🚀 AGNTCY Dir v1.5.0 Release

This release focuses on implementing AI Catalog and Agentic Resource Discovery protocols
on top of Agent Directory. It also includes significant improvements to the documentation site,
importer workflows for Agent Skills, and ships with a dedicated dashboard built on top of these
protocols.

🌟 Key Features

• AI Catalog + ARD: Directory now also serves the data for discovery and
  retrieval through the AI Catalog and Agentic Resource Discovery protocols
  via GET /.well-known/ai-catalog.json and GET /v1/agents endpoints.
• Web Dashboard: A dedicated dashboard is now available for visualisation of
  all registered records, their contents, and details around identity and security.
• Native DIR Record: Each Directory node now comes preequiped with a native
  record that provides agentic applications a way to interact and use APIs and tools.
• Docs Revamp: The documentation site has been migrated into the dir repository,
  with improved homepage, versioning, and onboarding experience for developers,
  operators, and organizations.
• Public Deployment: The Directory Testbed is now available for public access via
  dedicated web dashboard and ARD-compliant API, with a growing collection of
  MCP servers, A2A cards, and Agent Skills.
  Available at: https://ai-catalog.outshift.io.

Check out the ARD over Agent Directory blogpost for an in-depth overview of how DIR
works with the ARD and AI Catalog protocols.

Full Changelog: v1.4.0...v1.5.0

🤝 Community & Support

• Repository
• Discussions
• Documentation
• Quick Start

🙏 Acknowledgments

Thank you to all contributors who made this release possible! Special thanks to the community for
feedback, bug reports, and feature requests that helped shape this release.

#dir #release #v1.5.0 #ai-catalog #ard-spec #dashboard #testbed

🚀 AGNTCY Dir v1.4.0 Release

This release adds annotation-based search, batch routing publish/unpublish in dirctl, reusable client configuration, and network diagnostics via dirctl doctor. It improves CLI auth behavior for local workflows, adds OpenShift Helm guidance, expands server integration testing, and continues API cleanup, reconciler credential handling, and dependency and security maintenance across the stack.

🌟 What's New

Search and Server

• Add annotation-based search support (#1442)
• Add integration tests for the server module (#1093)
• Remove deprecated validator globals from core/v1 (#1495)

CLI, Client, and Auth

• Add batch dirctl routing publish and batch unpublish (#1526, #1530)
• Introduce dirctl doctor network diagnose for network troubleshooting (#1515)
• Add reusable client configuration shared by CLI and Go client (#1496)
• Refresh expired OIDC tokens from dirctl auth status (#1516)
• Add --output-dir to the import command (#1498)
• Skip auth for local-only commands and fix local registry default port (#1471, #1473)

Helm, Packaging, and Deployment

• Add OpenShift install support and documentation (#1423)
• Clarify auto-resolve behavior in Helm chart values comments (#1477)
• Update the Homebrew formula version (#1463)

Reconciler and Runtime

• Enhance reconciler credential negotiation with a client config builder from context (#1499)
• Improve daemon/runtime e2e tests with better context usage and timeouts (#1513)

Testing, CI, and Maintenance

• Handle mTLS healthchecks in e2e tests (#1550)
• Log errors in the test suite initializer (#1523)
• Fix naming test and align post–v1.3.0 cleanup (#1491, #1495)
• Fix Renovate runner (#1467)
• Bump Go toolchain to 1.26.3 (#1504, #1506)
• Continue dependency, Helm, image, Kubernetes, and GitHub Actions updates (#1455, #1456, #1479–#1549)
• Apply security updates for golang.org/x/crypto, golang.org/x/net, golang.org/x/sys, containerd, go-git, and modelcontextprotocol/registry (#1492, #1521, #1522, #1534–#1539)

