v2.9 v2.2.4
medium risk
getlago/lagoAug 12, 2026 → Aug 13, 20261 day between releases
What's New
Adds MCP protocol support, Gateway API v1.6.0, and security enhancements.
New Features
- Implements MCP 2026-07-28 protocol standard with strict stateless validation.
- Upgrades production modules to Gateway API v1.6.0.
- Introduces immutable plugin release pipelines for build reproducibility.
- Adds Qwen3Guard security plugin for content safety inspection.
- Enhances AI Proxy with vLLM passthrough support.
Improvements
- Improves plugin security through immutable snapshots and validation.
- Provides granular usage statistics control via configuration.
- Supports Inference Extension v1.4.
- Standardizes version metadata for auditability and reproducibility.
- Enhances AI Proxy with vLLM passthrough capabilities.
Bug Fixes
- Fixes SSRF regression (CVE-2026-4308).
Upgrade Notes
No specific migration steps are required, but users should verify their infrastructure compatibility with the new MCP 2026-07-28 protocol and Gateway API v1.6.0.
The Two Releases
v2.9
v2.9
Aug 12, 2026· 2 months ago
Introduces the Agent Editor for managing agent profiles, scoped tool and skill policies, and fixes for SSRF and other reliability issues.
Full release notesv2.2.4
v2.2.4
Aug 13, 2026· 2 months ago
This release includes 96 updates focusing on AI Gateway enhancements, specifically the implementation of the MCP 2026-07-28 protocol standard, support for Gateway API v1.6.0, and improved plugin security through immutable snapshots.
Full release notes