Skip to content
Phylax
Resources

Changelog

Recent product, CLI, and documentation updates from the Phylax team.

Release channels

Phylax ships updates across multiple channels. Track the one that matters to you.

Docs Documentation updates and guides.
CLI Command line tool updates.
MCP MCP server and integration updates.
API Backend API changes and SDKs.

v1.8.0

15 May 2026   Latest

Added

  • MCP Guide: “New” reference table and example request/response payloads.
  • Attestation verify endpoint supports --offline with local trust stores.
  • Webhook signature verification guide with homebrew-specific examples.
  • Policy evaluation API support for resource filters and batch evaluation.

Improved

  • VS Code extension: new settings for default policy set and auto-evaluate.
  • CLI: clearer error messages and suggestions for common failures.
  • Docs: reorganised integration guides and unified sidebar navigation.

Fixed

  • MCP: resolved timeouts when resolving large package graphs.
  • Policy evaluate: fixed incorrect ordering of empty resource lists.
  • CLI: fixed exit code on network timeout in attest verify.

v1.7.0

22 April 2026

Added

  • CI/CD examples for GitHub Actions, GitLab CI, and Jenkins.
  • MCP server: support for custom trust stores via configuration.
  • API: expanded filtering on /v1/attestations and /v1/policies/evaluate.

Improved

  • Attestation verify performance with parallel signature checks.
  • Docs: expanded troubleshooting sections for webhook delivery issues.
  • CLI: colored output improvements and JSON output stability.

Fixed

  • Webhook retries: fixed exponential backoff jitter calculation.
  • Policy evaluate: corrected severity summaries for large result sets.

v1.6.2

19 March 2026

Added

  • Docs: MCP quickstart updated with local and remote server flows.

Improved

  • VS Code extension: improved diagnostics and inline result display.
  • CLI: attestation download command with artifact seek.

Fixed

  • Docs: corrected webhook header names in verification example.
  • CLI: fixed issue where cached config paths were not expanded on Windows.

v1.6.0

10 February 2026

Added

  • Initial release of Phylax MCP Guide.
  • MCP server: tools for artifact_search, artifact_verify, and policy_check.

Improved

  • Policy evaluate response includes evaluated_at timestamp and details.
  • Docs: API examples with rate limits page.

Fixed

  • API: consistent error codes for authentication failures.
  • Docs: various typos and broken links resolved.

Versioning

Phylax follows semantic versioning. A major bump means a breaking change to the API or the CLI contract; a minor bump adds capability without breaking existing calls; a patch fixes behaviour without changing either.

The --json output shape is part of the contract. Fields are added in minor releases and removed only in a major, so parsing it in a script is safe as long as you ignore unknown keys.

See Best Practices for adopting new capability safely, or the REST API for the current endpoint surface.

Did this page help you?