PRIVATE_JWT_FROM_HEADER option were redirected to the login page when opening a workspace. Header-based authentication now loads workspaces correctly again.
Jun 2, 2026 · @lava
We fixed a regression introduced in v1.33.0 where users authenticating via the
PRIVATE_JWT_FROM_HEADER option were redirected to the login page (showing a
"Sign In" button) when opening a workspace, even though a valid JWT was supplied
in the configured header.
The workspace loader looked for the ID token in the session data, which is empty for header-based authentication. It now reads the token from the configured header, which is the authoritative source in that mode, so workspaces load correctly again.
]]>Jun 3, 2026 · @gitryder
Results with a single column now stretch to fill the full width of the table instead of hugging the left edge. Long values use the available space and truncate at the table's edge rather than at a fixed cutoff.
May 18, 2026 · @gitryder
You can now right-click a field name or value in the Explorer table to filter, sort, aggregate, or reshape your results. Actions like Equals, Not equals, Greater than, Contains, Starts with, Top values, Rare values, and Count values are appended to the editor as TQL, so common queries can be built by clicking instead of typing.
Timestamps get extra options for filtering around the clicked value, with windows of 5 minutes, 1 hour, and 1 day before, after, or on either side.
May 7, 2026 · @gitryder
You can now sort events by time in the Stream view. The control cycles between newest first, oldest first, and off, and is disabled when no timestamp field is detected in the data. Your sorting preference is remembered between sessions.
May 21, 2026 · @lava
When a X-Tenzir-UserKey has expired, the platform now returns a dedicated 403 response with the detail User key expired, instead of the generic 403 Invalid API Key: X-Tenzir-UserKey expired error. This lets clients reliably detect the expired-key case and trigger a re-authentication flow.
May 26, 2026 · @jachris · #177
The Insights tab now always shows data for the release candidates of Tenzir Node
v6, even if no // neo comment is present.
May 21, 2026 · @avaq
We fixed an issue where actions on the account, organization, and invitation pages would fail if the page had been open for more than 15 minutes. The following operations now automatically refresh the user key when needed: changing account details, updating passwords, deleting accounts, creating and updating organizations, managing organization invitations, and deleting organizations.
May 21, 2026 · @gitryder
Negative multi-part durations no longer drift when copied or embedded into a TQL query. Previously a duration like -(19min + 12.636s) was rendered as -19min + 12.636s, which the parser read as -1127.364s instead of the original -1152.636s — off by twice the seconds component. The sign now distributes across every term (-19min - 12.636s) so the value round-trips cleanly.
Duration rendering also picks up a clearer split between display and query forms. The table cells, chart tooltips, and chart axis labels show durations in a human-readable form like 1h 30min 5.000s. The inspector and any context that needs to round-trip the value back into a query show the TQL-valid arithmetic form like 1h + 30min + 5.000000000s.
May 19, 2026 · @gitryder
We fixed an issue where the Insights tab became unresponsive and flickered on pipelines with many operators. The table now renders smoothly and stays interactive while showing live metrics.
]]>May 14, 2026 · @gitryder
We fixed an issue where clicking on a line, area, or bar chart could unintentionally zoom the chart to a narrow window, hiding the axis labels and most of the data. Charts no longer respond to clicks this way.
May 14, 2026 · @gitryder
We fixed an issue where chart tooltips were cut off in dashboard cells and the Explorer chart view when the tooltip did not fit inside the chart area. Tooltips now stay fully visible, even on small cells or near the screen edge.
]]>May 13, 2026 · @lava
We reduced the default lifetime of user keys from one week to 15 minutes. Sessions transparently refresh, so this is invisible in normal use, but shortens the window in which a leaked key could be reused.
]]>May 6, 2026 · @gitryder
The Stream view now includes a timeline that shows event volume over time, segmented by schema. It automatically detects timestamp fields and adapts its bucket size to the data’s time range, providing an at-a-glance view of when events occur and which schemas are most active.
It also probes your data for time fields and shows availability inline, omitting events without a recognized time field (ts, timestamp, or time).
