Mar 12, 2026 · @lava
We upgraded Python dependencies and added system-level package upgrades to the Docker images to address known vulnerabilities.
Mar 11, 2026 · @realllydan
We fixed an issue where switching away from a pipeline that has the Insights tab available to one that does not could leave the tab selection in an invalid state.
]]>Mar 10, 2026 · @lava
The app container now supports a PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT environment variable that overrides the existing PUBLIC_WEBSOCKET_GATEWAY_ENDPOINT for calls in the app backend. This allows configuring different endpoints when the frontend and backend live in different networks.
Mar 10, 2026 · @realllydan
The pipeline detail modal now includes an experimental Insights tab that visualizes per-operator backpressure, helping users identify bottlenecks in their pipelines. This tab is only available for pipelines running on the experimental new executor.
Mar 10, 2026 · @lava
We fixed an issue where ephemeral nodes were causing the frontend to fail to render or be displayed with incorrect connection status.
]]>Mar 5, 2026 · @lava
When you click a deep link in Tenzir Platform but aren't logged in, you're now redirected to your original destination after signing in, instead of landing on the home page.
Feb 18, 2026 · @gitryder
We improved how the nodes list loads, making dependent views feel faster and more responsive across the platform.
Feb 27, 2026 · @gitryder
We fixed an issue where profile images from Gravatar and Microsoft accounts were blocked by the content security policy, causing broken or missing avatars.
Feb 27, 2026 · @gitryder
We fixed an issue where the diagnostics pane could show diagnostics from a different pipeline than the one currently open in the detail modal.
Feb 18, 2026 · @gitryder
We fixed an issue where the context list could appear in a random order when no search was active, causing items to jump around. The list now uses a stable alphabetical order so it stays consistent and easier to interact with.
Feb 18, 2026 · @gitryder
We fixed an issue where opening a pipeline link for a workspace you don’t have access to would log you out. You are now redirected to the access page where you can open the link in your default workspace.
]]>Feb 18, 2026 · @gitryder
We improved the clarity and usability of Explorer charts. Legends are now collapsible, easier to read, and support filtering series directly. Pie chart legends adapt better to available space, and tooltips provide clearer information.
We also expanded the chart color palette for better visual distinction between series, fixed bar chart x-axis labels overlapping when there are many data points, and refined chart layout and behavior for a smoother overall experience.
Feb 18, 2026 · @gitryder
Resolved an issue where your Google profile picture did not appear in the workspace switcher. The image now loads and displays correctly.
Feb 17, 2026 · @lava
Fixed a bug where the static workspace synchronization used stale loop variables during cleanup, causing stale workspaces to persist and the last configured workspace to be incorrectly deleted.
Feb 17, 2026 · @gitryder
We fixed an issue where pressing ESC to close a pipeline detail view caused the pipeline list to stop responding to clicks.
]]>Feb 17, 2026 · @gitryder
We updated the Platform's underlying framework dependencies to include their latest security fixes.
]]>Feb 10, 2026 · @lava
We upgraded pnpm to 9.15.0 in the frontend Docker image to address CVE-2024-53866.
]]>You can now click on the Ingress or Egress legend item to isolate that series in the activity chart. Clicking again shows both series, making it easier to analyze each metric when lines overlap.
Feb 6, 2026 · @gitryder
We added a toggle in the Explorer table Inspector that lets you wrap lines for easier reading.
We now display the current platform version at the bottom of the workspace switcher dropdown,️ making it easier to always see which version you’re on.
Jan 28, 2026 · @gitryder · #38
We added sorting for the Live Activity column in the pipelines table, so you can easily order pipelines by their activity level.
Jan 28, 2026 · @gitryder · #29
We unified the Available and Installed library tabs into a single view, so you can see which packages are installed without switching tabs. You can also uninstall packages directly from the same page.
Feb 9, 2026 · @lava
We fixed a bug in the Inspector where strings containing backslashes were not displayed correctly. Backslashes were not being escaped in TQL string rendering. For example, a string like Hello \World\ was previously rendered as "Hello \World\" instead of "Hello \\World\\". The fix ensures backslashes are properly escaped when displayed.
We fixed an issue where the workspace switcher dropdown did not open on the pipeline detail page.
Fixed a bug that could leave users with a stale user key in their session, causing authentication failures. The platform now proactively checks for expired user keys and refreshes them automatically.
]]>Jan 22, 2026 · @lava
The platform frontend now supports configurable response headers and Content Security Policy (CSP) for standalone deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_DEFAULT=true to enable default security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy, Cross-Origin-Resource-Policy). Use TENZIR_PLATFORM_UI_RESPONSE_HEADERS_DEFAULT with a JSON object to override with custom headers.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_HSTS=true to enable HTTP Strict Transport Security for HTTPS deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_CSP=true to enable Content Security Policy, which helps prevent XSS and other injection attacks.
