core/v1.11.2 framework/v1.8.1
maximhq/bifrostOct 6, 2026 → Oct 6, 20260 days between releases
What's New
Framework v1.8.1 enforces issuer_url for MCP OAuth and adds token output memoization
Breaking Changes
- oauth2_server_config.issuer_url is now required for MCP OAuth auth modes
New Features
- Memoized retrieval of model max output tokens prevents full-sheet scans
Improvements
- Performance optimization via memoization of ModelCatalog.GetMaxOutputTokens
- Enhanced redaction of secrets in client config responses
- Dependency upgraded to core v1.11.2
Bug Fixes
- Explicit tracking of enforce_auth_on_inference setting for correct defaults
- Redaction of secret-bearing alias and Bedrock endpoint values in client config responses
Upgrade Notes
Set oauth2_server_config.issuer_url before upgrading deployments with MCP OAuth discovery enabled to avoid config load failures. This release upgrades the core dependency to v1.11.2, which includes security hardening for zstd decoding.
The Two Releases
Core v1.11.2
Oct 6, 2026· 16 days ago
Core v1.11.2 improves streaming for Claude tools, introduces prompt caching compatibility, and enhances security by capping zstd decoder memory usage.
Full release notesFramework v1.8.1
Oct 6, 2026· 16 days ago
Framework v1.8.1 adds memoization for model output tokens, enforces strict issuer URL requirements for OAuth configurations, and improves tracking of inference authentication settings.
Full release notes