May 5, 2026 · @gitryder
You can now navigate between entries in the Explorer table using arrow keys. Press Space to toggle the inspector, then use Arrow Up and Arrow Down to move between rows and seamlessly across pages.
May 7, 2026 · @gitryder
The Insights tab in the pipeline detail view is no longer experimental and now appears for every pipeline. It shows you live per-operator CPU usage, events per second, batch ratios, and queue backpressure for the selected pipeline. You can see at a glance which operators are working hardest and where data is piling up, so finding hotspots and tuning pipeline performance becomes easier. Update your node to v6 to see the data.
Apr 21, 2026 · @gitryder
We moved field selection in the Explorer's table view into a dedicated popover. The 'Fields' button sits in the toolbar and shows how many fields are currently hidden. Opening it reveals the full field list with the same click-to-toggle and shift+click-to-focus behavior as before.
]]>Apr 21, 2026 · @lava, @gitryder
Workspace management has been enhanced with new capabilities for administrators. You can now rename workspaces directly from the workspace settings, and the Users tab now provides a unified interface for managing workspace access. Administrators can view all users with access to a workspace in a single table and easily change user roles between member and admin roles using dropdown controls.
Apr 21, 2026 · @lava, @gitryder
The Tenzir Platform now supports organizations, giving teams a shared home for collaborating across workspaces. Organization admins can invite members, assign admin or member roles, and manage which workspaces belong to the organization. Members get access to all workspaces owned by the organization and can leave from their user settings at any time.
Learn more in the organization management guide.
]]>Apr 7, 2026 · @gitryder
We added thousands separators to numeric values in the pipeline Insights tab, making large numbers easier to read at a glance.
Apr 7, 2026 · @gitryder
We fixed an issue where the pipeline table stayed filtered after viewing a pipeline's detail page and navigating away to another tab. Returning to the Pipelines page would show only the previously viewed pipeline, and clearing the search had no effect.
]]>Mar 27, 2026 · @gitryder
You can now choose which fields are visible in the Explorer's table view. When you select a schema in the sidebar, its fields are listed below. Click a field to hide its column from the table. Shift+click a field to show only that field. A "fields hidden" indicator in the table header lets you clear all hidden fields at once. Field selections are remembered per schema and reset when you run a new pipeline.
Mar 26, 2026 · @gitryder
You can now filter events in the Stream view by clicking schemas in the sidebar. The schemas panel shows color-coded dots matching each schema's badge color, and selecting one or more schemas limits the view to only those events. Same-name schema variants are merged into a single entry in the sidebar for easier navigation.
Mar 26, 2026 · @gitryder
We added a new Stream view to the Explorer that shows all pipeline results as a continuous list of expandable events. You can switch between the Table, Chart, and Stream views using the view selector in the toolbar. The Stream view displays events from all schemas together, with color-coded badges to distinguish between them. Each row shows a one-line preview that you can expand to inspect the full event. The view remembers your selection across pipeline runs, and the event list scrolls horizontally as a whole, with schema badges staying pinned on the left.
Mar 13, 2026 · @gitryder
You can now sort the Explorer table by clicking column headers. Sortable columns show a sort indicator, and clicking cycles through ascending, descending, and unsorted states. Sorting works for both top-level and nested fields.
Mar 12, 2026 · @gitryder
You can now click on field names and values in the Explorer inspector to copy them to the clipboard. Field names copy the full dot-separated path, and values copy their TQL representation.
Mar 12, 2026 · @gitryder
You can now select a time range directly from the Explorer header. Choose from quick presets like 5 minutes or 12 hours, or open the custom popover to pick from a grid of relative durations or set an absolute date range. The selector is currently available for pipelines that start with the export operator.
Mar 12, 2026 · @gitryder
We combined the 'About' and 'Install' tabs in the package detail drawer into a single scrollable view. Package information, examples, and configuration options are now shown on one page instead of requiring tab switches.
