Skip to main content

Connector releases

ComponentCurrent version
Connector0.151.45

Download latest

Changelog​

August 2026​

v0.151.45 – 2026-08-12​

Download

  • Fix(connector): stop checkpointing past LST artifacts we never read (#1797)
  • Bound the recipeworker cgroup, and make container memory observable (#1813)

July 2026​

v0.151.23 – 2026-07-29​

Download

  • Chore: declare Moderne Proprietary License on customer-shipped jars (#1740)

v0.151.19 – 2026-07-28​

Download

  • Preserve %2F encoding for npm tools in scheme filter (#1705)
  • Fix(organization): treat enrich-failed rows as LST-unavailable, surface the reason (#1718)
  • Fix(connector): set customIntegrations on the proxy-authz ConnectorConfig bean (#1709)
  • Feat(custom-integrations): scope org access and rewrite commits via a customer org service (#1659)
  • Align every AWS SDK module on the SDK BOM (#1693)
  • Connector: mint AWS CodeArtifact tokens for Maven repositories (#1536)
  • Publish the Moderne connector to the Code Genome Project (#1662)
  • Fix(committer): serve and enforce connector-configured commit options (#1622)

v0.150.163 – 2026-07-15​

Download

  • Withhold unreachable customer publishUri from the in-SaaS CLI (#1591)

v0.150.155 – 2026-07-14​

Download

  • Bound connector metric source tag to Atlas tag-value limit (#1567)
  • Perf(connector): abort non-JAR LST downloads early (#1576)

v0.150.142 – 2026-07-08​

Download

  • Fix(connector): name the failing tool on connectivity-check failure (#1549)

v0.150.141 – 2026-07-08​

Download

  • Fix(connector): reject non-JAR payloads on LST download (#1548)
  • Make connector Artifactory connectivity failures self-diagnosing (#1497)
  • Remove legacy remoting servers and switch to rewrite releases (#1449)
  • Fix(connector): stop a null-response WS handshake from wedging gateway reconnect (#1375)

June 2026​

v0.150.82 – 2026-06-23​

Download

  • Fix(connector): stop reactor scheduler-metric cardinality explosion (#1348)
  • Disable the expired azure devops pypi integration (#1332)
  • Fix(connector): re-validate redirect targets in ProxyController to close SSRF (#1210) (#1232)
  • Connector: route org-source fetches and all S3 access through the configured HTTP proxy (#1267)
  • Fix(connector): skip client-side DNS resolution on proxied tool clients (#1266)

v0.150.48 – 2026-06-12​

Download

  • Build(connector): add spring-boot-starter-restclient dependency (#1263)
  • Redact secrets from connector GET /configuration (#1215)
  • Fix(connector): restore TLS on the connector->gateway link (#1167)
  • Enforce config validation on remaining tool-bearing trees (#1156)
  • Fix(connector): reuse one SslContext to stop connection-pool cardinality explosion (#1152)
  • Fix(connector): convey LST changeset to the gateway on enrich rows (#1145)
  • Move url validation into connector module (#1164)

v0.150.21 – 2026-06-05​

Download

  • Pin guava to 32.0.1-jre to clear CVE-2023-2976 and CVE-2020-8908 (#1120)
  • Fail fast on unresolved ${...} placeholders in config (#1115)

v0.150.17 – 2026-06-04​

Download

  • Add software.amazon.awssdk:sts so IRSA can assume the configured role (#1107)

v0.150.10 – 2026-06-01​

Download

  • Re-ingest LSTs on rebuild by keying freshness on publish time, not changeset (#1039)
  • Scope lock-mode LST fetch to the source host, not the CSV's parent path (#1040)
  • Gateway+connector: bootstrap repos.csv from gateway, drop EBS persistent volume (#832)
  • Scope lock-mode LST fetch to the source's declared repo bases (#994)
  • Emit enrichFailedReason on encrypt-mode rows that fail (#979)
  • Validate organization source configuration at startup (#1011)
  • Fail fast when a file organization source has no path (#1010)
  • Gateway: carry sourceUri on per-source push payloads (#976)
  • Route legacy agent CLI/UI properties to moderne.ui (#926)
  • Spool ciphertext to disk, decouple encrypt from upload (#831)
  • Route tmpdir to EBS, drop Maven encrypt-path spool (#830)

May 2026​

v0.148.107 – 2026-05-14​

Download

  • Short-circuit encrypt+upload before opening source when prev already encrypted (#804)

v0.148.106 – 2026-05-14​

Download

  • Require explicit isSkipSsl/isSkipValidateConnectivity on HttpToolConfiguration

v0.148.102 – 2026-05-12​

Download

  • Build(deps): upgrade Netty 4.2.13.Final and plexus-utils 3.6.1 for CVE-2026-42582/3/4
  • Log error on 404 handshake from API gateway (#792)
  • Don't start enrichment until gateway is connected; aggregate per-row failures into one summary

v0.148.100 – 2026-05-12​

Download

  • Fix: disable private pypi for devaz connector
  • Revert "connector: log gateway URI on connect and on channel close (#779)" (#780)
  • Log gateway URI on connect and on channel close (#779)
  • Fix: disable private pypi for app connector

v0.148.74 – 2026-05-06​

Download

  • Preserve URL path/query encoding for GitLab tools only (#721)
  • Revert "connector: preserve URL path/query encoding in scheme filter (#719)" (#720)
  • Preserve URL path/query encoding in scheme filter (#719)
  • Exclude SecretsManagerAutoConfiguration so non-AWS hosts can start

v0.148.65 – 2026-05-04​

Download

  • Time all three repos.csv routes on push and receipt

v0.148.59 – 2026-05-04​

Download

  • Initial release