---
title: 'Changelog: Release'
canonical: 'https://docs.nullplatform.com/changelog/tags/release'
description: Stable releases of nullplatform components
---
# Changelog: Release

- [Scopes 1.20.0](https://docs.nullplatform.com/changelog/scopes-1.20.0.md) (2026-11-04): One Kubernetes namespace per nullplatform namespace, plus fixes to where scopes look for pods and to the order deployments apply their manifests.
- [CLI 2.13.0](https://docs.nullplatform.com/changelog/cli-2.13.0.md) (2026-11-02): np login --np-url now asks you to approve the CLI in the browser and runs on a personal access token you control, and np build start --format json is parseable again on pull requests.
- [Logs controller 1.7.1](https://docs.nullplatform.com/changelog/logs-controller-1.7.1.md) (2026-11-02): Updates fluent-bit to 5.1.5 and the metrics getter's dependencies.
- [Scopes 1.19.0](https://docs.nullplatform.com/changelog/scopes-1.19.0.md) (2026-10-29): Additional Istio gateways, a shell-free preStop, AKS Workload Identity for Azure DNS, and several Kubernetes scope fixes.
- [CLI 2.12.2](https://docs.nullplatform.com/changelog/cli-2.12.2.md) (2026-10-28): Makes np login session renewal safe when several commands run at once, and says why when a renewal fails.
- [CLI 2.12.1](https://docs.nullplatform.com/changelog/cli-2.12.1.md) (2026-10-27): Covers every inbox rule action from np communications, adds --dry-run to rule and emission commands, and fixes pagination in two list commands.
- [Logs controller 1.7.0](https://docs.nullplatform.com/changelog/logs-controller-1.7.0.md) (2026-10-27): The logs controller moves from Ubuntu to nullplatform's patched Alpine base, with fluent-bit 5.1 and Node.js 24, and ships signed.
- [Traffic manager 1.9.0](https://docs.nullplatform.com/changelog/traffic-manager-1.9.0.md) (2026-10-27): The traffic manager now builds on nullplatform's patched Alpine base with nginx from nginx.org, ships signed, and is tagged with a v prefix.
- [Agent 0.15.0](https://docs.nullplatform.com/changelog/agent-0.15.0.md) (2026-10-26): Ships the nullplatform CLI 2.12.0 and lets the nonroot image run on OpenShift with the arbitrary UID its restricted SCC assigns.
- [AWS AMI 2026-10-26](https://docs.nullplatform.com/changelog/ami-2026-10-26.md) (2026-10-26): New EC2 scope AMIs (null-runtime-94 and null-runtime-arm-24) that stop trusting the compromised eMudhra intermediate CA.
- [CLI 2.12.0](https://docs.nullplatform.com/changelog/cli-2.12.0.md) (2026-10-26): Manage communications from the CLI, filter dimension values by dimension, and pick up Go and dependency security updates.
- [Logs controller 1.6.4](https://docs.nullplatform.com/changelog/logs-controller-1.6.4.md) (2026-10-20): A maintenance release that updates the metrics getter's dependencies.
- [Logs controller 1.6.3](https://docs.nullplatform.com/changelog/logs-controller-1.6.3.md) (2026-10-06): Updates fluent-bit to 5.1.3 and stops Lua filter errors on records with missing fields.
- [Agent 0.13.0](https://docs.nullplatform.com/changelog/agent-0.13.0.md) (2026-09-30): Ships the nullplatform CLI 2.11.0, renames the no-TLS worker mode to plaintext, and updates Go and dependencies to clear known vulnerabilities.
- [CLI 2.11.0](https://docs.nullplatform.com/changelog/cli-2.11.0.md) (2026-09-30): Push assets to ECR by assuming an IAM role instead of static access keys, reach every provider of a category from build-context, and call any API path from the MCP server with np_request.
- [Scopes 1.18.0](https://docs.nullplatform.com/changelog/scopes-1.18.0.md) (2026-09-29): Kubernetes objects can get readable names, scheduled tasks can run once on deploy, and several Kubernetes scope fixes.
- [Logs controller 1.6.2](https://docs.nullplatform.com/changelog/logs-controller-1.6.2.md) (2026-09-24): Logs are no longer lost while the logs controller restarts, fluent-bit is pinned, and image tags now carry a v prefix.
