All pull requests

Pull requests

• feat(evals): give each Harbor trial its own gateway credential, and mint router keys

  feat
  #3552·SandyChapman opened Oct 30, 2026Contributor·4/5·8 of 15 tasks·

  ·
  2

• feat(evals): record trial model calls at the gateway and hold trial credentials to their models

  feat
  #3551·SandyChapman opened Oct 30, 2026Contributor·3/5·8 of 15 tasks·

  ·
  1

• feat(intake): count each model call once when the Inference Gateway recorded it

  feat
  #3550·SandyChapman opened Oct 30, 2026Contributor·2/5·8 of 15 tasks·

  ·
  1

• feat(inference-gateway,auth): let middleware refuse calls before serving, and accept x-api-key

  feat
  #3549·SandyChapman opened Oct 30, 2026Contributor·1/5·8 of 15 tasks·

  ·
  3

• fix(deployments): restrict client Docker network selection

  fix
  #3548·mckornfield opened Oct 30, 2026Contributor·8 of 15 tasks·

  ·
  2

• fix(evals): frame default judge inputs as untrusted data

  fix
  #3547·mckornfield opened Oct 30, 2026Contributor·8 of 15 tasks·

  ·
  1

• fix(sandbox): upgrade OpenSandbox SDK to 1.2.0

  fix
  #3545·ngoncharenko opened Oct 30, 2026Contributor·2/2·9 of 15 tasks·

  ·
  3

  

• fix(docs): align tutorials and API reference with release behavior

  fix
  #3543·mckornfield opened Oct 30, 2026Contributor·8 of 15 tasks·

  ·
  8

• fix(helm): keep ClickHouse credential checksums stable across upgrades

  fix
  #3542·mckornfield opened Oct 30, 2026Contributor·8 of 15 tasks·

  ·
  1

• revert(auth): remove ID-token API bearer workaround

  revert
  #3541·ironcommit opened Oct 30, 2026Contributor·

  ·
  14

• fix(sandbox): send the OpenSandbox API key on proxied execd calls

  fix
  #3540·ngoncharenko opened Oct 30, 2026Contributor·1/2·7 of 15 tasks·

  ·
  2

  

• fix(evals): retry a failed agent setup once inside the egress window

  fix
  #3539·ngoncharenko opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  6

  

• fix(jobs): reserve platform-managed identity and secret env names for job steps

  fix
  #3538·anastasia-nesterenko opened Oct 29, 2026Contributor·6 of 15 tasks·

  ·
  1

• fix(models): stop evaluating provider auth_header_format as a Jinja template

  fix
  #3537·anastasia-nesterenko opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  2

• fix(auth): enforce configured OIDC bearer acceptance

  fix
  #3536·ironcommit opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  6

• fix(helm): return 404 for ext-authz on the default Envoy gateway

  fix
  #3533·anastasia-nesterenko opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  1

• fix(auth)!: require auth.oidc.audience when OIDC is enabled

  breakingfix
  #3532·anastasia-nesterenko opened Oct 29, 2026Contributor·6 of 15 tasks·

  ·
  4

• fix(scaled-evals): configure private workspace storage permissions

  fix
  #3531·ironcommit opened Oct 29, 2026Contributor·8 of 15 tasks·

  ·
  10

• fix(customizer): one dataset fileset with training and validation files for every backend

  fix
  #3530·anubhutivyas opened Oct 29, 2026Contributor·15 tasks·

  ·
  16

• feat(agents): let agent entities declare how they're run

  feat
  #3528·mikeknep opened Oct 29, 2026Contributor·8 of 15 tasks·

  ·
  29

• feat(train): vlm compilation and checkpoint identification

  feat
  #3527·soluwalana opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·

• refactor(studio): show coding agent prompt in read-only KUI CodeSnippet

  refactor
  #3523·htolentino-nvidia opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  4

• fix(evals): cap concurrent local Docker agent setups across the machine

  fix
  #3522·SandyChapman opened Oct 29, 2026Contributor·7 of 15 tasks·

  ·
  3

• fix(studio): remove sample dataset from fileset creation

  fix
  #3521·nakolean opened Oct 29, 2026Contributor·2 of 15 tasks·

  ·
  2

• feat(compass)!: split the Compass post-run action into compass.persist and compass.preview

  breakingfeat
  #3520·mikeknep opened Oct 29, 2026Contributor·8 of 15 tasks·

  ·
  12