Skip to main content

Release Notes

v2.5.617: 2026-06-04

  • S-11822 fix double-close panic
  • S-11637 S-11751 feat: add speedmgmt tenant node-counts + inspector RAM reporting
  • S-11830 add local cluster explainer to topology
  • S-11823 proxymock generator: live tail k8s replay
  • S-11668 facilitate capture pause/unpause for ebpf/java-agent enabled workloads
  • S-11707 proxymock web: inject/uninject via kube API
  • S-11669 docs: suggest proxymock web to view recorded traffic
  • S-11666 fix: RecordActive respects eBPF capture mode; never force-injects goproxy
  • S-11612 analyzer: don't fail report on transient ClickHouse outage
  • S-11659 fix: explicitly set $group_0 for PostHog group analytics breakdown
  • S-11635 update nettap ports
  • S-11502 goproxy/nettap: close rrChan after Dissect returns — fix per-flow goroutine leak
  • S-11279 forwarder byoc_otel: gRPC dial works for scheme-less endpoints
  • S-11097 forwarder: stop registration heartbeat on BYOC tenants
  • S-11593 stream large snapshot files to disk on pull
  • S-11598 live tail snapshot creation in proxymock web
  • S-11585 add K8s context selector to topology view

v2.5.602: 2026-05-28

  • S-11517 make file directive permissive

v2.5.601: 2026-05-28

  • S-11399 fix test plan: instruct LLM to call submit_test_plan after generate_task_list
  • S-10704 fix proxymock PostHog events landing under null email
  • S-11348 Decode application/vnd.amazon.eventstream (AWS Bedrock) responses
  • S-11350 parse eval JSON from LLM responses containing markdown fences
  • S-11345 automatically refresh RRPair list
  • S-11336 add topology connection explainer
  • S-11259 fix small topology view problem
  • S-11257 add java traffic lab
  • S-11249 fix(forwarder): byoc_otel jsonValueToOTEL emits JSON-safe AnyValue (null+bytes)
  • S-11268 observability improvements
  • S-11259 auto port-forward to the forwarder for proxymock web observability
  • S-11258 improve chat error reporting
  • S-11262 expose forwarder otlp port
  • S-11077 dont automatically include fargate node exclusion
  • S-11091 fix(forwarder): stamp body.cluster in OTLP log records
  • S-11093 Pin goose version + retry curl in db-migrator Dockerfile
  • S-10786 speedctl: add proxymock export {postman, k6, gatling} subcommands
  • S-11080 feat(forwarder): byoc_otel exporter supports OTLP/HTTP in addition to OTLP/gRPC
  • S-10974 blueprint recommender: catalog-driven suggestions
  • S-11005 drift comparison recommendations
  • S-10881 add prompt for traffic recommendations
  • S-11394 Upload TrafficReplay CR manifest before kube.CreateReplay
  • S-11256 Add latency regression, volume mismatch, and error rate deviation TrafficRecommendations
  • S-11067 eliminate postgres rrpairs with empty requests/responses
  • S-11006 reduce noisy debug logs to trace level

v2.5.577: 2026-05-26

  • S-11000 fix erroneous errors for mid-stream postgres capture
  • S-10987 http2 dissector: prevent potential deadlock and process EOFs correctly
  • S-11046 DLP: redact PII inside root-level JSON array bodies
  • S-11034 operator chart: retry pre-install hook on transient failures
  • S-10972 proxymock web: extract SnapshotStore from Server
  • S-10508 speedctl/mcp: base64-encode resource pagination cursors
  • S-10991 proxymock: client-prompt analyzer, CLI, web page, and chat tool
  • S-10984 operator chart + inspector: report cluster access labels on register
  • S-10982 usr-mgmt: user labels storage + admin API
  • S-10983 usr-mgmt: API key labels at creation
  • S-10987 allow resource specification for helm pre-install jobs
  • S-10828 proxymock web observability

v2.5.565: 2026-05-20

  • S-10956 proxymock web: surface feedback for silent mutation failures
  • S-10955 proxymock web: responsive layout & zoom fixes
  • S-10945 proxymock web chat: UX & tool-contract fixes
  • S-10907 proxymock web: fix data race on replay log buffer
  • S-10957 proxymock web: server-side data integrity & validation
  • S-10958 proxymock web: operational hygiene (timeouts, panic recovery, logging)
  • S-10952 proxymock web: body editor reliability fixes
  • S-10954 proxymock web: report view fixes (scroll, drill-down, sparkline, listener, blank endpoint, compare-mode 400)
  • S-10953 proxymock web: observability ping/stream coherence
  • S-10949 proxymock web: validate replay form input before submit
  • S-10948 proxymock web: fix reanalyze pipeline UX (silent failures, stuck counters)
  • S-10947 proxymock web: fix tab navigation and URL state restoration
  • S-10944 proxymock web chat: reject symlink escapes, cap stream body
  • S-10951 proxymock web: fix blueprint lifecycle errors
  • S-10946 proxymock web: scope find-toolbar shortcuts + interactive RRPair checkbox
  • S-10950 proxymock web: fix replay automation reliability (state, dedup, collision)
  • S-10940 proxymock web: enforce HTTP methods and normalize error responses
  • S-10941 proxymock web: normalize null-vs-empty-array contract
  • S-10904 speedctl/internal/webui: guard rrpair file traversal
  • S-10908 proxymock web: reject non-GET replay poll requests
  • S-10654 fix(usr-mgmt): make-admin no longer 500s on FK constraint
  • S-10906 proxymock web: fix replay stop status data race
  • S-10877 proxymock automation: persist workspace snapshot binding
  • S-10938 + S-10850 speedmgmt: HTTP/8081 admin path + safer tenant update/connection
  • S-10942 proxymock web: escape untrusted text in innerHTML sinks
  • S-10943 proxymock web: strip filesystem paths from error responses
  • S-10909 speedctl/internal/webui: reject non-positive replay durations
  • S-10910 webui: cap rrpairs delete request body
  • S-10911 proxymock web: report full search total when truncated
  • S-10882 proxymock web chat evals: one YAML file per case
  • S-10903 webui: bound proxymock job retention
  • S-10902 speedctl/internal/webui: reject invalid preview/apply request bodies
  • S-10901 speedctl: return workspace snapshot in /api/context
  • S-10889 JWT Auth blueprint workflow with Postman import
  • S-10825 proxymock web chat: add @-mention picker for files and directories
  • S-10815 chat: native Anthropic provider for BYO Claude key
  • S-10888 perf(usr-mgmt): TTL caches for GetAPIKey and GetAWSCredentials — 98% DB query reduction
  • S-10880 proxymock web chat: round out eval suite + eval-driven tweaks
  • S-10883 proxymock web: link-based navigation via URL state sync
  • S-10891 api-gateway: bump chat context window default to 200k
  • S-10880 proxymock web chat: expand eval coverage across tools
  • S-10878 proxymock web chat: support AWS Bedrock as a judge provider
  • S-10875 chat: catch tool-name drift between knowledge .md and Go catalog
  • S-10871 proxymock web chat: add eval harness
  • S-10863 proxymock web chat: fix workspace_rrpair_read empty body
  • S-10876 add proxymock report interface
  • S-10872 proxymock web chat: refresh UI after mutating tool success
  • S-10868 Populate secondary configmap for nettap capture targets
  • S-10865 testing: enforce t.Context() in tests

v2.5.531: 2026-05-14

  • S-10864 make observability client logging less noisy for failed connections
  • S-10843 proxymock web chat: create blueprint write tools
  • S-10767 replace csv data fixes
  • S-10846 proxymock web chat: rename tool catalog to noun_verb
  • S-10810 proxymock MCP: investigate_report: add step 0 snapshot-completeness check
  • S-10848 speedctl/internal/webui: migrate tests to testify
  • S-10857 proxymock web: rrpair detail: copy-path button
  • S-10859 Fix usr-mgmt registration flow
  • S-10858 fork api-gateway chat components so we can diverge for proxymock web
  • S-10856 proxymock web chat: workspace-first UUID lookup + cloud_ tool prefix
  • S-10852 refine recommendations display
  • S-10851 Only supply fields that are changed to tenant update command
  • S-10842 proxymock web: dataframe metadata chat tools
  • S-10836 proxymock web: blueprint read tools for chat

v2.5.517: 2026-05-12

  • S-10853 Remove service validation when updating snapshot for initial uploads
  • S-10837 proxymock web chat: drive recommendations via chat tools
  • S-10841 proxymock web chat: run management chat tools
  • S-10835 proxymock web: add search_workspace_rrpairs chat tool
  • S-10838 proxymock webchat : cloud snapshot tools
  • S-10832 proxymock: route setup banner to stdout
  • S-10828 Add OTLP/gRPC receiver and forwarding consumer to forwarder
  • S-10823 add local recommender workflow
  • S-10826 proxymock web: configure and run replays via chat tools
  • S-10828 forwarder otlp scaffolding
  • S-10833 fix credentials blueprints
  • S-10631 reduce logging amounts
  • S-10829 Return historical service usage data as timeseries
  • S-10631 observability data presentation via proxymock web
  • S-10831 Add way to create api-key from speedctl
  • S-10827 proxymock web: fix filters no-op and persist across reload
  • S-10824 gate destructive chat tools behind a confirmation flow
  • S-10789 proxymock web: fail fast on duplicate launches
  • S-10631 api-gateway observability event fan out on subscribe
  • S-10814 keep BYO chat transcripts off the wire
  • S-10812 add credentials replacement workflow
  • S-10813 accept BYO OpenAI key for proxymock web chat
  • S-10817 chat: clarify RRPair terminology in prompt and tab summaries
  • S-10631 observability event relay forwarder -> api-gateway
  • S-3567 remove notiondb hooks from usr mgmt
  • S-10631 goproxy -> forwarder observability sending
  • S-10808 chat: extract cloud tools into lib/chat/tools sub-package
  • S-3567 Remove notion hooks
  • S-10631 establish goproxy -> forwarder observability hop
  • S-3567 Start tracking tenant allocation in usr-mgmt
  • S-10798 chat: run orchestrator locally in proxymock web
  • S-10631 observability client for nettap data
  • S-10473 Add missing service usage rpc
  • S-10804 remove pointer helpers
  • S-10805 add Dataframe editor to proxymock
  • S-10473 Differentiate between log events and metrics
  • S-10797 chat: tag backend tools by data scope
  • S-10807 Remove .specs/ directory
  • S-10473 Index per service usage statistics
  • S-10473 Add table to track service usage
  • S-10803 add replay wizard to proxymock
  • S-10780 Add datadog-ci template export output
  • S-10801 proxymock web: LOCAL_DIAL_API_OVERRIDE for local dev
  • S-10796 move chat code to lib
  • S-10780 restore missing datadog-synthetics export changes
  • S-10793 proxymock web chat: correct page context
  • S-10799 speedctl: move thoughts ignore rule to repo root
  • S-10794 add Blueprint editor to proxymock
  • S-10787 Add a agent task list generation tool to the chat and more validation
  • S-10774 proxymock web: chat v1
  • S-10785 Enforce indexed body sizes
  • S-10783 speedctl: move proxymock search under cloud
  • S-10778 Lint rule to ensure mock files are named properly
  • S-10765 Reject snapshot updates with empty Name before DB write
  • S-10530 Move to concrete task definition types
  • S-10631 add nodes to k8s rbac for nettap svc acct

v2.5.463: 2026-04-28

  • S-10771 Better prompts for generating test plans
  • S-10772 add Blueprints (aka Transforms) to proxymock web UI
  • S-10741 Fix orphaned tool_use blocks causing persistent ValidationException
  • S-10771 add eval task type
  • S-10766 Unwrap JSON string scalars in smart_replace transforms
  • S-10770 Give protojson output for test config tool to llm
  • S-10763 Always encode b64 in the transform even if input is not encoded
  • S-10470 Fix test plan tool usage and allow more detailed test configs
  • S-10755 Use correct path syntax for detecting jwts
  • S-10470 make createtestplan have session memory to support editing
  • S-10759 deps: bump pgx/v5 to v5.9.0 for CVE-2026-33816
  • S-10756 Display value of java tool opts flag being set correctly
  • S-10758 speedctl: add token highlighting, Settings tab, and Mocks/Tests nav to proxymock web UI
  • S-10741 chat: fix empty-message crash and iteration text run-on

