Agentic SRE App Release Notes
Note
Version 0.2.0 marks the Beta release of the ITRS Agentic SRE app. For more information, see the latest documentation for Use Agentic SRE for operations and support in ITRS Analytics.
This app release requires a minimum ITRS Analytics Platform version of 2.17.0 and Web Console version 3.8.0 to operate.
Agentic SRE Beta 0.6.0 Copied
Released: 4 August 2026 Beta
Important
This release changes how the Agentic SRE Beta app is enabled. The app now requires an Agentic SRE license entitlement, and its toggle is hidden in the KOTS Admin Console when the entitlement is unavailable. If you previously enabled Agentic SRE, the selection is not carried over during the upgrade.
Before upgrading, obtain the entitlement and sync or upload the updated license. During or after the upgrade, enable Agentic SRE again under Beta Apps. For requirements and instructions, see Upgrading to ITRS Analytics 2.18.8+p2.18.7.
Highlights Copied
These are the highlights of this release:
- Expanded LLM provider support — Configure, test, and use Google Gemini models through the new Google Gen AI provider. Model lists for supported cloud providers are also updated automatically.
- More accurate entity-aware responses — Entity names in natural-language questions can now be resolved through embedded semantic search. Chat requests can also use multiple entity references and display inline references as context chips.
- Improved service readiness visibility — Administrators can review documentation index, entity index, and LLM readiness on the new auto-refreshing Status page, which is accessible from the chat status indicator.
- Enhanced evaluation and feedback workflows — Create evaluations through a guided wizard, run them with additional timeout and report safeguards, and provide thumbs-up or thumbs-down feedback on chat responses.
New features and enhancements Copied
These are the new features and enhancements of this release:
| Issue key | Release description |
|---|---|
| IAA-310 | Added embedded semantic search for resolving platform entities without requiring a separate search service. See Add entity context to a prompt. |
| IAA-345 | Improved Insights responses by resolving entity names mentioned in natural-language questions. See Investigate what is happening in your environment. |
| IAA-396 | Made it clearer how to rerun Test LLM after a successful or failed test. See Add an LLM. |
| IAA-397 | Improved LLM error messages for authentication, quota, and availability failures while protecting sensitive values. |
| IAA-455 | Automated updates to the available model lists for supported cloud LLM providers. |
| IAA-462 | Reduced unnecessary processing by skipping entity resolution when messages contain no entity reference. |
| IAA-468 | Added Google Gen AI provider support for configuring, testing, and using Gemini models. See Configure a Google GenAI model. |
| IAA-470 | Limited system-wide summaries to explicit overview requests and improved responses when an entity cannot be found. |
| IAA-471 | Improved entity index startup performance by avoiding duplicate processing. |
| IAA-497 | Updated Support guidance to reduce repeated documentation searches before responding. See Get product and setup guidance. |
| IAA-504 | Improved entity disambiguation by filtering weakly related search results. |
| IAA-505 | Improved routing of Insights requests and exposed the reasoning behind the selected response mode. See How to use the AI chat in the ITRS Analytics Web Console. |
| IAA-506 | Added support for natural-language and inline dimension references displayed as context chips in chat. |
| IAA-511 | Disabled the unused hosted models service while retaining an option to enable it. |
| IAA-519 | Added evaluation coverage for SRE routing accuracy, tool selection, and routed agent behavior. See Understand Eval results. |
| IAA-521 | Added an auto-refreshing Status page showing documentation index, entity index, and LLM readiness. |
| IAA-522 | Made the chat status indicator link administrators directly to the Status page. See Review service readiness in Status. |
| IAA-524 | Added timeouts, limited concurrency, and report finalization safeguards for evaluation runs. |
| IAA-528 | Added thumbs-up and thumbs-down feedback for chat responses, with feedback recorded in the audit history. See Provide feedback on an AI response. |
| IAA-544 | Added support for using multiple entity references as separate scopes in one chat request. |
| IAA-545 | Added context-name lookup when clicked entities are saved for later use in chat. |
| IAA-558 | Clarified the Add to chat control and added it directly to entity cards in chat responses. |
| IAA-559 | Added plain-language descriptions of each grader to the Details column. See Understand Eval results. |
| IAA-561 | Reworked evaluation creation into a guided, multi-step wizard. See Run an Eval campaign and review the results. |