- [Scopes 1.17.0](https://docs.nullplatform.com/changelog/scopes-1.17.0.md) (2026-09-11): Turning the health check off now really removes the probes, and scopes that combine a custom domain with additional ports deploy again.
- [Traffic manager 1.8.1](https://docs.nullplatform.com/changelog/traffic-manager-1.8.1.md) (2026-09-10): A security patch: nginx 1.30.4 on Alpine 3.24 and upgraded curl and util-linux clear 27 high-severity vulnerabilities.
- [Scopes 1.16.2](https://docs.nullplatform.com/changelog/scopes-1.16.2.md) (2026-09-08): Scheduled task scopes run correctly from the published scope image, which now also carries the AWS CLI, and every scope image is registered under its release tag.
- [Scopes 1.16.3](https://docs.nullplatform.com/changelog/scopes-1.16.3.md) (2026-09-08): AWS scopes get the load balancer permissions they were being denied, and deployment logs no longer carry a spurious error when tracing is off.
- [Logs controller 1.6.1](https://docs.nullplatform.com/changelog/logs-controller-1.6.1.md) (2026-09-07): Fixes aggregated metrics being dropped with Prometheus, and with CloudWatch when a pod has no log stream annotation.
- [Agent 0.11.1](https://docs.nullplatform.com/changelog/agent-0.11.1.md) (2026-09-04): The image ships the updated nullplatform CLI.
- [CLI 2.10.1](https://docs.nullplatform.com/changelog/cli-2.10.1.md) (2026-09-04): Builds triggered from a pull request on GitHub Actions now record the real commit and branch, and build-context applies the service's dimensions when provider categories are requested.
- [AWS AMI 2026-09-03](https://docs.nullplatform.com/changelog/ami-2026-09-03.md) (2026-09-03): New EC2 scope AMIs (null-runtime-92 and null-runtime-arm-22) with nginx 1.30.4, which fixes six CVEs, and a pinned nullplatform agent.
- [Agent 0.11.0](https://docs.nullplatform.com/changelog/agent-0.11.0.md) (2026-09-02): GitHub App authentication for command repositories, configurable per organization, plus an updated embedded CLI and dependency updates that clear known vulnerabilities.
- [CLI 2.10.0](https://docs.nullplatform.com/changelog/cli-2.10.0.md) (2026-09-02): Install the nullplatform MCP server into your coding agent with np mcp install, browse the AI skill catalog with np skills list, register artifact revisions with the new np artifact suite, archive services and links, and trace scope workflow runs.
- [Scopes 1.16.1](https://docs.nullplatform.com/changelog/scopes-1.16.1.md) (2026-09-02): Kubernetes scopes now show step-by-step progress in the dashboard, failed deployments explain the reason on the step that failed, and the traffic manager version can be pinned for the whole cluster.
- [CLI 2.9.0](https://docs.nullplatform.com/changelog/cli-2.9.0.md) (2026-08-31): Install the nullplatform MCP server into your coding agent with np mcp install, get the full request body from --help on every command, and list every application you can see without a filter.
- [Logs controller 1.6.0](https://docs.nullplatform.com/changelog/logs-controller-1.6.0.md) (2026-08-12): Choose, per cluster, which pod annotation routes logs to CloudWatch and Datadog.
- [Scopes 1.15.1](https://docs.nullplatform.com/changelog/scopes-1.15.1.md) (2026-08-12): gRPC additional ports on Kubernetes scopes leave the declared port free for the application, ports above 55535 are rejected at deploy time, and gRPC ports now require traffic-manager 1.7.0 or newer.
- [CLI 2.8.1](https://docs.nullplatform.com/changelog/cli-2.8.1.md) (2026-08-10): A patch release: np login no longer panics when a default API key is configured, and the binary is built with Go 1.26.5 to clear two CVEs.
- [Scopes 1.15.0](https://docs.nullplatform.com/changelog/scopes-1.15.0.md) (2026-08-10): Finalize and rollback on blue-green Kubernetes scopes wait for the load balancer to drain before deleting the old deployment, and the main traffic manager port is configurable for clusters that block pod-to-pod traffic on port 80.
- [Agent 0.9.0](https://docs.nullplatform.com/changelog/agent-0.9.0.md) (2026-08-03): Security updates for the control plane agent, including a Go runtime upgrade and patched x/net, x/text, and x/crypto modules.