v2.5.449: 2026-04-20

  • S-10751 api-gateway: ensure handlers complete on graceful shutdown
  • S-10749 Add TaskNotify task type to cron scheduler
  • S-10745 filter additional postgres messages that provide little value
  • S-10646 Consolidate transform recommendations by wildcarding array indices

v2.5.445: 2026-04-17

  • S-10735 proxymock: fix apiclient handling for anonymous users
  • S-10739 Send shutdown signal to grpc server and handle ctx cancellation in clickhouse event loop
  • S-10737 Handle case where replay is deleted before starting
  • S-10734 fix proxymock results alignment
  • S-10727 proxymock init: add signup option
  • S-10713 Add MCP installers for OpenCode and Codex
  • S-10630 Add new setting for using coredns instead of hostaliases
  • S-10712 proxymock: add search CLI command

v2.5.437: 2026-04-13

  • S-10591 Allow exporters to be specified via helm chart
  • S-10591 Register forwarder with usr-mgmt if exporters are configured
  • S-10706 Update vuln libs
  • Revert "Squashed branch 'S-11519/nettap-sys-kill' via merge request speedscale/speedscale!6189"
  • S-10702 Detect WebSocket traffic in tech detector
  • S-11577 usage stats: track LLM tokens
  • S-10674 partial work for mid-stream http2 boundary sync
  • S-11533 Report forwarder limit with tenant info
  • S-10676 mid-stream sync/capture for ebpf kafka capture
  • S-11535 Add multiple exporters to responder
  • S-11618 mid-stream sync/capture for ebpf mongodb capture
  • S-10694 instructions for agents working with clickhouse migrations
  • S-10689 add trafficlab project to replace goproxy test envs
  • S-11620 mid-stream sync/capture for ebpf redis capture
  • S-11535 Make generator use multiple rrpair exporters
  • S-11600 mid-stream ebpf capture for postgres
  • S-11597 update speedctl config.yaml to config.json
  • S-11577 chat: ensure table field migration works by deleting the old table
  • S-11441 postgres mid-stream protocol capture
  • S-11577 chat: migrate table columns to use existing standards
  • S-11598 proxymock: fix inspection for websocket traffic
  • S-11535 Set up otel exporters in forwarder
  • S-10645 chat: fix erroring LLM request
  • S-11101 update websocket support
  • S-11544 chat tuning
  • S-11535 Cleanup: Remove forwarder settings as a global singleton
  • S-11108 Add custom TLS Java tool options annotation
  • S-11585 more helpful linter error: don't exit in subshell during linting
  • S-11580 Delete unused and deprecated internal rpcs
  • S-11516 Delete deprecated rrpair fields
  • S-11433 investigate link goes to blank page
  • S-11573 Only upload workload yaml once
  • S-11441 mid-stream protocol identification for mysql
  • S-11544 chat: add fetch_docs_url tool for live docs lookup
  • S-11535 Add exporter interface and otel exporter
  • S-11551 logging: standardize controller-runtime logger setup
  • S-11422 Support combined eBPF and Java agent capture
  • S-11544 chat: fix tool loop exhaustion and missing log sources
  • S-11350 chat: persist session details in clickhouse
  • S-11544 chat: add RRPair counts to AI summary
  • S-11350 chat: track context used
  • S-11494 Add user_frustrated tool to chat LLM toolset

v2.5.395: 2026-04-01

  • S-11543 fix service account retrieve permissions
  • S-11538 lint: limit the number of concurrent lint processes
  • S-11492 Add error logs to chat package for on-call visibility
  • S-11530 lint: prevent breaking changes to proto files
  • S-11532 Add forwarder limit related endpoints and RPCs
  • S-11532 Add table to track forwarder limits per tenant
  • S-11487 Prevent data race in test
  • S-11528 fix autogen transforms: URL segment guard and body chain key collision
  • S-11487 handle HTTP / HTTPS mixed services gracefully
  • S-11519 nettap: add SYS_KILL capability to capture container
  • S-11502 Move generative ai features to bedrock
  • S-11396 add include/exclude to speedctl infra replay
  • S-11511 Allow Developer and Maintainer roles to retrieve all artifacts
  • S-11508 de-tune clickhouse connection alerts when they recover gracefully

v2.5.381: 2026-03-26

  • S-11215 RBAC: implement admin/maintainer/developer roles (backend)
  • S-11490 Add bedrock chat provider
  • S-11485 support mysql_native_password for mariadb mocks
  • S-11474 invalid proto error: fix latency table format on upload
  • S-11483 Pass client context as user-role message instead of system prompt
  • S-11480 fix: add nil check for pem.Decode to prevent panic on malformed cert data (S-11480)
  • S-11482 remove limit on number of bytes that can be used for detection
  • S-11469 add read_log_content chat tool for searching log files
  • S-11473 fix(gatling): pass CLI flags through, derive class name from output filename,...
  • S-11458 detector: add Perplexity AI as supported LLM provider
  • S-11452: RBAC: Add role column DB migration (user_role enum, migrate is_tenant_admin)
  • S-11470 mark tls rrpairs correctly when obtained via ebpf

v2.5.369: 2026-03-24

  • S-11472 Run nettap as root
  • S-11420 Add permission and make sys paths configurable
  • S-11447 Handle invalid utf encodings in indexing
  • S-11411 fix MongoDB SASL authentication during replay
  • S-11451 Remove responder triggers feature
  • S-10519: fix findTenant() silently swallowing lookup errors
  • S-11453 process server-initiated protocols correctly
  • S-11432 Do not inject sidecar on replays
  • S-11446 Remove dnat mode and unused X-Speedscale-Message header
  • S-11420 Reduce nettap permissions
  • S-11443: Fix primary_detected_tech in RRPairs service summary merge
  • S-11429 detector: add LLM provider detection for OpenAI, Anthropic, Gemini, OpenRouter, Grok
  • S-11440 deps: upgrade google.golang.org/grpc v1.79.2 -> v1.79.3 (CVE fix)
  • S-11415 Fix trivy build
  • S-11419 dependency upgrades: including refactoring

v2.5.354: 2026-03-18

  • S-11416 Add settings to bring your own cert during helm install
  • S-11430 linter: ensure test file names match
  • S-11417 responder: ensure all providers record hit or miss
  • S-11306 chat: more knowledge articles and various tweaks
  • S-11406 RRPair markdown: handle mutable fields
  • S-11419 dependency upgrades: basic
  • S-11421 helm upgrade guards for nettap configmap
  • S-11415 Build containers for trivy scan
  • S-11408 Return a json response even on error
  • S-11369 Add rpc for submitting test plan
  • S-11406 RRPair markdown format: strip unnecessary data

v2.5.344: 2026-03-17

  • S-11306 chat: more backend tools
  • S-11275 avoid any attempt to use smartdns when operating as nettap client
  • S-11398 bugfix: handle larger bodies in proxymock inspect
  • S-11369 Add CreateTestPlan rpc
  • S-11348 move to golangci linter with custom lint rules
  • S-11309 ensure closed flows are properly cleaned up
  • S-11397 fix user management panic

v2.5.337: 2026-03-13

  • S-11329 add dummy package target for CLI tools
  • S-11368 update nettap rbac to allow reading from its configmap
  • S-11395 strip invalid build target
  • S-11386 better signal handling for speedctl replay
  • S-11382 Deprecate individual tuning tasks and make task definitions more descriptive
  • S-11329 use smaller build images for services that can use them
  • S-11390 bump default nettap version
  • S-11387 Add timestampTime column
  • S-11306 chat backend: move to a new lib for better context handling
  • S-11370 mcp: improve all 6 proxymock MCP prompts
  • S-11387 Add TimestampTime column to otel_logs
  • S-11381 proxymock: clarify generate help text about OUT-direction RRPairs
  • S-11377 proxymock: deduplicate error output on send-one failures
  • S-11375 proxymock: improve context canceled/timeout error messages in replay
  • S-11368 add nettap configmap env var
  • S-11376 proxymock: wrap generate errors with user-friendly messages
  • S-11373 proxymock: return non-zero exit code for unknown commands
  • S-11374 proxymock: print error when inspect runs without TTY
  • S-11360 Create a unified tuning mode and try more combinations of recommendations while tuning
  • S-11371 remove speculation
  • S-11371 Add claude hook for regenerating protos
  • S-11371 add PreToolUse hook to block direct .pb.go edits
  • S-11361 optimize some api call paths to prevent errors
  • S-11359 remove unnecessary log fields
  • S-11355 Add application error detection to report summary
  • S-11349 Only apply certain transform recommendations
  • S-11354 add performance to AI report summary
  • S-11348 refactoring: more protojsonx updates
  • S-11189 export: add Gatling simulation format
  • SPD-4886 proto: Deprecate cookies field in HTTP protobufs
  • SPD-9906 cli: add errors to proxymock replay pretty output
  • SPD-9489 Proxymock responder immediate response
  • SPD-9400 Add better error handling for proxymock app-port
  • S-11348 refactor: preparing for new linter
  • S-11346 Add specialized apply recommendations task
  • S-11347 use default ndots configuration for hostname resolution
  • S-11325-2 add report summary RPC

v2.5.304: 2026-03-10

  • S-11343 revert changes for openshift
  • S-11340 Fix S-11309 regressions: restore nettap tag and security context values
  • S-11323 update to go1.26
  • S-11325 add report summary AI chatbot tool
  • S-11120 Show redis bulkstring as plain string whenever possible
  • S-11337 Add name and description for transform recommendations
  • S-11331 cookie jar changes for Go 1.26
  • S-11328 Fix location segment wildcard logic for multiple layers of wildcards
  • S-11309 Make jks job use user 0
  • S-11326 speedctl load settings properly before overwrite
  • S-11309 correct helm installation on openshift
  • S-11312 Expose gateway RPCs as AI chat tools (Tier 1 + Tier 2)
  • S-11310 correctly handle inbound traffic on istio ambient mesh
  • S-11308 Generate a single request id recommendation
  • S-11305 correct nettap daemonset security context

v2.5.289: 2026-03-07

  • S-11156 Wait for snapshot to finish reanalyzing before marking comparision task as done
  • S-10793 better autogen-transforms command for tuning workflow
  • S-11302 Add linguist-generated attr for proxymock RRPair files
  • S-11291 Add teardown command to sos
  • S-11156 Save transforms found from replay as recommendations
  • S-11290 Bump java demo app version

v2.5.283: 2026-03-04

  • S-11279 preserve original host on service
  • S-11241 lib/loader: migrate from deprecated s3/manager to s3/transfermanager
  • S-11281 add Traffic Viewer tool to chat interface
  • S-11274 prevent operator from removing nettap config modifications
  • S-11278-2 add snapshot performance rpc:
  • S-11278 add throughput and performance graphs to snapshot
  • S-11262 add tolerations for arm64 nodes since images support them
  • S-11257 read and republish logs from nettap capture
  • S-11227 Add TrafficRecommendation for unreplaced REDACTED tokens
  • S-11243 remove potential write blocks on received data chunks
  • S-11246 chat: list test configs tool
  • S-11246 api-gateway: support reasoning level for chat

v2.5.271: 2026-02-27

  • S-11251 api-gateway: add chat backend tools for snapshot and cluster operations
  • S-11245 api-gateway: change default chat LLM model to gpt-5.2
  • S-11241 fix ResourceExhausted on large report retrieval
  • S-11240 address chat feedback - add specs
  • S-11168 allow retrieval of workload capture status
  • S-11168 allow for ebpf and java-agent capture configuration via API call
  • S-11236 slim agents context
  • S-11233 build: remove unused SpeedscaleUID const
  • S-11238 simplify LLM env vars
  • S-11234 include nettap installation status in operator check
  • S-11235 add iptables exclusion for istio ambient mesh marked packets
  • S-11210 chat support
  • S-11204 set internal traffic policy for nettap svc
  • S-11224 detect memory growth in traffic recommendations
  • S-11223 add report recommendaations for K8s errors
  • S-11205 refresh command/location for older rrpair captures
  • S-11207 record durations for redis rrpairs

v2.5.254: 2026-02-23

  • S-11220 Use overall analyzer context for uploading final report
  • S-11218 Ensure snapshot never has 0 duration
  • S-11201 simplify replay coredns to sidecar pattern vs external svc
  • S-11186 handle invalid status code for download
  • S-11203 Delete assertion streamer
  • S-11200 include any custom dns configuration setup for replay

