Release Notes

v2.5.641: 2026-06-11

• S-11820 add make generate to CI build-nettap job
• S-12006 Operator: propagate ConfigMap changes to forwarder
• S-12008 proxymock: Inbound diff comparison view
• S-12000 proxymock web: fix status and direction filters silently ignored
• S-11999 proxymock web: add table view to topology page
• S-11992 proxymock web: fix topology freeze/half-height and bound workspace scans
• S-11979 responder: log transform chain count at startup
• S-11979 proxymock mock/replay: load workspace blueprints
• S-11935 proxymock: set REQUESTS_CA_BUNDLE for Python apps
• S-11885 Fix domains validation: Each() can't handle *string
• S-11931 Fix api-gateway panic when snapshot has empty Services
• S-11933 proxymock: view kubernetes resources

v2.5.630: 2026-06-09

• S-11883 S-11898 Fix mock --map for non-HTTP protocols
• S-10662 Fix filter rule round-trip: escaping, lexer, and REGEX on key-value filters
• S-9485 Fix responder body diffs lost due to shared pointer
• S-11889 Fix MCP resources/list timeout when cwd is root
• S-11671 proxymock: resolve ${{secret:name/key}} against a local directory
• S-11885 Fix tenant update domains validation panic
• S-11884 proxymock add deep k8s infra inspection
• S-11744 implement text filter predicate in filter.Match
• S-11857 Fix snapshot insert: always include services column
• S-11855 Reduce staging startup on-call noise: fix log levels and retry windows
• S-11861 visual stepper during cluster replay
• S-11859 proxymock: collect and store logs during cluster replay
• S-11853 capture responder RRPairs during cluster replay
• S-11844 do not apply capture annotations to pod templates
• S-11836 proxymock: remove workspace snapshot binding; replay walks parents for blueprints
• S-11840 recognize generatorDone in S3 report event fallback

v2.5.617: 2026-06-04

• S-11822 fix double-close panic
• S-11637 S-11751 feat: add speedmgmt tenant node-counts + inspector RAM reporting
• S-11830 add local cluster explainer to topology
• S-11823 proxymock generator: live tail k8s replay
• S-11668 facilitate capture pause/unpause for ebpf/java-agent enabled workloads
• S-11707 proxymock web: inject/uninject via kube API
• S-11669 docs: suggest proxymock web to view recorded traffic
• S-11666 fix: RecordActive respects eBPF capture mode; never force-injects goproxy
• S-11612 analyzer: don't fail report on transient ClickHouse outage
• S-11659 fix: explicitly set $group_0 for PostHog group analytics breakdown
• S-11635 update nettap ports
• S-11502 goproxy/nettap: close rrChan after Dissect returns — fix per-flow goroutine leak
• S-11279 forwarder byoc_otel: gRPC dial works for scheme-less endpoints
• S-11097 forwarder: stop registration heartbeat on BYOC tenants
• S-11593 stream large snapshot files to disk on pull
• S-11598 live tail snapshot creation in proxymock web
• S-11585 add K8s context selector to topology view

v2.5.602: 2026-05-28

• S-11517 make file directive permissive

v2.5.601: 2026-05-28

• S-11399 fix test plan: instruct LLM to call submit_test_plan after generate_task_list
• S-10704 fix proxymock PostHog events landing under null email
• S-11348 Decode application/vnd.amazon.eventstream (AWS Bedrock) responses
• S-11350 parse eval JSON from LLM responses containing markdown fences
• S-11345 automatically refresh RRPair list
• S-11336 add topology connection explainer
• S-11259 fix small topology view problem
• S-11257 add java traffic lab
• S-11249 fix(forwarder): byoc_otel jsonValueToOTEL emits JSON-safe AnyValue (null+bytes)
• S-11268 observability improvements
• S-11259 auto port-forward to the forwarder for proxymock web observability
• S-11258 improve chat error reporting
• S-11262 expose forwarder otlp port
• S-11077 dont automatically include fargate node exclusion
• S-11091 fix(forwarder): stamp body.cluster in OTLP log records
• S-11093 Pin goose version + retry curl in db-migrator Dockerfile
• S-10786 speedctl: add proxymock export {postman, k6, gatling} subcommands
• S-11080 feat(forwarder): byoc_otel exporter supports OTLP/HTTP in addition to OTLP/gRPC
• S-10974 blueprint recommender: catalog-driven suggestions
• S-11005 drift comparison recommendations
• S-10881 add prompt for traffic recommendations
• S-11394 Upload TrafficReplay CR manifest before kube.CreateReplay
• S-11256 Add latency regression, volume mismatch, and error rate deviation TrafficRecommendations
• S-11067 eliminate postgres rrpairs with empty requests/responses
• S-11006 reduce noisy debug logs to trace level

v2.5.577: 2026-05-26

• S-11000 fix erroneous errors for mid-stream postgres capture
• S-10987 http2 dissector: prevent potential deadlock and process EOFs correctly
• S-11046 DLP: redact PII inside root-level JSON array bodies
• S-11034 operator chart: retry pre-install hook on transient failures
• S-10972 proxymock web: extract SnapshotStore from Server
• S-10508 speedctl/mcp: base64-encode resource pagination cursors
• S-10991 proxymock: client-prompt analyzer, CLI, web page, and chat tool
• S-10984 operator chart + inspector: report cluster access labels on register
• S-10982 usr-mgmt: user labels storage + admin API
• S-10983 usr-mgmt: API key labels at creation
• S-10987 allow resource specification for helm pre-install jobs
• S-10828 proxymock web observability

v2.5.565: 2026-05-20

• S-10956 proxymock web: surface feedback for silent mutation failures
• S-10955 proxymock web: responsive layout & zoom fixes
• S-10945 proxymock web chat: UX & tool-contract fixes
• S-10907 proxymock web: fix data race on replay log buffer
• S-10957 proxymock web: server-side data integrity & validation
• S-10958 proxymock web: operational hygiene (timeouts, panic recovery, logging)
• S-10952 proxymock web: body editor reliability fixes
• S-10954 proxymock web: report view fixes (scroll, drill-down, sparkline, listener, blank endpoint, compare-mode 400)
• S-10953 proxymock web: observability ping/stream coherence
• S-10949 proxymock web: validate replay form input before submit
• S-10948 proxymock web: fix reanalyze pipeline UX (silent failures, stuck counters)
• S-10947 proxymock web: fix tab navigation and URL state restoration
• S-10944 proxymock web chat: reject symlink escapes, cap stream body
• S-10951 proxymock web: fix blueprint lifecycle errors
• S-10946 proxymock web: scope find-toolbar shortcuts + interactive RRPair checkbox
• S-10950 proxymock web: fix replay automation reliability (state, dedup, collision)
• S-10940 proxymock web: enforce HTTP methods and normalize error responses
• S-10941 proxymock web: normalize null-vs-empty-array contract
• S-10904 speedctl/internal/webui: guard rrpair file traversal
• S-10908 proxymock web: reject non-GET replay poll requests
• S-10654 fix(usr-mgmt): make-admin no longer 500s on FK constraint
• S-10906 proxymock web: fix replay stop status data race
• S-10877 proxymock automation: persist workspace snapshot binding
• S-10938 + S-10850 speedmgmt: HTTP/8081 admin path + safer tenant update/connection
• S-10942 proxymock web: escape untrusted text in innerHTML sinks
• S-10943 proxymock web: strip filesystem paths from error responses
• S-10909 speedctl/internal/webui: reject non-positive replay durations
• S-10910 webui: cap rrpairs delete request body
• S-10911 proxymock web: report full search total when truncated
• S-10882 proxymock web chat evals: one YAML file per case
• S-10903 webui: bound proxymock job retention
• S-10902 speedctl/internal/webui: reject invalid preview/apply request bodies
• S-10901 speedctl: return workspace snapshot in /api/context
• S-10889 JWT Auth blueprint workflow with Postman import
• S-10825 proxymock web chat: add @-mention picker for files and directories
• S-10815 chat: native Anthropic provider for BYO Claude key
• S-10888 perf(usr-mgmt): TTL caches for GetAPIKey and GetAWSCredentials — 98% DB query reduction
• S-10880 proxymock web chat: round out eval suite + eval-driven tweaks
• S-10883 proxymock web: link-based navigation via URL state sync
• S-10891 api-gateway: bump chat context window default to 200k
• S-10880 proxymock web chat: expand eval coverage across tools
• S-10878 proxymock web chat: support AWS Bedrock as a judge provider
• S-10875 chat: catch tool-name drift between knowledge .md and Go catalog
• S-10871 proxymock web chat: add eval harness
• S-10863 proxymock web chat: fix workspace_rrpair_read empty body
• S-10876 add proxymock report interface
• S-10872 proxymock web chat: refresh UI after mutating tool success
• S-10868 Populate secondary configmap for nettap capture targets
• S-10865 testing: enforce t.Context() in tests

v2.5.531: 2026-05-14

• S-10864 make observability client logging less noisy for failed connections
• S-10843 proxymock web chat: create blueprint write tools
• S-10767 replace csv data fixes
• S-10846 proxymock web chat: rename tool catalog to noun_verb
• S-10810 proxymock MCP: investigate_report: add step 0 snapshot-completeness check
• S-10848 speedctl/internal/webui: migrate tests to testify
• S-10857 proxymock web: rrpair detail: copy-path button
• S-10859 Fix usr-mgmt registration flow
• S-10858 fork api-gateway chat components so we can diverge for proxymock web
• S-10856 proxymock web chat: workspace-first UUID lookup + cloud_ tool prefix
• S-10852 refine recommendations display
• S-10851 Only supply fields that are changed to tenant update command
• S-10842 proxymock web: dataframe metadata chat tools
• S-10836 proxymock web: blueprint read tools for chat

v2.5.517: 2026-05-12

• S-10853 Remove service validation when updating snapshot for initial uploads
• S-10837 proxymock web chat: drive recommendations via chat tools
• S-10841 proxymock web chat: run management chat tools
• S-10835 proxymock web: add search_workspace_rrpairs chat tool
• S-10838 proxymock webchat : cloud snapshot tools
• S-10832 proxymock: route setup banner to stdout
• S-10828 Add OTLP/gRPC receiver and forwarding consumer to forwarder
• S-10823 add local recommender workflow
• S-10826 proxymock web: configure and run replays via chat tools
• S-10828 forwarder otlp scaffolding
• S-10833 fix credentials blueprints
• S-10631 reduce logging amounts
• S-10829 Return historical service usage data as timeseries
• S-10631 observability data presentation via proxymock web
• S-10831 Add way to create api-key from speedctl
• S-10827 proxymock web: fix filters no-op and persist across reload
• S-10824 gate destructive chat tools behind a confirmation flow
• S-10789 proxymock web: fail fast on duplicate launches
• S-10631 api-gateway observability event fan out on subscribe
• S-10814 keep BYO chat transcripts off the wire
• S-10812 add credentials replacement workflow
• S-10813 accept BYO OpenAI key for proxymock web chat
• S-10817 chat: clarify RRPair terminology in prompt and tab summaries
• S-10631 observability event relay forwarder -> api-gateway
• S-3567 remove notiondb hooks from usr mgmt
• S-10631 goproxy -> forwarder observability sending
• S-10808 chat: extract cloud tools into lib/chat/tools sub-package
• S-3567 Remove notion hooks
• S-10631 establish goproxy -> forwarder observability hop
• S-3567 Start tracking tenant allocation in usr-mgmt
• S-10798 chat: run orchestrator locally in proxymock web
• S-10631 observability client for nettap data
• S-10473 Add missing service usage rpc
• S-10804 remove pointer helpers
• S-10805 add Dataframe editor to proxymock
• S-10473 Differentiate between log events and metrics
• S-10797 chat: tag backend tools by data scope
• S-10807 Remove .specs/ directory
• S-10473 Index per service usage statistics
• S-10473 Add table to track service usage
• S-10803 add replay wizard to proxymock
• S-10780 Add datadog-ci template export output
• S-10801 proxymock web: LOCAL_DIAL_API_OVERRIDE for local dev
• S-10796 move chat code to lib
• S-10780 restore missing datadog-synthetics export changes
• S-10793 proxymock web chat: correct page context
• S-10799 speedctl: move thoughts ignore rule to repo root
• S-10794 add Blueprint editor to proxymock
• S-10787 Add a agent task list generation tool to the chat and more validation
• S-10774 proxymock web: chat v1
• S-10785 Enforce indexed body sizes
• S-10783 speedctl: move proxymock search under cloud
• S-10778 Lint rule to ensure mock files are named properly
• S-10765 Reject snapshot updates with empty Name before DB write
• S-10530 Move to concrete task definition types
• S-10631 add nodes to k8s rbac for nettap svc acct

