Changelog

This page documents release versions, feature highlights, and fixes for the CollectorCtrl platform.

[v0.2.6-beta] — 2026-08-10 — Latest Public Release

Get Started Onboarding Wizard: Dedicated dashboard page that generates ready-to-run install commands for Linux, Windows, macOS, Kubernetes, and Docker — with the server address auto-detected and the latest release package resolved live from GitHub
Four Deployment Methods per Platform: 1-click script, manual package steps, Ansible playbook, and Terraform/Cloud-Init snippets
Live Agent Check-In Detector: Real-time banner that confirms the moment a newly deployed host connects
Server Package Mirror: The server mirrors supervisor release packages from GitHub into /packages/; onboarding scripts and playbooks try the mirror first so agent hosts need no internet access
Kubernetes Operator: Helm-chart-deployed operator (CollectorCtrl-K8s-Operator) for cluster-wide collector management
DevSecOps Package URLs: One-click copy of direct release asset links for SAST / anti-virus scanning

Windows Uninstaller Robustness: Idempotent service stop/uninstall (clean exit codes, no Control Panel failure loops)
OpAMP Auth Fallback: OPAMP_LEGACY_MODE defaults to true, resolving 401 errors for unauthenticated collectors
PostgreSQL Linux Installer: Automatic pg_hba.conf configuration (scram-sha-256) on RHEL, Amazon Linux, Ubuntu, and Debian
Pure Go Cross-Compilation: CGO-free release packages for Windows, Linux, and macOS on amd64 and arm64

Linux Supervisor Packages: ARM64 and AMD64 supervisor builds for Linux
Windows Installer Improvements: Streamlined installer with better service registration
Database Auto-Migration: Automatic schema migrations on server startup

Fleet Management Dashboard: Honeycomb and table views for monitoring collector health
Dynamic Policies: Label-based targeting with canary rollouts
Config Versioning: Full version history for all policy changes
Drift Detection: Automatic reconciliation of unauthorized config changes
Self-Healing Config Apply: Fast supervised restarts with automatic fallback to known-good configs
Remote Upgrades: Fleet-wide supervisor upgrades with automatic rollback
Upgrade Governor: Queue-based rate limiting (max 3 concurrent) with failure halt at 20%
Connection Watchdog: 45-second auto-rollback on failed upgrades
RBAC: Role-based access control (Admin, Editor, Viewer)
SSO Integration: OIDC support (Okta, Azure AD, Auth0) with group-to-role mapping
API Tokens: SHA-256 hashed service account tokens with cc_ prefix
Audit Logging: Immutable action logs with OTLP SIEM streaming
Break-Glass Access: Emergency local admin account for SSO outages
OCB Builder: Visual custom collector binary builder
Package Repository: Binary storage with SHA-256 verification
Semantic Registry: OTel field mapping and schema governance
Telemetry Governor: ClickHouse-powered log profiling
Data Wizard: Interactive data pipeline configuration
SMTP Integration: Email notifications and password resets
Environment Rules: Per-environment configuration constraints
License Management: Feature gating and agent limits

Windows Service Support: Native Windows Service for both Server and Supervisor
Linux systemd Support: Native systemd units
SQLite: Zero-config embedded database
PostgreSQL: Production-grade database support
Docker: Container images with docker-compose examples
TLS/mTLS: Encrypted communication with mutual TLS support
Security Scanning: CodeQL, gosec, OpenSSF Scorecard integration

Native Windows Service: Supervisor installs as CollectorCtrlSupervisor Windows Service
SSO Integration: OIDC identity providers with JIT provisioning
OTLP SIEM Audit Stream: Real-time audit log streaming to Splunk/Elastic

CollectorCtrl follows Semantic Versioning. For detailed commit history, see the GitHub repository.