v2.5.248: 2026-02-19

  • S-11193 Don't deploy collector when we only have custom uris
  • S-11185 docs: fix AGENTS.md header after rename
  • S-11185 refactor: rename CLAUDE.md to AGENTS.md with redirect
  • S-11162 Handle getting pods for argo rollout with workloadRef
  • S-11177 add hostname and duration to mongodb responses
  • S-11171 Do not use readiness timeout as collector timeout
  • S-11170 Move RRPair limit validation to api-gateway
  • S-11151 sos: fix ebpf config index
  • SPD-9186 Improve TLS error messages and notifications
  • S-11152 goproxy internals refactor with less tight coupling
  • S-11151 Add eBPF configuration support to sos validate command
  • S-11165 Check for grpc cancelled error

v2.5.236: 2026-02-17

  • S-11158 Strip port from hosts before adding to service map
  • S-11158 Use transformed hostnames for service map
  • S-11157 Handle isTLS not being set properly
  • S-11114 Remove search analyzer job
  • SPD-1666 kube: Remove unused goproxy command port
  • S-11114 Add full text and body search to MCP
  • S-11150 remove speedbot
  • S-11114 Add new text filter type
  • S-11106 Make create user command accept a tenant name or id
  • S-11136 handle coredns cleanup for cancelled replays
  • S-11147 Replace numeric fields that are 0 in transforms
  • S-11146 control ebpf port filters via annotation
  • S-11142 support ebpf capture via annotation
  • S-11113 Externalize DLP redactor and transforms initialization

v2.5.222: 2026-02-12

  • S-11121 move investigate agent commands to the proxymock MCP
  • S-11136 mongodb sasl auth fallback: try to find first matching username
  • S-10964 Remove notebook related db tables
  • S-11131 Use referenced workload directly in argo rollouts with workloadRef
  • S-11131 Include workload type when caching
  • S-11111 handle invalid RRPairs offsets

v2.5.216: 2026-02-10

  • S-10964 Deprecate notebooks feature
  • S-11112 Set custom uri in replay CR
  • S-11133 add make-admin command to speedmgmt
  • S-11125 Handle unicode nulls in json better
  • S-11125 Temporarily skip bodies with null characters
  • S-11129 hotfix for token flood
  • S-11126 fix excessive data token discovery
  • S-11125 Replace utf null rune instead of byte sequence
  • S-111124 fix missing location in unrecognized tokens
  • S-11094 updated nettap version
  • S-10962 Fix header not eq case for filters
  • S-11085 Detect MongoDB SASL authentication and generate transform recommendations
  • S-11081 ensure all transform chains have proper tags for traceability
  • S-11090 add recommendation for gRPC timestamp
  • S-10962 Handle unicode null characters in jsonb column for rrpair data
  • S-11102 save speedctl command line in speedctlCmdline report tag
  • S-11096 Add new RPC for cluster sidecar stats

v2.5.199: 2026-02-04

  • S-10273 operator fixes for java-agent instrumentation
  • S-11092 firehose: ensure all events are sent on shutdown
  • S-110912 use dependency injection for AWS creds rather than mutating the gloabl environment
  • S-11078 operator: more resilient workload collection
  • S-11064 Add RedactSnapshot RPC to create DLP-redacted snapshots
  • S-11083 snapshot analyzer: limit number of RRPairs in a single snapshot
  • S-11068 autogenerated transforms: support query params and headers
  • S-10961 Add advanced filter support for rrpairs
  • S-10961 Add indexing of bodies and headers
  • S-10273 mark proto field as optional
  • S-10273 add annotation to inject nettap java agent
  • S-11073 tune investigate-report command
  • S-10960 Add column for rrpair bodies, headers, etc.
  • S-11072 fix filter string quote escape issues
  • S-10990 Fix indentation for security contexts and jks job permissions
  • S-11053 tweak investigate report command
  • S-11070 de-tune context err log

v2.5.182: 2026-01-28

  • S-11041 support mongodb sasl+scram auth in responder via replay transform
  • S-11067 rename speedmgmt cmd package to cli
  • S-11065 Only suggest transforms for request bodies
  • S-10990 Better openshift support
  • S-11062 Kafka output for proxymock
  • S-11051 Remove references to custom patch and make inspector sidecar injection idempotent

v2.5.176: 2026-01-23

  • S-11059 Handle panic in snapshot update
  • S-10932 mock tuning: check for responses before running
  • S-11038 Move large lists from snapshot summary analysis into separate data structures
  • S-11053 slash command for investigating a snapshot
  • S-11052 collector: retry on failure to collect metrics

v2.5.171: 2026-01-22

  • S-10971 Handle case in schema builder where primitive field is later an object
  • S-11053 investigate-report command
  • S-11050 do not create recommendations to IGNORE timestamps for responses of OUT RRPairs
  • Fix proxymock generate to include BasePath in generated URLs
  • S-10971 Add rpc for retrieving json schemas for snapshot
  • S-10971 Fix early return for json schema generation
  • S-10971 Add json schema artifact to snapshots
  • S-10993 Use json schema builder in recommendation engine
  • S-11050 fix panic: use correct proto package
  • S-11047 Add FilterRRPairPredicates RPC to filter predicates against RRPairs
  • S-11037 allow report status updates between final states
  • S-11044 Handle expired ctx errors in event query loop

v2.5.160: 2026-01-20

  • S-11043 Only start analyzer job on replay start
  • S-11042 Revert generator dlp config proto change
  • S-10983 speedctl: pull all artifacts
  • S-11039 add extensible transform recommendations
  • S-11032 Add RegenerateFromRedacted function and dlp_field reverse support
  • S-11003 speedctl infra dlp: clarify command
  • S-11001 DLP transform recommendations: deduplicate, group, and sort
  • S-11024 recognize data pattern in forwarder redaction
  • S-11023 add DLP recommendation type
  • S-11022 summarize dlp rules in snapshot
  • S-11020 Add DLP recommendations to replace redacted values during replay
  • S-11019 consolidate dlp recommendations
  • S-11018 add DLP recommendation category
  • S-11017 recommend DLP field for token redaction
  • S-11016 wrap report retrieval in analyzer with smaller timeout window
  • S-11010 attempt to recover from completed replays missing start event
  • S-10987 responder: proper DLP implementation
  • S-10997 Allow setting resource block and ephemeral storage for all components
  • S-11009 extract tokens from responses
  • S-10989 add TXT replicaSet overrides for mongo+srv support
  • S-11000 Add tenant deletion command
  • S-10998 Prevent custom DNS configs from being overwritten
  • S-10971 Add json schema builder package
  • S-10982 fix panic when comparing payloads: when keys differ during schema-only comparison
  • S-10988 add AI prompt suggestion to fix discovered traffic issues
  • S-10984 make TransformRecommendations ID human readable
  • S-10969 Add report recommendations feature
  • S-10978 CLAUDE.md: coding style
  • S-10958 Remove signup via cli option
  • S-10955 inspector log improvements
  • S-10956 Handle report analyzer case where no done signal is seen
  • S-10967 better handle errors when waiting for reports
  • S-10966 reassign logger in responder
  • S-10942 speedctl infra replay: service flag language
  • S-10953 proxymock mcp install: guard against JSON mangling
  • S-10940 proxymock mcp install: do not include type for Gemini
  • S-10945 Set metric collection interval to 1s for replays
  • S-10948 make recommendation IDs consistent across snapshot re-analysis
  • S-10943 Add optional ID fields to TransformChain and TransformRecommendation
  • S-10943 Filter transform chains to only active chains for DLP filtering

v2.5.120: 2026-01-08

  • S-10936 speedctl infra replay: rework address targeting behavior

v2.5.119: 2026-01-08

  • S-10878 Add support for changing kid in jwt transforms
  • S-10929 Make calcDLPLocations return TransformRecommendations
  • Add DLP token detection and transform recommendations

v2.5.116: 2026-01-06

  • S-10919: Add feature gate for speedscale-collector-persistent workload
  • S-10885 generator support for kafka
  • S-10855 check for mongo cluster information in additional response locations
  • S-10917 Prevent nil transform chains when inactive
  • S-10877 Add setting for limiting secret related access
  • S-10914 Prevent error logs on expired notebooks
  • S-10877 Don't generate a dynamic redis secret

v2.5.109: 2025-12-31

  • S-10902 enable text search in reports
  • S-10903 set actual config on future reports
  • S-10901 enable text search in non-HTTP RRPairs
  • S-10900 prevent potential http2 dissector memory leak
  • Add SearchRRPairs RPC to expose RunSearch functionality

v2.5.104: 2025-12-30

  • S-10894 handle context cancelled
  • S-10890 RPC to list agent locations
  • S-10889 fix agent reports search
  • S-10886 support sorting and searching agent reports
  • S-10882 add streaming collector mode
  • S-10833 Set tenant id when looking up auth
  • S-10833 Prevent unnecessary identify calls and include group/tenant whenever possible
  • S-10880 speedbot: limit tool tokens
  • S-10872 responder: notify report when Redis signature cache is reset
  • S-10865 postgres protocol: represent null differently than empty string
  • S-10855 Provision mongo-coredns related resources only if selected during replay
  • S-10880 speedbot
  • S-10879 make default test config ID consistent
  • S-10855 add streamed hello responses for mongodb provider
  • S-10875 set success rate on tuning task so comparison has something to reference
  • S-10859 Set location when updating agent report
  • S-10841 do not attempt to rehydrate when no RRPairs exist
  • S-10858 fix agent logging
  • S-10608 agent: integrate transform autogeneration
  • S-10851 proxymock: better no files found error
  • S-10853 add original request to agent reports
  • S-10849 fix forward-clickhouse make target
  • S-10848 stricter node affinity for nettap installs
  • S-10845 expand detectedBy tag
  • S-10840 support inactive transforms... by not supporting them
  • S-10835 analyzer autogen-transforms: fix tags
  • S-10835 add transform 'detectedBy' tag
  • S-10835 analyzer autogen transforms: add tags to transforms
  • S-10608 analyzer autogen-transforms: remove suggestions and upload only
  • S-10608 analyzer autogen-transforms: consolidate array transforms into wildcard
  • S-10837 Handle case where notebook does not exist
  • S-10814 minor improvements
  • S-10832 Copy raw files async when cloning snapshots

v2.5.72: 2025-12-11

  • S-10816 Modify search traffic tool prompt
  • S-10608 analyzer: autogen-transforms command
  • S-10829 add apply recommendation buttons to headers, trailers and query parameters
  • S-10821 manage nettap installation via helm
  • S-10824 remove .ai claude instructions
  • S-10816 Add traffic investigation pattern to MCP
  • S-10806 Handle cancelling future agent tasks
  • S-10811 better decompress error
  • S-10795 Fix extract data filter logic
  • S-10807 fix insert assertions conflict

v2.5.62: 2025-12-03

  • S-10804 report analyzer: ensure RRPairs decompressed after download
  • S-10804 housekeeping
  • S-10773 similar signature ranking: expand body for comparison
  • S-10801 fix mock tuning error
  • S-10782 Add retries to internal usr-mgmt client
  • S-10797 Remove default constant transform for JWT resign recommendations
  • S-10610 Add jwks workflow to replays
  • S-10792 Filter JWT locations to only OAuth handshakes (access_token)
  • S-10790 Use original rrpair timestamp
  • S-10791 add JWT example to snapshot summary
  • S-10714 responder: normalize signature URLs
  • S-10788 analyzer: fix mock tuning panic
  • S-10745 Get rrpairs from api-gateway instead s3 for report analyzer
  • S-10783 Don't use invalid utf postgres values in data tokens
  • S-10779 speedctl: ensure latency table downloaded in full
  • S-10777 speedctl install: incorporate app in docker
  • S-10779 fix latency table format
  • S-10775 Open files after importing analyzer artifacts
  • S-10664 fix incorrect JWT identification
  • S-10778 Remove merge report rpc
  • S-10713 proxymock: speed up completions
  • S-10749 proxymock: better replay output
  • S-10766 proxymock: honor signature changes from RRPair files
  • S-10766 cleanup
  • S-10775 Fix analyzer artifact import
  • S-10775 Speed up file downloads by using downloader instead of byte range streamer
  • S-10745 Retrieve all report events from clickhouse instead of s3
  • S-10764 ignore Grafana scraper requests
  • S-10762 Set user email property on registration for analytics
  • S-10765 echo server make commands
  • S-10745 Put all report related events in clickhouse
  • S-10717 expose responder metrics ports
  • S-10754 postman import: annotate RRPairs with notes from item and collection
  • S-10761 make JSON file reporter thread safe
  • S-10750 analyzer mock-tune: source report raw file locally

