Develocity Reporting Kit Release History

[FIX] The Reporting Kit no longer intermittently interrupts a sync while cleaning up previous exports

[FIX] The Reporting Kit no longer keeps builds that Develocity’s data retention has deleted

[FIX] The Reporting Kit now exports hours with no builds much faster

[FIX] Grafana: update to Grafana 13.3.0, the Trino data source plugin 1.4.1, and the Amazon Athena data source plugin 3.4.1

[FIX] Trino: update to Trino 484

[FIX] Grafana and Trino: update their bundled compression libraries to fix CVE-2026-111497

[FIX] The Reporting Kit’s components no longer trust the following root certificates: AAA Certificate Services, emSign ECC Root CA - G3, emSign Root CA - C1, and emSign ECC Root CA - C3

[FIX] Grafana: update to Grafana 13.2.2 and the Trino data source plugin 1.3.0 for increased stability and security

[FIX] The Reporting Kit’s components no longer trust the compromised intermediate certificates issued under the AAA Certificate Services and emSign ECC Root CA - G3 root certificates

[FIX] Grafana: the image no longer ships the unused, world-writable /var/log/grafana directory

[NEW] Analytics MCP Server: the Develocity Analytics tools are now served from the Develocity MCP Server’s /mcp endpoint, which queries the Reporting Kit over its Trino query-access endpoint

[UPGRADE NOTE] The Develocity Analytics MCP tools need a matching setup on the Develocity side. The Develocity instance must run 2026.3 or higher, and its Develocity MCP Server must query this Reporting Kit. Until then, the tools are not available at the Develocity /mcp endpoint or at the deprecated /drv-mcp endpoint

[UPGRADE NOTE] The embedded Analytics MCP endpoint (/drv-mcp) on the Reporting Kit instance is deprecated and will be removed in a future release. Migrate AI clients to the Develocity instance’s /mcp endpoint, enable Trino query access, and configure the Develocity MCP Server’s authentication. See the installation manual for details

[UPGRADE NOTE] Reaching the Reporting Kit from the Develocity cluster is a new outbound network direction. Ensure the Develocity cluster can reach the Reporting Kit’s Trino query-access endpoint, and that the endpoint’s ingress is enabled (it is off by default)

[NEW] Trino: the dependency summary reports the source each dependency was served from, in the origin_type and origin_url columns

[NEW] Trino: Docker builds report their project, tags, environment, and Dockerfile-level cache hit rate

[FIX] Grafana: the image no longer bundles the unused OpenTSDB data source plugin

[FIX] Trino: the image no longer ships curl

[FIX] Hive Metastore: the image and its database image are based on Debian 13, ship patched Jackson and Netty libraries, and no longer ship unused vulnerable Java libraries

[FIX] MinIO: the image ships a patched silo build, clearing three critical vulnerabilities