July 2026 Changelog
Monthly Cosmos platform change summary for July 2026
changelogmonthly
Updated 2026-09-28
Verified 2026-09-28
Highlights
- Activity Feed — a new cross-service experience surfaces recent user, agent, and knowledge-base events in a unified, paginated feed (Observer, ADK, Configurator, Storage, User Service, Frontend).
- PII Redactor integration — ADK now delegates PII masking to the dedicated Cosmos PII Redactor service instead of running Presidio in-process.
- Azure service cost tracking — Configurator, Observer, RAGFlow, and Storage emit cost events for Azure-hosted AI services (Language, Document Intelligence). The frontend adds an Azure costing breakdown page.
- Async file uploads — the TypeScript SDK and JumpStart SAP support resumable, background upload sessions via Storage's async-upload API.
- AquaSec & health-probe hardening — every long-running service received Kubernetes liveness/readiness probes and container-image CVE remediations.
- "Direct Agent" renamed to "Runtime Agent" — ADK, Observer, and Frontend align on the new terminology.
Service Changes
ADK
| Type | Change |
|---|---|
| feat | External PII redaction via Cosmos PII Redactor service |
| feat | Emit observability metadata and billing session correlation on ADK events |
| feat | Emit recent-activity events for the activity feed |
| feat | Rename "Direct Agent" to "Runtime Agent" |
| feat | Allow BPMN-generated file artifacts |
| fix | Authenticate evaluation redaction with OBO headers |
| fix | Correct PII_REDACTOR_SERVICE_URL to match K8s service name |
| ops | Enable webserver health probes (fixes New Relic "not reporting") |
Chat
| Type | Change |
|---|---|
| fix | AquaSec container-image hardening |
| ops | Enable webserver health probes |
Configurator
| Type | Change |
|---|---|
| feat | Azure service pricing data and cost event emission |
| feat | Organization metrics API (agent, app, tool, skill counts with filtering) |
| feat | Agent and app overview APIs |
| feat | Emit recent-activity events for the activity feed |
| fix | AquaSec container-image remediation |
| ops | Enable webserver health probes |
Frontend
| Type | Change |
|---|---|
| feat | Azure services costing page |
| feat | Recent-activity feed with numbered pagination |
| feat | Cost breakdown by dimension with project/journey drill-down |
| feat | Excel export for admin costing and user expense data |
| feat | Async upload session completion polling |
| feat | Journey sub-item name in user session view |
| fix | AquaSec npm CVE remediation |
| docs | Rename "Direct Agent" to "Runtime Agent" across UI |
MCP
| Type | Change |
|---|---|
| feat | Forward session ID and observability metadata headers |
| fix | AquaSec container-image remediation |
| ops | Enable server health probes |
Observer
| Type | Change |
|---|---|
| feat | Azure service cost tracking and queries |
| feat | Recent-activity ingestion and feed API |
| feat | Organization top-model query and active-user count |
| feat | Correlated session-run cost rollup |
| fix | Costing dtype fix, metric terminology in templates |
| fix | AquaSec container-image hardening |
RAGFlow
| Type | Change |
|---|---|
| feat | Azure AI cost event emission for parsing and indexing workflows |
| feat | Configurable accelerator device for Docling (GPU node-pool support) |
| feat | Parsed-document cache shared across workers via Redis |
| ops | Raise Helm timeout to 30 minutes for GPU rollouts |
| ops | Enable webserver health probes |
Storage
| Type | Change |
|---|---|
| feat | Knowledge-base activity events for the activity feed |
| feat | BPMN artifact uploads |
| fix | Verify async uploads before promotion; move off the request path |
| fix | AquaSec container-image remediation |
| ops | Enable webserver health probes |
User Service
| Type | Change |
|---|---|
| feat | Emit user and organization activity events for the activity feed |
| feat | Graceful handling of invalid UUIDs in bulk user retrieval |
| fix | Allow ADK PII redaction with OBO |
| fix | AquaSec container-image remediation |
| ops | Enable webserver health probes |
Bridge
| Type | Change |
|---|---|
| fix | AquaSec container-image remediation |
| Type | Change |
|---|---|
| fix | Checkmarx cache findings and AquaSec hardening |
| ci | Remove duplicate staging pipeline triggered on develop |
| ops | Enable webserver health probes |
Voice
| Type | Change |
|---|---|
| fix | AquaSec container-image remediation |
TypeScript SDK
| Type | Change |
|---|---|
| feat | Async upload-session implementation |
| feat | ADK billing session correlation and generic observability metadata |
| fix | Support both name and query in registry search params |
Python SDK
| Type | Change |
|---|---|
| feat | Forward X-Client-App-Id / X-Project-Id cost-tracking headers |
| fix | Support name filter in agent search |
JumpStart SAP Intelligence
| Type | Change |
|---|---|
| feat | Async file uploads via Storage upload-session API |
| feat | ABAP save-and-activate for full object sets (includes, DDIC, tables) |
| feat | Legacy AI Fix loop with include-aware syntax checking |
| feat | AI Fix All chat action with aligned edit protocol |
| feat | Blueprint editor with editable JSON in Preview tab |
| feat | Active/inactive search indicator; hide Working Source by default |
| fix | Make customActions code-authoritative for toolbar changes |
| fix | Restore Word (.docx) download in chat canvas |
| fix | AquaSec npm CVE remediation |
Summary
| Metric | Count |
|---|---|
| Active services | 19 |
| Total commits | 157 |
| Features | 52 |
| Bug fixes | 24 |
| Security | 16 |
| Infrastructure/ops | 12 |