Apr 1, 2026 · @gitryder
We fixed an issue where a node could be renamed to an empty string, causing the app to malfunction. Node names are now properly validated, so empty or whitespace-only names are no longer allowed.
Apr 1, 2026 · @gitryder
We fixed an issue where the connection token shown in the "Connect node" dialog did not update when switching between different disconnected nodes. The token now correctly refreshes for the selected node.
Mar 24, 2026 · @gitryder
We fixed an issue where custom packages installed on a node were not visible in the library view. Previously, only packages from the official Tenzir library were shown. Custom packages are now included alongside library packages.
Mar 24, 2026 · @gitryder
We fixed a bug where operator description text on the package detail page appeared rotated 90 degrees, overlapping other content.
Mar 17, 2026 · @gitryder
Packages containing user-defined operators can again be installed through the platform. Previously, installing such packages failed because the operator arguments were serialized incorrectly. This only affected installs through the platform UI—command-line package installs were not impacted.
]]>Mar 12, 2026 · @lava
We upgraded Python dependencies and added system-level package upgrades to the Docker images to address known vulnerabilities.
Mar 11, 2026 · @realllydan
We fixed an issue where switching away from a pipeline that has the Insights tab available to one that does not could leave the tab selection in an invalid state.
]]>Mar 10, 2026 · @lava
The app container now supports a PRIVATE_WEBSOCKET_GATEWAY_ENDPOINT environment variable that overrides the existing PUBLIC_WEBSOCKET_GATEWAY_ENDPOINT for calls in the app backend. This allows configuring different endpoints when the frontend and backend live in different networks.
Mar 10, 2026 · @realllydan
The pipeline detail modal now includes an experimental Insights tab that visualizes per-operator backpressure, helping users identify bottlenecks in their pipelines. This tab is only available for pipelines running on the experimental new executor.
Mar 10, 2026 · @lava
We fixed an issue where ephemeral nodes were causing the frontend to fail to render or be displayed with incorrect connection status.
]]>Mar 5, 2026 · @lava
When you click a deep link in Tenzir Platform but aren't logged in, you're now redirected to your original destination after signing in, instead of landing on the home page.
Feb 18, 2026 · @gitryder
We improved how the nodes list loads, making dependent views feel faster and more responsive across the platform.
Feb 27, 2026 · @gitryder
We fixed an issue where profile images from Gravatar and Microsoft accounts were blocked by the content security policy, causing broken or missing avatars.
Feb 27, 2026 · @gitryder
We fixed an issue where the diagnostics pane could show diagnostics from a different pipeline than the one currently open in the detail modal.
Feb 18, 2026 · @gitryder
We fixed an issue where the context list could appear in a random order when no search was active, causing items to jump around. The list now uses a stable alphabetical order so it stays consistent and easier to interact with.
Feb 18, 2026 · @gitryder
We fixed an issue where opening a pipeline link for a workspace you don’t have access to would log you out. You are now redirected to the access page where you can open the link in your default workspace.
]]>Feb 18, 2026 · @gitryder
We improved the clarity and usability of Explorer charts. Legends are now collapsible, easier to read, and support filtering series directly. Pie chart legends adapt better to available space, and tooltips provide clearer information.
We also expanded the chart color palette for better visual distinction between series, fixed bar chart x-axis labels overlapping when there are many data points, and refined chart layout and behavior for a smoother overall experience.
Feb 18, 2026 · @gitryder
Resolved an issue where your Google profile picture did not appear in the workspace switcher. The image now loads and displays correctly.
Feb 17, 2026 · @lava
Fixed a bug where the static workspace synchronization used stale loop variables during cleanup, causing stale workspaces to persist and the last configured workspace to be incorrectly deleted.
Feb 17, 2026 · @gitryder
We fixed an issue where pressing ESC to close a pipeline detail view caused the pipeline list to stop responding to clicks.
]]>Feb 17, 2026 · @gitryder
We updated the Platform's underlying framework dependencies to include their latest security fixes.
]]>Feb 10, 2026 · @lava
We upgraded pnpm to 9.15.0 in the frontend Docker image to address CVE-2024-53866.