v2.5.463: 2026-04-28

• S-10771 Better prompts for generating test plans
• S-10772 add Blueprints (aka Transforms) to proxymock web UI
• S-10741 Fix orphaned tool_use blocks causing persistent ValidationException
• S-10771 add eval task type
• S-10766 Unwrap JSON string scalars in smart_replace transforms
• S-10770 Give protojson output for test config tool to llm
• S-10763 Always encode b64 in the transform even if input is not encoded
• S-10470 Fix test plan tool usage and allow more detailed test configs
• S-10755 Use correct path syntax for detecting jwts
• S-10470 make createtestplan have session memory to support editing
• S-10759 deps: bump pgx/v5 to v5.9.0 for CVE-2026-33816
• S-10756 Display value of java tool opts flag being set correctly
• S-10758 speedctl: add token highlighting, Settings tab, and Mocks/Tests nav to proxymock web UI
• S-10741 chat: fix empty-message crash and iteration text run-on

v2.5.449: 2026-04-20

• S-10751 api-gateway: ensure handlers complete on graceful shutdown
• S-10749 Add TaskNotify task type to cron scheduler
• S-10745 filter additional postgres messages that provide little value
• S-10646 Consolidate transform recommendations by wildcarding array indices

v2.5.445: 2026-04-17

• S-10735 proxymock: fix apiclient handling for anonymous users
• S-10739 Send shutdown signal to grpc server and handle ctx cancellation in clickhouse event loop
• S-10737 Handle case where replay is deleted before starting
• S-10734 fix proxymock results alignment
• S-10727 proxymock init: add signup option
• S-10713 Add MCP installers for OpenCode and Codex
• S-10630 Add new setting for using coredns instead of hostaliases
• S-10712 proxymock: add search CLI command

v2.5.437: 2026-04-13

• S-10591 Allow exporters to be specified via helm chart
• S-10591 Register forwarder with usr-mgmt if exporters are configured
• S-10706 Update vuln libs
• Revert "Squashed branch 'S-11519/nettap-sys-kill' via merge request speedscale/speedscale!6189"
• S-10702 Detect WebSocket traffic in tech detector
• S-11577 usage stats: track LLM tokens
• S-10674 partial work for mid-stream http2 boundary sync
• S-11533 Report forwarder limit with tenant info
• S-10676 mid-stream sync/capture for ebpf kafka capture
• S-11535 Add multiple exporters to responder
• S-11618 mid-stream sync/capture for ebpf mongodb capture
• S-10694 instructions for agents working with clickhouse migrations
• S-10689 add trafficlab project to replace goproxy test envs
• S-11620 mid-stream sync/capture for ebpf redis capture
• S-11535 Make generator use multiple rrpair exporters
• S-11600 mid-stream ebpf capture for postgres
• S-11597 update speedctl config.yaml to config.json
• S-11577 chat: ensure table field migration works by deleting the old table
• S-11441 postgres mid-stream protocol capture
• S-11577 chat: migrate table columns to use existing standards
• S-11598 proxymock: fix inspection for websocket traffic
• S-11535 Set up otel exporters in forwarder
• S-10645 chat: fix erroring LLM request
• S-11101 update websocket support
• S-11544 chat tuning
• S-11535 Cleanup: Remove forwarder settings as a global singleton
• S-11108 Add custom TLS Java tool options annotation
• S-11585 more helpful linter error: don't exit in subshell during linting
• S-11580 Delete unused and deprecated internal rpcs
• S-11516 Delete deprecated rrpair fields
• S-11433 investigate link goes to blank page
• S-11573 Only upload workload yaml once
• S-11441 mid-stream protocol identification for mysql
• S-11544 chat: add fetch_docs_url tool for live docs lookup
• S-11535 Add exporter interface and otel exporter
• S-11551 logging: standardize controller-runtime logger setup
• S-11422 Support combined eBPF and Java agent capture
• S-11544 chat: fix tool loop exhaustion and missing log sources
• S-11350 chat: persist session details in clickhouse
• S-11544 chat: add RRPair counts to AI summary
• S-11350 chat: track context used
• S-11494 Add user_frustrated tool to chat LLM toolset

v2.5.395: 2026-04-01

• S-11543 fix service account retrieve permissions
• S-11538 lint: limit the number of concurrent lint processes
• S-11492 Add error logs to chat package for on-call visibility
• S-11530 lint: prevent breaking changes to proto files
• S-11532 Add forwarder limit related endpoints and RPCs
• S-11532 Add table to track forwarder limits per tenant
• S-11487 Prevent data race in test
• S-11528 fix autogen transforms: URL segment guard and body chain key collision
• S-11487 handle HTTP / HTTPS mixed services gracefully
• S-11519 nettap: add SYS_KILL capability to capture container
• S-11502 Move generative ai features to bedrock
• S-11396 add include/exclude to speedctl infra replay
• S-11511 Allow Developer and Maintainer roles to retrieve all artifacts
• S-11508 de-tune clickhouse connection alerts when they recover gracefully

v2.5.381: 2026-03-26

• S-11215 RBAC: implement admin/maintainer/developer roles (backend)
• S-11490 Add bedrock chat provider
• S-11485 support mysql_native_password for mariadb mocks
• S-11474 invalid proto error: fix latency table format on upload
• S-11483 Pass client context as user-role message instead of system prompt
• S-11480 fix: add nil check for pem.Decode to prevent panic on malformed cert data (S-11480)
• S-11482 remove limit on number of bytes that can be used for detection
• S-11469 add read_log_content chat tool for searching log files
• S-11473 fix(gatling): pass CLI flags through, derive class name from output filename,...
• S-11458 detector: add Perplexity AI as supported LLM provider
• S-11452: RBAC: Add role column DB migration (user_role enum, migrate is_tenant_admin)
• S-11470 mark tls rrpairs correctly when obtained via ebpf

v2.5.369: 2026-03-24

• S-11472 Run nettap as root
• S-11420 Add permission and make sys paths configurable
• S-11447 Handle invalid utf encodings in indexing
• S-11411 fix MongoDB SASL authentication during replay
• S-11451 Remove responder triggers feature
• S-10519: fix findTenant() silently swallowing lookup errors
• S-11453 process server-initiated protocols correctly
• S-11432 Do not inject sidecar on replays
• S-11446 Remove dnat mode and unused X-Speedscale-Message header
• S-11420 Reduce nettap permissions
• S-11443: Fix primary_detected_tech in RRPairs service summary merge
• S-11429 detector: add LLM provider detection for OpenAI, Anthropic, Gemini, OpenRouter, Grok
• S-11440 deps: upgrade google.golang.org/grpc v1.79.2 -> v1.79.3 (CVE fix)
• S-11415 Fix trivy build
• S-11419 dependency upgrades: including refactoring

v2.5.354: 2026-03-18

• S-11416 Add settings to bring your own cert during helm install
• S-11430 linter: ensure test file names match
• S-11417 responder: ensure all providers record hit or miss
• S-11306 chat: more knowledge articles and various tweaks
• S-11406 RRPair markdown: handle mutable fields
• S-11419 dependency upgrades: basic
• S-11421 helm upgrade guards for nettap configmap
• S-11415 Build containers for trivy scan
• S-11408 Return a json response even on error
• S-11369 Add rpc for submitting test plan
• S-11406 RRPair markdown format: strip unnecessary data

v2.5.344: 2026-03-17

• S-11306 chat: more backend tools
• S-11275 avoid any attempt to use smartdns when operating as nettap client
• S-11398 bugfix: handle larger bodies in proxymock inspect
• S-11369 Add CreateTestPlan rpc
• S-11348 move to golangci linter with custom lint rules
• S-11309 ensure closed flows are properly cleaned up
• S-11397 fix user management panic

v2.5.337: 2026-03-13

• S-11329 add dummy package target for CLI tools
• S-11368 update nettap rbac to allow reading from its configmap
• S-11395 strip invalid build target
• S-11386 better signal handling for speedctl replay
• S-11382 Deprecate individual tuning tasks and make task definitions more descriptive
• S-11329 use smaller build images for services that can use them
• S-11390 bump default nettap version
• S-11387 Add timestampTime column
• S-11306 chat backend: move to a new lib for better context handling
• S-11370 mcp: improve all 6 proxymock MCP prompts
• S-11387 Add TimestampTime column to otel_logs
• S-11381 proxymock: clarify generate help text about OUT-direction RRPairs
• S-11377 proxymock: deduplicate error output on send-one failures
• S-11375 proxymock: improve context canceled/timeout error messages in replay
• S-11368 add nettap configmap env var
• S-11376 proxymock: wrap generate errors with user-friendly messages
• S-11373 proxymock: return non-zero exit code for unknown commands
• S-11374 proxymock: print error when inspect runs without TTY
• S-11360 Create a unified tuning mode and try more combinations of recommendations while tuning
• S-11371 remove speculation
• S-11371 Add claude hook for regenerating protos
• S-11371 add PreToolUse hook to block direct .pb.go edits
• S-11361 optimize some api call paths to prevent errors
• S-11359 remove unnecessary log fields
• S-11355 Add application error detection to report summary
• S-11349 Only apply certain transform recommendations
• S-11354 add performance to AI report summary
• S-11348 refactoring: more protojsonx updates
• S-11189 export: add Gatling simulation format
• SPD-4886 proto: Deprecate cookies field in HTTP protobufs
• SPD-9906 cli: add errors to proxymock replay pretty output
• SPD-9489 proxymock responder immediate response
• SPD-9400 Add better error handling for proxymock app-port
• S-11348 refactor: preparing for new linter
• S-11346 Add specialized apply recommendations task
• S-11347 use default ndots configuration for hostname resolution
• S-11325-2 add report summary RPC

v2.5.304: 2026-03-10

• S-11343 revert changes for openshift
• S-11340 Fix S-11309 regressions: restore nettap tag and security context values
• S-11323 update to go1.26
• S-11325 add report summary AI chatbot tool
• S-11120 Show redis bulkstring as plain string whenever possible
• S-11337 Add name and description for transform recommendations
• S-11331 cookie jar changes for Go 1.26
• S-11328 Fix location segment wildcard logic for multiple layers of wildcards
• S-11309 Make jks job use user 0
• S-11326 speedctl load settings properly before overwrite
• S-11309 correct helm installation on openshift
• S-11312 Expose gateway RPCs as AI chat tools (Tier 1 + Tier 2)
• S-11310 correctly handle inbound traffic on istio ambient mesh
• S-11308 Generate a single request id recommendation
• S-11305 correct nettap daemonset security context

v2.5.289: 2026-03-07

• S-11156 Wait for snapshot to finish reanalyzing before marking comparision task as done
• S-10793 better autogen-transforms command for tuning workflow
• S-11302 Add linguist-generated attr for proxymock RRPair files
• S-11291 Add teardown command to sos
• S-11156 Save transforms found from replay as recommendations
• S-11290 Bump java demo app version

v2.5.283: 2026-03-04

• S-11279 preserve original host on service
• S-11241 lib/loader: migrate from deprecated s3/manager to s3/transfermanager
• S-11281 add Traffic Viewer tool to chat interface
• S-11274 prevent operator from removing nettap config modifications
• S-11278-2 add snapshot performance rpc:
• S-11278 add throughput and performance graphs to snapshot
• S-11262 add tolerations for arm64 nodes since images support them
• S-11257 read and republish logs from nettap capture
• S-11227 Add TrafficRecommendation for unreplaced REDACTED tokens
• S-11243 remove potential write blocks on received data chunks
• S-11246 chat: list test configs tool
• S-11246 api-gateway: support reasoning level for chat