What's Changed

• chore(dirctl): update brew formula to v1.3.0 by @build-agntcy in #1463
• chore(deps): update helm release zot to v0.1.112 by @agntcy-automation[bot] in #1456
• chore(deps): update github/codeql-action action to v4.35.3 by @agntcy-automation[bot] in #1455
• chore(api): remove validator globals by @akijakya in #1458
• feat(helm): add OpenShift install support by @MichaelClifford in #1423
• fix(dir): fix renovate runner by @tkircsi in #1467
• feat(dir): add annotation-based search support by @vivekkrishna in #1442
• fix(cli): skip auth for local commands by @tkircsi in #1471
• fix(cli): local registry default port fix by @tkircsi in #1473
• feat(dir): add integration tests for server by @csirmazbendeguz in #1093
• chore(deps): update module github.com/libp2p/go-libp2p-kad-dht to v0.39.2 by @agntcy-automation[bot] in #1481
• chore(deps): update github actions by @agntcy-automation[bot] in #1480
• chore(deps): update postgresql by @agntcy-automation[bot] in #1479
• chore(deps): update helm release postgresql to v18.6.4 by @agntcy-automation[bot] in #1493
• chore(deps): update module github.com/go-git/go-git/v5 to v5.19.0 [security] by @agntcy-automation[bot] in #1492
• chore(deps): update helm release zot to v0.1.113 by @agntcy-automation[bot] in #1494
• test(dir): fix naming test by @adamtagscherer in #1491
• refactor(dir): cleanup and v1.3.0 release alignment by @paralta in #1495
• feat(client/cli): reusable client configuration by @tkircsi in #1496
• docs(helm): clarify auto-resolve behavior in chart values comments by @z-krunal in #1477
• feat(dir/cli): add output dir option to import command by @paralta in #1498
• refactor(dir/reconciler): enhance credential negotiation by introducing client config builder from context by @paralta in #1499
• chore(deps): update module golang.org/x/crypto to v0.51.0 by @agntcy-automation[bot] in #1509
• test(tests/e2e/daemon): attempt to make runtime discovery test reliable by pre-pushing record by @paralta in #1513
• chore(deps): update postgresql by @agntcy-automation[bot] in #1503
• chore(deps): update module golang.org/x/mod to v0.36.0 by @agntcy-automation[bot] in #1510
• chore(deps): update actions/create-github-app-token action to v3.2.0 by @agntcy-automation[bot] in #1508
• chore(deps): update module k8s.io/apimachinery to v0.36.1 by @agntcy-automation[bot] in #1507
• chore(deps): update go patches by @agntcy-automation[bot] in #1505
• chore(deps): update golang docker tag to v1.26.3 by @agntcy-automation[bot] in #1506
• chore(deps): update gcr.io/distroless/static:nonroot docker digest to 963fa6c by @agntcy-automation[bot] in #1502
• chore(deps): update dependency go to v1.26.3 by @agntcy-automation[bot] in #1504
• feat(cli): auth status refresh expired tokens by @tkircsi in #1516
• chore(deps): update module github.com/modelcontextprotocol/registry to v1.7.9 [security] by @agntcy-automation[bot] in #1522
• chore(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] by @agntcy-automation[bot] in #1521
• fix(tests): log errors in test suite initializer by @csirmazbendeguz in #1523
• feat(cli): support batch publish via dirctl routing publish by @tkircsi in #1526
• feat(cli): support batch unpublish by @tkircsi in #1530
• chore(deps): update module github.com/containerd/containerd/v2 to v2.3.1 [security] by @agntcy-automation[bot] in #1535
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @agntcy-automation[bot] in #1536
• chore(deps): update module github.com/containerd/containerd to v1.7.32 [security] by @agntcy-automation[bot] in #1534
• chore(deps): update module golang.org/x/net to v0.55.0 [security] by @agntcy-automation[bot] in #1538
• chore(deps): update zot by @agntcy-automation[bot] in #1546
• chore(deps): update module golang.org/x/sys to v0.44.0 [security] by @agntcy-automation[bot] in #1539
• chore(deps): update module github.com/spiffe/spire to v1.15.0 by @agntcy-automation[bot] in #1549
• chore(deps): update go patches by @agntcy-automation[bot] in #1544
• chore(deps): update module github.com/libp2p/go-libp2p-kad-dht to v0.40.0 by @agntcy-automation[bot] in #1548
• chore(deps): update helm release postgresql to v18.6.7 by @agntcy-automation[bot] in #1545
• chore(deps): update github actions by @agntcy-automation[bot] in #1547
• feat(cli): introduce the dirctl doctor network diagnose command by @tkircsi in #1515
• fix(dir): handle mTLS healthchecks in e2e tests by @csirmazbendeguz in #1550
• release(dir): prepare api release v1.4.0 by @csirmazbendeguz in #1551
• release(dir): prepare server release v1.4.0 by @csirmazbendeguz in #1554

New Contributors

• @MichaelClifford made their first contribution in #1423
• @vivekkrishna made their first contribution in #1442
• @z-krunal made their first contribution in #1477

Full Changelog: v1.3.0...v1.4.0

🚀 AGNTCY Dir v1.3.0 Release

This release completes the split of several Directory components into dedicated repositories, introduces a staged API/server release flow, adds runtime discovery and workload APIs, improves dirctl daemon and export workflows, and continues Helm, reconciler, CI, dependency, and security maintenance across the stack.

🌟 What's New

Repository Split and Release Flow

• Move the runtime module out to the dedicated agntcy/dir-runtime repository (#1416)
• Remove the in-repo importer module now that dir-importer is released independently (#1401)
• Remove the in-repo MCP package now that dir-mcp is released independently (#1406)
• Migrate GUI and SDK ownership out of the dir repository (#1403, #1323)
• Split API and server module release preparation so API modules can be released without root artifacts, while server releases produce images, binaries, and Helm artifacts (#1446, #1447, #1450, #1451, #1461)
• Add Renovate grouping for independently released AGNTCY split repository dependencies (#1443)

APIs and Validation

• Add runtime DiscoveryService and Workload APIs to the Directory API surface (#1444)
• Inject the OASF validator and deprecate global validator initialization (#1421)
• Keep API/client/utils at v1.3.0 for downstream split repositories (#1451)

CLI, Daemon, and Export

• Add dirctl export support (#1319)
• Add export formats for A2A, agent skill, and MCP GitHub Copilot output (#1327, #1330)
• Add batch export from search results (#1338)
• Cache OIDC tokens per issuer and auto-refresh cached credentials (#1400, #1328)
• Improve stale and expired auth command help/error messages (#1324, #1325)
• Embed Zot and enable Regsync in the dirctl daemon flow (#1422, #1429)
• Add insecure defaults to daemon configuration for local development scenarios (#1432)

