Arcade 1.11.2

A default install upgrades with no values change. The coordinator now follows postgres.sslmode like the other services. List endpoints cap a page at 1000. Gmail and Outlook Calendar callers must migrate. Read the Upgrade notes before upgrading.

This release applies schema changes. Migrations run automatically on helm upgrade unless <service>.database.migrations is false.

• Engine — adds an exchange claim to the authorization request table. Required by the authorization-code fix below.
• Engine — adds the per-gateway Capability requests setting, on by default. Required by that setting.
• Engine — records runner image tags refused for each deployed server. Not required by anything else in this release.
• Engine — records when a remote MCP credential renewal ended without a token. Required by the reconnect-link fix below.
• Coordinator and experience-api — none.

All four add a column with a default or a nullable column. Rolling back does not run down-migrations; the columns stay and the previous engine image ignores them.

• A disabled account is refused by the engine within seconds, on tool calls and MCP gateways, instead of working until its token expires. Project API keys it created keep working.
• The project suggestions Inbox no longer shows suggestion text or submitters from org-wide or account gateways to readers in other projects.

Advisories remediated in the bundled application images since f0ceab0:

• CVE-2026-85091 — zlib 1.3.2-r1 in the OpenFGA image
• CVE-2026-93990 — libexpat 2.8.5-r0 in the dashboard image
• CVE-2026-96748 — pymongo 4.18.2 in the MongoDB toolkit
• CVE-2026-97687 — urllib3 2.8.0 across worker toolkits
• CVE-2026-97689 — urllib3 2.8.0 across worker toolkits
• CVE-2026-102268 — PyJWT 2.15.1 across worker toolkits
• CVE-2026-102925 — virtualenv 21.14.1 across worker toolkits
• GO-2026-6354 — golang.org/x/crypto 0.57.0
• GO-2026-6603 — golang.org/x/net 0.60.0
• GO-2026-6615 — go.opentelemetry.io/otel/sdk/log 0.21.0

• redis.image.repository, redis.image.tag and redis.image.pullPolicy set the bundled Redis image, so it can be pulled from a private registry mirror. The default stays redis:8-alpine.
• The dashboard sidebar has a project-wide suggestions Inbox with a badge, filters and paging.
• A per-gateway Capability requests setting turns the Registry suggestion tools off for that gateway. On by default.
• GET /v1/apps lists over REST what the Arcade.ListApps tool returns.
• Project Viewers can open gateway and server configuration read-only.
• The gateway tool picker filters by destructive and read-only tools.
• New toolkit tools:
  • Twilio toolkit: send and read SMS.
  • Slack ReactToMessage, and WhoAmI reports the workspace.
  • Outlook Mail Inbox rules, out-of-office replies, KQL and @-mention search, forwarding from a shared mailbox, and sends that report their recipients.
  • Google Calendar GetEvent, with a series' repeat rule.
  • Gmail content_type=markdown, and UpdateDraftEmail edits drafts with attachments.

Operators with their own OAuth apps add scopes for the new tools: Slack reactions:write, and Microsoft MailboxSettings.Read / MailboxSettings.ReadWrite. The Twilio toolkit reads TWILIO_ACCOUNT_SID, TWILIO_API_KEY_SID and TWILIO_API_KEY_SECRET.

• Image tags default to the chart's appVersion: every *.image.tag is empty by default and resolves to the release's appVersion. An explicit tag still wins, and a default install renders the same images as before.
• The coordinator honours postgres.sslmode. See Upgrade notes.
• List endpoints cap limit at 1000. See Upgrade notes.
• Gmail 9.0.0 and Outlook Calendar 5.0.0 change contract. See Upgrade notes.
• Registry suggestion tools are listed on every gateway connection with a signed-in user, whether or not tool recommendation is on.
• Gmail sends, drafts and draft updates refuse an empty body.
• With discovery.enabled, tool recommendation reports why it returned nothing (unavailable or no_match) instead of a degraded marker.
• Resource list pages in the dashboard use tabs only, and the sidebar's "Connected apps" is now "OAuth providers".
• GET / on the coordinator host redirects to the dashboard instead of returning a JSON 404.

• The dashboard starts in clusters with no internet egress instead of crash-looping.
• With gateway.enabled on a cluster without the AWS Load Balancer Controller's TargetGroupConfiguration CRD (GKE, AKS, on-prem), helm install and helm upgrade no longer fail with "no matches for kind TargetGroupConfiguration". The chart renders it only when the cluster serves gateway.k8s.aws/v1beta1/TargetGroupConfiguration. On AWS, helm, Argo CD and Flux read that from the cluster; to render offline with helm template, add --api-versions gateway.k8s.aws/v1beta1/TargetGroupConfiguration.
• The experience API starts with postgres.sslRootCert set, and verifies the certificate chain under require. OpenFGA connects with sslmode: verify-full and no CA bundle, using the system roots.
• OAuth providers that revoke a replayed authorization code (PagerDuty, Entra) no longer leave a user authorized but unable to run tools when the engine runs more than one replica.
• A tool whose upstream rejects the stored OAuth credential gives the agent a re-authorization link instead of failing.
• A remote MCP server that refuses to renew a credential gives the user a reconnect link instead of reporting them as authorized.
• MCP clients that hide URL elicitation get authorization links as text instead of waiting minutes for a prompt that never shows.
• Tool calls no longer fail as not available for a few minutes while a worker upgrade changes toolkit patch versions.
• Occasional "could not be reached" errors between the engine and workers are gone.
• A gateway with a small allow list sends the access and execution hooks only the tools it can reach, rather than the whole catalog.
• One failing server no longer empties a gateway's resource list.
• Word, PowerPoint and PDF reads in the Microsoft toolkits no longer time out.
• Connected Users pages from the server, so more than 1,000 connections are all reachable. The organization members table shows more than 500 members, with the true count.
• Large tool lists in the dashboard load about three times faster.
• Clearing Timeout or Cache TTL in the webhook form no longer makes Save do nothing.
• Dashboard screens no longer go blank under browser page translation.
• Toolkit fixes: Gmail plain-text parts, "Re:" subjects, forwarded dates in the user's time zone and inline images when forwarding; Outlook Mail refuses ids from another mailbox and keeps Microsoft Graph error text out of tool messages; Outlook Calendar pagination tokens; Microsoft Teams messages that mention a bot.

• The worker image no longer carries Gmail 7.6.2 or Outlook Calendar 2.0.0. See Upgrade notes.
• GET /v1/orgs/{org_id}/projects/{project_id}/gateways/{gateway_id}/suggestions. See Upgrade notes.

• Review postgres.sslmode: under the default disable the coordinator connects without TLS; under verify-* it now verifies.
• New values: redis.image.*. Every *.image.tag now defaults to empty, which means the chart's appVersion.
• Four additive engine migrations; the new engine requires all four.
• Operators with their own OAuth apps add Slack reactions:write and Microsoft MailboxSettings.Read / MailboxSettings.ReadWrite for the new tools.

• List endpoints refuse limit above 1000.
• The per-gateway suggestions read returns 404; GET /v1/apps is new.
• Gmail 9.0.0 and Outlook Calendar 5.0.0 change contract; Gmail 7.6.2 and Outlook Calendar 2.0.0 are no longer served.
• GET / on the coordinator redirects to the dashboard.