v2.5.27: 2025-11-19

  • Revert "S-10750 analyzer: only cycle once on tuning job"
  • S-10720 Fix service remap flag for analyzer
  • S-10750 analyzer: only cycle once on tuning job
  • S-10753 success when no inbound
  • S-10720 Remap passthrough rrpairs to snapshot service
  • S-10750 analyzer: optimize mock tuning
  • S-10750 ensure snapshot gets re-analyzed after adding transforms

v2.5.20: 2025-11-17

  • S-10741 backwards compatible signature construction
  • S-10743 Identify group name in Posthog when tenant is created
  • S-10744 proxymock: support --app-host flag
  • S-10742 add InitMockTuningWithSnapshot rpc
  • S-10740 ensure proxymock image gets latest tag in CI
  • S-10735 support legacy usage mode with --test-against
  • S-10739 register automatically when SPEEDSCALE_API_KEY env var is present
  • S-10675 only build binary containers on tag
  • S-10675 build proxymock container as part of pipeline
  • S-10735 remove typo
  • S-10735 fix test against target configuration
  • S-10738 do not record responder traffic when responder in low-data mode
  • S-10737 disassemble query parameters in signatures
  • S-10736 attempt xml schema comparisons for bodies that actually contain xml
  • S-10735 allow single positional argument for infra replay
  • S-10528 enforce port checks for kafka
  • S-10731 Fixes for node and service list with namespace selector
  • S-10704 Add missing RBAC role and fix inspector query for node info
  • S-10730 Don't push an image index for lambda
  • S-10633 replay-time configurable coredns sidecar
  • S-10704 Use RBAC when a namespace selector is supplied
  • S-10662 guard against using bad timestamps for snapshot rrpairs
  • S-10724 no transform changes in low data mode
  • S-10726 similar signatures ranker now prioritizes exact URL matches
  • S-10711 fix connect-clickhouse script
  • S-10715 shrink Redis connection pool to avoid using too many connections that could be used for clients
  • S-10723 responder: fix response latency and make delay configurable
  • S-10709 ensure new snapshots have proper audit info
  • S-10644 speedctl infra replay target mappings
  • S-10703 scale redis limits with responder
  • S-10707 fix report analysis context

v2.4.91: 2025-11-06

  • S-10695 signature cache: fix inconsistent marshal / unmarshal
  • S-10698 report analyzer: ensure report tags persist
  • S-10693 responder: add active connection metrics
  • S-10690 only get audit info for new reports
  • S-10691 separate context for report re-analysis
  • S-10653 add intermediate RRPair upload for lower latency report updates
  • S-10674 responder: profiling with upload to report dir
  • S-10685 add responder sig to miss and passthrough rrpair notes
  • S-10682 improve responder signature debugging trace logs

v2.4.82: 2025-11-04

  • S-10652-3 Gauger analytics use tenant admin distinct id
  • S-10640 Set/unset instance numbers based on hit/miss in responder
  • S-10610 Add new transform rec type and support jwt resigning with a string literal
  • S-10652-2 Posthog telemetry hardening
  • S-10673 responder: convert to metrics/v2
  • S-10672 fix proxymock install script
  • S-10652 Include service name for prefix
  • S-10652 Add Posthog analytics integration
  • S-10661 proxymock cloud push snapshot: include transforms
  • S-10633 multi-step dns traversal to support lookups for SRV queries
  • S-10660 proxymock: ensure responder signature cache uses analyzed RRPairs
  • S-10648 Add cli related properties to the events instead of the person for analytics
  • S-10654 Fix inspector stream tests
  • S-10649 Don't change types when replacing a numeric json value
  • S-10632 proxymock: write RRPairs with binary data as base64
  • S-10635 support URLEncoded bodies for Postman import

v2.4.66: 2025-10-28

  • S-10628 don't error when generator signal is found but responder isn't
  • S-10630 Add support for migrating netinfo for dual proxy rrpairs
  • S-10613 ensure consistent use of internal tls state
  • S-10494 Fix typo in migration
  • S-10494 Reduce clickhouse table ttl to 60 days
  • S-10622 Don't change api key tenants for internal users

v2.4.60: 2025-10-25

  • S-10623 report analyzer: wait for signal from responder before stopping RRPair search
  • S-10617 proxymock inspect: color status codes
  • S-10620 fix cases when inspector does not get event time

v2.4.57: 2025-10-24

  • S-10575 ensure proper context data for goproxy logs/stats
  • S-10464 Make sure agent report has uuid
  • S-10612 fix postgres response transforms
  • S-10598 MCP enhancements from Anthropic's MCP skill
  • S-10606 avoid corrupting local MCP configs - use fake home dir for MCP IDE tests
  • S-10464 Add service filter for passthrough snapshot
  • S-10464 Add RPC for merging passthrough calls into a snapshot
  • S-10437: Handle transient API errors during snapshot retrieval; add...
  • S-10602 Upgrade vulnerable libs
  • S-10596 fix generator endpoint matching
  • S-10464 Make sure top level status is set for responder rrpairs
  • S-10591 update cache when new services or workloads are retrieved
  • S-10464 Strip test related tags from rrpairs in snapshot
  • SPD-5837 additional bounds checking for kafka payloads
  • S-10515 better report error handling
  • S-10590 fix replay defaults filtering
  • S-10589 inspector: ensure services get removed from cache

v2.4.40: 2025-10-21

  • S-10494 Drop unused table and add ttl to metrics table
  • S-10256 proxymock replay: support flag for running traffic multiple times
  • S-10512 proxymock MCP: validate service when retrieving traffic from cloud
  • S-10582 check correct setting for installing nettap components
  • S-10578 Update user api keys when updating the tenant
  • S-10498 tune replay defaults
  • S-10549 Don't delete redis sigcache data on exit

v2.4.33: 2025-10-14

  • S-10562 allow creating snapshots from RRPairs older than 30 days
  • S-10538 create add_db_row transform
  • S-10558 Fix conflicting flag and require tenant name for updating tenant in speedmgmt

v2.4.30: 2025-10-13

  • S-10564 get user api keys for tenant
  • S-10563 formatting
  • S-10563 indexer: use API gateway health check before trying to connect
  • S-10561 analyzer: defer uploading component logs so they get captured on errored reports
  • S-10556 fix flaky test

v2.4.25: 2025-10-09

  • S-10537 snapshot analyzer: optimize token processing
  • S-10537 snapshot analyzer: optimize sqlite
  • S-10554 better resource build errors
  • S-10550 error on snapshot data loss
  • S-10551 analyzer: more robust sqlite DB
  • S-10546 fix check for mysql pseudo pings
  • S-10547 clarify imageTags in helm chart values
  • S-10544 Ensure reports have endtime when created
  • SPD-8514 fixes for hello responses in mongodb provider

v2.4.16: 2025-10-07

  • S-10541 Hard code nettap version for sos temporarily
  • S-10541 Ensure default tag gets populated in helm chart generation
  • S-10539 Don't use sql AST for transforms yet
  • S-10374 speedctl replay: deprecate --custom-url in favor of --test-against
  • S-10374 multi-host CLI replay
  • SPD-9804 avoid generator job reconciliation in the event of pod failure
  • S-10529 allow nettap installation/configuration via helm chart

v2.4.9: 2025-10-06

  • S-10532 ensure testconfig at or less than version 3
  • S-10527 add Go format hook for Claude
  • S-10517 increase forwarder max recv msg size
  • S-10523 don't move to test config version 4 until clients have the logic to not panic
  • S-10516 test config setting to rewrite the host header
  • SPD-5837 prevent unbounded memory growth in kafka dissector
  • S-10525 revert change to replay egress RRPairs
  • S-10505 remove hostport
  • S-10374 migrate URI override fields
  • S-10505 nettap daemonset scaffolding
  • S-10511 avoid goproxy infinite loop
  • S-10489-2 improve SQL to AST readability
  • S-10502 Trim large transform changes events
  • S-10374 rename DEPRECATED: to Deprecated: so the LSP picks it up
  • S-10506 auto detect and ignore cilium nodes
  • S-10489 convert SQL queries to JSON AST for transforms
  • S-10503 refactoring ahead of XML changes
  • S-10503 improve XML parsing and transform
  • S-10479 Inject sidecar when record active test config setting is applied
  • SPD-8514 correct invalid/incomplete mongo signatures
  • S-10500 fix xml delete on xml attributes
  • S-10496 Prevent snapshot timeouts for large snapshots
  • S-10488 maximum time allowable for packet captures
  • S-10497 remove unused/deprecated codepaths
  • S-10479 Add record active flag to test config

v2.3.880: 2025-09-29

  • S-10492 add back assignment to rrchan
  • SPD-8514 improves payload display for mongo rrpairs
  • S-10487 Allow setting diagnostics mode via sidecar config
  • S-10449 Fix nil map panic and allow rehydration for reports without assertions
  • SPD-8514 update and improve mongodb dissection
  • S-10293 proxymock replay: added detail for report
  • S-10449 Fix mock tuning report analysis
  • S-10480 fix xml_delete analyzer panic for nodes with no siblings
  • S-10475 add SQL to JSON conversion package
  • S-10477 Default match rate to 0 instead of 100
  • S-10499 Add mock tuning type task
  • S-10476 Format numbers correctly so identifying unix timestamps works
  • S-10472 Fail agent if report was cancelled
  • S-10476 Add analyzer command for generating summary from raw file
  • S-10473 move responder provider port initialization
  • proxymock MCP: cicd prompt
  • S-10468 Prevent panic by initializing asserters once
  • S-10467 activate transforms for Postgres in responder
  • S-10465 Handle nil lock when releasing lock
  • S-10456 proxymock: allow mock or replay from any RRPair files, inbound or outbound
  • S-10462 proxymock: fix shared errors in new markdown
  • S-10461 proxymock: do not duplicate proxymock dir
  • S-10449 Trigger report analysis after mock tuning job
  • S-10257 proxymock: log number of RRPairs read from each dir
  • S-10449 Delete tuning run object

v2.3.855: 2025-09-23

  • S-10434 move to unified RRPair markdown format
  • S-10454 Fix panic
  • S-10454 Fix uuid being returned as bytes and delay lock acquisition for rehydration
  • S-10454 Add rpc for showing rrpair recommendations icon
  • S-10258 proxymock: results dir for result RRPair files
  • S-10234 proxymock MCP: ensure files written atomically
  • S-10442 preserve logging contexts when adding reporters
  • S-10452-2 fix transform description
  • S-10426 upgrade to go1.25
  • S-10452 expand and correct transform recommendation enumerations
  • S-10446 make the user data RPC more resilient
  • S-10451 detect unix timestamps
  • S-10446 fix issue if ChatGPT adds ticks to result, more tests and logs
  • S-10420 Create mock tuning job from RPC
  • S-10446: gpt-4o-mini default, parallel CSV gen with chunks, add unit + live...
  • S-10445 proxymock inspect: fix file watcher
  • S-10429 RRPair markdown: move status code to response block
  • S-10444 Prevent insertion of rrpairs from the future
  • S-10441 Remove unimplemented rpcs
  • S-10435 proxymock: gracefully handle clients that proxy TLS incorrectly
  • S-10443 proxymock: fix smart proxy logs
  • S-10432 Reanalyze snapshot after updating
  • S-10432 Reanalyze snapshot after updates in agent task handler

