chore(main): release platform 1.3.45

[archestra-ci]

🤖 I have created a release beep boop

1.3.45 (2026-08-28)

Features

• add provider key action to empty models page (#7524) (19bf907)
• agents: let an agent disable individual knowledge sources, replacing Auto's preview list (#7498) (ca67097)
• apps: let an app carry an icon, and label the one MCP servers already had (#7473) (7e120e6)
• chat: add provider keys from credential selector (#7505) (0a9ce81)
• chatops: per-channel instructions for messaging channels (#7479) (1c4755a)
• frontend: make a table search show it is loading, from keystroke to results (#7497) (c1ba071)
• frontend: name every studio page in the sidebar, and manage every OAuth client in one place (#7507) (a8612c4)
• frontend: preview SVG files in the Files panel (#7530) (c693559)
• llm-logs: name the virtual key a request used, and the user it stands for (#7499) (5676c73)
• llm-providers: make the OpenAI-compatible provider discoverable (#7466) (c4d17da)
• llm-proxy: a single LLM Proxy per organization (#7448) (0ee2ef4)
• model-providers: surface personal subscriptions as connect cards above the credentials table (#7501) (f8d4b23)
• plugins: manage plugins over MCP and reuse their skills (#7503) (d521e32)
• polish MCP registry interactions (#7517) (ae9565f)
• separate messaging setup from agent assignments (#7526) (7267c98)
• service-accounts: show whether an account can actually authenticate, and rebuild its screens (#7489) (0f2cb6a)
• skills: a static marketplace URL every user installs with their own token (#7451) (6dd07da)
• skills: activate plugin skills across clients (#7509) (36fce6c)
• skills: merge skill source collections (#7532) (fe2d105)

Bug Fixes

• accept valid HTTP header names (#7520) (7029e55)
• agents: apply prompt caching to headless runs (#7502) (ddfd688)
• agents: make an agent's Auto and Custom tool/knowledge fields read as one form (#7506) (923b2ce)
• agents: publish skills over MCP from gateways only, not agents (#7486) (a27bf4a)
• agents: streamline Advisor setup (#7461) (6ec3652)
• api: hold idle keep-alive connections longer than upstream proxies (#7477) (b6449b9)
• chatops: name the channel in the agent's framing, and stop channel instructions reading as an allow-list (#7490) (f727e7d)
• chat: show the browser setup card only once the check has an answer (#7470) (d697649)
• chat: unwedge conversations poisoned by an unpaired surrogate (#7459) (5cef99c)
• docker: pin openssl >=3.5.8-r0 in both scanned images (#7472) (d272c73)
• frontend: drop the tools picker's per-catalog fan-out, and show when its lists fail (#7485) (3e5958e)
• frontend: keep MCP alert dismiss on current page (#7528) (c42aed8)
• frontend: keep OAuth client list requests within API limits (#7522) (1e25d58)
• frontend: normalize bulk action spacing (#7482) (bb3ce25)
• frontend: normalize collection layouts (#7534) (d606775)
• frontend: remove redundant Knowledge navigation (#7533) (2ae6618)
• frontend: remove redundant page header navigation (#7531) (276ab87)
• frontend: render the real Slack logo in the logo picker (#7495) (88fe59e)
• frontend: render the sidebar attention count as a circle (#7474) (e09bb5a)
• frontend: reset the re-auth marker when starting a fresh MCP OAuth install (#7491) (f844a60)
• frontend: show every role in the role pickers, not just the first page (#7484) (ac321ef)
• frontend: stop the MCP Usage tab calling an unknown owner "Personal" (#7480) (a2bd3ef)
• frontend: stop the new chat screen waiting on data it does not draw (#7458) (48b8c6f)
• knowledge: stop the tier notice claiming Knowledge is disabled (#7469) (3e22155)
• llm-costs: report the LLM Proxy as one entity instead of a list of retired proxies (#7496) (5161afc)
• llm-proxy: pre-filter virtual keys and OAuth clients from the blocked-delete dialog (#7476) (e59b5d3)
• llm-proxy: repair direct calls to app tools hidden behind run_tool (#7488) (9b9194e)
• llm-proxy: validate provider-key filter param with the server's zod schema (#7478) (a2976c7)
• mcp-apps: keep the sidebar visible in fullscreen, and give every app a way into it (#7481) (478f7e4)
• mcp-registry: stop the Inspector from testing another member's connection (#7500) (0e7f8b9)
• mcp: wait for cold servers to be ready (#7464) (5c37d2b)
• plugins: edit GitHub source and authentication (#7460) (ac6f244)
• plugins: make GitHub imports reliable and surface failures (#7463) (750d198)
• preserve tool names across provider constraints (#7535) (35349fa)
• rbac: enforce the enterprise tier on custom roles server-side (#7467) (6950e12)
• skills: enforce the online skill catalog org setting server-side (#7468) (470f1a0)
• skills: filter plugin artifacts from derived skills (#7519) (619016d)
• skills: narrow plugin artifact filtering (#7527) (bdb9bf7)
• skills: resolve projected skills by short name (#7529) (668838e)
• sso: make GitHub SSO configurable through the UI (#7465) (c888a95)
• users: an empty trailing page in the users table, and an invitations tab on deployments without invitations (#7471) (affded2)

Code Refactoring

• frontend: unify collection bulk actions (#7475) (e1e457e)
• logs: give log and connector detail pages their own header (#7504) (e534dcc)

Miscellaneous Chores

• create knowledge file directories during upload (#7523) (8f8880d)

---

This PR was generated with Release Please. See documentation.

[mr-release-freeze]

❄️ Release Freeze Active

A release freeze is currently in effect. This PR cannot be merged until the freeze is lifted.

How to unfreeze

1. Go to Actions → Toggle Release Freeze → Run workflow
2. Select false from the dropdown
3. Click Run workflow

Once the freeze is lifted, this review will be dismissed automatically.

---

This review was posted automatically by the release freeze system.

[archestra-ci]

🤖 Created releases:

• platform-v1.3.45

🌻