> ## Documentation Index
> Fetch the complete documentation index at: https://releasenotes.siya-ai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SIYA — Release Notes

*Version: V0.4.101*

# April 2026

## Overview

This release improves RDC-aware MCP setup and the change-password screen. Infrastructure and containers are hardened, and several security findings from scanning and testing are addressed.

***

## Improvements & new features

1. **RDC users and MCP** — Your email is carried from the app through MCP authentication so RDC(Remote Data Center)-specific setup applies correctly. RDC users get MCP tools scoped per session, aligned with how you signed in.

2. **Change password screen** — The change-password experience is restyled for clarity and consistency with the rest of the app.

***

## Fixes and enhancements

These updates cover interface polish and behind-the-scenes reliability—grouped together because many fixes touch both what you see and how the service behaves.

1. **Quick actions** — Icons on quick-action buttons match the updated visual style.

<Frame>
  <img src="https://mintcdn.com/synergy-6a49c0b0/qZ6wvjMhmEB-VEyH/assets/V0.4.101/101_Bugfixes_1.png?fit=max&auto=format&n=qZ6wvjMhmEB-VEyH&q=85&s=44cb4237d19dc361a18991e751b9f02d" alt="Siya" width="100%" height="100%" data-path="assets/V0.4.101/101_Bugfixes_1.png" />
</Frame>

2. **Display menu** — The display menu layout is corrected so options line up as expected.

3. **Live streaming reliability** — When the live event stream is briefly overloaded, the client retries in a controlled way so conversations recover instead of failing mid-reply.

4. **PDF embedding checks** — PDF links are no longer marked non-embeddable only because a quick check timed out.

<Frame>
  <img src="https://mintcdn.com/synergy-6a49c0b0/qZ6wvjMhmEB-VEyH/assets/V0.4.101/101_Bugfixes_4.png?fit=max&auto=format&n=qZ6wvjMhmEB-VEyH&q=85&s=5c2a91f285b3fb90e22616c5cca6f3c0" alt="Siya" width="100%" height="100%" data-path="assets/V0.4.101/101_Bugfixes_4.png" />
</Frame>

5. **MCP tool data** — A broad sweep of MCP environment data for redaction was removed so legitimate tool output is not blanked out by mistake.

6. **Guards and sub-agents** — Security guardrails produce fewer false blocks on sub-agent work and outdated agent definitions.

7. **MCP OAuth errors** — Error handling for MCP OAuth is better at matching the real failure so you see a useful message.

<Frame>
  <img src="https://mintcdn.com/synergy-6a49c0b0/qZ6wvjMhmEB-VEyH/assets/V0.4.101/101_Bugfixes_7.png?fit=max&auto=format&n=qZ6wvjMhmEB-VEyH&q=85&s=a90d7b42d72da5b1828b8d0ca5e0b9cd" alt="Siya" width="100%" height="100%" data-path="assets/V0.4.101/101_Bugfixes_7.png" />
</Frame>

***

## Security

1. **Kubernetes checks** — All Checkov findings reported for our Kubernetes manifests are addressed.

2. **Least privilege in the cluster** — A cluster-wide role is replaced with a namespace-scoped role where appropriate.

3. **Container hardening** — The application user is no longer in the sudo group, reducing the risk of privilege escalation inside the image.

4. **Penetration test** — A critical remote-code-execution issue found in testing is fixed.

5. **Browser-based coding environment** — Allowed web origins are tightened, and the code-server instance uses password authentication.

6. **Image scanning** — Trivy scans container images in CI/CD so vulnerable dependencies surface in the pipeline.

7. **Merge protection** — Pull requests can be blocked when Trivy reports critical vulnerabilities in images.

8. **Shift-left on infrastructure** — Kubernetes configuration is scanned with Checkov and Trivy as part of the PR workflow.

9. **Vulnerabilities and noise** — Critical CVEs in dependencies are addressed, and Trivy rules are tuned so known false alarms on the Dockerfile do not block work unnecessarily.

***

## Support

For questions or issues related to this release, please contact your support team or refer to the project documentation.