v2.3.832: 2025-09-17

  • S-10433 fix goproxy diagnostics
  • S-10432 Use contains filter for host to avoid ports not matching
  • S-10420 Add rpcs for tuning runs
  • S-10427 Remove dependency on forked cache lib
  • S-10420 Add mock tuning basic structure to analyzer
  • S-10401 proxymock: command to print MCP JSON
  • S-10425 proxymock inspect: reorder RRPair detail tabs
  • S-10387 proxymock inspect: wrap curl URL in quotes when copying
  • S-10421 use forwarder host in packet capture bpffilter
  • S-10419 log and loop on traffic viewer refresh rather than exiting
  • S-10339S-10396S-10408 fix host related details all around
  • S-10419 improvements for reloading trafficviewer cache
  • S-10418 Prevent report overwriting in tuning tasks
  • S-10417 Remove queries for ingest stats
  • S-10404 Add support for tuning inbound vs outbound
  • S-10417 Remove ingest stats updates
  • S-10413 add RRPair environment description helper rpc
  • S-10411 fix smart replace in location fields
  • S-10385 proxymock cloud push snapshot: fix support for --id flag
  • S-10407 Remove non-permissive filter validation
  • S-10410 visualize PostGres resultsets
  • S-10278 proxymock: rename signature generation to update-mocks
  • S-10278 proxymock: command to reset signatures on RRPair files
  • S-10398 Restore events and data tokens for large rrpairs

v2.3.808: 2025-09-11

  • S-10390 fix mysql signatures in reports
  • S-10391 fix smart_replace_recorded on generator
  • S-10213 Do smarter jwt transform application when using a postman collection
  • S-10398 Make sure transform log gets attached to raw rrpair
  • S-10388 support status code in RR markdown
  • S-10213 Add postman collection JWT resigning workflow to agent
  • S-10352 allow setting maximum number of recorded rrpairs
  • S-10382 fix missing proxymock response transforms
  • S-10381 do not default to localhost test SUT address
  • S-10379 proxymock app health check
  • S-10333 mysql transform summaries for snapshot view
  • S-10377 Always report transformed rrpair for miss and passthrough mode
  • S-10378 support smart_replace_recorded in generator responses
  • S-10376 Remove replay secrets field from test config
  • S-10212 Refactor agent handler to initiate replays and wait for snapshot updates
  • S-10373 Fix panic and add proxy related info messages
  • S-10366 refactoring and cleanup
  • S-10366 goproxy: set TLS SNI to backend when using reverse proxy
  • S-10212 Add jwt resigning config to agent tasks
  • S-10287 proxymock inspect: support duplicating RRPairs
  • S-10372 rpc for database visualization
  • S-10371 add db resultset viewer to proxymock inspect
  • S-10212 Add full transform to jwt location data for snapshot
  • S-10333 mysql transform support
  • S-10360 proxymock: print config file with version
  • S-10370 Let clickhouse reporter flush batch even after context is cancelled
  • S-10355 Fix casing for agent log tenantID

v2.3.781: 2025-09-03

  • S-10369 update gateway validation tests
  • S-10355 Add missing fields to agent logs
  • S-10355 Add clickhouse reporter for agent
  • S-10361 ensure proxymock default providers always get set
  • S-10355 Export reporter interface
  • S-10357 ensure dlp rule populated
  • S-10334 fix scrub transform in forwarder
  • S-10358 Fix query for single rrpair by id
  • S-10338-3 fix overage percentage
  • S-10288 Separate report activity timeline by component
  • S-10336 proxymock init: deprecate email flag, better instructions
  • S-10319 correct set host when using reverse proxy
  • S-10317 Change hard coded apply transforms task to generic update snapshot
  • S-10324-3 fix usage email updates
  • S-10324-2 remove extra auth error message
  • S-10338 add UsageThreshold commands to speedctl
  • S-10324 remove tenantID from UsageThreshold rpcs
  • S-10323 Return early when no services match filters
  • S-10307 Add contains operator for notebooks
  • S-10306 Make sure grpc responses have content type header
  • S-10316 Accept snapshot or snapshot id for agent tasks
  • S-10321 Change buffer size default
  • S-10259 proxymock: support map flag for specifying reverse proxies for record and mock
  • S-10318 Add more info in agent logs
  • S-10259 refactoring only
  • S-10266 proxymock: add SSL_CERT_FILE env var when wrapping SUT
  • S-10312 Add a resource id to tasks
  • S-10309 add collector timeout to operator testconfig
  • S-10028 Add endpoint for SSO domain discovery
  • S-10304 Don't embed proto in usage threshold struct
  • S-10028 Rename migration files
  • S-10028 Remove all references to swagger
  • S-10297 Fix gRPC retry logic for network connection errors
  • S-10303 update ses config

v2.3.747: 2025-08-25

  • S-10299 fix proxymock panic
  • S-10274-2 email user on high ingest
  • S-10275 add collector timeout
  • S-10296 check permissive statements in postgres extended queries
  • S-10295 Add utf null character handling for notebooks
  • S-10268 Delete test report tag for snapshot rrpairs
  • S-10295 Do full json validation for rrpair bodies
  • S-10277 Increase default buffer size and clean up sigcache interface
  • S-10289 Add support for replaying from scratch

v2.3.738: 2025-08-21

  • S-10274-1 usage threshold warning DB migration
  • S-10255 proxymock: fix handling of multiple in directories
  • S-10270 proxymock: updating docs
  • S-10272 Don't error log if a subtask fails
  • S-10262 Support gjson numerical indexing
  • S-10268 Hook up firehose reporter to generator properly
  • S-10262 Convert gjson paths to postgres friendly paths
  • S-10264 proxymock: warn users when they make requests directly to the proxy-out-port
  • S-10204 remove feature flag

v2.3.729: 2025-08-20

  • S-10261 ensure streamed mongo responses have a request
  • S-10252 ignore ErrClosed
  • S-10248 discard postgres ping-style queries
  • S-10254 Don't error when agent reports are deleted during processing
  • S-10237 Allow multiple filters for request/response bodies
  • S-10198 Add readme for architecture
  • S-10249 proxymock: redirect app logs to file
  • S-10252 avoid errors if file closed

v2.3.721: 2025-08-19

  • S-10240-2 update more max buffer sizes
  • S-10247 fix postgres dissector for ebpf capture
  • S-10223 proxymock: support env vars in wrapped process
  • S-10244 ambiguous sql column name
  • S-10232 Convert DLP debug logging to trace-level lazy logging
  • S-10245 use old linker directive
  • SPD-8032 nettap/ebpf client with protocol dissection
  • S-10232 Fix: Generator ignores DLP transform chains during replay
  • S-10240 make max buffer sizes consistent for processing artifacts
  • S-10223 proxymock: support direct run of java programs
  • S-10224 remove the prompts-as-tools hack
  • S-10227 proxymock: fix hang when logging to file

v2.3.709: 2025-08-13

  • S-10211 Add JWT location info
  • S-10226 add specific MCP command name to telemetry
  • S-10211 Add host to transform recommendations filters
  • S-10225 proxymock MCP: chdir for Cursor
  • S-10221 proxymock: add RRPair tracker to inspect
  • S-10204 minor data fixes

v2.3.703: 2025-08-12

  • S-10194 Fix EnableJavaToolOpts not being set in Configure method
  • S-10206 proxymock: install jks on init if JAVA_HOME set
  • S-10219 don't error when snapshot is removed during analysis
  • S-10197 Fix strategy string for agent tasks
  • S-10197 Add defaults for new columns
  • S-10204 fix mongo data issues
  • S-10197 Add informational fields to agent report
  • S-10205 proxymock MCP: change name
  • S-10069 proxymock inspect: query params and various fixes
  • S-10182 proxymock inspect: various fixes and improvements
  • S-18182 formatting
  • S-10201 preserve symbol tables
  • S-10199 Fix snapshot agent reports query
  • S-10199 Add rpc for agent cancellation
  • S-10196 Make sure mysql responder rrpairs have correct timestamp and normalize mysql location/cmd
  • S-10185 Refactor agent task definition and logic
  • S-10183 proxymock: cleanup non-interactive init workflow
  • S-10180 proxymock MCP: set MCP hints
  • S-10145 Add agent report logs rpc
  • S-10145 Remove unused proto messages
  • S-10174 proxymock MCP: ensure array params have types
  • S-10178 Add column to agent report view
  • S-10157 Add build tag to agent task replays
  • S-10142 Add more logging and compare mock rates instead of success rates

v2.3.679: 2025-08-04

  • S-10172 newline after CLI version
  • S-10172 proxymock: make version check faster
  • S-10170 Make sure responder rrpairs for postgres have updated timestamp
  • S-10142 Fix agent update query and add missing enum
  • S-10142 Fix insert queries and add tests
  • S-10162 Only upload traffic replay CR on init and end
  • S-10164 proxymock: files convert command
  • S-10160 proxymock: flag to specify RRPair file format
  • S-10156 add p90 to proxymock latency summary
  • S-10152 proxymock: decompress RRPair when calling send-one
  • S-10142 Add agent reconciler and modify rpcs to support it
  • S-10143 proxymock MCP: serve prompts as tools for clients that cannot read prompts
  • S-10147 proxymock MCP: support install for gemini-cli
  • S-10151 ensure proxymock installation is atomic
  • S-10146 properly handle ctrl-c in ui prompts
  • S-10128 Setup reporter correctly
  • S-10129 Add json path validation to database calls
  • S-10132 Remove unused responder RPCs and sync job

v2.3.661: 2025-07-28

  • S-10139 proxymock MCP: intelligent workdir for VSCode based IDEs
  • S-10136 fix handling 100 continue
  • S-10120 Add basic agent rpcs and database schema
  • SPD-9300 Fix transform changes for rrpairs that modify their own filter criteria
  • S-10121 Speed up notebook creation and check for non json bodies
  • S-10126 proxymock: upgrade MCP library
  • S-10124 proxymock MCP: replay prompt
  • S-10113 proxymock MCP: additional params
  • S-10124 proxymock: redirect replay table output to file
  • S-10115 ensure RRPairs req host does not contain a port
  • S-10098 Make init agent rpc start replays
  • SPD-9888 Use correct tenant id for set-tenant command
  • S-10111 proxymock MCP: prompt to record app traffic
  • S-10112 proxymock MCP: refactor tool and prompt definitions
  • S-10104 ensure shared logger gets a shared log level
  • S-10098 Redo agent task definition

v2.3.645: 2025-07-22

  • S-10101 Start notebook population in line
  • S-10103 add email to speedmgmt output
  • S-10093 proxymock MCP: tools and prompt to find breaking API changes
  • S-10093 proxymock: better output for comparing files
  • S-10105 add env var instructions to proxymock record
  • S-10103
  • S-10101 Add uniqueness constraint to notebooks
  • SPD-6633 Fix db queries for notebook
  • SPD-6633 Add rpc to retrieve notebook metadata and return loading status

v2.3.636: 2025-07-18

  • S-10021 proxymock MCP: instruction enhancements
  • S-10053 proxymock files compare command to show differences between RRPair files
  • SPD-6633 Add support for json filtering
  • SPD-6633 Insert full rrpairs as batch and add maintenance job
  • SPD-6633 Redo table definition for full rrpairs
  • S-10087 ensure partition deleted
  • S-10087 fix invalid drop table statement
  • SPD-6633 Add notebook rrpair population
  • SPD-8032 pre-req: remove ldflags from api-gateway
  • S-10084 Filter rpc rrpairs when advanced filters are specified
  • S-10057 proxymock MCP: support listing and reading RRPairs as resources
  • SPD-6633 Add table and basic RPCs for full rrpairs
  • S-10078 use gitlab registry images

v2.3.623: 2025-07-14

  • S-10068 fix proxymock signal handling
  • S-10068 proxymock inspect: fix dynamic file watcher
  • S-10075 Change log level for trimming messages
  • SPD-9956 Add feature selection code
  • S-10062 proxymock: fix record TLS
  • S-10050 Add host to latency table and segment filters
  • S-10056 proxymock MCP: support auth through SSE config
  • S-10059 update go toolchain version
  • S-10055 proxymock: SSE support for MCP server
  • S-10058 better interrupt handling for graceful shutdown

v2.3.613: 2025-07-09

  • S-10050 Identify data patterns and wildcards in paths
  • S-10021 proxymock: refactor and test MCP server
  • S-10026 Send transform changes for responder misses
  • S-10035 ensure analyzer process all RRPairs even when some fail
  • S-10033 Revert advanced filters in rrpair list