Helm, Packaging, and Deployment

• Replace the local Envoy authz dependency with the oidc-gateway OCI chart and decouple OIDC gateway wiring (#1373, #1378, #1384)
• Add dedicated Envoy timeout handling for EventService/Listen (#1334)
• Set the testbed bootstrap address as the default in Helm (#1387)
• Refresh Zot, PostgreSQL, OIDC gateway, Dockerfile, and base image versions (#1368, #1370, #1374, #1391, #1412, #1440, #1441)
• Update the Homebrew formula and fix the dirctl path in CI (#1434, #1435)

Reconciler, Server, and Importer

• Enable reconciler sync from public OCI registries without credential negotiation (#1375)
• Use fork to execute Regsync in the reconciler (#1428)
• Use BusyBox for coverage images and reconciler containers (#1315, #1367)
• Improve importer deduplication across all supported types before the importer split (#1331)
• Remove the third-party mcphost dependency from importer code before the importer split (#1332)
• Increase the enricher rate limit (#1426)

Testing, CI, and Maintenance

• Expose the testing framework as a package (#1437)
• Move flaky export tests and improve e2e stability (#1311, #1395)
• Remove SDK-specific steps from the Renovate sync workflow after SDK migration (#1329)
• Remove server build steps from the reusable release workflow (#1322)
• Add server-only root artifact release behavior (#1446)
• Fix Renovate errors and continue dependency, action, Helm, image, Kubernetes, and Go patch updates (#1337 and dependency PRs)
• Apply security updates for go-git, azure/go-ntlmssp, and distribution/distribution (#1430, #1431, #1454)

What's Changed

• release(dir): prepare release/server/v1.3.0 (#1461)
• feat(tests): expose testing framework as a package (#1437)
• chore(dir): bump deps (#1460)
• fix(dir): linter issues (#1459)
• chore(deps): update module github.com/distribution/distribution/v3 to v3.1.1 [security] (#1454)
• release(dir/pi): prepare release/api/v1.3.0 (#1451)
• fix(ci): remove multimod verify (#1450)
• chore(ci): separate api and server release (#1447)
• chore(dir): tag only server modules and releae artefacts (#1446)
• chore(dir): add agntcy split repos to renovate (#1443)
• refactor(api): add runtime DiscoveryService and Workload API (#1444)
• chore(deps): update helm release postgresql to v18.6.2 (#1440)
• chore(deps): update go patches (#1439)
• chore(deps): update helm release zot to v0.1.109 (#1441)
• chore: update brew formula version (#1435)
• fix(ci): brew dirctl path (#1434)
• refactor(api): inject Validator, deprecate global init (#1421)
• fix(dirctl): add insecure to daemon default config (#1432)
• chore(deps): update module github.com/go-git/go-git/v5 to v5.18.0 [security] (#1431)
• chore(deps): update module github.com/azure/go-ntlmssp to v0.1.1 [security] (#1430)
• feat(dirctl): enable regsync in daemon (#1429)
• feat(dirctl): embed zot into daemon subcommand (#1422)
• refactor(reconciler): use fork to execute regsync (#1428)
• refactor(dir): remove outdated docs and unused variables (#1427)
• chore: increate enricher ratelimit (#1426)
• chore(deps): update module github.com/spiffe/spire to v1.14.6 (#1425)
• feat(client/cli): cache OIDC tokens per issuer (#1400)
• refactor(dir): remove stale docs, tasks, and references (#1417)
• refactor(dir/runtime): move runtime module to agntcy/dir-runtime repo (#1416)
• chore(deps): update golang:1.26.2-bookworm docker digest to 47ce563 (#1411)
• chore(deps): update kubernetes to v0.36.0 (#1413)
• chore(deps): update module buf.build/go/protovalidate to v1.2.0 (#1414)
• chore(deps): update module github.com/libp2p/go-libp2p-pubsub to v0.16.0 (#1415)
• chore(deps): update postgresql (#1412)
• chore: remove mcp package (#1406)
• refactor(importer): remove (#1401)
• chore(dir): migrate GUI (#1403)
• feat(dir/helm): set testbed bootstrap address as default (#1387)
• chore(deps): update postgresql (#1391)
• chore(deps): update quay.io/coreos/etcd docker tag to v3.6.10 (#1392)
• chore(deps): update module github.com/mark3labs/mcp-go to v0.49.0 (#1394)
• chore(deps): update actions/setup-node action to v6.4.0 (#1393)
• fix(e2e/export): move export batch test (#1395)
• feat(reconciler/sync): enable sync from public OCI registries without credential negotiation (#1375)
• feat(dir/helm): decouple oidc-gateway (#1384)
• fix(importer): config file (#1380)
• chore(dir/helm): remove oidc auth wiring (#1378)
• chore(helm): bump oidc-gateway chart version (#1374)
• feat(helm): replace envoy-authz local dep with oidc-gateway OCI chart (#1373)
• feat(cli/export): add batch export from search results (#1338)
• refactor(importer): remove mcphost 3rd party lib (#1332)
• fix(e2e): flaky tests (#1311)
• chore(deps): update helm release zot to v0.1.106 (#1370)
• chore(dir): bump zot image version (#1368)
• chore(deps): update postgresql (#1343)
• refactor(server): use busybox for coverage docker base image (#1367)
• feat(importer): dedup checker to work with all supported types (#1331)
• chore(deps): update docker/dockerfile:1 docker digest to 2780b5c (#1341)
• chore(deps): update module github.com/modelcontextprotocol/registry to v1.6.0 (#1348)
• chore(deps): update go patches (#1345)
• chore(deps): update github actions (#1344)
• chore(deps): update module github.com/regclient/regclient to v0.11.3 (#1347)
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to afd174a (#1342)
• chore(deps): update kubernetes to v0.35.4 (#1346)
• fix(dir): fix renovate errors (#1337)
• fix(workflow): update import command to use mcp-registry type (#1335)
• feat(dir/helm): add dedicated Envoy timeout handling for EventService/Listen (#1334)
• feat(cli/export): add mcp-ghcopilot format support (#1330)
• chore(dir): remove SDK-specific steps of Renovate Sync workflow (#1329)
• feat(cli/export): add a2a and agent skill export formats (#1327)
• feat(client): auto-refresh cached OIDC credentials (#1328)
• chore(dir): migrate SDKs (#1323)
• fix(cli): expired OIDC token related error message (#1325)
• fix(cli): update stale auth command help text (#1324)
• fix(ci): update to v1.2.0 and unify dirctl path across actions and wfs (#1192)
• feat(dir/cli): add export command (#1319)
• refactor(ci): remove server build steps from reusable release workflow (#1322)
• fix(reconciler): use busybox instead of alpine (#1315)

Full Changelog: v1.2.0...v1.3.0

Contributors

• @agntcy-automation
• @tkircsi
• @paralta
• @arpad-csepi
• @csirmazbendeguz
• @adamtagscherer
• @akijakya
• @agntcy-build
• @ramizpolic

🚀 AGNTCY Dir v1.2.0 Release

This release introduces standard OIDC authentication, alongside daemon and runtime improvements, SDK auth support, Helm and packaging enhancements, importer improvements, and continued dependency and security updates.

🌟 What's New

Authentication

• Introduce OIDC-based external authorization and Dex as the shipped OIDC provider (#1034, #1216)
• Simplify the OIDC client and add device flow support (#1220)
• Add OIDC auth support for the TypeScript SDK (#1219)
• Add OIDC auth support for the Python SDK (#1201)
• Support constrained wildcard matching for GitHub workflow principals (#1167)

CLI, Runtime, and Developer Experience

• Add the dirctl daemon command (#1200)
• Add daemon configuration file support (#1218)
• Wire in the runtime discovery component (#1277)
• Add runtime client methods and daemon tests (#1283)
• Add pre-commit hooks (#1209)
• Publish dir-apiserver binaries for multiple platforms (#1179)

APIs, Storage, and Helm

• Add DeleteReferrer support (#993)
• Add SQLite support and configuration (#1195)
• Add the latest Helm releases support (#1290)
• Render routing service annotations in Helm (#1309)
• Add OASF SDK 1.0.5 support (#1298)

Importer and Automation

• Revamp the importer module (#1092)
• Add importer file fetcher support (#1217)
• Import agent skill definitions from file (#1276)
• Follow the new OIDC pattern in the import-records workflow (#1177)

Security and Maintenance

• Replace Docker with Moby for security hardening (#1299)
• Fix security alerts by package upgrade (#1291)
• Extend the security scanner to support more tags (#1055)
• Continue dependency, action, and image refreshes across the stack

What's Changed

• fix(ci): enable hidden paths (#1314)
• release(dir): prepare release v1.2.0 (#1313)
• chore(deps): update postgresql (#1301)
• chore(deps): update docker/dockerfile:1 docker digest to 2780b5c (#1300)
• feat(dir/helm) render routing service annotations (#1309)
• chore(deps): update dependency astral-sh/uv to v0.11.6 (#1302)
• feat(importer): import agent skill from file (#1276)
• chore(deps): update helm release zot to v0.1.104 (#1304)
• chore(deps): update javascript (#1305)
• chore(deps): update module golang.org/x/crypto to v0.50.0 (#1307)
• chore(deps): update go patches (#1303)
• chore(deps): update github actions (#1306)
• chore(deps): replace docker with moby [security] (#1299)
• feat(deps): oasf-sdk 1.0.5 support (#1298)
• chore(dir): fix security alerts by package upgrade (#1291)
• fix(dir): fix Helm version (#1294)
• feat(dir): add latest Helm releases (#1290)
• chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security] (#1288)
• chore(deps): update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (#1289)
• feat(sdk/js): add OIDC auth support for TypeScript SDK (#1219)
• feat(sdk/python): add OIDC auth support for Python SDK (#1201)
• fix(dirctl): use utc timestamps for cached tokens with milliseconds (#1284)
• chore(runtime): add runtime client methods and daemon tests (#1283)
• feat(daemon): wire in runtime discovery component (#1277)
• chore(deps): update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [security] (#1279)
• feat(cli/daemon): peer-ready defaults for routing (#1268)
• refactor(tests): remove e2e-production tests and update README (#1241)
• chore(deps/renovate): group postgresql bumps (#1261)
• test(dir/daemon): add cross platform tests (#1264)
• docs(dir): add dirctl daemon to README deployment section (#1263)
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 9d38bb4 (#1262)
• chore(deps): update dependency astral-sh/uv to v0.11.3 (#1253)
• chore(deps): update module github.com/zitadel/oidc/v3 to v3.46.0 (#1258)
• chore(deps): update docker.io/bitnami/postgresql:latest docker digest to c30c796 (#1251)
• chore(deps): update helm release postgresql to v18.5.15 (#1255)
• chore(deps): update python docker tag to v3.14 (#1260)
• chore(deps): update javascript (#1257)
• chore(deps): update github actions (#1256)
• chore(deps): update go patches (#1254)
• chore(deps): update module google.golang.org/grpc to v1.80.0 (#1259)
• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (#1246)
• fix(importer): revert import command type in workflow (#1238)
• fix(importer): flags (#1230)
• refactor(brew): add versioned formula for dirctl brew (#1232)
• fix(test): enhance config validation to check file accessibility (#1228)
• fix(dir): remove parallel lint runs (#1227)
• fix(importer): workflow (#1226)
• feat(cli/daemon): daemon configuration file support (#1218)
• feat: importer file fetcher (#1217)
• refactor(cli/client): simplify OIDC client and add device flow support (#1220)
• refactor(dir): replace Zitadel with Dex as OIDC provider (#1216)
• refactor(workflow/renovate): improve scheduling to fast-track vulnerability fixes (#1213)
• fix(dir): skip installing pre-commit if hooksPath is set (#1215)
• fix(dir): test file instead of directory (#1214)
• feat(cli): add daemon command (#1200)
• feat(dir): add pre-commit hooks (#1209)
• ci(dir): bump codecov reusable action (#1206)
• refactor(workflow): pin demo and import workflows to dirctl version (#1207)
• chore(deps): update github actions (#1205)
• chore(deps): update javascript (#1204)
• chore(deps): update go patches (#1203)
• chore(deps): update dependency astral-sh/uv to v0.11.2 (#1202)
• fix(ci): switch to native kind networking for e2e tests (#1199)
• feat(server/database): add SQLite support and configuration (#1195)
• refactor(install/chart): remove chart tarballs (#1190)
• chore(workflows): add envoy version for container image scan configuration (#1185)
• fix(ci): audience of ghwf token (#1189)
• feat(dir): add DeleteReferrer (#993)
• feat(dir/ci): follow the new OIDC pattern in import records wf (#1177)
• fix(tests): flaky e2e network tests due to shared test data and insufficient sync timeout (#1182)
• refactor(dir): refactor PullReferrer (#1067)
• ci(dir): reduce e2e test artifact scope (#1091)
• chore(deps): update dependency astral-sh/uv to v0.11.1 (#1171)
• chore(cron): fix nightly security posture checks (#1183)
• refactor(importer): revamp importer module (#1092)
• feat(release): publish dir-apiserver binary for multiple platforms (#1179)
• chore(renovate): update discovery config (#1169)
• refactor(dir/ci): add reusable build-dirctl and GitHub OIDC token actions (#1168)
• feat(authz): support constrained wildcard matching for GitHub workflow principals (#1167)
• chore(deps): update taskfile (#1144)
• chore(deps): update google.golang.org/genproto/googleapis/rpc digest to d00831a (#1131)
• fix(cron): artifact names and permission for security scanning (#1152)
• chore(deps): update alpine docker tag to v3.23 (#1136)
• chore(deps): update go patches (#1143)
• chore(deps): update module github.com/libp2p/go-libp2p-kad-dht to v0.39.0 (#1146)
• chore(deps): update helm release postgresql to v18.5.14 (#1134)
• chore(deps): update module github.com/libp2p/go-libp2p to v0.48.0 (#1139)
• chore(deps): update dependency astral-sh/uv to v0.11.0 (#1137)
• chore(deps): update envoyproxy/envoy docker tag to v1.37 (#1138)
• chore(deps): update quay.io/coreos/etcd docker tag to v3.6.9 (#1148)
• chore(deps): update alpine:3.21 docker digest to c3f8e73 (#1125)
• chore(deps): update gcr.io/distroless/static:nonroot docker digest to e3f9456 (#1129)
• chore(deps): update golang:1.26.1-bookworm docker digest to 8e8aa80 (#1130)
• chore(deps): update ghcr.io/grpc-ecosystem/grpc-health-probe docker tag to v0.4.47 (#1132)
• chore(deps): update github actions (#1133)
• chore(deps): update javascript (#1145)
• chore(deps): update tonistiigi/xx docker tag to v1.9.0 (#1149)
• chore(deps): update github actions (major) (#1150)
• chore(deps): update docker.io/bitnami/postgresql docker digest to 6213591 (#1126)
• fix(renovate): remove api-gen from deps handling (#1147)
• chore(deps): update module github.com/buger/jsonparser to v1.1.2 [security] (#1124)
• chore(deps): update docker/dockerfile:1 docker digest to 4a43a54 (#1127)
• chore(deps): update gcr.io/distroless/static:latest docker digest to 47b2d72 (#1128)
• fix(cron): update cron.yaml to include permissions (#1140)
• fix(ci): include package-lock.json in docker builds to fix sdk e2e tests (#1142)
• chore(renovate): add explicit workflow configs (#1121)
• fix(renovate): resolve buf dependencies (#1109)
• chore(renovate): update discovery and cache config (#1096)
• ci(dir): extend security scanner to support more tag (#1055)
• feat(dir): multiprovider OIDC-based external authorization module (#1034)
• ci(dir): add renovate bot workflow (#1095)
• fix(importer): update command paths in import-records.yaml to use .bin directory (#1090)
• feat(dir): amend release commit automatically (#1084)
• chore(dir): move deps tasks to repo root (#1083)
• fix(dir): update image version in readme (#1085)
• chore: update brew formula version (#1082)

Full Changelog: v1.1.0...v1.2.0

Contributors

• @adamtagscherer
• @agntcy-automation
• @akijakya
• @arpad-csepi
• @csirmazbendeguz
• @muscariello
• @paralta
• @ramizpolic
• @tkircsi

🚀 AGNTCY Dir v1.1.0 Release

This maintenance release focuses on validation and security, dependencies, runtime and API improvements.

