core/v1.5.14
maximhq/bifrostcore/v1.5.14May 29, 2026by akshaydeo
AI Summary
This is a significant release focused on MCP (Model Context Protocol) enhancements, including a new MCPCredentialStore abstraction, per-user credential reconciliation, TLS configuration support, and key rotation improvements. The release also adds OTel spec-compatible metrics, improves Bedrock and Anthropic integrations, and upgrades to Go 1.26.3.
Key Highlights
- New MCPCredentialStore abstraction for per-user MCP credential management with headers auth type
- TLS configuration support for MCP HTTP/SSE client connections
- Key rotation improvements - rotates on 401/402/403 errors and returns 502 when all keys are permanently dead
- Added OTel spec compatible metrics with provider cache and semantic cache attributes
- Upgraded to Go 1.26.3
New Features
- Direct API key header support
- MCPCredentialStore abstraction and per-user MCP credential reconciliation
- MCP per-user headers auth type with credential storage
- TLS configuration support for MCP HTTP/SSE client connections
- Propagate request context through MCP client connection
- Key rotation on 401/402/403 with 502 upstream_credentials_exhausted error
- triggered_rotation field in KeyAttemptRecord and improved bifrost_key_rotation_events_total metrics
- OTel spec compatible metrics (backward compatible)
- Provider cache and semantic cache attributes in metrics export
- additional_attributes to model pricing rows
- System messages handling for Opus 4.8
- RunWithPluginPipeline exposed on ClientManager with Starlark nested tool calls routing
Full Release Notes
## Core Release v1.5.14
- feat: add direct API key header support (#3817)
- feat: introduce MCPCredentialStore abstraction and per-user MCP credential reconciliation (#3656, #3702, #3705)
- feat: add MCP per-user headers auth type with credential storage (#3703)
- feat: add TLS configuration support for MCP HTTP/SSE client connections (#3779)
- feat: propagate request context through MCP client connection (#3768)
- feat: rotate keys on 401/402/403 and return 502 upstream_credentials_exhausted when all keys are permanently dead (#3491)
- feat: add triggered_rotation to KeyAttemptRecord and tighten bifrost_key_rotation_events_total semantics (#3430)
- feat: add OTel spec compatible metrics, backward compatible (#3865)
- feat: add provider cache and semantic cache attributes in metrics export (#3816)
- feat: add additional_attributes to model pricing rows (#3829)
- feat: system messages handling for Opus 4.8 (#3878)
- fix: Opus 4.8 compatibility (#3868)
- fix: truncate Bedrock function/tool names to the provider length limit
- fix: set guardrail config in Bedrock request from responses (#3862)
- fix: default Anthropic tool_use input to {} when arguments are absent (#3880)
- fix: responses stream events (#3838)
- fix: missing parameter parsing on compat flow (#3881)
- fix: set default api version in passthrough requests as a fallback (#3853)
- fix: add prompt cache retention parameter on responses request (#3810)
- fix: avoid overriding optional fields in virtual key update (#3855)
- refactor: expose RunWithPluginPipeline on ClientManager and route Starlark nested tool calls through the canonical plugin gate (#3794)
- refactor: rename staticHeadersResolver/serverOAuthResolver to sharedHeadersResolver/sharedOAuthResolver (#3840)
- chore: upgrade to Go 1.26.3 (#3782)
### Installation
```bash
go get github.com/maximhq/bifrost/core@v1.5.14
```
---
_This release was automatically created from version file: `core/version`_