Skip to main content

​
Genesis v1.20.2 Release Notes

November 6, 2026

​
Highlights

  • Admins can preview/enable retention of backed-up old chats/finished Missions, with individual restore.

​
Deployment Artifacts

Use these exact references when deploying this release:
  • Genesis release: v1.20.2 (promoted from v1.20.2-rc.5)
  • Docker Hub image: genesiscomputingai/genesis:v1.20.2
  • Docker Hub digest: genesiscomputingai/genesis@sha256:d2ef1a9e88cf32f27051c513cd1ba55092659e45ee74158b0e854f8482488751
  • Helm chart: oci://registry-1.docker.io/genesiscomputingai/genesis
  • Helm chart version: 0.3.141 (appVersion: v1.20.2)

​
Upgrade Notes

  • Helm: reuse the original master key through one source; complete recovery before upgrading deployments that ran on the development key.
  • Native App admins: grant APP_ADMIN; unlocking is unavailable. Audit shell access; rotate secrets for unexplained access. If deferring upgrade, remove the stored shell password.
  • Before upgrade, add missing HTTP-event Slack signing secrets; Socket Mode is unchanged. Unlinked senders, including guests/Slack Connect, must sign in and link Genesis accounts.
  • Databricks: replace host-based warehouse-write rules with connection IDs or host tags before rollout; re-propose pending pre-upgrade writes afterward.
  • Databricks CLI 1.24: remove secret-valued variable references from plain fields. Feature View recreation/deletion needs confirmation Genesis’s deploy tool cannot supply.
  • Dashboards: name connections; one SELECT/WITH; connection/allowlist/source-dashboard grants, edit to refresh. Hosted apart: set VITE_API_BASE_URL or window.GENESIS_API_BASE_URL
  • Replace environment/bare-cloud workflow references with accessible Genesis secret names; grant intended users access or use personal credentials.
  • For refused personal external-reference connections, ask an admin/manage-secrets holder to recreate them under their own name or authorized shared scope.
  • With sign-in on, app data calls need signed viewer tokens and viewer access. Reissue empty-allowlist tokens with datasets; resync old refresh jobs.
  • Restore scheduled-job creators’ agent/thread access, or recreate affected jobs under an authorized person.
  • MCP OAuth admins: replace configured redirects containing credentials/forbidden characters; use canonical loopback ports or omit the port.
  • Bitbucket Cloud connection owners: set the missing Bitbucket username before pushing.
  • Asset Bundles: lakehouse on own storage with External data access needs —var lakehouse_external_privilege=EXTERNAL_USE_SCHEMA; no default Opus: served chat_endpoint on deploy/run.
  • For named-table SQL Server copies, grant the connection read access to the source column catalog.
  • Replace bundled SQLite dbt adapters; export needed Teradata data another way before upgrading, as saved Teradata connections can no longer be queried.
  • Self-hosted local Streamlit:8501 users must switch to React, normally port 8080, and update old links.
  • API-only Genesis Apps relying on VERIFY need a root page returning HTTP 200 or a redirect.
  • If workspace history contains private memory, publish or scan needed files from a new repository; do not bundle/copy the old history.

​
Improvements

  • Launchpad lists S3 buckets and folders for selection.
  • Admin Storage shows use by type, person and role, with configurable low-space alerts.
  • Recurring prompt jobs pause after three consecutive failures by default; notices explain resuming after repairs.

​
Bug Fixes

  • With sign-in enabled, app background processes have maintenance-only access; viewer requests keep the person’s dataset, result and agent access checks.
  • Databricks migration plans use the specified destination catalog or the connection’s current catalog.
  • Resumed coding sessions with the same agent name rejoin Rooms and receive missed messages.
  • Sandbox sessions and background-command results stay scoped to their original user.

​
Preview (opt-in)

  • Opt-in, off by default: admins with config access can let their own Claude Code threads search redacted JSON server logs read-only.