Release v0.65.4
May 06, 2026
Linux connection ingest fix and a sweep of release-pipeline silent failures that would have caused the next two hotfix tags.
Improved
- Six release-pipeline silent-failure modes closed in one pass — each would have required its own hotfix tag the next time we ran the publish workflow. Notarization now fails closed when Apple rejects an artifact, the artifact-classifier correctly tags Mach-O agent binaries and signed Windows MSIs, and the required-assets list is built dynamically from what was actually produced so a partial upload can no longer ship silently.
Fixed
- Linux agents reporting active network connections were causing every batch to 500 with a Postgres 'value too long' error because Linux Unix domain socket paths can be ~78 characters and the column was sized for IPv6 addresses (45 chars). The columns are now unbounded text and the agent batches go through cleanly. Already applied to US and EU production.
The Linux connection fix is the main user-visible change. If you have Linux hosts, their network-connection batches were silently failing on the API because the agent was occasionally surfacing Unix domain socket paths (things like /run/containerd/s/...) misclassified as TCP. Database column widening is already deployed to both production regions, so this release just brings local installs and self-hosters in line.
The bigger story is the release-pipeline cleanup. The previous two hotfix tags (v0.65.1 and v0.65.2) were each cut after the publish workflow surfaced a bug — and a closer audit found four more bugs of the same shape that would have caused four more hotfix tags. We closed all six in one coordinated change so the next tag publishes cleanly the first time. Same code in the product, much better confidence in the pipeline that ships it.