🌟 What's New

Security

• MCP Scanner for behavioural code scanning (#1043, #1014)

MCP

• A new tool for verifying a record's name (#982)

Development

• Delve debugger for development (#1020)

What's Changed

• chore(dir): update spire image by @arpad-csepi in #1069
• chore(deps): bump oasf-sdk to v1.0.3 across Go modules by @akijakya in #1079
• refactor(dir): refactor PushReferrer by @csirmazbendeguz in #1065
• chore(sdk): update python sdk pyasn1 package by @arpad-csepi #1066
• chore(dir): update go modules by @arpad-csepi in #1077
• ci(dir): update actions by @arpad-csepi in #1070
• ci(dir): collect coverage and upload at once by @arpad-csepi in #1038
• feat(tests): add production-like E2E test suite and update Taskfile by @paralta in #1050
• chore: bump oasf-sdk version by @adamtagscherer in #1062
• feat(dir): add referrer CIDs by @csirmazbendeguz in #1027
• ci(workflow): migrate deprecated release actions to softprops/action-gh-release by @kondekarshubham123 in #1052
• feat(importer): add behavioral scanner by @adamtagscherer in #1043
• feat(importer): add allowed tools to MCP server configuration by @paralta in #1051
• fix: importer go version by @adamtagscherer in #1049
• feat(dir): add protovalidate by @csirmazbendeguz in #1030
• fix(ci): list image task path by @paralta in #1045
• chore(dir): bump SPIRE to 1.14.2 and unify container scan image list by @paralta in #1044
• feat(dir/reconciler): add signature verification task by @paralta in #985
• chore(dir): fix vulnerable mcp sdk go package by @arpad-csepi in #1040
• ci(dir,sdk): update reusable actions version by @arpad-csepi in #1037
• feat(dir): add validation for referrer record CIDs by @csirmazbendeguz in #1035
• feat(importer): add security scanner boilerplate by @adamtagscherer in #1014
• refactor(dir): documentation and repo cleanup by @paralta in #1032
• chore(sdk): update deps by @arpad-csepi in #1028
• test(e2e): move to tests and add mcp tests to ci by @paralta in #1016
• refactor(dir): split up taskfile tasks by @arpad-csepi in #1025
• feat(dir): add e2e tests for the referrer API by @csirmazbendeguz in #1003
• fix(dir): fix reconciler debug image by @csirmazbendeguz in #1024
• feat(dir): add Delve debugger by @csirmazbendeguz in #1020
• chore(dir): update zot image version by @arpad-csepi in #1022
• fix(install/docker): compose health checks by @paralta in #1017
• refactor(dir): refactor the Dockerfile's build arguments by @csirmazbendeguz in #1015
• chore(ci): update DMG and ZIP file names in GUI CI workflow by @lgecse in #978
• fix(dir): bump postgres version in docker compose by @csirmazbendeguz in #1000
• test(importer): extend unit tests by @paralta in #998
• chore(sdk): update packages by @arpad-csepi in #997
• chore(sdk): update example package-lock.json by @arpad-csepi in #996
• chore(dir): update postgresql by @arpad-csepi in #995
• chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1 in /mcp by @paralta in #992
• chore(deps): bump rollup from 4.55.1 to 4.59.0 in /sdk/dir-js by @paralta in #990
• docs: update README for Directory CLI with concise command descriptions and installation instructions by @paralta in #987
• docs: add verify name mcp tool by @adamtagscherer in #983
• feat: add name verification mcp tool by @adamtagscherer in #982
• fix(dir): coverage test run by @arpad-csepi in #953
• refactor(dir/workflows): change default dry_run value to 'false' in import-records.yaml by @paralta in #977
• refactor(dir/reconciler): migrate reverification to reconciler name task by @paralta in #976
• chore(dir): add dir-demo-bot by @adamtagscherer in #972
• chore(dir): bump go to 1.26.0 and golangci-lint to 2.10.1 by @paralta in #975
• chore(ci): bump days to mark items stale by @ramizpolic in #970
• chore: update brew formula version by @ramizpolic in #965

Full Changelog: v1.0.0...v1.1.0

🚀 AGNTCY Dir v1.0.0 Release

We are happy to announce the release of Directory v1.0.0, marking a significant
milestone in our commitment to provide a robust and scalable directory service for
publication, exchange, and discovery of information about multi-agentic systems over
a distributed peer-to-peer network.

This release consolidates improvements to the schema, tooling, synchronization mechanisms,
security features, and production deployment setup, ensuring enhanced reliability, better
integration capabilities, and support for a wider range of use cases.