| IAA-595 | Hid unsupported OpenAI models and added clear validation when such models are supplied manually. |
Issues fixed Copied
These are the issues we have fixed in this release:
| Issue key | Release description |
|---|---|
| IAA-369 | Fixed LLM save failures closing the editor without showing an error. |
| IAA-394 | Fixed entity index startup processing blocking entity updates and leaving the index incomplete or out of date. |
| IAA-402 | Fixed failed Test LLM checks appearing as complete in the Audit list. |
| IAA-421 | Fixed audit records for unsaved Test LLM configurations omitting the LLM name. |
| IAA-443 | Fixed the Model list showing models from the previously selected provider. |
| IAA-465 | Fixed failed entity resolution producing an unrelated system-wide summary. |
| IAA-489 | Fixed entity index startup delays when available processing resources were overestimated. |
| IAA-490 | Added configurable reasoning effort so supported OpenAI reasoning models can use function tools. |
| IAA-491 | Replaced raw OpenAI error details with concise, readable messages. |
| IAA-492 | Fixed documentation evaluations losing citation URLs and incorrectly receiving zero string-content scores. |
| IAA-494 | Fixed Test LLM failures for Anthropic models that require max_tokens or reject an explicitly supplied temperature. |
| IAA-496 | Fixed unsuitable default settings for Gemini models and added controls for model thinking levels and budgets. |
| IAA-525 | Prevented RCA chat responses from hanging indefinitely when an LLM stream does not end. |
| IAA-543 | Fixed evaluation runs hanging or linking to missing reports when grading, authentication, or report saving fails. |
| IAA-566 | Fixed System Status incorrectly reporting that no LLM is configured. |
| IAA-568 | Fixed uploads of evaluation reports larger than the gateway request limit. |
| IAA-569 | Fixed inapplicable grader results appearing as failed zero scores instead of N/A. |
| IAA-572 | Fixed Test LLM returning an internal server error when reasoning_effort is unsupported by the selected GPT-5 model. |
| IAA-573 | Fixed changes to Reasoning Effort overwriting the name of a copied LLM. |
| IAA-591 | Fixed unsupported OpenAI -pro and -codex models causing Add LLM and Test LLM failures. |
Security updates Copied
The following security vulnerabilities have been addressed in this release:
| Issue key | Release description |
|---|---|
| IAA-362 | Updated python-3.13 to address high-severity vulnerability CVE-2026-11940. |
| IAA-363 | Updated python-3.13 to address high-severity vulnerability CVE-2026-11972. |
| IAA-383 | Updated antlr to address high-severity vulnerability BDSA-2026-17031. |
| IAA-399 | Updated transformers to address high-severity vulnerability CVE-2026-4372. |
| IAA-423 | Updated curl to address critical vulnerability CVE-2026-10536. |
| IAA-424 | Updated curl to address high-severity vulnerability CVE-2026-11352. |
| IAA-425 | Updated curl to address critical vulnerability CVE-2026-11564. |
| IAA-426 | Updated curl to address high-severity vulnerability CVE-2026-11586. |
| IAA-427 | Updated curl to address critical vulnerability CVE-2026-11856. |
| IAA-428 | Updated curl to address high-severity vulnerability CVE-2026-12064. |
| IAA-429 | Updated libexpat1 to address high-severity vulnerability CVE-2026-56131. |
| IAA-430 | Updated libexpat1 to address high-severity vulnerability CVE-2026-56407. |
| IAA-431 | Updated libexpat1 to address high-severity vulnerability CVE-2026-56408. |
| IAA-432 | Updated curl to address high-severity vulnerability CVE-2026-8286. |
| IAA-433 | Updated curl to address critical vulnerability CVE-2026-8924. |
| IAA-434 | Updated curl to address critical vulnerability CVE-2026-8925. |
| IAA-435 | Updated curl to address critical vulnerability CVE-2026-8926. |
| IAA-436 | Updated curl to address critical vulnerability CVE-2026-8927. |
| IAA-437 | Updated curl to address high-severity vulnerability CVE-2026-8932. |
| IAA-438 | Updated curl to address critical vulnerability CVE-2026-9079. |
| IAA-439 | Updated curl to address high-severity vulnerability CVE-2026-9080. |
| IAA-440 | Updated curl to address high-severity vulnerability CVE-2026-9545. |
| IAA-441 | Updated curl to address high-severity vulnerability CVE-2026-9546. |
| IAA-442 | Updated curl to address high-severity vulnerability CVE-2026-9547. |
| IAA-447 | Updated the Go standard library to address high-severity vulnerability CVE-2026-39822. |
| IAA-456 | Updated python-3.13 to address high-severity vulnerability CVE-2026-15308. |
| IAA-467 | Updated transformers to address high-severity vulnerability CVE-2026-5241. |
| IAA-486 | Updated Apache Tomcat to address critical vulnerability CVE-2026-59083. |
| IAA-487 | Updated Apache Tomcat to address critical vulnerability CVE-2026-59084. |
| IAA-509 | Updated Eclipse Vert.x to address high-severity vulnerability CVE-2026-15075. |
