plugins/telemetry/v1.8.5 transports/v2.2.6

high risk

maximhq/bifrostOct 6, 2026 → Oct 6, 20260 days between releases

What's New

Newer release enforces strict authentication defaults and introduces a setup lock for OSS deployments.

Breaking Changes

  • Inference auth defaults to true for fresh deployments
  • issuer_url is now required for OAuth configurations
  • Cache keys are scoped per virtual key
  • Management API changes now require real auth when dashboard auth is off

New Features

  • OSS Management API Setup Lock
  • Per-Message Effort Override
  • Claude Tool-Call Argument Streaming

Improvements

  • Scoped semantic cache buckets per virtual key
  • Default enforcement of inference authentication for new deployments

Upgrade Notes

To maintain unauthenticated inference, explicitly set 'enforce_auth_on_inference': false in config.json. For OSS deployments without dashboard auth, set 'setup_token' in config.json and restart. Ensure 'issuer_url' is configured for OAuth discovery settings.

The Two Releases

plugins/telemetry/v1.8.5

Plugin telemetry v1.8.5

Oct 6, 2026· 16 days ago

Plugin telemetry v1.8.5 updates dependencies to align with the latest framework and core versions.

Full release notes
transports/v2.2.6

Bifrost HTTP v2.2.6

Oct 6, 2026· 16 days ago

Transports v2.2.6 introduces a setup lock for unauthenticated deployments, defaults inference auth to on, and enforces strict OAuth issuer requirements, alongside new features for per-message effort and tool streaming.

Full release notes