🌟 Key Features

• Capability-Based Discovery: Agents publish structured metadata describing their
  functional characteristics as described by the OASF.
  The system organizes this information using hierarchical taxonomies, enabling efficient
  matching of capabilities to requirements.
• Verifiable Claims: While agent capabilities are often subjectively evaluated,
  DIR provides cryptographic mechanisms for naming resolution, data integrity and
  provenance tracking. This allows users to make informed decisions about agent selection.
• Semantic Linkage: Components can be securely linked to create various relationships
  like version histories for evolutionary development, collaborative partnerships where
  complementary skills solve complex problems, and dependency chains for composite
  agent workflows.
• Distributed Architecture: Built on proven distributed systems principles, DIR uses
  content-addressing for global uniqueness and implements distributed hash tables (DHT)
  for scalable content discovery and synchronization across decentralized networks.
• Runtime Capabilities: Provides agents the ability to register and discover
  at runtime, allowing dynamic adaptation and interaction between agents in live environments.
• Tooling and Integration: Provides a suite of command-line tools, SDKs, and APIs
  to facilitate interaction with the system, enabling developers to manage Directory
  records, node operations, and cross-system interactions programmatically.
  Out-of-box integration with exiting OCI registries with full synchronization support
  to keep data up-to-date across DIR deployments and networks.
• Security and Trust: Incorporates robust security measures including cryptographic
  signing, verification of claims, secure communication protocols, and access controls
  to ensure the integrity and authenticity of Directory records and nodes.
• Live Public Deployment: The Directory service is now live and publicly accessible,
  allowing organizations, developers and users to interact with the system in real-world scenarios.
  Find more details at agntcy/dir-staging.

Check out the DIR v1.0 Blog Post for an in-depth summary of the DIR v1.0 release,
including the motivation behind the project, key features, and future roadmap.

Full Changelog: v1.0.0-rc.4...v1.0.0

🚀 Getting Started

🤝 Community & Support

• Repository
• Changelog
• Discussions
• Documentation
• Usage and Examples
• DIR Public Instance

🙏 Acknowledgments

Thank you to all contributors who made this release possible! Special thanks to the community for
feedback, bug reports, and feature requests that helped shape this release.

#dir #release #v1.0.0

🚀 AGNTCY Dir v1.0.0-rc.4 Release

This maintenance release focuses on signing and verification improvements, registry and Helm deployment refinements, and CI/CD robustness.

🌟 What's New

Signing & Verification

• Local trust chain verification for record signing (#921)
• Extended client options for record signing and verification (#930)
• Improved verification details parsing and verification result widget in the GUI (#932)

Helm & Deployment

• Topology-aware StorageClass support for Zot configuration (#937)

Registry & Zot

• Improved registry URL handling and validation for Zot (#944)
• Fix for resolving latest tag (without slash) instead of release (#934)

CI/CD & Automation

• Push record and validate record GitHub Actions for directory workflows (#935)
• GH token environment for gh CLI in directory workflows (#939)
• Simplified image security scanning GitHub Action (#940)
• Command execution error handling in the import-records workflow (#938)
• Demo-dir workflow token timing fix and removal of demo-dirctl (#928)

Security & Dependencies

• Go 1.25.7 and package version bumps (#945)
• Bitnami PostgreSQL Helm chart 18.2.3 → 18.2.6 (#927)
• Python cryptography dependency update in SDK (#933)
• Go module updates across directory components (#943)

Refinements

• Removal of unused OCI annotations (#923)
• Hardcoded expected CID for E2E test stability (#931)

What's Changed

• chore(release): update version to v1.0.0-rc.3 by @ramizpolic in #920
• refactor(dir): remove unused OCI annotations by @tkircsi in #923
• feat(sign): switch to local trust chain verification by @ramizpolic in #921
• refactor(ci/demo): fix token timing in demo-dir workflow and remove demo-dirctl by @paralta in #928
• feat(client): extend options for record signing/verification by @ramizpolic in #930
• chore(dir): bump bitnami postgres chart version 18.2.3 -> 18.2.6 by @tkircsi in #927
• chore(dir): add hardcoded expected cid for e2e test by @arpad-csepi in #931
• fix(gui): improve verification details parsing and add verification result widget by @muscariello in #932
• chore(sdk): update python cryptography by @arpad-csepi in #933
• fix(dir): get latest tag without slash instead of release by @arpad-csepi in #934
• feat(helm): topology-aware StorageClass support for Zot config by @tkircsi in #937
• refactor(ci/import): handle command execution errors in import workflow by @paralta in #938
• ci(dir): add gh token env for gh cli by @arpad-csepi in #939
• ci(dir): add push record and validate record GH actions by @adamtagscherer in #935
• chore(ci): simplify image security scanning github action by @ramizpolic in #940
• chore(dir): update go mods by @arpad-csepi in #943
• fix(dir/zot): registry url handling and validation by @paralta in #944
• chore(security): bump go v1.25.7 and package versions by @ramizpolic in #945
• release(dir): prepare v1.0.0 rc.4 by @paralta in #947

Full Changelog: v1.0.0-rc.3...v1.0.0-rc.4

Contributors

• @muscariello
• @adamtagscherer
• @tkircsi
• @ramizpolic
• @paralta
• @arpad-csepi

GUI v1.0.0

🚀 AGNTCY Dir v1.0.0-rc.3 Release

This maintenance release focuses on runtime capabilities to enable agentic
application usage in live environments, as well as stability improvements
to integration tooling.