| IAA-510 | Updated Eclipse Vert.x to address high-severity vulnerability CVE-2026-15076. |
| IAA-562 | Updated netty-codec-http to address high-severity vulnerability CVE-2026-55831. |
| IAA-563 | Updated netty-codec-http to address high-severity vulnerability CVE-2026-55833. |
| IAA-564 | Updated netty-codec-http to address high-severity vulnerability CVE-2026-56745. |
| IAA-565 | Updated netty-codec to address high-severity vulnerability CVE-2026-59901. |
| IAA-587 | Updated Apache Tomcat to address high-severity vulnerability BDSA-2026-17153. |
| IAA-588 | Updated Apache Tomcat to address high-severity vulnerability BDSA-2026-17158. |
| IAA-589 | Updated fast-uri to address high-severity vulnerability BDSA-2026-23246. |
Agentic SRE Beta 0.5.0 Copied
Released: 23 July 2026 Beta
New features and enhancements Copied
These are the new features and enhancements of this release:
| Issue key | Release description |
|---|---|
| IAA-92 | Updated documentation indexing so newly added product repositories are included automatically, with support for filtering repositories as needed. |
| IAA-238 | Updated dependencies to support applying securityContext.applySecurityContextDefaults from instance-config for OpenShift deployments. |
| IAA-262 | Improved the Run Eval test-loading workflow with a multi-group picker, question preview, live filtering, and append-with-deduplication behavior. |
| IAA-263 | Replaced evaluation test groups with tags and reorganized the evaluation protobuf definitions to support more flexible filtering and a cleaner API structure. |
| IAA-293 | Masked API key and secret fields in the LLM editor by default and added a reveal toggle for secure on-demand viewing. |
Security updates Copied
The following security vulnerabilities have been addressed in this release:
| Issue key | Release description |
|---|---|
| IAA-204 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2026-7210. |
| IAA-232 | Updated axios to address vulnerability BDSA-2026-11999. |
| IAA-251 | Updated golang.org/x/net in the hosted models image to address vulnerability CVE-2026-33814. |
| IAA-252 | Updated golang.org/x/net in the hosted models image to address vulnerability CVE-2026-39821. |
| IAA-253 | Updated Go standard library packages in the hosted models image to address vulnerability CVE-2026-42504. |
| IAA-257 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2026-3644. |
| IAA-258 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2026-4224. |
| IAA-259 | Updated binutils in the hosted models image to address vulnerability CVE-2026-6846. |
| IAA-260 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2025-13462. |
| IAA-265 | Updated netty-handler across Agentic SRE service images to address vulnerability CVE-2026-44249. |
| IAA-266 | Updated netty-handler across Agentic SRE service images to address vulnerability CVE-2026-45416. |
| IAA-267 | Updated netty-resolver-dns in the UI service to address vulnerability CVE-2026-45674. |
| IAA-268 | Updated netty-resolver-dns in the UI service to address vulnerability CVE-2026-47691. |
| IAA-271 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2026-9669. |
| IAA-275 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-34180. |
| IAA-276 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-34181. |
| IAA-277 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-34182. |
| IAA-278 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-34183. |
| IAA-279 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-42764. |
| IAA-280 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-42765. |
| IAA-281 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-45445. |
| IAA-282 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-45447. |
| IAA-283 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-7383. |
| IAA-284 | Updated OpenSSL libraries in the hosted models image to address vulnerability CVE-2026-9076. |
| IAA-291 | Updated starlette in the documentation indexing image to address vulnerability CVE-2026-48818. |
| IAA-292 | Updated starlette in the documentation indexing image to address vulnerability CVE-2026-54283. |
| IAA-296 | Updated form-data to address vulnerability CVE-2026-12143. |
| IAA-360 | Updated Keycloak to address vulnerability BDSA-2026-16693. |
| IAA-361 | Updated Keycloak to address vulnerability BDSA-2026-16698. |
| IAA-372 | Updated Kotlin to address vulnerability CVE-2026-53914. |
| IAA-384 | Updated Apache Tomcat to address vulnerability BDSA-2026-17153. |
| IAA-385 | Updated Apache Tomcat to address vulnerability BDSA-2026-17158. |
Agentic SRE Beta 0.4.1 Copied
Released: 29 June 2026 Beta
New features and enhancements Copied
These are the new features and enhancements of this release:
| Issue key | Release description |
|---|---|
| IAA-238 | Updated dependencies to support applying securityContext.applySecurityContextDefaults from instance-config for OpenShift deployments. |
