Release NotesSeptember 16, 2026
Crogl 2.10.0 Release Notes
Crogl 2.10.0 runs on Kubernetes, serves everything on one port, adds a reasoning-level setting, and ships a software bill of materials with every installer.
Before you upgrade
This upgrade changes ports and configuration keys on every deployment. Read Deprecations below first, and upgrade the CLI on every machine that connects to the server.
What's New
- Run on Kubernetes. Each release publishes a Helm chart and matching images. Requires Kubernetes 1.25 or later and PostgreSQL 17 or later (or the bundled PostgreSQL). Amazon EKS is the tested distribution. Air-gapped sites install from a bundle.
- One port. The web UI, sign-in, documentation, and REST API share port
4043. Port8082is removed, and the identity endpoint moves from/whoamito/api/v1/whoami. - Reasoning level. Set how much a reasoning model thinks, deployment-wide, in model settings or with
--reasoning-effortoncrogl set-lm-settings. Higher levels cost more per turn. - Interrupted turns keep their output. Failed, timed-out, and canceled turns keep the partial answer, marked as interrupted.
- Software bill of materials. Installs include a CycloneDX SBOM at
$CROGL_HOME/share/sbom/crogl.cdx.jsonand a checksum manifest at$CROGL_HOME/share/manifest.json.
Fixes
- A connector-setup card left from an earlier release now asks you to restart connector setup, so your credentials always reach a card that can save them.
Under the hood
- Knowledge-graph learning continues when a connected tool is unreachable and resumes when it responds.
- Dependencies are updated with current security patches.
Deprecations
- Server settings:
ui.portandui.tlsbecomeweb.portandweb.tls. Old keys work with a warning for at least two minor releases.api.portandapi.tlsare ignored. - CLI settings:
api.host,api.port, andapi.allow_insecurebecomeweb.*. Run the CLI interactively and it offers to migrate your file, saving the original. The default port changes from8082to4043; custom ports stay as set. - Kubernetes values:
ports.ui,tls.listeners.ui, andservice.uibecome theirwebcounterparts. Theapisettings andingress.apiPathare removed. The Service name changes from<release>-uito<release>-web.