v2.5.271: 2026-02-27

• S-11251 api-gateway: add chat backend tools for snapshot and cluster operations
• S-11245 api-gateway: change default chat LLM model to gpt-5.2
• S-11241 fix ResourceExhausted on large report retrieval
• S-11240 address chat feedback - add specs
• S-11168 allow retrieval of workload capture status
• S-11168 allow for ebpf and java-agent capture configuration via API call
• S-11236 slim agents context
• S-11233 build: remove unused SpeedscaleUID const
• S-11238 simplify LLM env vars
• S-11234 include nettap installation status in operator check
• S-11235 add iptables exclusion for istio ambient mesh marked packets
• S-11210 chat support
• S-11204 set internal traffic policy for nettap svc
• S-11224 detect memory growth in traffic recommendations
• S-11223 add report recommendaations for K8s errors
• S-11205 refresh command/location for older rrpair captures
• S-11207 record durations for redis rrpairs

v2.5.254: 2026-02-23

• S-11220 Use overall analyzer context for uploading final report
• S-11218 Ensure snapshot never has 0 duration
• S-11201 simplify replay coredns to sidecar pattern vs external svc
• S-11186 handle invalid status code for download
• S-11203 Delete assertion streamer
• S-11200 include any custom dns configuration setup for replay

v2.5.248: 2026-02-19

• S-11193 Don't deploy collector when we only have custom uris
• S-11185 docs: fix AGENTS.md header after rename
• S-11185 refactor: rename CLAUDE.md to AGENTS.md with redirect
• S-11162 Handle getting pods for argo rollout with workloadRef
• S-11177 add hostname and duration to mongodb responses
• S-11171 Do not use readiness timeout as collector timeout
• S-11170 Move RRPair limit validation to api-gateway
• S-11151 sos: fix ebpf config index
• SPD-9186 Improve TLS error messages and notifications
• S-11152 goproxy internals refactor with less tight coupling
• S-11151 Add eBPF configuration support to sos validate command
• S-11165 Check for grpc cancelled error

v2.5.236: 2026-02-17

• S-11158 Strip port from hosts before adding to service map
• S-11158 Use transformed hostnames for service map
• S-11157 Handle isTLS not being set properly
• S-11114 Remove search analyzer job
• SPD-1666 kube: Remove unused goproxy command port
• S-11114 Add full text and body search to MCP
• S-11150 remove speedbot
• S-11114 Add new text filter type
• S-11106 Make create user command accept a tenant name or id
• S-11136 handle coredns cleanup for cancelled replays
• S-11147 Replace numeric fields that are 0 in transforms
• S-11146 control ebpf port filters via annotation
• S-11142 support ebpf capture via annotation
• S-11113 Externalize DLP redactor and transforms initialization

v2.5.222: 2026-02-12

• S-11121 move investigate agent commands to the proxymock MCP
• S-11136 mongodb sasl auth fallback: try to find first matching username
• S-10964 Remove notebook related db tables
• S-11131 Use referenced workload directly in argo rollouts with workloadRef
• S-11131 Include workload type when caching
• S-11111 handle invalid RRPairs offsets

v2.5.216: 2026-02-10

• S-10964 Deprecate notebooks feature
• S-11112 Set custom uri in replay CR
• S-11133 add make-admin command to speedmgmt
• S-11125 Handle unicode nulls in json better
• S-11125 Temporarily skip bodies with null characters
• S-11129 hotfix for token flood
• S-11126 fix excessive data token discovery
• S-11125 Replace utf null rune instead of byte sequence
• S-111124 fix missing location in unrecognized tokens
• S-11094 updated nettap version
• S-10962 Fix header not eq case for filters
• S-11085 Detect MongoDB SASL authentication and generate transform recommendations
• S-11081 ensure all transform chains have proper tags for traceability
• S-11090 add recommendation for gRPC timestamp
• S-10962 Handle unicode null characters in jsonb column for rrpair data
• S-11102 save speedctl command line in speedctlCmdline report tag
• S-11096 Add new RPC for cluster sidecar stats

v2.5.199: 2026-02-04

• S-10273 operator fixes for java-agent instrumentation
• S-11092 firehose: ensure all events are sent on shutdown
• S-110912 use dependency injection for AWS creds rather than mutating the gloabl environment
• S-11078 operator: more resilient workload collection
• S-11064 Add RedactSnapshot RPC to create DLP-redacted snapshots
• S-11083 snapshot analyzer: limit number of RRPairs in a single snapshot
• S-11068 autogenerated transforms: support query params and headers
• S-10961 Add advanced filter support for rrpairs
• S-10961 Add indexing of bodies and headers
• S-10273 mark proto field as optional
• S-10273 add annotation to inject nettap java agent
• S-11073 tune investigate-report command
• S-10960 Add column for rrpair bodies, headers, etc.
• S-11072 fix filter string quote escape issues
• S-10990 Fix indentation for security contexts and jks job permissions
• S-11053 tweak investigate report command
• S-11070 de-tune context err log

v2.5.182: 2026-01-28

• S-11041 support mongodb sasl+scram auth in responder via replay transform
• S-11067 rename speedmgmt cmd package to cli
• S-11065 Only suggest transforms for request bodies
• S-10990 Better openshift support
• S-11062 Kafka output for proxymock
• S-11051 Remove references to custom patch and make inspector sidecar injection idempotent

v2.5.176: 2026-01-23

• S-11059 Handle panic in snapshot update
• S-10932 mock tuning: check for responses before running
• S-11038 Move large lists from snapshot summary analysis into separate data structures
• S-11053 slash command for investigating a snapshot
• S-11052 collector: retry on failure to collect metrics

v2.5.171: 2026-01-22

• S-10971 Handle case in schema builder where primitive field is later an object
• S-11053 investigate-report command
• S-11050 do not create recommendations to IGNORE timestamps for responses of OUT RRPairs
• Fix proxymock generate to include BasePath in generated URLs
• S-10971 Add rpc for retrieving json schemas for snapshot
• S-10971 Fix early return for json schema generation
• S-10971 Add json schema artifact to snapshots
• S-10993 Use json schema builder in recommendation engine
• S-11050 fix panic: use correct proto package
• S-11047 Add FilterRRPairPredicates RPC to filter predicates against RRPairs
• S-11037 allow report status updates between final states
• S-11044 Handle expired ctx errors in event query loop

v2.5.160: 2026-01-20

• S-11043 Only start analyzer job on replay start
• S-11042 Revert generator dlp config proto change
• S-10983 speedctl: pull all artifacts
• S-11039 add extensible transform recommendations
• S-11032 Add RegenerateFromRedacted function and dlp_field reverse support
• S-11003 speedctl infra dlp: clarify command
• S-11001 DLP transform recommendations: deduplicate, group, and sort
• S-11024 recognize data pattern in forwarder redaction
• S-11023 add DLP recommendation type
• S-11022 summarize dlp rules in snapshot
• S-11020 Add DLP recommendations to replace redacted values during replay
• S-11019 consolidate dlp recommendations
• S-11018 add DLP recommendation category
• S-11017 recommend DLP field for token redaction
• S-11016 wrap report retrieval in analyzer with smaller timeout window
• S-11010 attempt to recover from completed replays missing start event
• S-10987 responder: proper DLP implementation
• S-10997 Allow setting resource block and ephemeral storage for all components
• S-11009 extract tokens from responses
• S-10989 add TXT replicaSet overrides for mongo+srv support
• S-11000 Add tenant deletion command
• S-10998 Prevent custom DNS configs from being overwritten
• S-10971 Add json schema builder package
• S-10982 fix panic when comparing payloads: when keys differ during schema-only comparison
• S-10988 add AI prompt suggestion to fix discovered traffic issues
• S-10984 make TransformRecommendations ID human readable
• S-10969 Add report recommendations feature
• S-10978 CLAUDE.md: coding style
• S-10958 Remove signup via cli option
• S-10955 inspector log improvements
• S-10956 Handle report analyzer case where no done signal is seen
• S-10967 better handle errors when waiting for reports
• S-10966 reassign logger in responder
• S-10942 speedctl infra replay: service flag language
• S-10953 proxymock mcp install: guard against JSON mangling
• S-10940 proxymock mcp install: do not include type for Gemini
• S-10945 Set metric collection interval to 1s for replays
• S-10948 make recommendation IDs consistent across snapshot re-analysis
• S-10943 Add optional ID fields to TransformChain and TransformRecommendation
• S-10943 Filter transform chains to only active chains for DLP filtering

v2.5.120: 2026-01-08

• S-10936 speedctl infra replay: rework address targeting behavior

v2.5.119: 2026-01-08

• S-10878 Add support for changing kid in jwt transforms
• S-10929 Make calcDLPLocations return TransformRecommendations
• Add DLP token detection and transform recommendations

v2.5.116: 2026-01-06

• S-10919: Add feature gate for speedscale-collector-persistent workload
• S-10885 generator support for kafka
• S-10855 check for mongo cluster information in additional response locations
• S-10917 Prevent nil transform chains when inactive
• S-10877 Add setting for limiting secret related access
• S-10914 Prevent error logs on expired notebooks
• S-10877 Don't generate a dynamic redis secret

v2.5.109: 2025-12-31

• S-10902 enable text search in reports
• S-10903 set actual config on future reports
• S-10901 enable text search in non-HTTP RRPairs
• S-10900 prevent potential http2 dissector memory leak
• Add SearchRRPairs RPC to expose RunSearch functionality

v2.5.104: 2025-12-30

• S-10894 handle context cancelled
• S-10890 RPC to list agent locations
• S-10889 fix agent reports search
• S-10886 support sorting and searching agent reports
• S-10882 add streaming collector mode
• S-10833 Set tenant id when looking up auth
• S-10833 Prevent unnecessary identify calls and include group/tenant whenever possible
• S-10880 speedbot: limit tool tokens
• S-10872 responder: notify report when Redis signature cache is reset
• S-10865 postgres protocol: represent null differently than empty string
• S-10855 Provision mongo-coredns related resources only if selected during replay
• S-10880 speedbot
• S-10879 make default test config ID consistent
• S-10855 add streamed hello responses for mongodb provider
• S-10875 set success rate on tuning task so comparison has something to reference
• S-10859 Set location when updating agent report
• S-10841 do not attempt to rehydrate when no RRPairs exist
• S-10858 fix agent logging
• S-10608 agent: integrate transform autogeneration
• S-10851 proxymock: better no files found error
• S-10853 add original request to agent reports
• S-10849 fix forward-clickhouse make target
• S-10848 stricter node affinity for nettap installs
• S-10845 expand detectedBy tag
• S-10840 support inactive transforms... by not supporting them
• S-10835 analyzer autogen-transforms: fix tags
• S-10835 add transform 'detectedBy' tag
• S-10835 analyzer autogen transforms: add tags to transforms
• S-10608 analyzer autogen-transforms: remove suggestions and upload only
• S-10608 analyzer autogen-transforms: consolidate array transforms into wildcard
• S-10837 Handle case where notebook does not exist
• S-10814 minor improvements
• S-10832 Copy raw files async when cloning snapshots

v2.5.72: 2025-12-11

• S-10816 Modify search traffic tool prompt
• S-10608 analyzer: autogen-transforms command
• S-10829 add apply recommendation buttons to headers, trailers and query parameters
• S-10821 manage nettap installation via helm
• S-10824 remove .ai claude instructions
• S-10816 Add traffic investigation pattern to MCP
• S-10806 Handle cancelling future agent tasks
• S-10811 better decompress error
• S-10795 Fix extract data filter logic
• S-10807 fix insert assertions conflict

v2.5.62: 2025-12-03

• S-10804 report analyzer: ensure RRPairs decompressed after download
• S-10804 housekeeping
• S-10773 similar signature ranking: expand body for comparison
• S-10801 fix mock tuning error
• S-10782 Add retries to internal usr-mgmt client
• S-10797 Remove default constant transform for JWT resign recommendations
• S-10610 Add jwks workflow to replays
• S-10792 Filter JWT locations to only OAuth handshakes (access_token)
• S-10790 Use original rrpair timestamp
• S-10791 add JWT example to snapshot summary
• S-10714 responder: normalize signature URLs
• S-10788 analyzer: fix mock tuning panic
• S-10745 Get rrpairs from api-gateway instead s3 for report analyzer
• S-10783 Don't use invalid utf postgres values in data tokens
• S-10779 speedctl: ensure latency table downloaded in full
• S-10777 speedctl install: incorporate app in docker
• S-10779 fix latency table format
• S-10775 Open files after importing analyzer artifacts
• S-10664 fix incorrect JWT identification
• S-10778 Remove merge report rpc
• S-10713 proxymock: speed up completions
• S-10749 proxymock: better replay output
• S-10766 proxymock: honor signature changes from RRPair files
• S-10766 cleanup
• S-10775 Fix analyzer artifact import
• S-10775 Speed up file downloads by using downloader instead of byte range streamer
• S-10745 Retrieve all report events from clickhouse instead of s3
• S-10764 ignore Grafana scraper requests
• S-10762 Set user email property on registration for analytics
• S-10765 echo server make commands
• S-10745 Put all report related events in clickhouse
• S-10717 expose responder metrics ports
• S-10754 postman import: annotate RRPairs with notes from item and collection
• S-10761 make JSON file reporter thread safe
• S-10750 analyzer mock-tune: source report raw file locally

v2.5.27: 2025-11-19

• Revert "S-10750 analyzer: only cycle once on tuning job"
• S-10720 Fix service remap flag for analyzer
• S-10750 analyzer: only cycle once on tuning job
• S-10753 success when no inbound
• S-10720 Remap passthrough rrpairs to snapshot service
• S-10750 analyzer: optimize mock tuning
• S-10750 ensure snapshot gets re-analyzed after adding transforms

v2.5.20: 2025-11-17

• S-10741 backwards compatible signature construction
• S-10743 Identify group name in Posthog when tenant is created
• S-10744 proxymock: support --app-host flag
• S-10742 add InitMockTuningWithSnapshot rpc
• S-10740 ensure proxymock image gets latest tag in CI
• S-10735 support legacy usage mode with --test-against
• S-10739 register automatically when SPEEDSCALE_API_KEY env var is present
• S-10675 only build binary containers on tag
• S-10675 build proxymock container as part of pipeline
• S-10735 remove typo
• S-10735 fix test against target configuration
• S-10738 do not record responder traffic when responder in low-data mode
• S-10737 disassemble query parameters in signatures
• S-10736 attempt xml schema comparisons for bodies that actually contain xml
• S-10735 allow single positional argument for infra replay
• S-10528 enforce port checks for kafka
• S-10731 Fixes for node and service list with namespace selector
• S-10704 Add missing RBAC role and fix inspector query for node info
• S-10730 Don't push an image index for lambda
• S-10633 replay-time configurable coredns sidecar
• S-10704 Use RBAC when a namespace selector is supplied
• S-10662 guard against using bad timestamps for snapshot rrpairs
• S-10724 no transform changes in low data mode
• S-10726 similar signatures ranker now prioritizes exact URL matches
• S-10711 fix connect-clickhouse script
• S-10715 shrink Redis connection pool to avoid using too many connections that could be used for clients
• S-10723 responder: fix response latency and make delay configurable
• S-10709 ensure new snapshots have proper audit info
• S-10644 speedctl infra replay target mappings
• S-10703 scale redis limits with responder
• S-10707 fix report analysis context

v2.4.91: 2025-11-06

• S-10695 signature cache: fix inconsistent marshal / unmarshal
• S-10698 report analyzer: ensure report tags persist
• S-10693 responder: add active connection metrics
• S-10690 only get audit info for new reports
• S-10691 separate context for report re-analysis
• S-10653 add intermediate RRPair upload for lower latency report updates
• S-10674 responder: profiling with upload to report dir
• S-10685 add responder sig to miss and passthrough rrpair notes
• S-10682 improve responder signature debugging trace logs

v2.4.82: 2025-11-04

• S-10652-3 Gauger analytics use tenant admin distinct id
• S-10640 Set/unset instance numbers based on hit/miss in responder
• S-10610 Add new transform rec type and support jwt resigning with a string literal
• S-10652-2 Posthog telemetry hardening
• S-10673 responder: convert to metrics/v2
• S-10672 fix proxymock install script
• S-10652 Include service name for prefix
• S-10652 Add Posthog analytics integration
• S-10661 proxymock cloud push snapshot: include transforms
• S-10633 multi-step dns traversal to support lookups for SRV queries
• S-10660 proxymock: ensure responder signature cache uses analyzed RRPairs
• S-10648 Add cli related properties to the events instead of the person for analytics
• S-10654 Fix inspector stream tests
• S-10649 Don't change types when replacing a numeric json value
• S-10632 proxymock: write RRPairs with binary data as base64
• S-10635 support URLEncoded bodies for Postman import

v2.4.66: 2025-10-28

• S-10628 don't error when generator signal is found but responder isn't
• S-10630 Add support for migrating netinfo for dual proxy rrpairs
• S-10613 ensure consistent use of internal tls state
• S-10494 Fix typo in migration
• S-10494 Reduce clickhouse table ttl to 60 days
• S-10622 Don't change api key tenants for internal users

v2.4.60: 2025-10-25

• S-10623 report analyzer: wait for signal from responder before stopping RRPair search
• S-10617 proxymock inspect: color status codes
• S-10620 fix cases when inspector does not get event time

v2.4.57: 2025-10-24

• S-10575 ensure proper context data for goproxy logs/stats
• S-10464 Make sure agent report has uuid
• S-10612 fix postgres response transforms
• S-10598 MCP enhancements from Anthropic's MCP skill
• S-10606 avoid corrupting local MCP configs - use fake home dir for MCP IDE tests
• S-10464 Add service filter for passthrough snapshot
• S-10464 Add RPC for merging passthrough calls into a snapshot
• S-10437: Handle transient API errors during snapshot retrieval; add...
• S-10602 Upgrade vulnerable libs
• S-10596 fix generator endpoint matching
• S-10464 Make sure top level status is set for responder rrpairs
• S-10591 update cache when new services or workloads are retrieved
• S-10464 Strip test related tags from rrpairs in snapshot
• SPD-5837 additional bounds checking for kafka payloads
• S-10515 better report error handling
• S-10590 fix replay defaults filtering
• S-10589 inspector: ensure services get removed from cache

v2.4.40: 2025-10-21

• S-10494 Drop unused table and add ttl to metrics table
• S-10256 proxymock replay: support flag for running traffic multiple times
• S-10512 proxymock MCP: validate service when retrieving traffic from cloud
• S-10582 check correct setting for installing nettap components
• S-10578 Update user api keys when updating the tenant
• S-10498 tune replay defaults
• S-10549 Don't delete redis sigcache data on exit

v2.4.33: 2025-10-14

• S-10562 allow creating snapshots from RRPairs older than 30 days
• S-10538 create add_db_row transform
• S-10558 Fix conflicting flag and require tenant name for updating tenant in speedmgmt

v2.4.30: 2025-10-13

• S-10564 get user api keys for tenant
• S-10563 formatting
• S-10563 indexer: use API gateway health check before trying to connect
• S-10561 analyzer: defer uploading component logs so they get captured on errored reports
• S-10556 fix flaky test

v2.4.25: 2025-10-09

• S-10537 snapshot analyzer: optimize token processing
• S-10537 snapshot analyzer: optimize sqlite
• S-10554 better resource build errors
• S-10550 error on snapshot data loss
• S-10551 analyzer: more robust sqlite DB
• S-10546 fix check for mysql pseudo pings
• S-10547 clarify imageTags in helm chart values
• S-10544 Ensure reports have endtime when created
• SPD-8514 fixes for hello responses in mongodb provider

v2.4.16: 2025-10-07

• S-10541 Hard code nettap version for sos temporarily
• S-10541 Ensure default tag gets populated in helm chart generation
• S-10539 Don't use sql AST for transforms yet
• S-10374 speedctl replay: deprecate --custom-url in favor of --test-against
• S-10374 multi-host CLI replay
• SPD-9804 avoid generator job reconciliation in the event of pod failure
• S-10529 allow nettap installation/configuration via helm chart

v2.4.9: 2025-10-06

• S-10532 ensure testconfig at or less than version 3
• S-10527 add Go format hook for Claude
• S-10517 increase forwarder max recv msg size
• S-10523 don't move to test config version 4 until clients have the logic to not panic
• S-10516 test config setting to rewrite the host header
• SPD-5837 prevent unbounded memory growth in kafka dissector
• S-10525 revert change to replay egress RRPairs
• S-10505 remove hostport
• S-10374 migrate URI override fields
• S-10505 nettap daemonset scaffolding
• S-10511 avoid goproxy infinite loop
• S-10489-2 improve SQL to AST readability
• S-10502 Trim large transform changes events
• S-10374 rename DEPRECATED: to Deprecated: so the LSP picks it up
• S-10506 auto detect and ignore cilium nodes
• S-10489 convert SQL queries to JSON AST for transforms
• S-10503 refactoring ahead of XML changes
• S-10503 improve XML parsing and transform
• S-10479 Inject sidecar when record active test config setting is applied
• SPD-8514 correct invalid/incomplete mongo signatures
• S-10500 fix xml delete on xml attributes
• S-10496 Prevent snapshot timeouts for large snapshots
• S-10488 maximum time allowable for packet captures
• S-10497 remove unused/deprecated codepaths
• S-10479 Add record active flag to test config

v2.3.880: 2025-09-29

• S-10492 add back assignment to rrchan
• SPD-8514 improves payload display for mongo rrpairs
• S-10487 Allow setting diagnostics mode via sidecar config
• S-10449 Fix nil map panic and allow rehydration for reports without assertions
• SPD-8514 update and improve mongodb dissection
• S-10293 proxymock replay: added detail for report
• S-10449 Fix mock tuning report analysis
• S-10480 fix xml_delete analyzer panic for nodes with no siblings
• S-10475 add SQL to JSON conversion package
• S-10477 Default match rate to 0 instead of 100
• S-10499 Add mock tuning type task
• S-10476 Format numbers correctly so identifying unix timestamps works
• S-10472 Fail agent if report was cancelled
• S-10476 Add analyzer command for generating summary from raw file
• S-10473 move responder provider port initialization
• proxymock MCP: cicd prompt
• S-10468 Prevent panic by initializing asserters once
• S-10467 activate transforms for Postgres in responder
• S-10465 Handle nil lock when releasing lock
• S-10456 proxymock: allow mock or replay from any RRPair files, inbound or outbound
• S-10462 proxymock: fix shared errors in new markdown
• S-10461 proxymock: do not duplicate proxymock dir
• S-10449 Trigger report analysis after mock tuning job
• S-10257 proxymock: log number of RRPairs read from each dir
• S-10449 Delete tuning run object

v2.3.855: 2025-09-23

• S-10434 move to unified RRPair markdown format
• S-10454 Fix panic
• S-10454 Fix uuid being returned as bytes and delay lock acquisition for rehydration
• S-10454 Add rpc for showing rrpair recommendations icon
• S-10258 proxymock: results dir for result RRPair files
• S-10234 proxymock MCP: ensure files written atomically
• S-10442 preserve logging contexts when adding reporters
• S-10452-2 fix transform description
• S-10426 upgrade to go1.25
• S-10452 expand and correct transform recommendation enumerations
• S-10446 make the user data RPC more resilient
• S-10451 detect unix timestamps
• S-10446 fix issue if ChatGPT adds ticks to result, more tests and logs
• S-10420 Create mock tuning job from RPC
• S-10446: gpt-4o-mini default, parallel CSV gen with chunks, add unit + live...
• S-10445 proxymock inspect: fix file watcher
• S-10429 RRPair markdown: move status code to response block
• S-10444 Prevent insertion of rrpairs from the future
• S-10441 Remove unimplemented rpcs
• S-10435 proxymock: gracefully handle clients that proxy TLS incorrectly
• S-10443 proxymock: fix smart proxy logs
• S-10432 Reanalyze snapshot after updating
• S-10432 Reanalyze snapshot after updates in agent task handler

v2.3.832: 2025-09-17

• S-10433 fix goproxy diagnostics
• S-10432 Use contains filter for host to avoid ports not matching
• S-10420 Add rpcs for tuning runs
• S-10427 Remove dependency on forked cache lib
• S-10420 Add mock tuning basic structure to analyzer
• S-10401 proxymock: command to print MCP JSON
• S-10425 proxymock inspect: reorder RRPair detail tabs
• S-10387 proxymock inspect: wrap curl URL in quotes when copying
• S-10421 use forwarder host in packet capture bpffilter
• S-10419 log and loop on traffic viewer refresh rather than exiting
• S-10339S-10396S-10408 fix host related details all around
• S-10419 improvements for reloading trafficviewer cache
• S-10418 Prevent report overwriting in tuning tasks
• S-10417 Remove queries for ingest stats
• S-10404 Add support for tuning inbound vs outbound
• S-10417 Remove ingest stats updates
• S-10413 add RRPair environment description helper rpc
• S-10411 fix smart replace in location fields
• S-10385 proxymock cloud push snapshot: fix support for --id flag
• S-10407 Remove non-permissive filter validation
• S-10410 visualize PostGres resultsets
• S-10278 proxymock: rename signature generation to update-mocks
• S-10278 proxymock: command to reset signatures on RRPair files
• S-10398 Restore events and data tokens for large rrpairs

v2.3.808: 2025-09-11

• S-10390 fix mysql signatures in reports
• S-10391 fix smart_replace_recorded on generator
• S-10213 Do smarter jwt transform application when using a postman collection
• S-10398 Make sure transform log gets attached to raw rrpair
• S-10388 support status code in RR markdown
• S-10213 Add postman collection JWT resigning workflow to agent
• S-10352 allow setting maximum number of recorded rrpairs
• S-10382 fix missing proxymock response transforms
• S-10381 do not default to localhost test SUT address
• S-10379 proxymock app health check
• S-10333 mysql transform summaries for snapshot view
• S-10377 Always report transformed rrpair for miss and passthrough mode
• S-10378 support smart_replace_recorded in generator responses
• S-10376 Remove replay secrets field from test config
• S-10212 Refactor agent handler to initiate replays and wait for snapshot updates
• S-10373 Fix panic and add proxy related info messages
• S-10366 refactoring and cleanup
• S-10366 goproxy: set TLS SNI to backend when using reverse proxy
• S-10212 Add jwt resigning config to agent tasks
• S-10287 proxymock inspect: support duplicating RRPairs
• S-10372 rpc for database visualization
• S-10371 add db resultset viewer to proxymock inspect
• S-10212 Add full transform to jwt location data for snapshot
• S-10333 mysql transform support
• S-10360 proxymock: print config file with version
• S-10370 Let clickhouse reporter flush batch even after context is cancelled
• S-10355 Fix casing for agent log tenantID

v2.3.781: 2025-09-03

• S-10369 update gateway validation tests
• S-10355 Add missing fields to agent logs
• S-10355 Add clickhouse reporter for agent
• S-10361 ensure proxymock default providers always get set
• S-10355 Export reporter interface
• S-10357 ensure dlp rule populated
• S-10334 fix scrub transform in forwarder
• S-10358 Fix query for single rrpair by id
• S-10338-3 fix overage percentage
• S-10288 Separate report activity timeline by component
• S-10336 proxymock init: deprecate email flag, better instructions
• S-10319 correct set host when using reverse proxy
• S-10317 Change hard coded apply transforms task to generic update snapshot
• S-10324-3 fix usage email updates
• S-10324-2 remove extra auth error message
• S-10338 add UsageThreshold commands to speedctl
• S-10324 remove tenantID from UsageThreshold rpcs
• S-10323 Return early when no services match filters
• S-10307 Add contains operator for notebooks
• S-10306 Make sure grpc responses have content type header
• S-10316 Accept snapshot or snapshot id for agent tasks
• S-10321 Change buffer size default
• S-10259 proxymock: support map flag for specifying reverse proxies for record and mock
• S-10318 Add more info in agent logs
• S-10259 refactoring only
• S-10266 proxymock: add SSL_CERT_FILE env var when wrapping SUT
• S-10312 Add a resource id to tasks
• S-10309 add collector timeout to operator testconfig
• S-10028 Add endpoint for SSO domain discovery
• S-10304 Don't embed proto in usage threshold struct
• S-10028 Rename migration files
• S-10028 Remove all references to swagger
• S-10297 Fix gRPC retry logic for network connection errors
• S-10303 update ses config

v2.3.747: 2025-08-25

• S-10299 fix proxymock panic
• S-10274-2 email user on high ingest
• S-10275 add collector timeout
• S-10296 check permissive statements in postgres extended queries
• S-10295 Add utf null character handling for notebooks
• S-10268 Delete test report tag for snapshot rrpairs
• S-10295 Do full json validation for rrpair bodies
• S-10277 Increase default buffer size and clean up sigcache interface
• S-10289 Add support for replaying from scratch

v2.3.738: 2025-08-21

• S-10274-1 usage threshold warning DB migration
• S-10255 proxymock: fix handling of multiple in directories
• S-10270 proxymock: updating docs
• S-10272 Don't error log if a subtask fails
• S-10262 Support gjson numerical indexing
• S-10268 Hook up firehose reporter to generator properly
• S-10262 Convert gjson paths to postgres friendly paths
• S-10264 proxymock: warn users when they make requests directly to the proxy-out-port
• S-10204 remove feature flag

v2.3.729: 2025-08-20

• S-10261 ensure streamed mongo responses have a request
• S-10252 ignore ErrClosed
• S-10248 discard postgres ping-style queries
• S-10254 Don't error when agent reports are deleted during processing
• S-10237 Allow multiple filters for request/response bodies
• S-10198 Add readme for architecture
• S-10249 proxymock: redirect app logs to file
• S-10252 avoid errors if file closed

v2.3.721: 2025-08-19

• S-10240-2 update more max buffer sizes
• S-10247 fix postgres dissector for ebpf capture
• S-10223 proxymock: support env vars in wrapped process
• S-10244 ambiguous sql column name
• S-10232 Convert DLP debug logging to trace-level lazy logging
• S-10245 use old linker directive
• SPD-8032 nettap/ebpf client with protocol dissection
• S-10232 Fix: Generator ignores DLP transform chains during replay
• S-10240 make max buffer sizes consistent for processing artifacts
• S-10223 proxymock: support direct run of java programs
• S-10224 remove the prompts-as-tools hack
• S-10227 proxymock: fix hang when logging to file

v2.3.709: 2025-08-13

• S-10211 Add JWT location info
• S-10226 add specific MCP command name to telemetry
• S-10211 Add host to transform recommendations filters
• S-10225 proxymock MCP: chdir for Cursor
• S-10221 proxymock: add RRPair tracker to inspect
• S-10204 minor data fixes

v2.3.703: 2025-08-12

• S-10194 Fix EnableJavaToolOpts not being set in Configure method
• S-10206 proxymock: install jks on init if JAVA_HOME set
• S-10219 don't error when snapshot is removed during analysis
• S-10197 Fix strategy string for agent tasks
• S-10197 Add defaults for new columns
• S-10204 fix mongo data issues
• S-10197 Add informational fields to agent report
• S-10205 proxymock MCP: change name
• S-10069 proxymock inspect: query params and various fixes
• S-10182 proxymock inspect: various fixes and improvements
• S-18182 formatting
• S-10201 preserve symbol tables
• S-10199 Fix snapshot agent reports query
• S-10199 Add rpc for agent cancellation
• S-10196 Make sure mysql responder rrpairs have correct timestamp and normalize mysql location/cmd
• S-10185 Refactor agent task definition and logic
• S-10183 proxymock: cleanup non-interactive init workflow
• S-10180 proxymock MCP: set MCP hints
• S-10145 Add agent report logs rpc
• S-10145 Remove unused proto messages
• S-10174 proxymock MCP: ensure array params have types
• S-10178 Add column to agent report view
• S-10157 Add build tag to agent task replays
• S-10142 Add more logging and compare mock rates instead of success rates

v2.3.679: 2025-08-04

• S-10172 newline after CLI version
• S-10172 proxymock: make version check faster
• S-10170 Make sure responder rrpairs for postgres have updated timestamp
• S-10142 Fix agent update query and add missing enum
• S-10142 Fix insert queries and add tests
• S-10162 Only upload traffic replay CR on init and end
• S-10164 proxymock: files convert command
• S-10160 proxymock: flag to specify RRPair file format
• S-10156 add p90 to proxymock latency summary
• S-10152 proxymock: decompress RRPair when calling send-one
• S-10142 Add agent reconciler and modify rpcs to support it
• S-10143 proxymock MCP: serve prompts as tools for clients that cannot read prompts
• S-10147 proxymock MCP: support install for gemini-cli
• S-10151 ensure proxymock installation is atomic
• S-10146 properly handle ctrl-c in ui prompts
• S-10128 Setup reporter correctly
• S-10129 Add json path validation to database calls
• S-10132 Remove unused responder RPCs and sync job

v2.3.661: 2025-07-28

• S-10139 proxymock MCP: intelligent workdir for VSCode based IDEs
• S-10136 fix handling 100 continue
• S-10120 Add basic agent rpcs and database schema
• SPD-9300 Fix transform changes for rrpairs that modify their own filter criteria
• S-10121 Speed up notebook creation and check for non json bodies
• S-10126 proxymock: upgrade MCP library
• S-10124 proxymock MCP: replay prompt
• S-10113 proxymock MCP: additional params
• S-10124 proxymock: redirect replay table output to file
• S-10115 ensure RRPairs req host does not contain a port
• S-10098 Make init agent rpc start replays
• SPD-9888 Use correct tenant id for set-tenant command
• S-10111 proxymock MCP: prompt to record app traffic
• S-10112 proxymock MCP: refactor tool and prompt definitions
• S-10104 ensure shared logger gets a shared log level
• S-10098 Redo agent task definition

v2.3.645: 2025-07-22

• S-10101 Start notebook population in line
• S-10103 add email to speedmgmt output
• S-10093 proxymock MCP: tools and prompt to find breaking API changes
• S-10093 proxymock: better output for comparing files
• S-10105 add env var instructions to proxymock record
• S-10103
• S-10101 Add uniqueness constraint to notebooks
• SPD-6633 Fix db queries for notebook
• SPD-6633 Add rpc to retrieve notebook metadata and return loading status

v2.3.636: 2025-07-18

• S-10021 proxymock MCP: instruction enhancements
• S-10053 proxymock files compare command to show differences between RRPair files
• SPD-6633 Add support for json filtering
• SPD-6633 Insert full rrpairs as batch and add maintenance job
• SPD-6633 Redo table definition for full rrpairs
• S-10087 ensure partition deleted
• S-10087 fix invalid drop table statement
• SPD-6633 Add notebook rrpair population
• SPD-8032 pre-req: remove ldflags from api-gateway
• S-10084 Filter rpc rrpairs when advanced filters are specified
• S-10057 proxymock MCP: support listing and reading RRPairs as resources
• SPD-6633 Add table and basic RPCs for full rrpairs
• S-10078 use gitlab registry images

v2.3.623: 2025-07-14

• S-10068 fix proxymock signal handling
• S-10068 proxymock inspect: fix dynamic file watcher
• S-10075 Change log level for trimming messages
• SPD-9956 Add feature selection code
• S-10062 proxymock: fix record TLS
• S-10050 Add host to latency table and segment filters
• S-10056 proxymock MCP: support auth through SSE config
• S-10059 update go toolchain version
• S-10055 proxymock: SSE support for MCP server
• S-10058 better interrupt handling for graceful shutdown

v2.3.613: 2025-07-09

• S-10050 Identify data patterns and wildcards in paths
• S-10021 proxymock: refactor and test MCP server
• S-10026 Send transform changes for responder misses
• S-10035 ensure analyzer process all RRPairs even when some fail
• S-10033 Revert advanced filters in rrpair list

v2.3.608: 2025-07-03

• S-10001 Add flag for java tool opts
• S-10044 Prevent unnecessary looping in server side filtering
• S-10006 proxymock: split responder and smart proxy for record
• S-10044 Support iterating for server side filters
• S-10006 revert "support h2c" change
• SPD-9769 add traffic summary in tui
• S-10006 proxymock: support h2c
• S-10033 Fix assertion db query
• S-10037 Support non-string json matching
• S-10036 Add support for response body and header filters
• S-10038 Fix sentinel build
• S-10033 Add advanced filters to rrpairlist
• S-10031 add back idle connection checks
• S-10032 Claude's revision of Claude instruction files
• SPD-9989 proxymock: support running application directly
• S-10023 update AGENTS.md with project guidance
• S-10022 proxymock: use current working directory as default for --in
• S-10006 do not set content-length for certain status codes
• S-10015 ensure content is properly converted when writing to markdown files
• S-10012 support redirecting proxymock output to file
• S-10004 Drop materialized views
• S-10018 Add support for Azure AD to usr-mgmt

v2.3.586: 2025-06-19

• S-10013 tune claude's memory
• S-10014 automatic content type detection when content type header does not exist
• S-10005 add OpenAPI parameters
• SPD-9439 proxymock: support healthcheck when responder is live
• S-10011 fix adding the Claude MCP server
• SPD-9944 proxymock: support inspect RRPair editing with terminal based editors like vim
• SPD-9984 generate mocks from OpenAPI spec
• SPD-9997 add backticks to markdown RRPair format
• SPD-9996 Remove materialized views and refresher
• S-10000 add back default proxy in port
• SPD-9978 proxymock: support transform metadata when pulling snapshot
• SPD-9996 Launch analyzer job immediately after receiving signal

v2.3.574: 2025-06-13

• SPD-9975 Use raw file for snapshot when available
• SPD-9995 support cline MCP install
• SPD-9998 Increase max rpc message size for analyzer client
• SPD-9987 preserve modified signature
• SPD-9986 proxymock: ensure RRPair markdown encode decode properly handles query params
• SPD-9980 Increase notify queue size
• SPD-9983 fix NPE panic
• SPD-9965 ensure top-level fields get updated from markdown
• SPD-9975 Use rpc as traffic source and optimize stream collection
• SPD-9945 proxymock: realtime TUI updates when files change

v2.3.564: 2025-06-09

• SPD-9970 Fix concurrent event firehose flushing
• SPD-9968 Take window size into account when using materialized view
• SPD-9974 Fix noisy reporter log
• SPD-9968 Add rpc for analyzer to use
• SPD-9970 add concurrent rrpair forwarder processing
• SPD-9959 minor debugging changes
• SPD-9963 Detect tech before calculating signature
• SPD-9951 proxymock: support markdown for send-one
• SPD-9586 Fix newline character
• SPD-9586 Fix transform changes file format and provide RPC for lookup
• SPD-9949 fix similar signatures missing

v2.3.553: 2025-06-04

• SPD-9586 Refactor responder logic and start reporting transform changes
• SPD-9948 trace log SQL queries
• SPD-9923 proxymock: longer TCP timeout for replay
• SPD-9943 re-analyze old snapshots with transforms automatically
• SPD-9946 fix panic: use global logger when passed logger is nil
• SPD-9931 add edit and file watcher to proxymock
• SPD-9939 debugging for missing firehose RRPairs
• SPD-9934 refactoring log initialization / ensure unique log levels for new loggers
• SPD-9934 proxymock: shorten generator readiness check
• SPD-9710 make proxymock directory search more permissive
• SPD-9826 proxymock: provide more output during mock and replay - integrate verbosity levels
• SPD-9826 refactoring log lib - ensure NewSimple does not modify the global logger
• SPD-9905 make traffic filter case insensitive
• SPD-9922 add ActivityEvent protections
• SPD-9225 add nested DLP array redaction
• SPD-9919 add Claude Code support
• SPD-9927 speedctl / proxymock verbosity levels

v2.3.537: 2025-05-28

• SPD-9445 proxymock: handle specific content types in markdown files
• SPD-9918-2 remove extraneous output
• SPD-9918 support file embedding in responder
• SPD-9915 fix panic - require redactor when processing transforms
• SPD-9445 move signature cache to iterator pattern

v2.3.532: 2025-05-27

• SPD-9913 support different primitives in DLP
• SPD-9445 markdown RRPair format lib

v2.3.530: 2025-05-24

• SPD-9902 support replaying h2c captured gRPC to TLS server
• SPD-9904 add finalizers to transforms

v2.3.528: 2025-05-23

• SPD-9899 add selector to scrub transform
• SPD-9898-2 update scrub transform
• SPD-9898 add scrub transform
• SPD-9873-2 fix scrub date panic

v2.3.524: 2025-05-21

• SPD-9893 ensure generator always closes body
• SPD-9888 More consistent flag usage for speed mgmt
• SPD-9889 export Postman should honor patches
• SPD-9881 fix speedctl analyze snapshot --reverse
• SPD-9885 honor protocol scheme for generated grpc rrpairs
• SPD-9878 ensure Content-Length header gets set properly
• SPD-9890 refactor empty interface
• SPD-9886 Don't delete env vars set by user that contain speedscale java opts
• SPD-9884 add file transform keyword
• SPD-9881 reverse snapshot services from speedctl
• SPD-9881 reverse snapshot direction RPC
• SPD-9706 small changes to error messages
• SPD-9873-2 make ignorePaths optional
• SPD-9863 Remove trimmed tag when restoring rrpair data
• SPD-9873 add scrub_date transform

v2.3.509: 2025-05-16

• SPD-9868 Close writers after writing all data but before uploading files
• SPD-9868 Fix snapshot filtering and artifact flushing
• SPD-9858 fix JSON in JSON transforms
• SPD-9813 Delete authapi
• SPD-9862 ensure report cluster name gets set properly
• SPD-9835 ensure snapshot service metadata gets set on analysis
• SPD-9857 add user audit details for pushed snapshots
• SPD-9860 fix typo
• SPD-9852 add smart replace recorded to responder
• SPD-9856 Wrap errors correctly
• SPD-9854 Respect withReport flag for responder only replays
• SPD-9837 fix incorrect IDE detection
• SPD-9835 proxymock: link service name so they match for the service map
• SPD-9855 increase generator TCP probe iteration timeout
• SPD-9835 small refactor
• SPD-9835 proxymock: language consistency updates
• SPD-9835 don't implicitly reverse services on snapshot creation

v2.3.492: 2025-05-13

• SPD-9845 generator: add back S3 dependency
• SPD-9843 don't exclude RRPairs when rehydrating snapshot
• SPD-9842 Use correct rpc names for retry policy
• SPD-9841 Remove unnecessary error log
• SPD-9810 Add route for nginx validation
• SPD-9831 proxymock: remove default --app-port
• SPD-9836 proxymock cloud push snapshot: allow setting name
• SPD-9764 support all protocols in proxymock inspect

v2.3.484: 2025-05-12

• SPD-9830 More retry logic for apiclient in analyzer
• SPD-9824 Don't mount files to /etc/ssl/ by default
• SPD-9827 include source_id in unique index
• SPD-9787 Increase time range for report assertion queries
• SPD-9773 create snapshot and pull mcp command

v2.3.479: 2025-05-09

• SPD-9814 Populate the mock mapping when we have a cluster initiated replay
• SPD-9817 Add ability to filter by assertion status and type
• SPD-9793 proxymock: ensure RPS are included in replay output
• SPD-9814 Add mock mapping to report actual config
• SPD-9816 proxymock: guard against port conflicts
• SPD-9775-4 modify X-Amz-Date header before signing
• SPD-9788 Always return line data for assertions
• SPD-9800 update 10min agg materialized view with source_id
• SPD-9788 Remove unused RPC
• SPD-9775-3 modify X-Amz-Date header
• SPD-8928 parse form urlencoded bodies
• SPD-9775-2 fix aws_auth name
• SPD-9787 Include rrpairs at the end of time range
• SPD-9735 proxymock: support --fail-if flags for report results verification
• SPD-9775 add transform for AWS Auth resign

v2.3.464: 2025-05-06

• SPD-9750 Mount TLS files individually instead of as a directory
• SPD-9767 fixes for postgres capture and mocking
• SPD-9750 Faster failure for custom URIs and better error messages

v2.3.461: 2025-05-05

• SPD-9779 validate transform runtime vars before updating snapshot
• SPD-9778 Disable aws sdk checksum validation when none present
• SPD-9777 Don't use stream context for event insertion
• SPD-9776 Run util containers on arm nodes
• SPD-9772 give a better error when a file exists in the dir path
• SPD-9753 Set initial start and end time for report
• SPD-9735 proxymock: support JSON output with more details
• SPD-9762 Remove responder source tag from imported rrpairs and improve snapshot rehydration
• SPD-9771 fix proxymock directory arguments
• SPD-9757 reduce memory pressure for tls connections
• SPD-9749 upgrade AWS dependencies
• SPD-9747 proxymock: reverse proxy capture
• SPD-9742-2 fix duplicate Prometheus ports
• SPD-9748-1 refactor HTTP Body access
• SPD-9742-2 tighten Prometheus conditions

v2.3.447: 2025-04-30

• SPD-9756 Mark snapshot as reanalyzing when patching rrpairs
• SPD-9751 Better error handling for collector
• SPD-9722 Remove analyzer stream and use clickhouse data
• SPD-9745 fix type checks for settings unmarshal
• SPD-9744 add ignore port marshalling
• SPD-9735 proxymock: internal - remove dependence on intermediate app
• SPD-9741 proxymock: support performance (low data) mode for replay
• SPD-9742 add Prometheus exporter config for goproxy
• SPD-9741 proxymock: capture replay RRPairs

v2.3.438: 2025-04-28

• SPD-9729 speedmgmt gateway invoke RetrieveRRPairList
• SPD-9721 Send batches to clickhouse correctly
• SPD-9721 Write report events to clickhouse
• SPD-9720 Create Clickhouse table for report events
• SPD-9666 prevent EPIPE errors for one-sided keepalives
• SPD-9725 hide latency table when empty
• SPD-9716 specify log level for extractor errors
• SPD-9723 fix responder instance counter
• SPD-9719 Don't assume local snapshot for speedctl export
• SPD-9696 more efficient HeaderValueContains
• SPD-9714 Use non-cancelled context for rehydration
• SPD-9717 update windows build for proxymock
• SPD-9714 Add source tag for consistency with other events
• SPD-9714 Use advisory lock for logs and fix row scanning for logs
• SPD-9714 Use ingested otel_logs to populate report timeline view
• SPD-9666 modify read behavior to reduce overall proxy latency
• SPD-9715 add gRPC proxy help tip
• SPD-9713 Cleanup old generator support code
• SPD-9695 Remove unused RPCs
• SPD-9712 Ensure request body is also compressed when using compressed response bodies
• SPD-9705 Prevent double encoding gzipped responder bodies
• SPD-9711 proxymock inspect shows trailers
• SPD-9708 Skip rrpairs we cannot proccess during snapshot analysis
• SPD-9707 proxymock: hidden debug flags for profiling and tracing
• SPD-9696 generator: simplify latency collection and reporting
• SPD-9703 Add more validation and add error messages for replayFromScratch
• SPD-9704 add latency table output to proxymock replay command
• SPD-9702 Upgrade aws libs
• SPD-9699 fix responder grpc detection during passthrough
• SPD-9698 generator: track aggregator stop time for consistent RPS
• SPD-9693 remove proxymock create
• SPD-9694 Check snapshot traffic loading status when querying rrpairlist
• SPD-9674 proxymock --no-out flag to skip writing to disk

v2.3.405: 2025-04-15

• SPD-9641 proxymock: dynamic dirs for each run
• SPD-9687 avoid tag overwrite
• SPD-9690 add VSCode MCP Installer
• SPD-9684 handle invalid status code gracefully
• SPD-9688 add proxymock mcp --install option
• SPD-9682 Use primary tech for signatures and encode signature changes as bytes to avoid invalid utf8
• SPD-9683 proxymock: separate in / out dirs
• SPD-9681 add MCP capture commands
• SPD-9673 proxymock uses files exclusively

v2.3.396: 2025-04-14

• SPD-9680 ensure http/socks proxies are included in readiness checks
• SPD-9610 Only prompt when cli is interactive
• SPD-9610 Support empty context for init
• SPD-9676 Send heartbeats to keep analyzer stream alive while waiting for real events
• SPD-9610 Record granular init usage
• SPD-9165 update demo to use java-server 1.0.6
• SPD-9614 refactor proxymock setup for shared commands
• SPD-9207 allow goproxy readiness gates to be dependent on app readiness

v2.3.388: 2025-04-10

• SPD-9670 restore random port behavior
• SPD-9663 upgrade auth client cache library
• SPD-9628 support basic replay flags for proxymock
• SPD-9625 complete migration from gRPC stream client to gateway stream client
• SPD-9661 safely handle status codes
• SPD-9649 gRPC stream client: handle queued messages on close
• SPD-9659 increase default object update queue size
• SPD-9625 add back tracking for RRPairs outside of generator window
• SPD-9625 do update report time when reanalyzing summaries - do not update from all RRPairs
• SPD-9647 additional validations during proxymock init
• SPD-9655 ensure downloaded report files show in pull output
• SPD-9654 Use source id to get generator rrpairs
• SPD-9640 Send grpc stream messages as we see them
• SPD-9619 CLI docs from proxymock run to proxymock mock
• SPD-9625 fix report graph whitespace - v2
• SPD-9635 auto synchronize remote snapshots when running local mocks

v2.3.372: 2025-04-06

• SPD-9649 ensure gRPC bus connection cannot hang forever
• SPD-9458 allow proxymock version without API key
• SPD-9630 defensive connection handling for streams
• SPD-9644 fix mcp.json install error
• SPD-9630 stream logs
• SPD-9542 Remove non-tls servers
• SPD-9609 Ensure minimum memory for generator
• Revert "SPD-9625 fix rpt graph whitespace"
• SPD-9617 enable windows-native local capture
• SPD-9609 Set generator resources based on snapshot size when possible
• SPD-9631 add Claude Desktop MCP support
• SPD-9629 add Cursor IDE integration for MCP
• SPD-9625 fix rpt graph whitespace
• SPD-9622 don't expire replay when cleanup type is none
• SPD-9615 tolerate streams in similar signatures
• SPD-9620 Fix user data generation
• SPD-9627 always quit after second interrupt
• SPD-9609 Stream action file instead of downloading object

v2.3.354: 2025-04-01

• SPD-9615 warn instead of returning error on similar signature err
• SPD-9621 add MCP run_regression_test command
• SPD-9533 include additional net info for generator rrpairs
• SPD-9542 Fix url
• SPD-9618 rename run command to proxymock mock
• SPD-9542 Simplify settings and use scheme for authapi redirection
• SPD-9616 enable mcp server
• SPD-9486 simplify CLI init

v2.3.346: 2025-03-31

• SPD-9611 let proxymock record/run and replay run at the same time
• SPD-9595 reduce responder memory consumption for large signature matching
• SPD-9541 | SPD-9460 split commands
• SPD-9608 improve generator performance
• SPD-9604 Use empty dir for diagnostics
• SPD-9597 read / write files on proxymock pull / push snapshot
• SPD-9497 Do not remove workload patches for a workload being modified mid replay
• SPD-9606 suggest timestamp signature modifications
• SPD-9594-2 update detected tech in signatures
• SPD-9528 tolerate aws-chunked encoding

v2.3.336: 2025-03-27

• SPD-9601 no read-only file system
• SPD-9591 Skip interactive steps if api key is provided for init
• SPD-9598 handle unspecified ports in HAR files
• SPD-9594 fix transform location filters
• SPD-9592 Add readiness and liveness probes to client side components
• SPD-9569 Don't try to set go resource limits in lambda
• SPD-9542 Enable auth on internal server
• SPD-9542 Add internal servers
• SPD-9590 reorganize command files
• SPD-9569 Set gomemlimit for all processes
• SPD-9585 Use recaptcha site key
• SPD-9585 Add captcha verification for anon registration route
• SPD-9579 remove analyze option from proxymock inspect
• SPD-9570 fix proxymock import
• SPD-9580 Add nil check

v2.3.321: 2025-03-21

• SPD-9574 Add network checks to operator and change misleading error message
• SPD-9494-2 make header assertion case insensitive
• SPD-9216 modify polling mechanisms to decrease latency
• SPD-9573 Upgrade grpc-go lib
• SPD-9575 enhance URL transforms
• SPD-9572 Let SQS handle unprocessed messages via visibility timeouts
• SPD-9567 Increase frequency of heartbeats and timeout more aggressively

v2.3.314: 2025-03-20

• SPD-9565 avoid overwriting existing tag values
• SPD-9559 Don't log on context timeout
• SPD-9497 Allow updates to workload with active replays
• SPD-9562 prevent send to closed channel
• SPD-9502 proxymock: rrpair files in local directories
• SPD-9545 proxymock: remove message printing
• SPD-9497 Remove istio legacy flags and mark internal structs as internal
• SPD-9502 cleanup
• SPD-9502 lib changes
• SPD-9558 Use background ctx for final log upload
• SPD-9502 move verbose flag
• SPD-9548 remove broken middleware
• SPD-9552 Return unwrapped grpc error from interceptor

v2.3.301: 2025-03-17

• SPD-9548 upgrade gin library
• SPD-9533 consolidate firehose batching logic to ensure consistent behavior
• SPD-9532 upgrade to go 1.24
• SPD-9498 update cli command name
• SPD-9530 Remove tenant tags from statsd to reduce custom metrics
• SPD-9503 Ensure Helm install fails if pre install checks fail
• SPD-9461 Use background context for final uploads
• SPD-9529 add unique id to generator requests
• SPD-9434 Stop sending events to axiom
• SPD-9461 Do final aggregates and log collection on timed out responder reports
• SPD-9523 Expand home dir when updating rcfile
• SPD-9521 Add initial stream connection retries and method specific service configs
• SPD-9524 Return full error message for usr-mgmt
• SPD-9522 add rate limiter for spammy error logs

v2.3.287: 2025-03-07

• SPD-9518 Fix concurrent write for event
• SPD-9491 Prevent concurrent map writes in gateway stream and add immediate heartbeat acks

v2.3.285: 2025-03-07

• SPD-9491 Standardize on new gateway streamer struct and guarantee connection handling
• SPD-9501 proxymock text
• SPD-9515 Use deterministic proto marshalling for test
• SPD-9491 Add heartbeat to gateway events and create special client

v2.3.281: 2025-03-06

• SPD-9491 Use background context for grpc connection init
• SPD-9500 cache secret value in JWT transform
• SPD-9485 accept either format for secret extraction
• SPD-9499 fix report gzip flakiness
• SPD-9485 support secret variables for constant transform
• SPD-9491 Ensure heartbeat loop doesn't quit for event bus and refactor connection logic
• SPD-9474 permit JSON comparison on wrong content type
• SPD-9491 Remove SNS lib and simplify event bus interface
• SPD-9469 fix integer underflow in grpc dissector and improve pcap diagnostics
• SPD-9491 Remove unused sqs related code
• SPD-9491 Remove wait for ready grpc opt

v2.3.270: 2025-03-02

• SPD-9464 Support local only mode
• SPD-9433 Connect before using connection
• SPD-9433 Get responder txns from clickhouse instead of Axiom

v2.3.267: 2025-02-28

• SPD-9428 proxymock inspect: remove histograms and make rrpair details larger
• SPD-9447 Rework init flow
• SPD-9360 generous snapshot resolver will accept files, directories, snapshot IDs all in place of each other to make --snapshot-id and other flags more resilient to various user input
• SPD-9443 proxymock support for --test-against flag to run tests on startup
• SPD-9408 prevent removal of empty json objects when making clean manifests
• SPD-9455 downgrade context errors in log reporter
• SPD-9454 handle second interrupt to kill process
• SPD-9453 fix service port assignment

v2.3.260: 2025-02-26

• SPD-9394 fix duplicate providers
• SPD-9451 organize proxymock cloud
• SPD-9438 include additional diagnostics tools for packet captures
• SPD-9376 safeguard against nil panic
• SPD-9424 updating proxymock text
• SPD-9271 Set tenant name in metrics and process id in forwarder
• SPD-9426 Use a tag with util images
• SPD-9271 Add missing migration line
• SPD-9271 Add aggregate views for tenant usage

v2.3.251: 2025-02-20

• SPD-9412 carry protocol scheme forward for responder http handlers
• SPD-9395 Fix panic when getting audit info
• SPD-9409 Ensure we get tracebacks in the operator
• SPD-9388 Cancel replays for reports that are deleted
• SPD-9412 ensure responder populates upstream port
• SPD-9408 handle uninject argo rollout when no prior workload definition exists
• SPD-9390 Use resource field instead of tag for s3 select
• SPD-9410 Add a specific tag for redis
• SPD-9277 Accept enterprise and local apikeys in init
• SPD-9402 fix flaky test attempt 2
• SPD-9405 fix panic
• SPD-9395 add audit info to new snapshots
• SPD-9402 fix flaky test / unify available port code

v2.3.238: 2025-02-18

• SPD-9397 use existing snapshot ID for new snapshots
• SPD-9389 Ensure report times are set before upload
• SPD-9396 tidy telemetry source
• SPD-9390 Support filtering by source for snapshot creation
• SPD-9364 support multiple snapshots for proxymock analyze and proxymock inspect
• SPD-9364 set config constants and make directory usage more consistent
• SPD-9391 Surface pre analysis snapshot errors in snapshot when possible
• SPD-9381 add additional test case for setting java tool opts
• SPD-9386 Better error handling in usr mgmt
• SPD-9387 allow initial forwarder connect failures to be retried

v2.3.228: 2025-02-17

• SPD-9364 RRPairs directory traffic source
• SPD-9364 refactoring speedctl and traffic source
• SPD-9380 proxymock certs and jks command
• SPD-9379 deprecate snapshot.DisableTokenDiscovery
• SPD-9375 Fix usr-mgmt panic
• SPD-9279 Allow api key auth to get current user info and fix usage recorder id
• SPD-9357 workloads on first replay
• SPD-9279 Replace segment with posthog
• SPD-9373 add proxymock push pull snapshot
• SPD-9374 remove local IP from transform preview
• SPD-9355 re-enable speedctl windows build
• SPD-9339 add libpq environment overrides for tls

v2.3.216: 2025-02-13

• SPD-9357 various fixes for replay wizard defaults
• SPD-9366 Prevent panic in kafka provider
• SPD-9356 proxymock unit test
• SPD-9358 Add supplemental groups to pod definitions

v2.3.212: 2025-02-12

• SPD-9345 add additional safeguards for istio-cni

v2.3.211: 2025-02-12

• SPD-9352 add analyze feature to inspect
• SPD-9318 specify correct install script for proxymock
• SPD-9348 add copy/paste to inspect request/response bodies
• SPD-9344 fix outbound capture
• SPD-9340 Add security context to hook containers, make jks hook optional
• SPD-9343 fix panic due to unset reporter

v2.3.205: 2025-02-10

• SPD-9305 Remove global rrpair caching
• SPD-9321 one RRPair per file
• SPD-9292 handle istio-cni repair mode for their race condition
• SPD-9326 add signature view to CLI inspect
• SPD-9321 refactor proxymock replay to run
• SPD-9305 Refactor responder logic and preserve event log for hits

