> For the complete documentation index, see [llms.txt](https://docs.labs.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.labs.ai/deployment-and-infrastructure/release-notes-6.0.2.md).

# Release Notes — 6.0.2

**Release Date:** April 2026\
**Platform:** Java 25 · Quarkus 3.34.5 · langchain4j 1.13.0

> EDDI 6.0.2 is a **security hardening and quality assurance** release. It delivers comprehensive security fixes, a 2.5× increase in test coverage, a fully rewritten Admin UI, and a hardened CI/CD pipeline — bringing the platform to OpenSSF Silver compliance readiness.

***

## 🔐 Security Hardening

### SSRF Prevention

* **SafeHttpClient** — New centralized, SSRF-safe HTTP client with per-hop redirect validation. All LLM tools (WebScraper, PdfReader, WebSearch, Weather) migrated from inline `HttpClient` to `@Inject SafeHttpClient`
* **UrlValidationUtils** — Extended to block IPv6 ULA, CGNAT, IPv4-mapped IPv6, multicast, and unspecified address ranges
* **Redirect hardening** — Manual redirect loop (max 5 hops) with same-origin/cross-origin header policies. Overall wall-clock timeout across redirect chains

### Vault & Encryption

* **Per-deployment random KEK salt** — Each EDDI instance now generates a unique 16-byte salt for key derivation (was hardcoded). Backward-compatible: existing deployments auto-detect and use legacy salt
* **KEK rotation salt migration** — `rotateKek()` now properly migrates from legacy to new salt during key rotation
* **API key auto-vaulting** — Agent setup automatically stores API keys in the Secrets Vault, persisting only vault references (`${vault:...}`) in MongoDB

### Authentication & Authorization

* **AuthStartupGuard** — Fail-loud production auth check: EDDI refuses to start if OIDC is disabled in production (escape hatch: `eddi.security.allow-unauthenticated=true`)
* **RBAC on 7 REST endpoints** — Added `@RolesAllowed` annotations to previously unprotected admin/user endpoints
* **Fine-grained permit rules** — Static assets GET/HEAD only, health endpoint GET only, Slack webhook POST only (was blanket permit for all methods)

### HTTP & Protocol

* **Security response headers** — `X-Content-Type-Options`, `X-Frame-Options`, `Referrer-Policy`, `Permissions-Policy`, `Content-Security-Policy`
* **Qute strict rendering** — Templates fail loudly on missing variables in production *(since reverted — strict rendering is now off in every profile and a missing property renders as an empty string)*
* **Jackson 3.x ban** — `maven-enforcer-plugin` rule prevents accidental introduction via transitive dependencies
* **Log injection prevention** — `sanitizeForLog()` applied to all user-controlled identifiers in log statements

### Container & Docker

* **MongoDB 6.0 → 7.0.14** (pinned), with authentication enabled
* **MongoDB port binding** — `127.0.0.1:27017` (was all interfaces)
* **Docker healthchecks** added for both EDDI and MongoDB
* **Base image** — Pinned to immutable digest for supply-chain integrity
* **CVE-2026-4424** remediated via digest pin

***

## 🧪 Testing & Quality (2,400 → 5,100+ tests · >80% coverage)

### Test Suite Expansion

* **5,100+ total tests** (up from \~2,400 in 6.0.1) — 4,500+ unit tests, 550+ integration tests
* **>80% combined test coverage** (unit + integration tests merged) — instruction, method, and class coverage all exceed 80%
* **Coverage-guided fuzz testing** — Jazzer v0.30.0 with harnesses for `PathNavigator` and `MatchingUtilities` (security-critical parsers)

### Test Infrastructure Improvements

* **Testcontainers ITs for all datastore adapters** — MongoDB (75 tests) and PostgreSQL (57 tests) covering every persistence adapter
* **WireMock-based API tests** — Config-driven agent ITs for LLM, HTTP calls, PropertySetter, and complex rules
* **JaCoCo two-tier gates** — Merged UT+IT coverage gate enforced in CI

***

## 📊 Observability & Monitoring (improved)

### OpenTelemetry Distributed Tracing

* Added per-task pipeline spans (`eddi.pipeline.task`) with `task.id`, `task.type`, `conversation.id`, `agent.id` attributes
* Backend-agnostic via OTLP protocol (Jaeger, Tempo, Datadog, Honeycomb)
* Auto-instrumented: REST endpoints, Vert.x HTTP, MongoDB
* Disabled by default — zero overhead in production without a collector

### ConversationCoordinator Hardening

* **Max-size limit** — Configurable `eddi.coordinator.max-active-conversations` (default 10,000) with backpressure rejection
* **Eager cleanup** — Empty queues removed on drain, preventing memory leaks from abandoned conversations
* **CAS loop race fix** — `submitInOrder` / `submitNext` race condition resolved with compare-and-swap loop

### Metrics & Dashboard

* Added **3 Micrometer gauges** — `active_conversations`, `queue_depth`, `total_processed`
* Added **pipeline task metrics** — `eddi.pipeline.task.duration` Timer + `eddi.pipeline.task.errors` Counter (tagged by `task.id/type`)
* Added **pre-built Grafana dashboard** — 14 panels across 5 rows (Coordinator, Tools, Vault, NATS, HTTP/JVM)
* Added **one-command monitoring stack** — `docker-compose.monitoring.yml` (Prometheus v3.4 + Grafana 11.6 + Jaeger 2.7)

***

## ⚡ Multi-Tenancy & Quota Enforcement (improved)

* **Atomic quota enforcement** — Fixed TOCTOU race condition in `TenantQuotaService`. Check+record merged into single `synchronized` block per tenant
* **Monthly cost reset** — Fixed bug where `monthlyCostUsd` accumulated indefinitely (now resets on UTC calendar month boundary)
* **Quota ordering fix** — Quota is now acquired AFTER all validation checks, preventing quota exhaustion from invalid requests
* **Metrics hygiene** — Quota counters no longer inflate when quotas are disabled

