LinearB On-Prem Agent v5.0.5

Released 2026-10-22.

This release also contains everything that was prepared for v5.0.4, which was withdrawn and never published. If you are upgrading from v5.0.3, these notes cover the whole change.

Action required

• If you set global.JIRA_ISSUE_SELECTIVE_FIELDS to a custom list (or to "", meaning all fields), the setting has been removed and the upgrade now fails until you delete it. The agent would otherwise ignore it silently. Before upgrading, send your value to LinearB support and confirm it has been configured for your Jira integration, then remove the setting from your values file. If your values file still carries the old stock default, no action is needed.

Improvements

• Job status reporting: on-prem jobs now report status, and onprem-utils reports cluster state.
• Webhook receiver: handlers run as background tasks, with 4 workers by default and a load harness.
• Jira: the list of issue fields to collect is now managed by LinearB per Jira integration instead of by the JIRA_ISSUE_SELECTIVE_FIELDS setting.
• Linta: a slow or exhausted Redis connection during commit enrichment no longer blocks the worker's health endpoint, so the worker is no longer restarted by its liveness probe while it waits on Redis.

Bug fixes

• Webhook receiver: webhook handlers no longer run on the event loop, and the probe's failureThreshold is set in the template.
• Webhook receiver: repository activity is flagged when the webhook arrives.
• Bitbucket Server pr:merged webhook events are now handled.

Security and dependency updates

• Linta updates the Python certifi CA bundle to 2026.10.19, removing the emSign root certificates whose intermediate CA keys were compromised (GHSA-6q48-6c7w-9gw2, critical). The Debian ca-certificates package is updated to match.
• Sensors and PM Connectors are updated to their latest releases, and other LinearB components carry CVE fixes.
• Datadog agent and cluster-agent are updated from 7.83.3 to 7.84.2 (CVE fixes).
• The bundled ingress-nginx is updated to controller v1.15.1 (chart 4.15.1), and the unused default backend image is no longer shipped.
• The JFrog S3 download endpoint is documented as required egress.

Component versions