v2.3.608: 2025-07-03

  • S-10001 Add flag for java tool opts
  • S-10044 Prevent unnecessary looping in server side filtering
  • S-10006 proxymock: split responder and smart proxy for record
  • S-10044 Support iterating for server side filters
  • S-10006 revert "support h2c" change
  • SPD-9769 add traffic summary in tui
  • S-10006 proxymock: support h2c
  • S-10033 Fix assertion db query
  • S-10037 Support non-string json matching
  • S-10036 Add support for response body and header filters
  • S-10038 Fix sentinel build
  • S-10033 Add advanced filters to rrpairlist
  • S-10031 add back idle connection checks
  • S-10032 Claude's revision of Claude instruction files
  • SPD-9989 proxymock: support running application directly
  • S-10023 update AGENTS.md with project guidance
  • S-10022 proxymock: use current working directory as default for --in
  • S-10006 do not set content-length for certain status codes
  • S-10015 ensure content is properly converted when writing to markdown files
  • S-10012 support redirecting proxymock output to file
  • S-10004 Drop materialized views
  • S-10018 Add support for Azure AD to usr-mgmt

v2.3.586: 2025-06-19

  • S-10013 tune claude's memory
  • S-10014 automatic content type detection when content type header does not exist
  • S-10005 add OpenAPI parameters
  • SPD-9439 proxymock: support healthcheck when responder is live
  • S-10011 fix adding the Claude MCP server
  • SPD-9944 proxymock: support inspect RRPair editing with terminal based editors like vim
  • SPD-9984 generate mocks from OpenAPI spec
  • SPD-9997 add backticks to markdown RRPair format
  • SPD-9996 Remove materialized views and refresher
  • S-10000 add back default proxy in port
  • SPD-9978 proxymock: support transform metadata when pulling snapshot
  • SPD-9996 Launch analyzer job immediately after receiving signal

v2.3.574: 2025-06-13

  • SPD-9975 Use raw file for snapshot when available
  • SPD-9995 support cline MCP install
  • SPD-9998 Increase max rpc message size for analyzer client
  • SPD-9987 preserve modified signature
  • SPD-9986 proxymock: ensure RRPair markdown encode decode properly handles query params
  • SPD-9980 Increase notify queue size
  • SPD-9983 fix NPE panic
  • SPD-9965 ensure top-level fields get updated from markdown
  • SPD-9975 Use rpc as traffic source and optimize stream collection
  • SPD-9945 proxymock: realtime TUI updates when files change

v2.3.564: 2025-06-09

  • SPD-9970 Fix concurrent event firehose flushing
  • SPD-9968 Take window size into account when using materialized view
  • SPD-9974 Fix noisy reporter log
  • SPD-9968 Add rpc for analyzer to use
  • SPD-9970 add concurrent rrpair forwarder processing
  • SPD-9959 minor debugging changes
  • SPD-9963 Detect tech before calculating signature
  • SPD-9951 proxymock: support markdown for send-one
  • SPD-9586 Fix newline character
  • SPD-9586 Fix transform changes file format and provide RPC for lookup
  • SPD-9949 fix similar signatures missing

v2.3.553: 2025-06-04

  • SPD-9586 Refactor responder logic and start reporting transform changes
  • SPD-9948 trace log SQL queries
  • SPD-9923 proxymock: longer TCP timeout for replay
  • SPD-9943 re-analyze old snapshots with transforms automatically
  • SPD-9946 fix panic: use global logger when passed logger is nil
  • SPD-9931 add edit and file watcher to proxymock
  • SPD-9939 debugging for missing firehose RRPairs
  • SPD-9934 refactoring log initialization / ensure unique log levels for new loggers
  • SPD-9934 proxymock: shorten generator readiness check
  • SPD-9710 make proxymock directory search more permissive
  • SPD-9826 proxymock: provide more output during mock and replay - integrate verbosity levels
  • SPD-9826 refactoring log lib - ensure NewSimple does not modify the global logger
  • SPD-9905 make traffic filter case insensitive
  • SPD-9922 add ActivityEvent protections
  • SPD-9225 add nested DLP array redaction
  • SPD-9919 add Claude Code support
  • SPD-9927 speedctl / proxymock verbosity levels

v2.3.537: 2025-05-28

  • SPD-9445 proxymock: handle specific content types in markdown files
  • SPD-9918-2 remove extraneous output
  • SPD-9918 support file embedding in responder
  • SPD-9915 fix panic - require redactor when processing transforms
  • SPD-9445 move signature cache to iterator pattern

v2.3.532: 2025-05-27

  • SPD-9913 support different primitives in DLP
  • SPD-9445 markdown RRPair format lib

v2.3.530: 2025-05-24

  • SPD-9902 support replaying h2c captured gRPC to TLS server
  • SPD-9904 add finalizers to transforms

v2.3.528: 2025-05-23

  • SPD-9899 add selector to scrub transform
  • SPD-9898-2 update scrub transform
  • SPD-9898 add scrub transform
  • SPD-9873-2 fix scrub date panic

v2.3.524: 2025-05-21

  • SPD-9893 ensure generator always closes body
  • SPD-9888 More consistent flag usage for speed mgmt
  • SPD-9889 export Postman should honor patches
  • SPD-9881 fix speedctl analyze snapshot --reverse
  • SPD-9885 honor protocol scheme for generated grpc rrpairs
  • SPD-9878 ensure Content-Length header gets set properly
  • SPD-9890 refactor empty interface
  • SPD-9886 Don't delete env vars set by user that contain speedscale java opts
  • SPD-9884 add file transform keyword
  • SPD-9881 reverse snapshot services from speedctl
  • SPD-9881 reverse snapshot direction RPC
  • SPD-9706 small changes to error messages
  • SPD-9873-2 make ignorePaths optional
  • SPD-9863 Remove trimmed tag when restoring rrpair data
  • SPD-9873 add scrub_date transform

v2.3.509: 2025-05-16

  • SPD-9868 Close writers after writing all data but before uploading files
  • SPD-9868 Fix snapshot filtering and artifact flushing
  • SPD-9858 fix JSON in JSON transforms
  • SPD-9813 Delete authapi
  • SPD-9862 ensure report cluster name gets set properly
  • SPD-9835 ensure snapshot service metadata gets set on analysis
  • SPD-9857 add user audit details for pushed snapshots
  • SPD-9860 fix typo
  • SPD-9852 add smart replace recorded to responder
  • SPD-9856 Wrap errors correctly
  • SPD-9854 Respect withReport flag for responder only replays
  • SPD-9837 fix incorrect IDE detection
  • SPD-9835 proxymock: link service name so they match for the service map
  • SPD-9855 increase generator TCP probe iteration timeout
  • SPD-9835 small refactor
  • SPD-9835 proxymock: language consistency updates
  • SPD-9835 don't implicitly reverse services on snapshot creation

v2.3.492: 2025-05-13

  • SPD-9845 generator: add back S3 dependency
  • SPD-9843 don't exclude RRPairs when rehydrating snapshot
  • SPD-9842 Use correct rpc names for retry policy
  • SPD-9841 Remove unnecessary error log
  • SPD-9810 Add route for nginx validation
  • SPD-9831 proxymock: remove default --app-port
  • SPD-9836 proxymock cloud push snapshot: allow setting name
  • SPD-9764 support all protocols in proxymock inspect

v2.3.484: 2025-05-12

  • SPD-9830 More retry logic for apiclient in analyzer
  • SPD-9824 Don't mount files to /etc/ssl/ by default
  • SPD-9827 include source_id in unique index
  • SPD-9787 Increase time range for report assertion queries
  • SPD-9773 create snapshot and pull mcp command

v2.3.479: 2025-05-09

  • SPD-9814 Populate the mock mapping when we have a cluster initiated replay
  • SPD-9817 Add ability to filter by assertion status and type
  • SPD-9793 proxymock: ensure RPS are included in replay output
  • SPD-9814 Add mock mapping to report actual config
  • SPD-9816 proxymock: guard against port conflicts
  • SPD-9775-4 modify X-Amz-Date header before signing
  • SPD-9788 Always return line data for assertions
  • SPD-9800 update 10min agg materialized view with source_id
  • SPD-9788 Remove unused RPC
  • SPD-9775-3 modify X-Amz-Date header
  • SPD-8928 parse form urlencoded bodies
  • SPD-9775-2 fix aws_auth name
  • SPD-9787 Include rrpairs at the end of time range
  • SPD-9735 proxymock: support --fail-if flags for report results verification
  • SPD-9775 add transform for AWS Auth resign

v2.3.464: 2025-05-06

  • SPD-9750 Mount TLS files individually instead of as a directory
  • SPD-9767 fixes for postgres capture and mocking
  • SPD-9750 Faster failure for custom URIs and better error messages

v2.3.461: 2025-05-05

  • SPD-9779 validate transform runtime vars before updating snapshot
  • SPD-9778 Disable aws sdk checksum validation when none present
  • SPD-9777 Don't use stream context for event insertion
  • SPD-9776 Run util containers on arm nodes
  • SPD-9772 give a better error when a file exists in the dir path
  • SPD-9753 Set initial start and end time for report
  • SPD-9735 proxymock: support JSON output with more details
  • SPD-9762 Remove responder source tag from imported rrpairs and improve snapshot rehydration
  • SPD-9771 fix proxymock directory arguments
  • SPD-9757 reduce memory pressure for tls connections
  • SPD-9749 upgrade AWS dependencies
  • SPD-9747 proxymock: reverse proxy capture
  • SPD-9742-2 fix duplicate Prometheus ports
  • SPD-9748-1 refactor HTTP Body access
  • SPD-9742-2 tighten Prometheus conditions

v2.3.447: 2025-04-30

  • SPD-9756 Mark snapshot as reanalyzing when patching rrpairs
  • SPD-9751 Better error handling for collector
  • SPD-9722 Remove analyzer stream and use clickhouse data
  • SPD-9745 fix type checks for settings unmarshal
  • SPD-9744 add ignore port marshalling
  • SPD-9735 proxymock: internal - remove dependence on intermediate app
  • SPD-9741 proxymock: support performance (low data) mode for replay
  • SPD-9742 add Prometheus exporter config for goproxy
  • SPD-9741 proxymock: capture replay RRPairs

v2.3.438: 2025-04-28

  • SPD-9729 speedmgmt gateway invoke RetrieveRRPairList
  • SPD-9721 Send batches to clickhouse correctly
  • SPD-9721 Write report events to clickhouse
  • SPD-9720 Create Clickhouse table for report events
  • SPD-9666 prevent EPIPE errors for one-sided keepalives
  • SPD-9725 hide latency table when empty
  • SPD-9716 specify log level for extractor errors
  • SPD-9723 fix responder instance counter
  • SPD-9719 Don't assume local snapshot for speedctl export
  • SPD-9696 more efficient HeaderValueContains
  • SPD-9714 Use non-cancelled context for rehydration
  • SPD-9717 update windows build for proxymock
  • SPD-9714 Add source tag for consistency with other events
  • SPD-9714 Use advisory lock for logs and fix row scanning for logs
  • SPD-9714 Use ingested otel_logs to populate report timeline view
  • SPD-9666 modify read behavior to reduce overall proxy latency
  • SPD-9715 add gRPC proxy help tip
  • SPD-9713 Cleanup old generator support code
  • SPD-9695 Remove unused RPCs
  • SPD-9712 Ensure request body is also compressed when using compressed response bodies
  • SPD-9705 Prevent double encoding gzipped responder bodies
  • SPD-9711 proxymock inspect shows trailers
  • SPD-9708 Skip rrpairs we cannot proccess during snapshot analysis
  • SPD-9707 proxymock: hidden debug flags for profiling and tracing
  • SPD-9696 generator: simplify latency collection and reporting
  • SPD-9703 Add more validation and add error messages for replayFromScratch
  • SPD-9704 add latency table output to proxymock replay command
  • SPD-9702 Upgrade aws libs
  • SPD-9699 fix responder grpc detection during passthrough
  • SPD-9698 generator: track aggregator stop time for consistent RPS
  • SPD-9693 remove proxymock create
  • SPD-9694 Check snapshot traffic loading status when querying rrpairlist
  • SPD-9674 proxymock --no-out flag to skip writing to disk

v2.3.405: 2025-04-15

  • SPD-9641 proxymock: dynamic dirs for each run
  • SPD-9687 avoid tag overwrite
  • SPD-9690 add VSCode MCP Installer
  • SPD-9684 handle invalid status code gracefully
  • SPD-9688 add proxymock mcp --install option
  • SPD-9682 Use primary tech for signatures and encode signature changes as bytes to avoid invalid utf8
  • SPD-9683 proxymock: separate in / out dirs
  • SPD-9681 add MCP capture commands
  • SPD-9673 proxymock uses files exclusively

