agent-vault Releases

Fixes a critical account takeover vulnerability related to password overwrite during unverified registration.

Jun 2, 2026

Optimizes the MITM proxy to flush responses per-chunk, improving performance for live streaming operations.

Jun 2, 2026

Adds configurable size limits for MITM responses and requests, and refactors skills for better seamlessness.

Jun 2, 2026

Fixed a rate limiting logic issue where proxy authentication failures were incorrectly counted against the TierAuth limit.

Jun 1, 2026

Upgraded the web build stack to Vite 8 and updated various crypto and routing libraries, while introducing new substitution surfaces for HTTP bodies and WebSockets.

Jun 1, 2026

Introduced support for OpenClaw/Codex and removed the legacy proxy TLS wrapping functionality to streamline the architecture.

Jun 1, 2026

Updated the base Alpine and Node versions, and introduced a new feature allowing the use of external credential stores integrated with Infisical.

May 26, 2026

This release enhances the OpenAI-compatible inference endpoint by adding support for flexible input types for the `stop` parameter and improving compatibility with Arize's OpenInference standard.

May 20, 2026

Fixed an issue where the default port was included in the outbound Host header, preventing signature schemes from matching correctly.

May 20, 2026

Removed the agent invite ceremony in favor of direct agent creation and rotation, and enabled Single Page Application serving for specific user routes.

May 19, 2026

This release addresses a bug related to Server-Sent Events (SSE) decoding by treating decoding errors as fatal errors to prevent silent failures.

May 15, 2026

Fixed a UI bug that prevented users from revoking pending agents by ensuring invite IDs are properly included in the database rows.

May 14, 2026

Redesigned the agent connection modal to focus on the agent-vault CLI and increased the default rate limits for agents.

May 14, 2026

This release introduces a breaking change regarding UI authentication requirements and improves error handling/logging for complex streaming inferences.

May 8, 2026

This release references a changelog for the Yazi project but does not provide specific details regarding changes within the provided snippet.

May 5, 2026

Minor update changing the --sandbox flag to --isolation in the vault run command to improve clarity and terminology.

Apr 27, 2026

Enhances security for private hosts and broker header forwarding, while also hardening installation scripts against HTTP redirect attacks.

Apr 26, 2026

Implements long-lived sessions with idle expiry and revocation, adds URL credential substitutions, and updates the web UI for service management.

Apr 26, 2026

Introduces async observability writes, TypeScript evaluators, and vLLM reasoning support, along with UI improvements for cost and usage data.

Apr 24, 2026

This release introduces container sandbox mode for vault run, adds OpenCode as a supported coding agent, and adds a shorthand command alias. It also includes important bug fixes for the sandbox including exit codes, reserved destinations, root-uid, and egress tests.

Apr 23, 2026