Skip to content

v4.0.0

Choose a tag to compare

View all tags
@a-klos a-klos released this 22 Jan 14:48
· 36 commits to main since this release
v4.0.0
a58a5ee
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🚨 Breaking changes

Helm chart / deployment config

  • Secret schema refactor (values + templates): secrets for basic auth, Langfuse, S3, STACKIT, and RAGAS are now split into individual fields (e.g., username/password or API key) and can be sourced via secretKeyRef in values.yaml. Helm templates were updated accordingly (including ingress/basic-auth handling). You’ll need to adapt existing values.yaml + secrets to the new structure. ([GitHub]1)
  • New secret-resolution helpers: templates now prefer secretKeyRef.name when provided and otherwise fall back to default names. This can change which secret names your deployments expect. ([GitHub]1)
  • New local Langfuse init workflow: local dev can generate a stable Langfuse init secret from a .env.langfuse via Kustomize/Tilt; docs and Tiltfile were updated. ([GitHub]1)

Frontend service configuration

  • Frontend auth env vars removed: VITE_AUTH_USERNAME / VITE_AUTH_PASSWORD were removed from .env.template. The frontend auth prompt now reuses BASIC_AUTH_USER / BASIC_AUTH_PASSWORD. If your frontend deployment relied on VITE_AUTH_*, you must migrate. ([GitHub]2)

Local dev / build workflow

  • Dockerfiles split into prod and dev variants: services now use Dockerfile (prod) and Dockerfile.dev (dev). Tilt supports switching to dev Dockerfiles for live iteration—any custom build references may need updating. ([GitHub]3)

✨ Added

  • Sitemap uploads: “continue on failure” option end-to-end:

    • Backend parses and normalizes continue_on_failure and defaults it to True if not provided (more resilient crawling by default).
    • Admin frontend adds a checkbox (default checked) and passes the value through the API payload. ([GitHub]4)

🔧 Changed

Release automation (GitHub Actions)

  • Release pipeline split into modular workflows (instead of one monolith): prepare-release, create-release, publish libs, build images, publish chart, etc., with label-gating (prepare-release, refresh-locks, chart-bump) to control progression and avoid unnecessary CI runs. ([GitHub]5)
  • Docker images built on published releases for all services including frontend and admin-frontend, and image digests are collected as artifacts. ([GitHub]5)
  • Release creation behavior: create-release.yml creates a Git tag + GitHub release when a PR with the refresh-locks label is merged (version is extracted from PR title). ([GitHub]5)
  • Manual chart version bump workflow added (bump-chart-version.yml). ([GitHub]5)

Frontend

  • Major dependency updates were applied to the frontends (repo-wide refresh). ([GitHub]6)

🧭 Migration notes

If you deploy the frontend

  • Replace any usage of:

    • VITE_AUTH_USERNAME → BASIC_AUTH_USER
    • VITE_AUTH_PASSWORD → BASIC_AUTH_PASSWORD ([GitHub]2)

If you deploy via Helm

  • Review and update your values.yaml and referenced Kubernetes secrets to match the new secret field structure and (optionally) use secretKeyRef for integration with external secret managers. ([GitHub]1)

If you run locally via Tilt

  • If you had custom Docker build configuration, ensure you’re pointing dev workflows at Dockerfile.dev where appropriate. ([GitHub]3)

Further Changes

  • chore: update starlette dependency by @a-klos in #161
  • chore: update dependencies for langchain and related packages by @robodev-r2d2 in #165
  • chore: bump fastmcp from 2.8.0 to 2.13.1 in /services/mcp-server by @dependabot[bot] in #163
  • ci: added dependabot manifest by @robodev-r2d2 in #170
  • chore: bump langgraph-checkpoint from 2.1.0 to 3.0.0 in /services/rag-backend by @dependabot[bot] in #169
  • chore: bump glob and semantic-release by @dependabot[bot] in #168
  • chore: Update appVersion format in Chart.yaml by @a-klos in #172
  • chore: Add annotations field to service configuration by @a-klos in #173
  • chore: update urllib3 to version 2.6.2 across multiple services by @a-klos in #181
  • chore: add timeoutSeconds to startupProbe in frontend deployments by @a-klos in #183
  • refactor: composite retriever and make reranker optional by @a-klos in #144
  • refactor: Enhance sitemap extraction and summarization features by @robodev-r2d2 in #185
  • refactor: frontend by @robodev-r2d2 in #184
  • chore: bump aiohttp from 3.12.15 to 3.13.3 in /libs/admin-api-lib by @dependabot[bot] in #193
  • chore: bump aiohttp from 3.12.15 to 3.13.3 in /libs/rag-core-api by @dependabot[bot] in #194
  • chore: bump aiohttp from 3.12.15 to 3.13.3 in /services/admin-backend by @dependabot[bot] in #195
  • chore: bump aiohttp from 3.12.15 to 3.13.3 in /libs/rag-core-lib by @dependabot[bot] in #196
  • chore: bump aiohttp from 3.13.2 to 3.13.3 in /libs/extractor-api-lib by @dependabot[bot] in #197
  • chore: bump langchain-core from 1.0.7 to 1.2.6 by @dependabot[bot] in #190
  • chore: bump mcp from 1.22.0 to 1.23.0 in /services/mcp-server by @dependabot[bot] in #199
  • Release/v4 by @a-klos in #209
  • chore(release): prepare 4.0.0.post20260122141916 by @a-klos in #211
  • chore(release): refresh service lockfiles for 4.0.0 by @a-klos in #216

Full Changelog: v3.4.0...v4.0.0

Contributors

dependabot, a-klos, and robodev-r2d2
Assets 2
Loading