]]>You can now click on the Ingress or Egress legend item to isolate that series in the activity chart. Clicking again shows both series, making it easier to analyze each metric when lines overlap.
Feb 6, 2026 · @gitryder
We added a toggle in the Explorer table Inspector that lets you wrap lines for easier reading.
We now display the current platform version at the bottom of the workspace switcher dropdown,️ making it easier to always see which version you’re on.
Jan 28, 2026 · @gitryder · #38
We added sorting for the Live Activity column in the pipelines table, so you can easily order pipelines by their activity level.
Jan 28, 2026 · @gitryder · #29
We unified the Available and Installed library tabs into a single view, so you can see which packages are installed without switching tabs. You can also uninstall packages directly from the same page.
Feb 9, 2026 · @lava
We fixed a bug in the Inspector where strings containing backslashes were not displayed correctly. Backslashes were not being escaped in TQL string rendering. For example, a string like Hello \World\ was previously rendered as "Hello \World\" instead of "Hello \\World\\". The fix ensures backslashes are properly escaped when displayed.
We fixed an issue where the workspace switcher dropdown did not open on the pipeline detail page.
Fixed a bug that could leave users with a stale user key in their session, causing authentication failures. The platform now proactively checks for expired user keys and refreshes them automatically.
]]>Jan 22, 2026 · @lava
The platform frontend now supports configurable response headers and Content Security Policy (CSP) for standalone deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_DEFAULT=true to enable default security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy, Cross-Origin-Resource-Policy). Use TENZIR_PLATFORM_UI_RESPONSE_HEADERS_DEFAULT with a JSON object to override with custom headers.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_HSTS=true to enable HTTP Strict Transport Security for HTTPS deployments.
Set TENZIR_PLATFORM_UI_ENABLE_RESPONSE_HEADERS_CSP=true to enable Content Security Policy, which helps prevent XSS and other injection attacks.
Jan 21, 2026 · @gitryder · #19
We improved how pipeline details load, making the view faster than before when navigating between pipelines. We also added a close button next to the overflow menu on the right so you can quickly exit a pipeline while browsing pipeline details.
Jan 20, 2026 · @lava
Authentication tokens (idToken and userKey) are now stored in the server-side session database instead of browser cookies. This improves security by keeping sensitive tokens accessible only via the session cookie identifier, preventing direct client-side access to authentication credentials.
Jan 19, 2026 · @lava
The seaweed S3 storage component now supports an optional Caddy reverse proxy that improves S3 error handling. Set TENZIR_ENABLE_CADDY=true to enable it. The reverse proxy intercepts 404 responses and returns proper S3-style error messages.
Jan 21, 2026 · @gitryder · #37
We now hide technical error details in error messages. You can click "Show error details" to expand them anytime, and use the copy button to share with support.
Jan 26, 2026 · @lava
Fixed a potential infinite hang in the Tenzir UI that could be triggered by a rare race condition where the Tenzir Node returned duplicate pipeline ids.
Jan 21, 2026 · @gitryder · #19
We fixed an issue where deleting a pipeline could cause the interface to become unresponsive.
]]>You can now use HashiCorp Vault as an external secret store for your workspaces. The integration supports token and AppRole authentication methods, and works with the KV v2 secrets engine. Add a Vault secret store via the CLI:
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--token=<token>
Or with AppRole authentication (recommended for production):
tenzir-platform secret store add vault \
--address=https://vault.example.com \
--mount=secret \
--role-id=<id> --secret-id=<id>
The --mount option specifies the path to a KV v2 secrets engine. For Vault
Enterprise, use --namespace to specify the namespace. Vault secrets are
returned as JSON by default. Append a :key suffix to retrieve a specific field
as a string, for example, secret("database:password").
Dec 22, 2025 · @lava
When using a Sovereign Edition instance of the Tenzir Platform with a custom Tenzir Gateway URL, the "Other" tab now displays the gateway endpoint for easy copying.
]]>