Jan 21, 2026 · @gitryder · #19
We improved how pipeline details load, making the view faster than before when navigating between pipelines. We also added a close button next to the overflow menu on the right so you can quickly exit a pipeline while browsing pipeline details.
Jan 20, 2026 · @lava
Authentication tokens (idToken and userKey) are now stored in the server-side session database instead of browser cookies. This improves security by keeping sensitive tokens accessible only via the session cookie identifier, preventing direct client-side access to authentication credentials.
Jan 19, 2026 · @lava
The seaweed S3 storage component now supports an optional Caddy reverse proxy that improves S3 error handling. Set TENZIR_ENABLE_CADDY=true to enable it. The reverse proxy intercepts 404 responses and returns proper S3-style error messages.
Jan 21, 2026 · @gitryder · #37
We now hide technical error details in error messages. You can click "Show error details" to expand them anytime, and use the copy button to share with support.
Jan 26, 2026 · @lava
Fixed a potential infinite hang in the Tenzir UI that could be triggered by a rare race condition where the Tenzir Node returned duplicate pipeline ids.
Jan 21, 2026 · @gitryder · #19
We fixed an issue where deleting a pipeline could cause the interface to become unresponsive.
]]>You can now use HashiCorp Vault as an external secret store for your workspaces. The integration supports token and AppRole authentication methods, and works with the KV v2 secrets engine. Add a Vault secret store via the CLI:
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--token=<token>
Or with AppRole authentication (recommended for production):
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--role-id=<id> --secret-id=<id>
The --mount option specifies the path to a KV v2 secrets engine. For Vault
Enterprise, use --namespace to specify the namespace. Vault secrets are
returned as JSON by default. Append a :key suffix to retrieve a specific field
as a string, for example, secret("database:password").
Dec 22, 2025 · @lava
When using a Sovereign Edition instance of the Tenzir Platform with a custom Tenzir Gateway URL, the "Other" tab now displays the gateway endpoint for easy copying.
]]>Dec 16, 2025 · @lava
We switched the docker images used by our example setups from one combined tenzir/platform image for both the Tenzir Platform API and the Tenzir Gateway to use separate images tenzir/platform-api and tenzir/platform-gateway.
⚠️ NOTE: We continue building and uploading the combined tenzir/platform image, although we recommend switching to the new images. Due to an internal CI issue, for versions v1.24.0 and v1.25.0 it is necessary to change the configured command from tenant_manager/* to platform_api/*, for example tenant_manager/rest/server/local.py becomes platform_api/rest/server/local.py. We recommend skipping these versions if possible.
Dec 17, 2025 · @gitryder
The node selector now remembers your last selected node when navigating between pages. Previously, it would reset to the default node unexpectedly.
Dec 17, 2025 · @gitryder
We fixed an issue where negative durations did not display correctly in the app. They now render as expected.
Dec 11, 2025 · @gitryder
We fixed an issue where the footer in the pinned package drawer could become hidden. The layout now adjusts correctly so the install button always stays visible.
]]>Dec 17, 2025 · @lava
Add a new TENZIR_PLATFORM_REQUIRE_CLIENT_CERTS environment variable that, when set to true, requires connecting clients to present a valid certificate signed by one of the CAs specified in TLS_CAFILE.
Dec 10, 2025 · @lava
The Tenzir Gateway now understands the new TENZIR_PLATFORM_REQUIRE_CLIENT_CERTS environment
variable that, when set to true, requires connecting clients to present a valid certificate
signed by one of the CAs specified in TLS_CAFILE.
Dec 17, 2025 · @gitryder
Previously, the total ingress and egress metrics could show incorrect values after reloading the page. They now correctly display data for the last 24 hours.
]]>Dec 17, 2025 · @gitryder
We fixed an issue where dashboard cells with no fixed node ID sometimes did not render. Those cells now display correctly using sensible fallbacks.
]]>Dec 17, 2025 · @gitryder
We replaced text labels with icons for types in the Explorer table header, giving it a cleaner, more compact look. You can hover over any icon to see the full type name.
Dec 17, 2025 · @lava
The docker compose example stacks now add the correct CORS setting for the upload and download endpoints by default.
Dec 17, 2025 · @gitryder
The editor now includes a shortcuts help section that shows useful keyboard shortcuts at a glance. You can open it by clicking the info button next to the copy pipeline link button.
Dec 17, 2025 · @lava
To conform with best practices, we updated the tenzir-seaweed image to use a non-root user by default.
NOTE: This is a breaking change due to the updated permissions of the seaweed data volume.