🌟 What's New

Runtime Capabilities

• Event-based Docker container discovery with real-time monitoring
• Containerd runtime support for container lifecycle tracking
• Kubernetes workload discovery via CRD-based integration
• gRPC API for querying discovered processes and workloads
• Helm chart and installation scripts for deployment
• CRD (CustomResourceDefinition) for DiscoveredWorkload resources
• ETCD-based storage backend for workload state persistence

Importer Optimizations

• Rate limiting for LLM API calls to prevent quota exhaustion
• Enhanced dry-run functionality to save output records to file for debugging
• Max-steps parameter for model configuration control

Integration Enablement

• Signature verification tool for validating signed records
• Record signature verification support in Flutter UI
• Scheduled MCP import workflow for automated registry population

What's Changed

• feat(dir/importer): rate limiting, debug dry-run and clear session by @paralta in #888
• feat(runtime): add runtime process discovery service by @ramizpolic in #808
• test(dir): add E2E tests for remote name resolution by @adamtagscherer in #895
• feat(ci): add scheduled MCP import workflow by @muscariello in #874
• fix(ci): workflow inputs by @adamtagscherer in #900
• release(dir/helm/runtime/ci): prepare release v1.0.0 by @tkircsi in #901
• feat(mcp): add signature verification tool by @muscariello in #906
• docs(runtime): extend docs around discovery and runtime by @ramizpolic in #903
• chore(deps): bump OASF and oasf-sdk 1.0.0-rc.1 -> 1.0.0 by @akijakya in #908
• fix(gui): restrict mcp write access to agent directory by @muscariello in #902
• fix(runtime): enable oasf resolvers with annotations by @ramizpolic in #910
• feat(mcp,gui): add record signature verification support by @muscariello in #909
• fix(runtime): enable oasf resolvers with annotations by @ramizpolic in #911
• chore(ci): add security scanning for runtime images by @ramizpolic in #912
• release(dir): prepare release v1.0.0 by @tkircsi in #913
• chore(dirctl): update brew formula to v1.0.0 by @build-agntcy in #914
• release(dir): prepare release v1.0.0-rc.3 by @ramizpolic in #919
• feat(sign): propagate signer metadata in verification response by @muscariello in #917

Full Changelog: v1.0.0-rc.2...v1.0.0-rc.3

🚀 AGNTCY Dir v1.0.0-rc.2 Release

This maintenance release focuses on SDK enhancements and critical bug fixes for production deployments. v1.0.0-rc.2 builds on the foundation established in rc.1, adding essential naming service capabilities and resolving critical connectivity issues affecting production environments.

🌟 What's New

SDK Enhancements

• Naming service RPCs now available in Python and JavaScript SDKs for domain verification workflows
• Programmatic access to domain verification records via get_verification_info() (Python) and getVerificationInfo() (JavaScript)

Production Stability

• Fixed critical Reconciler connectivity issue preventing search indexer from accessing external OCI registries
• Enhanced Helm chart configuration logic to properly handle multi-registry deployments
• Security dependency updates (protobuf 6.33.5)

What's Changed

• feat(sdk): add naming service rpcs to SDKs by @adamtagscherer in #887
• fix(reconciler): prioritize explicit registry address over internal zot service by @paralta in #892
• chore(deps): bump protobuf from 6.32.1 to 6.33.5 in /sdk/examples/example-py by @app/dependabot in #893
• release(dir/helm): prepare release/v1.0.0-rc.2 by @tkircsi in #894

🔧 Key Fixes

Reconciler Zot Connectivity (#892)

Problem: The Reconciler's search indexer was failing with TLS handshake errors when attempting to access external OCI registries (GHCR, Docker Hub). The chart.oci.registryAddress Helm helper was incorrectly forcing the internal Zot service address when the Zot subchart configuration existed, ignoring the explicitly configured external config.store.oci.registry_address.

Impact: Critical for production deployments using external OCI registries. Search indexer tasks failed, preventing records from being searchable.

Fix: Updated Helm template logic to prioritize explicit registry address configuration, ensuring the Reconciler uses the same external registry configuration as the apiserver.

Result: Reconciler now successfully connects to external registries, search indexing works correctly.

📦 Compatibility Matrix

🆙 Upgrade Guide

From v1.0.0-rc.1 to v1.0.0-rc.2

This is a drop-in replacement for v1.0.0-rc.1 with no breaking changes.

Recommended upgrade path:

1. Update Helm values (if needed):

   # No configuration changes required
   # Existing v1.0.0-rc.1 values work with rc.2

2. Update chart version in your ArgoCD/GitOps configuration:

   {
     "chart_version": "v1.0.0-rc.2"
   }

3. Update image tags in values files:

   image:
     tag: v1.0.0-rc.2

4. Deploy via ArgoCD:

   • Sync the application
   • Monitor Reconciler logs to verify search indexer connectivity
   • Verify SDK naming service functionality if used

SDK Users

Python SDK:

pip install --upgrade agntcy-dir-sdk==1.0.0rc2

JavaScript SDK:

npm install @agntcy/dir-sdk@1.0.0-rc.2

New Features Available:

# Python - Domain verification
verification_info = client.get_verification_info(domain="example.com")

// JavaScript - Domain verification
const verificationInfo = await client.getVerificationInfo({ domain: "example.com" });

🐛 Known Issues

None identified in this release.

If you encounter issues, please report them on GitHub Issues.

📝 Full Changelog

Full Changelog: v1.0.0-rc.1...v1.0.0-rc.2

👥 Contributors

• @adamtagscherer
• @paralta
• @tkircsi
• @app/dependabot

Released: 2026-02-02
Previous Release: v1.0.0-rc.1 (2026-01-30)