plugins/telemetry/v1.8.0 transports/v2.2.1
Tencent-Hunyuan/HY-Motion-1.0Sep 18, 2026 → Sep 18, 20260 days between releases
What's New
Transport release fixes critical SSRF/injection vulnerabilities and adds prompt cache/MCP features, distinct from telemetry's user attribution updates.
New Features
- User attribution in Prometheus metrics (User ID/Name labels)
- Normalized error_type label for fault domain separation
- Virtual Key Assignees and Expanded Search
- Prompt Cache Breakpoints Capability
- MCP Observed Latency tracking
Improvements
- Upgrades core to v1.9.1 and framework to v1.7.1
Bug Fixes
- Resource ID Path Injection vulnerability
- Bedrock S3 SSRF vulnerability
- Claude Code thread continuation failures
Upgrade Notes
These are separate components; update telemetry plugin for user attribution and error labels, and update transport for security fixes. Metric label additions are backward compatible.
The Two Releases
Plugin telemetry v1.8.0
Sep 18, 2026· 1 month ago
Telemetry plugin update that adds user-level attribution to metrics and introduces a normalized error type label for better fault domain separation in Prometheus.
Full release notesBifrost HTTP v2.2.1
Sep 18, 2026· 1 month ago
Transport release addressing critical security vulnerabilities (SSRF, Resource ID Injection) and fixing provider integration issues including Claude Code thread continuations and Bedrock service tiers.
Full release notes