## mckinsey/agents-at-scale-ark — v0.1.67…v0.1.68-rc

_90 commits._

### Features
- **feat(a2a): separate status updates and render artifacts as distinct chat messages (#2942)** (335426d)
- **feat(ark-dashboard): warn that Argo Make chat is experimental on first use (#3107)** (e2e6a49)
- **feat: server-side pagination for all resource types (#2948)** (37d4fed)
- **feat: broker QBDS update (#3082)** (6ed6345)
- **feat(mcp): add MCPServer.spec.toolCallTimeout to bound individual tool calls (#3073)** (35d8d35)
- **feat(broker): Phase 4 — sessions on Postgres (opt-in, HA-ready) (#3004)** (24e5294)
- **feat: add Azure DevOps URL handling in marketplace settings (#3078)** (7ffb0bc)
- **feat(mcp): retry transient MCP tool-call errors (#3049)** (3efa1c2)
- **feat: add conversational Argo WorkflowTemplate authoring studio (#2825)** (fe24365)
- **feat: memory screen updated (#3034)** (d2c66f1)
- **feat(argo-workflows): support conversation-id in ark-query template (#3036)** (0d76601)
- **feat: exports screen updated (#3031)** (b069a74)
- **feat(ark-cli): offer kubernetes-mcp-server and argo-make-author as optional marketplace installs (#2861)** (cc3347d)
- **feat: qb design migration (#2151)** (afbfcb8)
- **feat(controller): expose phase: queued when Query controller semaphore is full (#2956)** (1853c0f)
- **feat(apiserver): gate WAL consumer behind leader election (#2880)** (2e8f871)
- **feat: Add custom auth scopes (#2949)** (27da1cc)
- **feat: default ark-query session id to wf-<workflow-name> (#2913)** (ef918b5)
- **feat(apiserver): support Postgres TLS verification and custom CA bundle (#2627)** (6ad2d51)

### Fixes
- **fix: save execution engine when updating agents (#3184)** (e96f125)
- **fix(docs): bump @xmldom/xmldom to 0.9.11 for XRAY-1050796/799/801 (#3190)** (b58ac4a)
- **fix(mcp): inject authorization bearer on the runtime MCP path (#3111)** (478f0eb)
- **fix(controller): model probe unknown error (#3152)** (4f0113b)
- **fix(ark-api): require authorization to create API keys (#3137)** (4a03f4d)
- **fix(ark-cli): make ark exports portable (#3105)** (9bb243a)
- **fix(tests): scan asset attributes in dashboard basepath probe (#3140)** (c1c0f95)
- **fix(ark-sdk): stop returning raw secret annotations (#3101)** (63f9eae)
- **fix(apiserver): harden PostgreSQL connection path against DB outages (#2965)** (92df5a9)
- **fix(deps): update js-yaml to version 4.3.1 across multiple packages (#3092)** (d5b55ec)
- **fix(security): bump fast-uri to 3.1.5 to address CVE-2026-18446 (#3085)** (67c1487)
- **fix(dashboard): correct workflow card border color after design migration (#3068)** (e13ebc4)
- **fix(completions): serve Model reads from a watch-backed cache (#3045)** (ff00055)
- **fix(a2a): lift hardcoded 5m A2A ceiling and bound MCP connection setup (#3047)** (1457253)
- **fix: update brace-expansion dependency to version 5.0.9 across multiple packages (#3071)** (d2feadf)
- **fix: implement auto-scrolling in chat panel and message display (#3009)** (ff7da28)
- **fix: dashboard marketplace settings gate (#3046)** (f6ab299)
- **fix: bump undici to 7.29.0 in docs and ark-broker for CVE-2026-13697 (#3052)** (e2127f8)
- **fix(dashboard): prevent /sessions crash on workflows without status (#3028)** (55c8d61)
- **fix(controller): add error-level log to query dispatch failure paths (#3021)** (f10facd)
- **fix(dashboard): restore chat conversation continuity when final stream chunk is missing (#2922)** (6abceee)
- **fix(argo-workflows): reliably install ark-query WorkflowTemplate via helm (#2936)** (f858087)
- **fix(dashboard): stop workflow runs page from flooding the backend with requests (#2975)** (e7e2184)
- **perf(ark-mcp): reduce cold-start deploy time from ~120s to ~24s (#3022)** (00da13a)
- **fix(executor): fetch full conversation history and surface memory read failures (#3020)** (f8c0847)
- **fix: redact creds from OTel traces exported by the ark controller (#3019)** (94a0273)
- **fix(controller): mark query errored on async execute panic and stop nil telemetry deref in tests (#3016)** (e9437f1)
- **fix: bump golang.org/x/net, golang.org/x/text, ip-address (#3014)** (ee6fbcb)
- **fix: redact credentials across all ark-api loggers (#2939)** (bb9b309)
- **fix: enforce Team strategy/member-type via CRD schema and drop stale graph executor path (#2876)** (a7d395d)
- **fix: restore canonical Apache-2.0 license and add NOTICE, SECURITY.md (#2990)** (281601c)
- **fix(ci): probe apiserver reachability before k3s bootstrap RBAC check (#2980)** (7674058)
- **fix: lowercase fork registry namespace for container cache tags (#2984)** (3eb6b6d)
- **fix: bump next-auth to 5.0.0-beta.32 in ark-landing-page for Auth.js advisories (#3002)** (2336939)
- **fix: bump next-auth/@auth/core and brace-expansion for security advisories (#2994)** (f6dbda3)
- **fix: quote publication name in DROP PUBLICATION with pq.QuoteIdentifier (#2968)** (1649759)
- **fix: mark agents with no model as unavailable (#2921)** (53f21f1)
- **perf(broker): push Postgres stream filters and aggregates into SQL (#2896)** (084286a)
- **fix(apiserver): drop PostgreSQL replication slot and publication on uninstall (#2800)** (2cdd892)
- **fix: bump next / postcss / @faker-js/faker / browserslist / go-openapi/swag for High-severity CVEs (#2958)** (aeae80b)
- **fix: bump sharp and grpc-go for newly-disclosed CVEs (#2950)** (6f59e93)
- **fix(apiserver): collapse O(watchers) PostgreSQL watch relists to one per kind (#2721)** (2c68a31)
- **fix(executor): surface silent memory fallback when conversationId is set (#2899)** (8fc9e26)
- **fix: enforce DeleteOptions.Preconditions in aggregated apiserver registry (#2907)** (538e94e)
- **fix: query async execution (#2916)** (05ea6aa)
- **fix: patch protobufjs and axios CVEs (JFrog Xray findings) (#2931)** (805eba1)