***

## 🔄 CI/CD Pipeline (improved)

### Security Scanning (6 new tools added)

| Tool                       | Purpose                                | Gating                  |
| -------------------------- | -------------------------------------- | ----------------------- |
| **Trivy image scan**       | OS-level CVEs in base image            | Blocks Docker push      |
| **CodeQL SAST**            | Static analysis (security-extended)    | SARIF → GitHub Security |
| **Gitleaks**               | Leaked secrets in git history          | Blocks build            |
| **CycloneDX SBOM**         | Software Bill of Materials (EU AI Act) | Artifact upload         |
| **ZAP API scan**           | Runtime misconfig, auth bypass         | Report-only             |
| **Security headers check** | Missing security headers               | Warning                 |

### Build & Release Hardening

* **Sigstore cosign** — Keyless OIDC container image signing on Docker Hub push
* **Red Hat preflight** — Certification check on push events (not just PRs)
* **Failsafe timeout** — 15-minute cap prevents CI hangs from Docker build failures
* **Unified CI pipeline** — GitHub Actions (compile → test → Docker build → Trivy → smoke test → ZAP → push → sign)

***

## 🖥️ EDDI Manager (improved)

The EDDI Manager was completely rewritten in 6.0.1 (React 19 + Vite + Tailwind CSS). Version 6.0.2 focuses on **stability, bug fixes, and UX polish**.

### 6.0.2 Improvements

* 🔧 **Studio editors fix** — Normalized `eddi://` prefix handling for pipeline extension types
* 📐 **Resizable panels** — Side panels in Studio are now drag-resizable
* 📝 **Snippet creation fix** — Name validation (`[a-z0-9_]+`) with auto-sanitization and real error messages
* 🔄 **Resilient version resolution** — Resource detail pages handle undefined versions gracefully
* 🐛 **9 bugs fixed** from comprehensive codebase audit (auth headers, version staleness, URI schemes, UX)
* 🏗️ **`pkg` → `wf/workflow` rename** — All variables and IDs aligned with backend terminology
* 🔒 **Cascade save hardening** — Prevented stale version context causing save failures
* 🧪 **16 new tests** — Cascade-save and resource-usage coverage

***

## 💬 Chat UI (improved)

### 6.0.2 Improvements

* 📎 **Attachment upload** — Added file upload support with multipart form submission
* 🔄 **SSE stream fix** — Fixed hang on `[DONE]` event that left connections open
* 🔐 **Security hardening** — Improved input sanitization, CSP compliance, HTTPS-only cookies
* ♿ **Accessibility** — Added ARIA labels, keyboard navigation, focus management
* 📖 **README overhaul** — Aligned with EDDI ecosystem documentation styling

***

## 🔧 Platform & Dependencies

| Component        | 6.0.1  | 6.0.2  |
| ---------------- | ------ | ------ |
| Java             | 25     | 25     |
| Quarkus          | 3.34.1 | 3.34.5 |
| langchain4j      | 1.13.0 | 1.13.0 |
| MongoDB (Docker) | 6.0    | 7.0.14 |
| WireMock         | —      | 3.13.2 |
| Jazzer (fuzz)    | —      | 0.30.0 |
| Testcontainers   | —      | 1.21.4 |

### Other Improvements

* **JDK 25 compatibility** — `--enable-native-access=ALL-UNNAMED` for JNA
* **WhiteSource/Mend false positive** — Removed 25 bloated HTML license files that triggered Bootstrap CVE flags; replaced with 13 clean SPDX plain-text licenses
* **Slack integration hardening** — Improved per-agent credentials, fixed dead retry logic, enterprise-grade error handling, Jackson JSON migration, TTL caches, graceful shutdown
* **Group conversation safety** — Added `maxTurns` safety cap preventing runaway multi-agent discussions

***

## 📚 Documentation (improved)

* **Architecture doc** — Added sections: Multi-Agent Orchestration, MCP Integration, Persistent Memory, Agent Sync
* **Project Philosophy** — Expanded from 7 → 9 Pillars (added Persistent Memory, Agent Portability)
* **Security Architecture** — Added SSRF 3-layer model, vault encryption model, auth decision matrix
* **Monitoring Guide** — Added metrics reference, tracing setup, 6 alerting rules, production checklist
* **Slack Integration Guide** — Updated with per-agent config, troubleshooting, building custom channels
* **\~6 MB stale docs purged** — Removed legacy GitBook assets, research dumps, implemented plans

***

## ⬆️ Upgrade Notes

### Breaking Changes

* **Production auth enforcement** — EDDI now refuses to start without OIDC in production mode. Set `eddi.security.allow-unauthenticated=true` to opt out
* **Docker Compose** — MongoDB now requires authentication. Copy `.env.example` → `.env` and set credentials
* **Security headers** — `X-Frame-Options: DENY` may break iframing EDDI's UI. Configure CSP if embedding is needed

### Migration

* **Vault salt** — Fully automatic. Existing deployments continue using legacy salt; new deployments get random salt. No operator action required
* **API keys** — Existing plaintext API keys in MongoDB continue to work. New keys created via Agent Father are auto-vaulted

### Recommended Actions

1. Set `EDDI_VAULT_MASTER_KEY` environment variable for production deployments
2. Configure OIDC/Keycloak for production auth
3. Review `.env.example` for new Docker Compose variables
4. Enable OpenTelemetry tracing with `docker-compose.monitoring.yml` for observability