- [CLI 2.8.0](https://docs.nullplatform.com/changelog/cli-2.8.0.md) (2026-08-03): Browser SSO login, username and password login for organizations without SSO, a new np query command for the data lake, CI context in builds, and security updates.
- [Scopes 1.14.0](https://docs.nullplatform.com/changelog/scopes-1.14.0.md) (2026-08-03): Live deployment progress for Kubernetes scopes, a new Kill instance action for scheduled tasks, and clearer errors when triggering jobs on undeployed scopes.
- [Traffic manager 1.8.0](https://docs.nullplatform.com/changelog/traffic-manager-1.8.0.md) (2026-07-29): WebSocket and server-sent events are proxied unbuffered, and request header buffers can be tuned to avoid "Request Header Or Cookie Too Large" errors.
- [Logs controller 1.5.0](https://docs.nullplatform.com/changelog/logs-controller-1.5.0.md) (2026-07-22): Datadog application logs are routed per pod by annotation, the same way CloudWatch logs already are.
- [AWS AMI 2026-07-17](https://docs.nullplatform.com/changelog/ami-2026-07-17.md) (2026-07-17): New EC2 scope AMIs (null-runtime-91 and null-runtime-arm-21) that let a scope run without the nginx sidecar.
- [Logs controller 1.4.2](https://docs.nullplatform.com/changelog/logs-controller-1.4.2.md) (2026-07-15): Fixes two high-severity vulnerabilities in the metrics getter's dependencies.
- [Traffic manager 1.7.1](https://docs.nullplatform.com/changelog/traffic-manager-1.7.1.md) (2026-07-15): A security patch that upgrades OpenSSL, libexpat and libxml2 to fix CVE-2026-45447, CVE-2026-45186 and CVE-2026-6732.
- [Scopes 1.13.0](https://docs.nullplatform.com/changelog/scopes-1.13.0.md) (2026-07-10): AWS credentials via assume role, automatic ALB creation on scope create, nodeSelector for scheduled tasks, and a concurrency fix for IAM role creation.
- [AWS AMI 2026-07-02](https://docs.nullplatform.com/changelog/ami-2026-07-02.md) (2026-07-02): New EC2 scope AMIs (null-runtime-89 and null-runtime-arm-20) whose nginx handles many more concurrent connections and patches libssh2.
- [AWS AMI 2026-06-18](https://docs.nullplatform.com/changelog/ami-2026-06-18.md) (2026-06-18): New EC2 scope AMIs (null-runtime-88 and null-runtime-arm-19) that bring back SSM Session Manager access to your instances.
- [CLI 2.7.0](https://docs.nullplatform.com/changelog/cli-2.7.0.md) (2026-06-08): Read deleted accounts with np account read, find entity hooks from the CLI, and fixes for kebab-case flags and long script output in service actions.
- [Scopes 1.12.0](https://docs.nullplatform.com/changelog/scopes-1.12.0.md) (2026-06-08): File parameters with binary values, private Route53 zones with external_dns, configurable HTTP port, independent CPU and memory limits, and richer Diagnose evidence.
- [Traffic manager 1.7.0](https://docs.nullplatform.com/changelog/traffic-manager-1.7.0.md) (2026-05-27): gRPC listeners start again, nginx sizes its workers from the pod's CPU limit, and gRPC buffers scale with the pod's memory limit.
- [Logs controller 1.4.1](https://docs.nullplatform.com/changelog/logs-controller-1.4.1.md) (2026-05-21): A maintenance release with documentation fixes.
- [Traffic manager 1.6.1](https://docs.nullplatform.com/changelog/traffic-manager-1.6.1.md) (2026-05-21): A maintenance release with documentation fixes only and no changes to the traffic manager's behavior.
- [Logs controller 1.4.0](https://docs.nullplatform.com/changelog/logs-controller-1.4.0.md) (2026-05-18): Turn off application log shipping while keeping metrics, and get container details on Datadog metrics.
- [AWS AMI 2026-05-14](https://docs.nullplatform.com/changelog/ami-2026-05-14.md) (2026-05-14): New EC2 scope AMIs (null-runtime-85 and null-runtime-arm-16) with nginx 1.30.1, which fixes CVE-2026-42945.
- [Traffic manager 1.6.0](https://docs.nullplatform.com/changelog/traffic-manager-1.6.0.md) (2026-05-14): The traffic manager moves to the nginx 1.30 stable line (1.30.1 on Alpine).