### Tests
- **test(executor): add poll fallback when query watch goes silent (#3127)** (e6f109f)
- **test(ark-dashboard): fix flaky selector-section dropdown tests (#3128)** (4f0939f)
- **test(postgresql): wire postgres integration suite into CI (#3067) (#3072)** (c75b1bc)
- **test: cover tool target in ark-query argo template e2e (#3069)** (7f4a416)
- **test(broker): cover the memory delete and conversation routes against Postgres (#3037)** (110fec3)
- **test: Tests for OpenAI executor (#1892)** (ffb60f4)
- **test(ui): drop force=True on Create-tool click, unmask modal-close failure (#2941)** (797258e)

### Docs
- **docs: use Inter and Geist Mono to match the getark.ai landing (#3183)** (b3f9051)
- **docs: add openspec proposal for engine-backed team members (#3116) (#3171)** (a22528b)
- **docs: correct replication-slot uninstall behaviour, version floor and replication privilege in postgres guide (#3168)** (ca4155f)
- **docs: adopt ark-query template for workflow steps and document standalone install (#2914)** (cf72600)
- **docs: add openspec change for explicit dashboard namespace scoping (#3125)** (7f41187)
- **docs: add openspec change for dashboard URL param contract (#3124)** (716afa5)
- **docs: document opt-in Postgres sessions backend for ark-broker (#3118)** (f0c4001)
- **docs: document opt-in Postgres event backend for ark-broker (#2977)** (57ed73b)

### Chore
- **chore(main): release 0.1.68-rc (#2918)** (3b66b7a)
- **chore: Consolidate Dependabot updates (#3145)** (3a6ee2f)
- **chore: expand CODEOWNERS root rule to active team members (#3154)** (312bf5d)
- **chore: Consolidate Dependabot updates (#3100)** (b409ac7)
- **chore: refresh CODEOWNERS from contribution analysis (#3113)** (da13bb6)
- **chore: Consolidate Dependabot updates (#2920)** (965b2e0)
- **ci: make PostgreSQL E2E lanes blocking and revive watch validation assertions (#3013)** (575c5c0)
- **chore: parameterize devspace dev ports for parallel dev instances (#2981)** (f9f7ba3)
- **ci: cache k3s binary and retry around setup-k3s downloads (#2558)** (c2e1c1c)
- **chore(ark-dashboard): enable marketplace source editing in local dev (#2860)** (5c8e864)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mckinsey/agents-at-scale-ark?utm_source=github-action)._