v2.3.396: 2025-04-14

  • SPD-9680 ensure http/socks proxies are included in readiness checks
  • SPD-9610 Only prompt when cli is interactive
  • SPD-9610 Support empty context for init
  • SPD-9676 Send heartbeats to keep analyzer stream alive while waiting for real events
  • SPD-9610 Record granular init usage
  • SPD-9165 update demo to use java-server 1.0.6
  • SPD-9614 refactor proxymock setup for shared commands
  • SPD-9207 allow goproxy readiness gates to be dependent on app readiness

v2.3.388: 2025-04-10

  • SPD-9670 restore random port behavior
  • SPD-9663 upgrade auth client cache library
  • SPD-9628 support basic replay flags for proxymock
  • SPD-9625 complete migration from gRPC stream client to gateway stream client
  • SPD-9661 safely handle status codes
  • SPD-9649 gRPC stream client: handle queued messages on close
  • SPD-9659 increase default object update queue size
  • SPD-9625 add back tracking for RRPairs outside of generator window
  • SPD-9625 do update report time when reanalyzing summaries - do not update from all RRPairs
  • SPD-9647 additional validations during proxymock init
  • SPD-9655 ensure downloaded report files show in pull output
  • SPD-9654 Use source id to get generator rrpairs
  • SPD-9640 Send grpc stream messages as we see them
  • SPD-9619 CLI docs from proxymock run to proxymock mock
  • SPD-9625 fix report graph whitespace - v2
  • SPD-9635 auto synchronize remote snapshots when running local mocks

v2.3.372: 2025-04-06

  • SPD-9649 ensure gRPC bus connection cannot hang forever
  • SPD-9458 allow proxymock version without API key
  • SPD-9630 defensive connection handling for streams
  • SPD-9644 fix mcp.json install error
  • SPD-9630 stream logs
  • SPD-9542 Remove non-tls servers
  • SPD-9609 Ensure minimum memory for generator
  • Revert "SPD-9625 fix rpt graph whitespace"
  • SPD-9617 enable windows-native local capture
  • SPD-9609 Set generator resources based on snapshot size when possible
  • SPD-9631 add Claude Desktop MCP support
  • SPD-9629 add Cursor IDE integration for MCP
  • SPD-9625 fix rpt graph whitespace
  • SPD-9622 don't expire replay when cleanup type is none
  • SPD-9615 tolerate streams in similar signatures
  • SPD-9620 Fix user data generation
  • SPD-9627 always quit after second interrupt
  • SPD-9609 Stream action file instead of downloading object

v2.3.354: 2025-04-01

  • SPD-9615 warn instead of returning error on similar signature err
  • SPD-9621 add MCP run_regression_test command
  • SPD-9533 include additional net info for generator rrpairs
  • SPD-9542 Fix url
  • SPD-9618 rename run command to proxymock mock
  • SPD-9542 Simplify settings and use scheme for authapi redirection
  • SPD-9616 enable mcp server
  • SPD-9486 simplify CLI init

v2.3.346: 2025-03-31

  • SPD-9611 let proxymock record/run and replay run at the same time
  • SPD-9595 reduce responder memory consumption for large signature matching
  • SPD-9541 | SPD-9460 split commands
  • SPD-9608 improve generator performance
  • SPD-9604 Use empty dir for diagnostics
  • SPD-9597 read / write files on proxymock pull / push snapshot
  • SPD-9497 Do not remove workload patches for a workload being modified mid replay
  • SPD-9606 suggest timestamp signature modifications
  • SPD-9594-2 update detected tech in signatures
  • SPD-9528 tolerate aws-chunked encoding

v2.3.336: 2025-03-27

  • SPD-9601 no read-only file system
  • SPD-9591 Skip interactive steps if api key is provided for init
  • SPD-9598 handle unspecified ports in HAR files
  • SPD-9594 fix transform location filters
  • SPD-9592 Add readiness and liveness probes to client side components
  • SPD-9569 Don't try to set go resource limits in lambda
  • SPD-9542 Enable auth on internal server
  • SPD-9542 Add internal servers
  • SPD-9590 reorganize command files
  • SPD-9569 Set gomemlimit for all processes
  • SPD-9585 Use recaptcha site key
  • SPD-9585 Add captcha verification for anon registration route
  • SPD-9579 remove analyze option from proxymock inspect
  • SPD-9570 fix proxymock import
  • SPD-9580 Add nil check

v2.3.321: 2025-03-21

  • SPD-9574 Add network checks to operator and change misleading error message
  • SPD-9494-2 make header assertion case insensitive
  • SPD-9216 modify polling mechanisms to decrease latency
  • SPD-9573 Upgrade grpc-go lib
  • SPD-9575 enhance URL transforms
  • SPD-9572 Let SQS handle unprocessed messages via visibility timeouts
  • SPD-9567 Increase frequency of heartbeats and timeout more aggressively

v2.3.314: 2025-03-20

  • SPD-9565 avoid overwriting existing tag values
  • SPD-9559 Don't log on context timeout
  • SPD-9497 Allow updates to workload with active replays
  • SPD-9562 prevent send to closed channel
  • SPD-9502 proxymock: rrpair files in local directories
  • SPD-9545 proxymock: remove message printing
  • SPD-9497 Remove istio legacy flags and mark internal structs as internal
  • SPD-9502 cleanup
  • SPD-9502 lib changes
  • SPD-9558 Use background ctx for final log upload
  • SPD-9502 move verbose flag
  • SPD-9548 remove broken middleware
  • SPD-9552 Return unwrapped grpc error from interceptor

v2.3.301: 2025-03-17

  • SPD-9548 upgrade gin library
  • SPD-9533 consolidate firehose batching logic to ensure consistent behavior
  • SPD-9532 upgrade to go 1.24
  • SPD-9498 update cli command name
  • SPD-9530 Remove tenant tags from statsd to reduce custom metrics
  • SPD-9503 Ensure Helm install fails if pre install checks fail
  • SPD-9461 Use background context for final uploads
  • SPD-9529 add unique id to generator requests
  • SPD-9434 Stop sending events to axiom
  • SPD-9461 Do final aggregates and log collection on timed out responder reports
  • SPD-9523 Expand home dir when updating rcfile
  • SPD-9521 Add initial stream connection retries and method specific service configs
  • SPD-9524 Return full error message for usr-mgmt
  • SPD-9522 add rate limiter for spammy error logs

v2.3.287: 2025-03-07

  • SPD-9518 Fix concurrent write for event
  • SPD-9491 Prevent concurrent map writes in gateway stream and add immediate heartbeat acks

v2.3.285: 2025-03-07

  • SPD-9491 Standardize on new gateway streamer struct and guarantee connection handling
  • SPD-9501 proxymock text
  • SPD-9515 Use deterministic proto marshalling for test
  • SPD-9491 Add heartbeat to gateway events and create special client

v2.3.281: 2025-03-06

  • SPD-9491 Use background context for grpc connection init
  • SPD-9500 cache secret value in JWT transform
  • SPD-9485 accept either format for secret extraction
  • SPD-9499 fix report gzip flakiness
  • SPD-9485 support secret variables for constant transform
  • SPD-9491 Ensure heartbeat loop doesn't quit for event bus and refactor connection logic
  • SPD-9474 permit JSON comparison on wrong content type
  • SPD-9491 Remove SNS lib and simplify event bus interface
  • SPD-9469 fix integer underflow in grpc dissector and improve pcap diagnostics
  • SPD-9491 Remove unused sqs related code
  • SPD-9491 Remove wait for ready grpc opt

v2.3.270: 2025-03-02

  • SPD-9464 Support local only mode
  • SPD-9433 Connect before using connection
  • SPD-9433 Get responder txns from clickhouse instead of Axiom

v2.3.267: 2025-02-28

  • SPD-9428 proxymock inspect: remove histograms and make rrpair details larger
  • SPD-9447 Rework init flow
  • SPD-9360 generous snapshot resolver will accept files, directories, snapshot IDs all in place of each other to make --snapshot-id and other flags more resilient to various user input
  • SPD-9443 proxymock support for --test-against flag to run tests on startup
  • SPD-9408 prevent removal of empty json objects when making clean manifests
  • SPD-9455 downgrade context errors in log reporter
  • SPD-9454 handle second interrupt to kill process
  • SPD-9453 fix service port assignment

v2.3.260: 2025-02-26

  • SPD-9394 fix duplicate providers
  • SPD-9451 organize proxymock cloud
  • SPD-9438 include additional diagnostics tools for packet captures
  • SPD-9376 safeguard against nil panic
  • SPD-9424 updating proxymock text
  • SPD-9271 Set tenant name in metrics and process id in forwarder
  • SPD-9426 Use a tag with util images
  • SPD-9271 Add missing migration line
  • SPD-9271 Add aggregate views for tenant usage

v2.3.251: 2025-02-20

  • SPD-9412 carry protocol scheme forward for responder http handlers
  • SPD-9395 Fix panic when getting audit info
  • SPD-9409 Ensure we get tracebacks in the operator
  • SPD-9388 Cancel replays for reports that are deleted
  • SPD-9412 ensure responder populates upstream port
  • SPD-9408 handle uninject argo rollout when no prior workload definition exists
  • SPD-9390 Use resource field instead of tag for s3 select
  • SPD-9410 Add a specific tag for redis
  • SPD-9277 Accept enterprise and local apikeys in init
  • SPD-9402 fix flaky test attempt 2
  • SPD-9405 fix panic
  • SPD-9395 add audit info to new snapshots
  • SPD-9402 fix flaky test / unify available port code

v2.3.238: 2025-02-18

  • SPD-9397 use existing snapshot ID for new snapshots
  • SPD-9389 Ensure report times are set before upload
  • SPD-9396 tidy telemetry source
  • SPD-9390 Support filtering by source for snapshot creation
  • SPD-9364 support multiple snapshots for proxymock analyze and proxymock inspect
  • SPD-9364 set config constants and make directory usage more consistent
  • SPD-9391 Surface pre analysis snapshot errors in snapshot when possible
  • SPD-9381 add additional test case for setting java tool opts
  • SPD-9386 Better error handling in usr mgmt
  • SPD-9387 allow initial forwarder connect failures to be retried

v2.3.228: 2025-02-17

  • SPD-9364 RRPairs directory traffic source
  • SPD-9364 refactoring speedctl and traffic source
  • SPD-9380 proxymock certs and jks command
  • SPD-9379 deprecate snapshot.DisableTokenDiscovery
  • SPD-9375 Fix usr-mgmt panic
  • SPD-9279 Allow api key auth to get current user info and fix usage recorder id
  • SPD-9357 workloads on first replay
  • SPD-9279 Replace segment with posthog
  • SPD-9373 add proxymock push pull snapshot
  • SPD-9374 remove local IP from transform preview
  • SPD-9355 re-enable speedctl windows build
  • SPD-9339 add libpq environment overrides for tls

v2.3.216: 2025-02-13

  • SPD-9357 various fixes for replay wizard defaults
  • SPD-9366 Prevent panic in kafka provider
  • SPD-9356 proxymock unit test
  • SPD-9358 Add supplemental groups to pod definitions

v2.3.212: 2025-02-12

  • SPD-9345 add additional safeguards for istio-cni

v2.3.211: 2025-02-12

  • SPD-9352 add analyze feature to inspect
  • SPD-9318 specify correct install script for proxymock
  • SPD-9348 add copy/paste to inspect request/response bodies
  • SPD-9344 fix outbound capture
  • SPD-9340 Add security context to hook containers, make jks hook optional
  • SPD-9343 fix panic due to unset reporter

v2.3.205: 2025-02-10

  • SPD-9305 Remove global rrpair caching
  • SPD-9321 one RRPair per file
  • SPD-9292 handle istio-cni repair mode for their race condition
  • SPD-9326 add signature view to CLI inspect
  • SPD-9321 refactor proxymock replay to run
  • SPD-9305 Refactor responder logic and preserve event log for hits

