`.
* **Teams** — added teams support across budapp.
* **Agent event triggers** — auto-provisioned MCP-gateway webhooks (Slack/Linear).
* **budprompt** — pydantic-ai hooks subsystem with a 1.98.0 upgrade; foreground Responses-API streaming timeout set to 30 minutes.
* **budapp** — `a2a_card` support in the create-prompt workflow.
* **budgateway** — lock-free model registry via `ArcSwap` to stop hot-path inference stalls.
* **budadmin** — guardrails tab layout with governance policy CRUD; agent builder UI improvements.
* **infra** — configurable Keycloak realm session/token lifespans; bot integration.

**Infrastructure & GitOps (ArgoCD migration)**

* Multi-part ArgoCD initialization: cluster add-ons, prod apps, clients, and the `pnap` project migrations.
* pgbouncer connection pooling, MongoDB 3-replica setup, SeaweedFS volume/PVC expansion.
* Helm chart updated to 0.14.0; dependency Helm charts published to OCI.

**Auth & Security**

* **budapp** — auth made OIDC-only with auto-seeded root user.
* **budapp/budnotify/budadmin** — repaired auth flows broken by the BFF redirect change.
* **budeval** — removed hardcoded ClickHouse Cloud credentials from config defaults.
* **ci** — closed the chart packaging secret leak; publish charts with `registry.bud.studio` image refs.

**Bug Fixes & Docs**

* **budadmin** — observability bar chart stabilized on live data; native tool details UI improvements.
* **budplayground** — prompt-config loading and chat-route error handling fixes.
* **budapp** — deployment deprecation driven by vendor `deprecation_date`.
* **docs** — ArgoCD installation guide, budadmin-ui development skill, and Mintlify cleanup of orphaned pages.
* **feat** — hide code interpreter and gate evaluations behind dev mode.