2.9.2 Release Notes
Date: 2026-10-08
Environment: Customer PRD
Release type: patch
- Release Notes
- Developer Release Notes
API
- CVE remediation hotfix off 3.27.6-2 base.
UI
- Hotfix chain 3.27.5 → 3.27.5-5 including end flag, query_id parsing, and base image vulnerability fixes.
Agent v2
- CVE/security fixes off 4.26.0-4 base.
Jobhandler Async
- CVE security patch off 4.27.4 base.
AI Services
- OS/package CVE fixes off 1.1.0 base.
Scheduler
- Alpine runtime migration and Python image vulnerability remediation off 0.1.3 base.
Platform Fixes
- Customer production deployment with security-hardened images.
Microservice versions
| Service | Image tag | Git tag | Git commit | Repository |
|---|---|---|---|---|
| API | 3.27.6-2-1 | 3.27.6-2-1 | d0526a1d | api |
| UI | 3.27.5-5 | 3.27.5-5 | e2ed6983 | ui-intugle/ui |
| Agent v2 (chatai_mcp) | 4.26.0-5-sec | 4.26.0-5 | 65dfd70c | chatai_mcp |
| Jobhandler Async | 4.27.4-cve-1 | 4.27.4-cve-1 | 0343e74b | jobhandler-async |
| AI Services | 1.1.0-1-sec | 1.1.0-1 | 3859580 | ai-services |
| Scheduler | 0.1.3-1 | 0.1.3-1 | 4a31c88 | scheduler |
Developer / Ops notes
- Customer PRD deployment based on 2.9.x code line with customer-specific CVE/security hardening.
- API: CVE remediation hotfix off 3.27.6-2 (jars CVE fix, vulnerable package/toolchain upgrades, runtime image minimization).
- UI: Hotfix chain 3.27.5 → 3.27.5-5 including end flag, query_id parsing, base image vuln fix.
- Agent: CVE/security fixes off 4.26.0-4 base.
- Jobhandler: CVE security patch off 4.27.4 (dependency + container updates).
- AI Services: OS/package CVE fixes off 1.1.0 base.
- Scheduler: Alpine runtime migration and Python image vulnerability remediation off 0.1.3 base.
Notes
All customer PRD environments use the same image versions.