v2.3.199: 2025-02-07

  • SPD-9314 run analyze on import
  • SPD-9122 revise proxymock help examples
  • SPD-9312 add inspect snapshot to proxymock
  • SPD-8995 proxymock capture ingress traffic
  • SPD-9311 check inspector status during updates
  • SPD-9310 print similar signatures on responder miss
  • SPD-9309 remove duplicate
  • SPD-9304 extract command from X-Amz-Target header
  • SPD-9263 Fix typo in struct field name
  • SPD-9296 Add certs to login keychain as non root
  • SPD-9306 fix proxymock run recording
  • SPD-9263 Insert internal logs into clickhouse
  • SPD-8995 refactoring ahead of support for proxymock capture
  • SPD-9299 allow non-UTF8 during local recording
  • SPD-8995 inject collector for smart proxy and responder
  • SPD-9296 Prompt for certs in proxymock run command
  • SPD-9287 allow container env var injection
  • SPD-9285 Create user level api key if none exists for speedctl config

v2.3.181: 2025-02-04

  • SPD-9286 Cache container names in inspector
  • SPD-9270 Add strict security policies to all components
  • SPD-9234-2 change operator to enum
  • SPD-9234 add traffic validation to kraken
  • SPD-9272 fix snapshot traffic reversal
  • SPD-9263 Setup otel log table in clickhouse
  • SPD-9260 better retry logic for api client
  • SPD-9228 Prevent concurrent map writes in analyzer
  • SPD-9257 Add overwrite option to create certs command
  • SPD-9258 fix speedctl proxymock panic
  • SPD-9257 Make cert creation not overwrite certs and change macos keychain cmd

v2.3.170: 2025-01-30

  • SPD-9225 refactor forwarder conn mgmt and fix buffer pool state reset
  • SPD-9245 fix profile collection
  • SPD-9253 custom logging when setting gomaxprocs

v2.3.167: 2025-01-30

  • SPD-9229 generator to reuse gRPC connections
  • SPD-9255 de-tune databse probe log
  • SPD-9249 add init to proxymock
  • SPD-9250 add proxymock CLI install script
  • SPD-9230 gomaxprocs lib
  • SPD-9222 Check for tty in interactive commands
  • SPD-9230 set GOMAXPROCS based on CPU quota
  • SPD-9237 Fix telemetry recording for Segment
  • SPD-9161 fix proxymock rrpair serviceName

v2.3.158: 2025-01-29

  • SPD-9219 warn on RR decompress errors
  • SPD-9223 automatic apiclient retries
  • SPD-9203 add nil checks in various locations

v2.3.155: 2025-01-27

  • SPD-9209 Remove interactive cert addition step
  • SPD-8864 agent WIP
  • SPD-9187 properly set gRPC message for empty speedscale bodies
  • SPD-9192 fix speedctl push for existing snapshot
  • SPD-9191 Handle already registered user gracefully
  • SPD-9131 branch speedctl proxymock into separate proxymock binary

v2.3.149: 2025-01-24

  • SPD-9187 don't panic
  • SPD-9184 remove responder_match re-write for proxymock
  • SPD-9109 support correct output for non-TTY

v2.3.146: 2025-01-23

  • SPD-9167 add metadata for proxymock push
  • SPD-9144 Add speedctl rotate command
  • SPD-9152 fix pushing proxymock snapshot
  • SPD-9156 add proxymock CLI EULA
  • SPD-9108 proxymock capture analyze events
  • SPD-9120 Support local context and remove interactive cert addition for proxymock
  • SPD-9148 Remove deprecated snapshot in/outservicesflat fields
  • SPD-9151 Better api-gateway error handling
  • SPD-9144 Add api key rotation endpoint
  • SPD-9108 refactor proxymock analyze
  • SPD-9050 add containers to RetrieveWorkloads RPC
  • SPD-9108 APIClient interface for analyzer

v2.3.134: 2025-01-21

  • SPD-9149 Get report id only for validation
  • SPD-9143 add RRPair notes field
  • SPD-9108 send proxymock error logs as messages to extension
  • SPD-9136 Change forwarder reconnection logic and remove grpc.WaitForReady
  • SPD-9121 add responder_match to rrpair
  • SPD-9123 disable log streams
  • SPD-9088 support --output flag for speedctl infra replay
  • SPD-9138 change import proxymock command to use ProtoWriter
  • SPD-9125 Add event for removing sidecar
  • SPD-9114-2 refactor isRequestToProvider with SplitHostPort
  • SPD-9114 fix infinite loop on responder passthrough
  • SPD-9127 remove cloud dependecies from proxymock
  • SPD-9108 move proxymock into a separate package so it can spread it's wings
  • SPD-9115 add match status to raw file tags for proxymock
  • SPD-9097 revert tls volume mounts
  • SOD-9113 fix local recording service my-app
  • SPD-9057-2 fix local replay signaling/reporter
  • SPD-9057 add local analyzer for proxymock
  • SPD-9101 add speedctl proxymock send one command
  • SPD-9090 fix broken reporter in speedctl root
  • SPD-9096 add snapshotId to proxymock returns
  • SPD-9006 Add local context for proxymock to speedctl
  • SPD-9035 Start using materialized views again
  • SPD-9092 add speedctl import native
  • SPD-9091 add speedctl proxymock create
  • SPD-9058 move to proxymock sub-command
  • SPD-8630 fix concurrent map access in collector
  • SPD-8984 convert logs metric to histogram
  • SPD-9082 fix concurrent map access in report analyzer
  • SPD-9006 Add anonymous user support to usr-mgmt
  • SPD-8984 add support for histogram metrics
  • SPD-9080 output version in json format
  • SPD-9075-2 fix local record replay
  • SPD-9076 Add more logging for cron, prevent disruption and do not exit 1
  • SPD-9075 fix local-record empty body when HIT
  • SPD-8986 properly set read deadlines and set poll timeouts
  • SPD-9035 Add rds cert to refresher
  • SPD-9070 Make db pool size configurable
  • SPD-9035 Add refresher service
  • SPD-9042 Don't use protocol hints for http
  • SPD-8874 fix assertion type for gRPC body
  • SPD-8984 turn on log streaming in lower environments
  • SPD-9014 re-enable diagnostics uploads
  • SPD-9064 set forwarder keepalive enforcement policy
  • SPD-9051 remove snapshotID requirement for proxyMock
  • SPD-8973 add local VSCode recorder
  • SPD-9048 remove the atomicx library since the go std lib added this functionality
  • SPD-9028 fix snapshot processing details during analysis

v2.3.86: 2025-01-08

  • SPD-9044 allow CSV rows with different numbers of fields
  • SPD-9038 fix rds scripts, add clickhouse scripts
  • SPD-8886 use hybrid proto api

v2.3.83: 2025-01-07

  • SPD-9030 Don't use materialized views
  • SPD-8952 improve goproxy forwarder connection management
  • SPD-9029 snapshot analyzer: ensure signature gets set on untransformed RRPairs
  • SPD-9029 snapshot analyzer: fix logic error in serialize
  • SPD-8956 make snapshot analyzer concurrent
  • SPD-8929 Fix grpc-web capture
  • SPD-8956 add metrics to api-gateway
  • SPD-8929 Add support for grpc web
  • SPD-8986 enable full api captures with pgsql tls support
  • SPD-9013 place maximum size of captured packet diagnostics
  • SPD-8924 ensure default profile output dir
  • SPD-8956 make timex.Boundary thread safe

v2.3.72: 2025-01-03

  • SPD-8984 disable log streaming rpc from analyzer
  • SPD-8956 snapshot analyzer: refactor RRPair collection
  • SPD-8956 snapshot analyzer: move individual RRPair processing into a separate func
  • SPD-8945 snapshot debugging
  • SPD-8971-3 fix empty report timeline
  • SPD-8961 refine report timeline texts
  • SPD-8971-2 fix report timeline rehydration
  • SPD-8971 RetrieveReportTimeline add pagination
  • SPD-8966 analyzer: better errors for decode failures
  • SPD-8960: fix log rehydration context cancelation issue
  • SPD-8903 Fill in missing responder rrpair data
  • SPD-8964 have push report use the correct remote location
  • SPD-8953 goproxy memory improvements
  • SPD-8958 add payload caching to analyzer
  • SPD-8957 Apply pagination on full, filtered results for assertion list
  • SPD-8926 processing improvements to analyzer data population
  • SPD-8948 add analyzer update status rpc
  • SPD-8949 update inspector default
  • SPD-8817 catch panics stemming from forwarder communication
  • SPD-8914 postgres: avoid startup message double proxying
  • SPD-8943 fix snapshot raw file deletion
  • SPD-8940 feature flag token detection
  • SPD-8936 snapshot analyzer: ensure healthchecks are done before finalizing and writing report metadata
  • SPD-8879 add PodsInBadState
  • SPD-8933 tune log streaming warnings
  • SPD-8926 analyzer: snapshot processing optimizations
  • SPD-8914 fix memory leak for long-lived connections

v2.3.45: 2024-12-20

  • SPD-8925 report analyzer: don't reset signature
  • SPD-8844 Don't return diffs for all assertions in new rpc
  • SPD-8918 use a separate context for snapshot artifact uploads
  • SPD-8921 fix nil bucket for RRPairsThroughputPerService
  • SPD-8844 Fix typos and include table name
  • SPD-8899 adjust log level
  • SPD-8878-2 fix Include condition for service
  • SPD-8878 add SUTs logs to report_v2 timeline

v2.3.37: 2024-12-19

  • SPD-8908 include decompressed data if present with unexpected eof
  • SPD-8795 add X-Request-Id suggestions

v2.3.35: 2024-12-18

  • SPD-8906 responder: fix transformed response bodies
  • SPD-8666 add traffic direction to Analysis
  • SPD-8908 adjust log message level
  • SPD-8907 add k8s context flag to speedmgmt
  • SPD-8889 fix speedctl misc uuid command
  • SPD-8893 Upgrade lib for test env
  • SPD-8893 Upgrade pgx lib
  • SPD-8876 add log indicator to timeline

v2.3.27: 2024-12-17

  • SPD-8890 fix signature transforms
  • SPD-8899 add more context to extraction errors
  • SPD-8887 increase processing buffer for larger rrpairs
  • SPD-8831-2 update signature mapping file
  • SPD-8844 Include totals and optimize assertion list query
  • SPD-8889 convert between UUIDs automatically
  • SPD-8888 add base64 option to get similar sigs cmd
  • SPD-8863 generic CRD conditions
  • SPD-8829 add similar signatures prototype
  • SPD-8877 add report timeline filters
  • SPD-8863 agent: support in API gateway, inspector, operator

v2.3.16: 2024-12-16

  • SPD-8871 Add new filter string representation
  • SPD-8762-8 add re-hydration for report timeline
  • SPD-8871 Add query param filter
  • SPD-8864 fix signature mergers
  • SPD-8859 prevent log reporter from crashing
  • SPD-8844 Add rpc for retrieving assertions by rrpair
  • SPD-8863 refactoring and cleanup ahead of agent changes in operator
  • SPD-8762-7 fix verbosity of report_v2 timeline
  • SPD-8862 Handle non grpc responses for expected grpc assertions
  • SPD-8762-5 add RetrieveReportTimeline RPC
  • SPD-8844 Rework report assertions v2 rpc

v2.3.5: 2024-12-12

  • SPD-8676 additional goproxy panic recovery logging
  • SPD-8762-4 add SendLogs
  • SPD-8837 handle postgres cancel requests after tls negotiation
  • SPD-8852 agent: refactor config
  • SPD-8854 Add mock only default test config
  • 8846 add agent task CRD to operator helm
  • SPD-8844 Add new assertion list rpc
  • SPD-8762-2 update speedscale_logs engine
  • SPD-8849 cleanup init replay
  • SPD-8850 Add index field to assertions and remove unused field
  • SPD-8849 move replay defaults to new file
  • SPD-8847 Add back filter support for optURL type
  • SPD-8762-1 add speedscale_logs migration
  • SPD-8844 Always return rrpair bodies with assertion
  • SPD-8844 Populate line diff when running assertions
  • SPD-8846 agent task crd foundation
  • SPD-8846 traffic replay CRD consistency
  • SPD-8662 use forwarder svc health checks instead of heartbeats
  • SPD-8771 Remove unused assertion fields
  • SPD-8832 fix RetrieveRRPairThroughputV2
  • SPD-8831 create signature to RRPair mapping
  • SPD-8828 add http_req_trailer extractor
  • SPD-8709 ensure unique filenames for packet captures
  • SPD-8787 Refactor graph queries and remove sqlreq orm
  • SPD-8669 runtime and packet diagnostics
  • SPD-8787 Refactor rrpair queries
  • SPD-8803 support low-data mode for LatencyTableRequest