> ## Documentation Index
> Fetch the complete documentation index at: https://docs.genesiscomputing.com/llms.txt
> Use this file to discover all available pages before exploring further.

# v1.20.2

> Genesis Data Agents v1.20.2 release notes

## Genesis v1.20.2 Release Notes

**November 6, 2026**

### Highlights

* Admins can preview/enable retention of backed-up old chats/finished Missions, with individual restore.

### Deployment Artifacts

Use these exact references when deploying this release:

* **Genesis release:** `v1.20.2` (promoted from `v1.20.2-rc.5`)
* **Docker Hub image:** `genesiscomputingai/genesis:v1.20.2`
* **Docker Hub digest:** `genesiscomputingai/genesis@sha256:d2ef1a9e88cf32f27051c513cd1ba55092659e45ee74158b0e854f8482488751`
* **Helm chart:** `oci://registry-1.docker.io/genesiscomputingai/genesis`
* **Helm chart version:** `0.3.141` (`appVersion: v1.20.2`)

### Upgrade Notes

* Helm: reuse the original master key through one source; complete recovery before upgrading deployments that ran on the development key.
* Native App admins: grant APP\_ADMIN; unlocking is unavailable. Audit shell access; rotate secrets for unexplained access. If deferring upgrade, remove the stored shell password.
* Before upgrade, add missing HTTP-event Slack signing secrets; Socket Mode is unchanged. Unlinked senders, including guests/Slack Connect, must sign in and link Genesis accounts.
* Databricks: replace host-based warehouse-write rules with connection IDs or host tags before rollout; re-propose pending pre-upgrade writes afterward.
* Databricks CLI 1.24: remove secret-valued variable references from plain fields. Feature View recreation/deletion needs confirmation Genesis's deploy tool cannot supply.
* Dashboards: name connections; one SELECT/WITH; connection/allowlist/source-dashboard grants, edit to refresh. Hosted apart: set VITE\_API\_BASE\_URL or window\.GENESIS\_API\_BASE\_URL
* Replace environment/bare-cloud workflow references with accessible Genesis secret names; grant intended users access or use personal credentials.
* For refused personal external-reference connections, ask an admin/manage-secrets holder to recreate them under their own name or authorized shared scope.
* With sign-in on, app data calls need signed viewer tokens and viewer access. Reissue empty-allowlist tokens with datasets; resync old refresh jobs.
* Restore scheduled-job creators' agent/thread access, or recreate affected jobs under an authorized person.
* MCP OAuth admins: replace configured redirects containing credentials/forbidden characters; use canonical loopback ports or omit the port.
* Bitbucket Cloud connection owners: set the missing Bitbucket username before pushing.
* Asset Bundles: lakehouse on own storage with External data access needs --var lakehouse\_external\_privilege=EXTERNAL\_USE\_SCHEMA; no default Opus: served chat\_endpoint on deploy/run.
* For named-table SQL Server copies, grant the connection read access to the source column catalog.
* Replace bundled SQLite dbt adapters; export needed Teradata data another way before upgrading, as saved Teradata connections can no longer be queried.
* Self-hosted local Streamlit:8501 users must switch to React, normally port 8080, and update old links.
* API-only Genesis Apps relying on VERIFY need a root page returning HTTP 200 or a redirect.
* If workspace history contains private memory, publish or scan needed files from a new repository; do not bundle/copy the old history.

### Improvements

* Launchpad lists S3 buckets and folders for selection.
* Admin Storage shows use by type, person and role, with configurable low-space alerts.
* Recurring prompt jobs pause after three consecutive failures by default; notices explain resuming after repairs.

### Bug Fixes

* With sign-in enabled, app background processes have maintenance-only access; viewer requests keep the person's dataset, result and agent access checks.
* Databricks migration plans use the specified destination catalog or the connection's current catalog.
* Resumed coding sessions with the same agent name rejoin Rooms and receive missed messages.
* Sandbox sessions and background-command results stay scoped to their original user.

### Preview (opt-in)

* Opt-in, off by default: admins with config access can let their own Claude Code threads search redacted JSON server logs read-only.