- [Logs controller 1.3.1](https://docs.nullplatform.com/changelog/logs-controller-1.3.1.md) (2026-05-13): A maintenance release that carries the path-to-regexp and picomatch security fixes from 1.3.0.
- [Traffic manager 1.5.0](https://docs.nullplatform.com/changelog/traffic-manager-1.5.0.md) (2026-05-13): The traffic manager can route to an application port other than 8080, which configurable HTTP ports for Containers scopes rely on.
- [Logs controller 1.2.0](https://docs.nullplatform.com/changelog/logs-controller-1.2.0.md) (2026-05-05): A maintenance rebuild that refreshes the base image and dependencies.
- [Logs controller 1.3.0](https://docs.nullplatform.com/changelog/logs-controller-1.3.0.md) (2026-05-05): Fixes two denial-of-service vulnerabilities in the metrics getter's dependencies.
- [Traffic manager 1.4.0](https://docs.nullplatform.com/changelog/traffic-manager-1.4.0.md) (2026-05-05): A maintenance rebuild with refreshed base image and OS packages, and no behavior changes.
- [AWS AMI 2026-04-30](https://docs.nullplatform.com/changelog/ami-2026-04-30.md) (2026-04-30): New EC2 scope AMIs (null-runtime-84 and null-runtime-arm-15) that mitigate the CVE-2026-31431 Linux kernel privilege escalation.
- [Agent 0.8.0](https://docs.nullplatform.com/changelog/agent-0.8.0.md) (2026-04-16): Security updates for the control plane agent, including a Go runtime upgrade and patched go-git and cloudflare-circl dependencies.
- [CLI 2.6.0](https://docs.nullplatform.com/changelog/cli-2.6.0.md) (2026-04-16): A new np upgrade command to keep the CLI current, np browse to navigate your nullplatform entities, and a new flag to list all entities at once.
- [Scopes 1.11.0](https://docs.nullplatform.com/changelog/scopes-1.11.0.md) (2026-04-16): ALB capacity validation, support for balancing multiple ALBs, scope configurations, ALB metrics publishing, and configurable traffic manager resources.
- [AWS AMI 2026-04-01](https://docs.nullplatform.com/changelog/ami-2026-04-01.md) (2026-04-01): New EC2 scope AMIs (null-runtime-83 and null-runtime-arm-14) that patch snapd and the Prometheus exporter, and remove the SSM agent on first boot.
- [Agent 0.7.0](https://docs.nullplatform.com/changelog/agent-0.7.0.md) (2026-03-20): Command deduplication, runtime version management with mise in the agent image, an error logging fix, and a Go runtime update.
- [CLI 2.5.0](https://docs.nullplatform.com/changelog/cli-2.5.0.md) (2026-03-19): New np provider specification commands to create, update, and delete provider specifications, plus fixes for provider listing and service actions.
- [Traffic manager 1.3.1](https://docs.nullplatform.com/changelog/traffic-manager-1.3.1.md) (2026-03-10): A security patch: nginx no longer reveals its version, and the image picks up fixes for CVE-2026-22184 and CVE-2026-25646.
- [AWS AMI 2026-03-09](https://docs.nullplatform.com/changelog/ami-2026-03-09.md) (2026-03-09): New EC2 scope AMIs (null-runtime-82 and null-runtime-arm-13) with patched containerd, Docker Compose and nginx.
- [Logs controller 1.1.0](https://docs.nullplatform.com/changelog/logs-controller-1.1.0.md) (2026-02-12): A leaner Ubuntu 24.04 image with OS and dependency security updates applied at build time.
- [Traffic manager 1.3.0](https://docs.nullplatform.com/changelog/traffic-manager-1.3.0.md) (2026-02-12): The first versioned traffic manager image, built on nginx 1.29.4 on Alpine with refreshed base packages.
- [Agent 0.6.0](https://docs.nullplatform.com/changelog/agent-0.6.0.md) (2026-02-11): A security release for the control plane agent, resolving known vulnerabilities in its dependencies.
- [Scopes 1.10.0](https://docs.nullplatform.com/changelog/scopes-1.10.0.md) (2026-01-14): Configure the traffic manager nginx through a configmap, override the Kubernetes namespace per scope, and get better Diagnose checks.
- [CLI 2.4.2](https://docs.nullplatform.com/changelog/cli-2.4.2.md) (2026-01-09): A patch release fixing empty request bodies on retries, plus a Go runtime security update.