If you have an existing docker compose stack, either manually specify the root user in your docker-compose.yaml:
services:
seaweed:
user: root
Or run a one-time command after upgrading to change the permissions of the seaweed data volume:
docker compose run --user root --entrypoint /bin/sh seaweed
$ chown -R seaweed:seaweed /var/lib/seaweedfs
Dec 17, 2025 · @gitryder
We fixed an issue that caused the pipeline detail page to show an incorrect background color.
Dec 17, 2025 · @lava
Fixed an issue that could lead to statically configured dashboards not being shown on the Dashboards page.
]]>Dec 17, 2025 · @gitryder
We refreshed the navbar with subtle visual updates, including rounded edges and other minor styling adjustments for a cleaner look.
Dec 17, 2025 · @gitryder
We made the Explorer table more compact, allowing you to see more rows within the same space.
Dec 17, 2025 · @lava
The new optional jwks_uri field for the TENZIR_PLATFORM_OIDC_TRUSTED_AUDIENCES configuration can be used to support for identity providers that don't publish discovery documents.
For example, when using Google IAP, a configuration value like this can be used:
{
"issuer": "https://cloud.google.com/iap",
"audiences": ["your-audience"],
"jwks_uri": "https://www.gstatic.com/iap/verify/public_key-jwk"
}
Dec 17, 2025 · @gitryder, @jachris
We fixed an issue where some pipelines in the detailed activity chart were incorrectly labeled as “Ingress/Egress.” They now show the correct direction as “From node” or “To node.”
Dec 17, 2025 · @gitryder
We fixed an issue where text near the bottom of the editor was sometimes hidden, making all content clearly visible again.
]]>Dec 17, 2025 · @lava
We added a new CloudFormation template for Sovereign Edition customers who are interested in quickly setting up a fully AWS-native platform instance.
Dec 17, 2025 · @gitryder
We added a new button next to the Examples button in the editor that lets you copy a link to the current pipeline, just like in the history pane.
Dec 17, 2025 · @gitryder
We made browsing the library much smoother. Package details now load faster, the app prefetches data in the background to reduce wait times, and you can manually refresh to get the latest information anytime.
Dec 17, 2025 · @gitryder
We fixed issues that caused pipeline updates to sometimes fail or not show clearly. Diagnostics now appear directly in the editor instead of under the chart, making them easier to spot while editing.
Dec 17, 2025 · @gitryder
We fixed an issue where timestamps overlapped on the x-axis of the detailed activity chart on some widths, making them hard to read.
]]>Dec 17, 2025 · @gitryder
We added visual indicators for keyboard shortcuts to all buttons in modals and other places that support them, making it easier to discover and use shortcuts.
Dec 17, 2025 · @gitryder
User-defined operators (UDOs) included in a library package now appear in the package’s About section, so you can easily see which UDOs the package contains.
Dec 17, 2025 · @dit7ya, @gitryder
We now render blobs consistently in the inspector and the table. The inspector shows blob literals using the b"..." notation, making it easier to work with them.
Dec 17, 2025 · @jachris
Big numbers (those exceeding 9007199254740991) in records and lists no longer
cause the data table to fail rendering.
Dec 17, 2025 · @gitryder
We fixed an issue where running a pipeline from your history did not reset your position to the newest entry. Your view now updates correctly.
]]>Dec 17, 2025 · @lava
Secrets are now enabled by default in the 'localdev' example deployment of the Tenzir Platform.
Dec 17, 2025 · @lava
Fixed a bug that caused static workspace tokens to include stray b'...' characters, resulting in invalid node tokens.
Dec 17, 2025 · @lava
The Tenzir Platform CLI was calling an outdated version of the secret store API, leading to unintended 404 errors. The CLI has been updated to use the latest version now.
Dec 17, 2025 · @lava
Fixed an issue that could cause the Tenzir Platform API to return a 500 internal server error for certain parameters.
]]>Dec 17, 2025 · @gitryder
Pipelines now have their own dedicated detail pages that you can access by clicking on any pipeline name. This gives you a comprehensive view of your pipeline in a full-screen interface designed for deep inspection and configuration.
Dec 17, 2025 · gitryder, tobim
The Tenzir Platform now supports the upcoming package format changes in the Tenzir Library, which will be introduced in the near future.
Dec 17, 2025 · @weh
Update the postgres version to 17.6 in the example docker-compose.yaml files.
Dec 17, 2025 · @gitryder
We now show both the current version and the latest available version when an update is available or required. For example, in the node selector you see your current version alongside the latest release version.
Dec 17, 2025 · @dit7ya
Dashboard cells that produce no data no longer show an infinite loading animation.
Dec 17, 2025 · @jachris
The detailed pipeline activity charts for the 15min range previously showed spikes even when the underlying data flow was steady. Now, the activity chart should correctly follow the actual data flow.
Dec 17, 2025 · gitryder, dit7ya
This release also contains many additional bugfixes and improvements to the Tenzir UI: