What's Changed [CCOR-13379]fix(agents): label the first column Agent name, drop Fail… by @najeebkp in #1706 Upgrade to Spring Boot 4.1.1 and Jackson 3 by @bradyyie in #1573 ci(publish): bump shared E2E_TEST_OSS_CONDUCTOR_VERSION so SDK e2e tracks the release by @nthmost-orkes in #1764 Fix E2E regressions after Spring Boot 4 upgrade by @bradyyie in #1774 [CCOR-13698] Conductor UI crashing/missing i…
v3.33.0 The schema registry is now part of OSS, Jev joins the supported agents, and expression evaluation and indexing get a broad security-hardening pass -- alongside new Cassandra and Redis-Sentinel authentication options. What's Changed Features Schema registry in OSS (#1592) -- the schema registry and its /api/schema endpoints are now available in OSS Conductor, so task and workflow input/outp…
v3.33.0 The schema registry is now part of OSS, Jev joins the supported agents, and expression evaluation and indexing get a broad security-hardening pass -- alongside new Cassandra and Redis-Sentinel authentication options. What's Changed Features Schema registry in OSS (#1592) -- the schema registry and its /api/schema endpoints are now available in OSS Conductor, so task and workflow input/outp…
RC build for code changes in Azure Foundry and Bedrock agent
What's Changed fix(security): abbreviate deep-nested param string in depth limit log by @jhaabhijeet864 in #1708 fix(agentspan): respect worker passed result in custom guardrail normalization (Fixes #1564) by @jhaabhijeet864 in #1646 Update packages for npm audit by @ajlai-orkes in #1712 enh: add multiple cron expressions to the scheduler by @najeebkp in #1729 Full Changelog: v3.33.0-rc11...v3.33.…
What's Changed fix(ui): show the cron expression column by default in the schedule list by @liketed in #1686 [CCOR-13377]fix(agent): show why the agent failed to start by @najeebkp in #1684 [CCOR-13510]fix(task-def): drop the dead input template docs link by @najeebkp in #1687 fix(security): cap nesting depth of ${...} expressions in ParametersUtils (Fixes #1688) by @jhaabhijeet864 in #1693 [CCOR-…
Code changes for Bedrock agent
What's Changed Resume workflow call - add lock and idempotency by @adonthi-fws in #1666 DateRange picker styling is misaligned and dates are not visible on h… by @ajlai-orkes in #1699 [CCOR-13544] Restore task execution search functionality in the new UI by @ajlai-orkes in #1697 Full Changelog: v3.33.0-rc8...v3.33.0-rc9
What's Changed fix(security): replace backtracking regex in ParametersUtils with a linear scanner (Fixes #1638) by @Naman-Gururani in #1654 fix(security): remove no-op identity replacement in errorInspector path helper (#1642) by @nthmost-orkes in #1660 docs(ai): document litellm requirement for LLMGuardrail in Python SDK (#1513) by @jhaabhijeet864 in #1647 Fix/agent execution diagram fixes by @me…
Code changes for bedrock agentcore agent
(cherry picked from commit fa2bf61)
v3.32.5 A security roll-up: hardens request-driven regexes against ReDoS, closes a path-traversal hole in the default payload storage, and clears outstanding CVE/CodeQL alerts in the UI. What's Changed fix(core): prevent path traversal in DummyPayloadStorage (#1651) — the default payload storage (used whenever no external S3/GCS storage is configured, so reachable in dev and default deployments) r…
What's Changed ci: add least-privilege permissions blocks to GitHub Actions workflows by @nthmost-orkes in #1643 fix(webhook): accept any 2XX status code in webhook response (#966) by @mtalhasid in #1157 [CCOR-13384] Task Definitions Test Task silently discards invalid JSON in Input Parameters instead of blocking with a validation error by @ajlai-orkes in #1650 fix(security): hoist Pattern and pre…
What's Changed [CCOR-13376]fix:update example links of java agent create page by @najeebkp in #1634 Convert failedWorkflow input to a Map so nested references resolve by @nikhiln64 in #1292 Scheduler Definitions list "Last Run Time" column never populates des… by @ajlai-orkes in #1617 https://orkes.atlassian.net/browse/CCOR-13371 by @ajlai-orkes in #1635 Return SQL batch polls as soon as one task…
What's Changed feat(cassandra): support username/password authentication by @nthmost-orkes in #1623 fix(ai): honor OLLAMA_BASE_URL so a remote Ollama server is actually used by @nthmost-orkes in #1624 [CCOR-13473]enh: support required on ConductorMultiSelect by @najeebkp in #1627 [CCOR-13357] Execute button gives no option to view/edit input parameters before running by @ajlai-orkes in #1601 [CCOR…
What's Changed Fix tool-call selection and naming in the agent event listener by @ambiorix2099 in #1610 enh: add content and user-block slots to BaseLayout (sidebar) by @najeebkp in #1620 Full Changelog: v3.33.0-rc2...v3.33.0-rc3
v3.32.4 Fixes status-notifier webhook deliveries that failed when the payload contained non-ASCII characters. What's Changed fix(status-notifier): encode the webhook POST body as UTF-8 (#1473) — the status-notifier built its outbound request with StringEntity(data), which defaults to ISO-8859-1 on Apache HttpClient 4.5.x. When a workflow/task payload contained a non-ASCII character (e.g. an en das…
What's Changed fix(status-notifier): use UTF-8 charset in webhook POST body by @shaileshpadave in #1473 [CCOR-13413]enh: add boolean filter control and rename Substring to Contains in DatatableFilter by @najeebkp in #1607 [CCOR-13383]fix:task definition form missing fields by @najeebkp in #1586 Full Changelog: v3.33.0-rc1...v3.33.0-rc2
v3.32.3 amqp-client and httpcore5 CVE remediation, plus save-error surfacing and agent/UI fixes. What's Changed 🔒 Security fix(deps): bump amqp-client to 5.35.0 and httpcore5/httpcore5-h2 to 5.4.3 — clears CVE-2026-63337, CVE-2026-69219, CVE-2026-69220 (amqp-client) and CVE-2026-54399 (httpcore5) — #1609 (@nthmost-orkes) 🐞 Bug fixes Surface an error when a workflow-definition save is rejected by t…
v3.32.2 Netty/micrometer CVE remediation, Redis Sentinel auth support, ES8 compatibility, and engine/UI fixes. What's Changed 🔒 Security fix(deps): bump netty to 4.1.136.Final and micrometer (CVE remediation) — #1528 (@nthmost-orkes) 🔧 Configuration / compatibility fix(redis-sentinel): add conductor.redis.sentinelPassword, don't AUTH sentinels by default — restores startup against password-protect…
What's Changed fix(build): bump springdoc to 2.8.6 for Spring Framework 6.2 compatibility by @mp-orkes in #1537 docs: require issue discussion before PR for external contributors by @nthmost-orkes in #1538 Add end to end integration tests and bump coverage to 90% requirement by @ajlai-orkes in #1494 Fix incorrect conductor version when app is loading by @ajlai-orkes in #1511 Clear out workflowDefi…
Merge remote-tracking branch 'origin/main' into feat/hosted-agent-too…
chore(ui): build dist for v3.32.2.rc4 — agent provider runtimes, foun…
https://orkes.atlassian.net/browse/CCOR-13219
fix(ui): schedule search API, overwrite on edit, and self-contained clone dialog Use /scheduler/schedules/search for schedule lists; overwrite=true on edit saves; clone dialog owns the save mutation and handles 409 via form state. Migrate schedulerHooks to TypeScript. Instead of fetching all schedules for the clone dialog, check for existing schedule when doing clone save Use shorter error message…
https://orkes.atlassian.net/browse/CCOR-13363 Improve Queue Monitor filter UX Don't make so many fetches when using queue monitor quick search Avoid using sx unless it's for overrides Update tests
Merge branch 'main' into feature/agent-url-top-level
The OpenSearch java client serialises with Jackson 2, so the type it is asked to deserialize into has to be a Jackson 2 type. The Jackson 3 migration rewrote these ObjectNode type tokens along with everything else, and the Jackson 2 mapper then tried to introspect Jackson 3's ObjectNode as a bean and failed on its overloaded setAll. Only the tokens crossing the client boundary change; the nodes th…
Code changes for Azure Foundry Agent and AWS Bedrock agents +OBO support
RC build with OBO identity passthrough for Azure Foundry agents, Bedrock/Azure Foundry badge types, and UNRESOLVED label fix