Agentic SRE Beta 0.4.0 Copied
Released: 11 June 2026 Beta
New features and enhancements Copied
These are the new features and enhancements of this release:
| Issue key | Release description |
|---|---|
| IAA-144 | Updated Python 3.11 in the documentation indexing image to address vulnerability CVE-2026-3298. |
| IAA-146 | Updated lxml in the documentation indexing image to address vulnerability CVE-2026-41066. |
| IAA-147 | Updated glibc across Agentic SRE service images to address vulnerability CVE-2026-5928. |
| IAA-151 | Updated the hosted models image to the latest patched Git package build to address vulnerability CVE-2026-32631. |
| IAA-152 | Updated Python 3.11 base packages in the documentation indexing image to address vulnerability CVE-2026-4786. |
| IAA-153 | Updated glibc across Agentic SRE service images to version 2.43-r7 to address vulnerability CVE-2026-5435. |
| IAA-154 | Updated Python 3.11 base packages in the documentation indexing image to address vulnerability CVE-2026-6100. |
| IAA-157 | Updated axios to address vulnerability BDSA-2026-6792. |
| IAA-158 | Updated DOMPurify to address vulnerability BDSA-2026-8016. |
| IAA-159 | Updated DOMPurify to address vulnerability BDSA-2026-8017. |
| IAA-160 | Updated DOMPurify to address vulnerability BDSA-2026-8018. |
| IAA-167 | Updated core libc packages across Agentic SRE service images to address vulnerability CVE-2026-5450. |
| IAA-168 | Updated OpenTelemetry Java instrumentation to address vulnerability BDSA-2026-5716. |
| IAA-171 | Updated Netty dependencies to address vulnerability BDSA-2026-9430. |
| IAA-172 | Updated Netty dependencies to address vulnerability BDSA-2026-9433. |
| IAA-173 | Updated netty-codec-dns in the UI service to address vulnerability CVE-2026-42579. |
| IAA-174 | Updated netty-codec across Agentic SRE service images to address vulnerability CVE-2026-42583. |
| IAA-175 | Updated netty-codec-http across Agentic SRE service images to address vulnerability CVE-2026-42584. |
| IAA-176 | Updated netty-codec-http2 and related HTTP codec dependencies across Agentic SRE service images to address vulnerability CVE-2026-42587. |
| IAA-177 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-33811. |
| IAA-178 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-33814. |
| IAA-179 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-39820. |
| IAA-180 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-39836. |
| IAA-181 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-42499. |
| IAA-182 | Updated the Go standard library in the hosted models image to address vulnerability CVE-2026-42501. |
| IAA-206 | Updated Spring AI chat client and model dependencies across Agentic SRE service images to address vulnerability CVE-2026-41712. |
| IAA-207 | Updated the Spring AI chat client across Agentic SRE service images to address vulnerability CVE-2026-41713. |
Agentic SRE Beta 0.3.0 Copied
Released: 6 May 2026 Beta
Agentic SRE Beta app 0.3.0 is a maintenance release focused on stability and dependency updates for ITRS Analytics Platform 2.18.0. It also improved overall reliability and stability, including a fix for a chat UI issue where settings could repeatedly be saved when no LLM was configured, which could cause the browser to become unresponsive.
Agentic SRE Beta 0.2.0 Copied
Released: 1 April 2026 Beta
Release highlights Copied
The following highlights summarize what is included in this release:
- ITRS Analytics Agentic SRE Beta app 0.2.0 introduces usability and control improvements, including:
- stronger role-based access control (RBAC) for protected admin operations;
- the ability to stop a request while it is still processing; and
- a Test button in the LLM editor to help admins validate model behavior more easily.
- Reliability and UX consistency were improved by work on request cancellation behavior, clearer backend error propagation to the UI, and persistence and functional test fixes.
- Platform and architecture improvements were added, including architecture standardization and migration to the newer Web Platform Micro-Frontend (MFE) core.
- Operational and security hardening included dependency CVE fixes and adding standard Kubernetes labels to workloads.
Disclaimer
The information contained in this document is for general information and guidance on our products, services, and other matters. It is only for information purposes and is not intended as advice which should be relied upon. We try to ensure that the content of this document is accurate and up-to-date, but this cannot be guaranteed. Changes may be made to our products, services, and other matters which are not noted or recorded herein. All liability for loss and damage arising from reliance on this document is excluded (except where death or personal injury arises from our negligence or loss or damage arises from any fraud on our part).