https://changelog.steadybit.com/feeds/agent.xml 2026-08-05T00:00:00Z https://changelog.steadybit.com/#agent-2.4.2 2026-08-05T00:00:00Z <h3>Fix</h3> <ul> <li>Kubernetes API call metrics no longer grow a series per touched object: the <code>uri</code> tag of <code>k8s.api.call</code> now normalizes namespaces and object names for every path shape, not just pods and services under <code>/api/v1</code>.</li> <li>User info and query-string parameters (which can carry endpoint tokens) are dropped from extension-call OTEL spans, keeping only scheme, host, port and path.</li> </ul> <h3>Dependencies</h3> <ul> <li>Upgrade to Spring Boot 4.1 and update the remaining dependencies, including CVE fixes for logback (CVE-2026-13006) and Bouncy Castle.</li> </ul> https://changelog.steadybit.com/#agent-2.4.1 2026-07-27T00:00:00Z <h3>Improvement</h3> <ul> <li><strong>Experiment resiliency</strong> - A transient drop on the agent↔platform experiment channel no longer fails the experiment — the agent transparently resumes the conversation. Associated prometheus metric is <code>experiment_rsocket_resume_total</code>. (Requires Platform &gt;=2.8.1)</li> </ul> https://changelog.steadybit.com/#agent-2.4.0 2026-07-21T00:00:00Z <h3>New</h3> <ul> <li><strong>OOM-killer protection</strong> – The agent lowers its own <code>oom_score_adj</code> so the Linux OOM killer targets other processes first during memory-pressure experiments.</li> <li><strong>Compressed platform connection</strong> – RSocket permessage-deflate and gzipped HTTP responses reduce the bandwidth used between agent and platform.</li> </ul> <h3>Improvement</h3> <ul> <li>Dedicated heartbeat RSocket stream for experiment connections keeps them alive even under send-path congestion.</li> <li>Extension kit index fetching now uses ETags, avoiding re-downloads of unchanged indexes.</li> <li>Enabled additional discovery and attacks for <code>extension-gcp</code>.</li> </ul> <h3>Fix</h3> <ul> <li>Pending batched messages (e.g. action started/stopped events) are flushed before a pong timeout closes the connection, instead of being silently dropped.</li> <li>Action/preflight state checkpoint saving is now best-effort — a failed save no longer fails the execution.</li> <li>Windows: fixed extension registration and installer versioning, including a registry-watch race that could miss extension changes and a busy-spinning registry watcher.</li> </ul> <h3>Security</h3> <ul> <li>Prevented secret leakage in agent logs; the agent key also no longer appears in verbose MSI install logs.</li> <li>The bundled JRE download is verified against a pinned SHA-256 during the build.</li> </ul> <h3>Dependencies</h3> <ul> <li>Bundled runtime JRE updated to Zulu Java 25.</li> </ul> https://changelog.steadybit.com/#agent-2.3.10 2026-07-10T00:00:00Z <h3>Improvement</h3> <ul> <li>Extension communication now survives DNS outages during network attacks. Running Block Traffic / Block DNS on the node hosting the agent no longer breaks the agent’s calls to extensions once the DNS cache expires (previously caused action-start errors, failed checks, and discovered targets disappearing mid-attack).</li> <li>Added metrics for rollback failures.</li> </ul> <h3>Fix</h3> <ul> <li><strong>Security:</strong> Agent HTTP endpoints now default to loopback-only access. Debug, inventory, and other internal endpoints are no longer reachable remotely by default, except <code>/health</code> and <code>/prometheus</code>.</li> <li>A single malformed artifact, metric, or log message no longer fails the whole action — the bad item is skipped, the action continues.</li> <li>Preflight status polls canceled while executions are stopping are no longer reported as errors.</li> </ul> https://changelog.steadybit.com/#agent-2.3.9 2026-07-01T00:00:00Z <h3>Dependencies</h3> <ul> <li>Dependency Updates with CVE fixes</li> </ul> <h3>New</h3> <ul> <li>Add option to skip verification of TLS certificates - only for testing purposes!</li> </ul> https://changelog.steadybit.com/#agent-2.3.8 2026-06-16T00:00:00Z <h3>Dependencies</h3> <ul> <li>Dependency Updates with CVE fixes</li> </ul> https://changelog.steadybit.com/#agent-2.3.7 2026-05-27T00:00:00Z <h3>New</h3> <ul> <li>Support up to 64 action parameters</li> </ul> https://changelog.steadybit.com/#agent-2.3.6 2026-05-21T00:00:00Z <h3>New</h3> <ul> <li>Target grouping - the agent will add a <code>steadybit.group</code> attribute to all targets. The value will be <code>default</code> as long as there is no value reported by the extensions. All enrichment rules will also get an additional matcher for the <code>steadybit.group</code> attribute. References:<ul> <li><a href="https://github.com/steadybit/discovery-kit/blob/main/docs/reserved-target-attributes.md#steadybitgroup">https://github.com/steadybit/discovery-kit/blob/main/docs/reserved-target-attributes.md#steadybitgroup</a></li> <li><a href="https://github.com/steadybit/discovery-kit/blob/main/docs/target-enrichment.md#group-matching">https://github.com/steadybit/discovery-kit/blob/main/docs/target-enrichment.md#group-matching</a></li> </ul> </li> </ul> https://changelog.steadybit.com/#agent-2.3.5 2026-05-19T00:00:00Z <h3>Dependencies</h3> <ul> <li>Dependency updates, including CVE fixes.</li> </ul> https://changelog.steadybit.com/#agent-2.3.3 2026-04-17T00:00:00Z <h3>Fix</h3> <ul> <li>Windows installer to correctly detect system architecture on older windows versions.</li> </ul>