v2.3.199: 2025-02-07

• SPD-9314 run analyze on import
• SPD-9122 revise proxymock help examples
• SPD-9312 add inspect snapshot to proxymock
• SPD-8995 proxymock capture ingress traffic
• SPD-9311 check inspector status during updates
• SPD-9310 print similar signatures on responder miss
• SPD-9309 remove duplicate
• SPD-9304 extract command from X-Amz-Target header
• SPD-9263 Fix typo in struct field name
• SPD-9296 Add certs to login keychain as non root
• SPD-9306 fix proxymock run recording
• SPD-9263 Insert internal logs into clickhouse
• SPD-8995 refactoring ahead of support for proxymock capture
• SPD-9299 allow non-UTF8 during local recording
• SPD-8995 inject collector for smart proxy and responder
• SPD-9296 Prompt for certs in proxymock run command
• SPD-9287 allow container env var injection
• SPD-9285 Create user level api key if none exists for speedctl config

v2.3.181: 2025-02-04

• SPD-9286 Cache container names in inspector
• SPD-9270 Add strict security policies to all components
• SPD-9234-2 change operator to enum
• SPD-9234 add traffic validation to kraken
• SPD-9272 fix snapshot traffic reversal
• SPD-9263 Setup otel log table in clickhouse
• SPD-9260 better retry logic for api client
• SPD-9228 Prevent concurrent map writes in analyzer
• SPD-9257 Add overwrite option to create certs command
• SPD-9258 fix speedctl proxymock panic
• SPD-9257 Make cert creation not overwrite certs and change macos keychain cmd

v2.3.170: 2025-01-30

• SPD-9225 refactor forwarder conn mgmt and fix buffer pool state reset
• SPD-9245 fix profile collection
• SPD-9253 custom logging when setting gomaxprocs

v2.3.167: 2025-01-30

• SPD-9229 generator to reuse gRPC connections
• SPD-9255 de-tune databse probe log
• SPD-9249 add init to proxymock
• SPD-9250 add proxymock CLI install script
• SPD-9230 gomaxprocs lib
• SPD-9222 Check for tty in interactive commands
• SPD-9230 set GOMAXPROCS based on CPU quota
• SPD-9237 Fix telemetry recording for Segment
• SPD-9161 fix proxymock rrpair serviceName

v2.3.158: 2025-01-29

• SPD-9219 warn on RR decompress errors
• SPD-9223 automatic apiclient retries
• SPD-9203 add nil checks in various locations

v2.3.155: 2025-01-27

• SPD-9209 Remove interactive cert addition step
• SPD-8864 agent WIP
• SPD-9187 properly set gRPC message for empty speedscale bodies
• SPD-9192 fix speedctl push for existing snapshot
• SPD-9191 Handle already registered user gracefully
• SPD-9131 branch speedctl proxymock into separate proxymock binary

v2.3.149: 2025-01-24

• SPD-9187 don't panic
• SPD-9184 remove responder_match re-write for proxymock
• SPD-9109 support correct output for non-TTY

v2.3.146: 2025-01-23

• SPD-9167 add metadata for proxymock push
• SPD-9144 Add speedctl rotate command
• SPD-9152 fix pushing proxymock snapshot
• SPD-9156 add proxymock CLI EULA
• SPD-9108 proxymock capture analyze events
• SPD-9120 Support local context and remove interactive cert addition for proxymock
• SPD-9148 Remove deprecated snapshot in/outservicesflat fields
• SPD-9151 Better api-gateway error handling
• SPD-9144 Add api key rotation endpoint
• SPD-9108 refactor proxymock analyze
• SPD-9050 add containers to RetrieveWorkloads RPC
• SPD-9108 APIClient interface for analyzer

v2.3.134: 2025-01-21

• SPD-9149 Get report id only for validation
• SPD-9143 add RRPair notes field
• SPD-9108 send proxymock error logs as messages to extension
• SPD-9136 Change forwarder reconnection logic and remove grpc.WaitForReady
• SPD-9121 add responder_match to rrpair
• SPD-9123 disable log streams
• SPD-9088 support --output flag for speedctl infra replay
• SPD-9138 change import proxymock command to use ProtoWriter
• SPD-9125 Add event for removing sidecar
• SPD-9114-2 refactor isRequestToProvider with SplitHostPort
• SPD-9114 fix infinite loop on responder passthrough
• SPD-9127 remove cloud dependecies from proxymock
• SPD-9108 move proxymock into a separate package so it can spread it's wings
• SPD-9115 add match status to raw file tags for proxymock
• SPD-9097 revert tls volume mounts
• SOD-9113 fix local recording service my-app
• SPD-9057-2 fix local replay signaling/reporter
• SPD-9057 add local analyzer for proxymock
• SPD-9101 add speedctl proxymock send one command
• SPD-9090 fix broken reporter in speedctl root
• SPD-9096 add snapshotId to proxymock returns
• SPD-9006 Add local context for proxymock to speedctl
• SPD-9035 Start using materialized views again
• SPD-9092 add speedctl import native
• SPD-9091 add speedctl proxymock create
• SPD-9058 move to proxymock sub-command
• SPD-8630 fix concurrent map access in collector
• SPD-8984 convert logs metric to histogram
• SPD-9082 fix concurrent map access in report analyzer
• SPD-9006 Add anonymous user support to usr-mgmt
• SPD-8984 add support for histogram metrics
• SPD-9080 output version in json format
• SPD-9075-2 fix local record replay
• SPD-9076 Add more logging for cron, prevent disruption and do not exit 1
• SPD-9075 fix local-record empty body when HIT
• SPD-8986 properly set read deadlines and set poll timeouts
• SPD-9035 Add rds cert to refresher
• SPD-9070 Make db pool size configurable
• SPD-9035 Add refresher service
• SPD-9042 Don't use protocol hints for http
• SPD-8874 fix assertion type for gRPC body
• SPD-8984 turn on log streaming in lower environments
• SPD-9014 re-enable diagnostics uploads
• SPD-9064 set forwarder keepalive enforcement policy
• SPD-9051 remove snapshotID requirement for proxymock
• SPD-8973 add local VSCode recorder
• SPD-9048 remove the atomicx library since the go std lib added this functionality
• SPD-9028 fix snapshot processing details during analysis

v2.3.86: 2025-01-08

• SPD-9044 allow CSV rows with different numbers of fields
• SPD-9038 fix rds scripts, add clickhouse scripts
• SPD-8886 use hybrid proto api

v2.3.83: 2025-01-07

• SPD-9030 Don't use materialized views
• SPD-8952 improve goproxy forwarder connection management
• SPD-9029 snapshot analyzer: ensure signature gets set on untransformed RRPairs
• SPD-9029 snapshot analyzer: fix logic error in serialize
• SPD-8956 make snapshot analyzer concurrent
• SPD-8929 Fix grpc-web capture
• SPD-8956 add metrics to api-gateway
• SPD-8929 Add support for grpc web
• SPD-8986 enable full api captures with pgsql tls support
• SPD-9013 place maximum size of captured packet diagnostics
• SPD-8924 ensure default profile output dir
• SPD-8956 make timex.Boundary thread safe

v2.3.72: 2025-01-03

• SPD-8984 disable log streaming rpc from analyzer
• SPD-8956 snapshot analyzer: refactor RRPair collection
• SPD-8956 snapshot analyzer: move individual RRPair processing into a separate func
• SPD-8945 snapshot debugging
• SPD-8971-3 fix empty report timeline
• SPD-8961 refine report timeline texts
• SPD-8971-2 fix report timeline rehydration
• SPD-8971 RetrieveReportTimeline add pagination
• SPD-8966 analyzer: better errors for decode failures
• SPD-8960: fix log rehydration context cancelation issue
• SPD-8903 Fill in missing responder rrpair data
• SPD-8964 have push report use the correct remote location
• SPD-8953 goproxy memory improvements
• SPD-8958 add payload caching to analyzer
• SPD-8957 Apply pagination on full, filtered results for assertion list
• SPD-8926 processing improvements to analyzer data population
• SPD-8948 add analyzer update status rpc
• SPD-8949 update inspector default
• SPD-8817 catch panics stemming from forwarder communication
• SPD-8914 postgres: avoid startup message double proxying
• SPD-8943 fix snapshot raw file deletion
• SPD-8940 feature flag token detection
• SPD-8936 snapshot analyzer: ensure healthchecks are done before finalizing and writing report metadata
• SPD-8879 add PodsInBadState
• SPD-8933 tune log streaming warnings
• SPD-8926 analyzer: snapshot processing optimizations
• SPD-8914 fix memory leak for long-lived connections

v2.3.45: 2024-12-20

• SPD-8925 report analyzer: don't reset signature
• SPD-8844 Don't return diffs for all assertions in new rpc
• SPD-8918 use a separate context for snapshot artifact uploads
• SPD-8921 fix nil bucket for RRPairsThroughputPerService
• SPD-8844 Fix typos and include table name
• SPD-8899 adjust log level
• SPD-8878-2 fix Include condition for service
• SPD-8878 add SUTs logs to report_v2 timeline

v2.3.37: 2024-12-19

• SPD-8908 include decompressed data if present with unexpected eof
• SPD-8795 add X-Request-Id suggestions

v2.3.35: 2024-12-18

• SPD-8906 responder: fix transformed response bodies
• SPD-8666 add traffic direction to Analysis
• SPD-8908 adjust log message level
• SPD-8907 add k8s context flag to speedmgmt
• SPD-8889 fix speedctl misc uuid command
• SPD-8893 Upgrade lib for test env
• SPD-8893 Upgrade pgx lib
• SPD-8876 add log indicator to timeline

v2.3.27: 2024-12-17

• SPD-8890 fix signature transforms
• SPD-8899 add more context to extraction errors
• SPD-8887 increase processing buffer for larger rrpairs
• SPD-8831-2 update signature mapping file
• SPD-8844 Include totals and optimize assertion list query
• SPD-8889 convert between UUIDs automatically
• SPD-8888 add base64 option to get similar sigs cmd
• SPD-8863 generic CRD conditions
• SPD-8829 add similar signatures prototype
• SPD-8877 add report timeline filters
• SPD-8863 agent: support in API gateway, inspector, operator

v2.3.16: 2024-12-16

• SPD-8871 Add new filter string representation
• SPD-8762-8 add re-hydration for report timeline
• SPD-8871 Add query param filter
• SPD-8864 fix signature mergers
• SPD-8859 prevent log reporter from crashing
• SPD-8844 Add rpc for retrieving assertions by rrpair
• SPD-8863 refactoring and cleanup ahead of agent changes in operator
• SPD-8762-7 fix verbosity of report_v2 timeline
• SPD-8862 Handle non grpc responses for expected grpc assertions
• SPD-8762-5 add RetrieveReportTimeline RPC
• SPD-8844 Rework report assertions v2 rpc

v2.3.5: 2024-12-12

• SPD-8676 additional goproxy panic recovery logging
• SPD-8762-4 add SendLogs
• SPD-8837 handle postgres cancel requests after tls negotiation
• SPD-8852 agent: refactor config
• SPD-8854 Add mock only default test config
• 8846 add agent task CRD to operator helm
• SPD-8844 Add new assertion list rpc
• SPD-8762-2 update speedscale_logs engine
• SPD-8849 cleanup init replay
• SPD-8850 Add index field to assertions and remove unused field
• SPD-8849 move replay defaults to new file
• SPD-8847 Add back filter support for optURL type
• SPD-8762-1 add speedscale_logs migration
• SPD-8844 Always return rrpair bodies with assertion
• SPD-8844 Populate line diff when running assertions
• SPD-8846 agent task crd foundation
• SPD-8846 traffic replay CRD consistency
• SPD-8662 use forwarder svc health checks instead of heartbeats
• SPD-8771 Remove unused assertion fields
• SPD-8832 fix RetrieveRRPairThroughputV2
• SPD-8831 create signature to RRPair mapping
• SPD-8828 add http_req_trailer extractor
• SPD-8709 ensure unique filenames for packet captures
• SPD-8787 Refactor graph queries and remove sqlreq orm
• SPD-8669 runtime and packet diagnostics
• SPD-8787 Refactor rrpair queries
• SPD-8803 support low-data mode for LatencyTableRequest