Domino Cloud release notes

​

Cloud Release 91

​

New features

Tags and properties extend to Policies

​

Enhancements

• Coding assistants in the Slurm Workspace environment. Domino now distributes a domino-slurm-environment base image with Claude Code, Codex, and GitHub Copilot preinstalled, matching the Domino Standard Environment, along with the Domino Claude plugin and Domino skills. Claude Code and Codex are available both as command-line tools and as VS Code extensions; Copilot ships as a command-line tool. Assistant settings persist across Workspace sessions.

• Pin a specific snapshot when you launch a Job or Workspace. The data step now offers a per-asset choice between mounting all snapshots, the default, and pinning one. A pinned snapshot mounts read-only at the asset’s usual path, so existing code reads point-in-time data without changing paths. Applies to Datasets and NetApp Volumes.

• New NetApp Volumes carry their Domino name into ONTAP. A volume created in Domino is now named in ONTAP with the name you give it instead of trident-{volumeid}, so it is findable from tools outside Domino. Renaming a volume in Domino does not rename it in ONTAP, and volumes created before this change keep their existing name.

• Sign in to the CLI from a machine with no browser. domino login --device https://your-domino-url starts a device code sign-in flow: it prints a verification URL and a short code you open on any other device to complete sign-in, useful from a remote server reached over SSH. See Install the Domino CLI.

• Scheduled Jobs keep their storage selection across pause and resume. Pausing a Scheduled Job and then resuming it no longer clears its storage and snapshot configuration, so a resumed schedule runs against the same data it was configured for.

• HPC job display fixes. The HPC jobs table now shows the correct CPU percentage, and the job details panel shows the correct submission script, average CPU and peak memory usage, and handles resource requests that Slurm leaves unset. Array job submission details are captured and displayed correctly.

• Share an AI endpoint with specific users and organizations. The share dialog for an AI endpoint no longer disables the additional-access picker with the error “A project must be selected to include additional users or organizations”. You can grant access to named users and organizations from both a project page and the global Endpoints page.

​

Notes for platform administrators

• Apps started with a Service Account token keep running past token expiry. An App or Job started from a request bearing a Service Account (DSA) token previously received only a short-lived access token, so it began failing API calls once that token expired. Domino now also obtains and stores an offline session token for the service account, so the execution keeps working without a restart. This change is transparent and requires no action.

• Improvements to backup coverage for platform databases.

• Git credentials respect white-label configuration. The Git credentials section of the account settings page now honors your deployment’s white-label configuration instead of showing default branding. This change is transparent and requires no action.

​

Breaking changes & deprecations

• The legacy AI Gateway is removed. See LLM Gateway 2.0 for the successor and migration path.

​

Cloud Release 90

​

New features

Governance for Apps

Apps SDLC: build, preview, and publish Apps from a Workspace

Submit HPC jobs to Slurm

​

Enhancements

• Tags and Properties now cover Compute Environments. Tag and add properties to an Environment, browse Environments in the Tag Browser and property browser, and search them by tag, tag description, or property value. Environment owners get the new EditEnvironmentTaxonomyTag and EditEnvironmentPropertyValues permissions, so tagging follows environment ownership rather than platform admin rights. Duplicating an Environment copies its tags.

• Model Registry search is consolidated into a single bar. Free-text search on model name and MLflow tags, and taxonomy tag chips, now live in one control instead of 2 adjacent search boxes. Properties on models are set per model version rather than per model name.

• Global search shows entity counts per type, adds columns to the results table, and covers files and Datasets. Property queries such as project.name= return the matching Project. Grouping and a Clear control on the entity type filter make long result lists easier to scan.

• The Posit Package Manager integration is on by default, set through the com.cerebro.domino.workbench.workspace.enablePpmUI central configuration flag. The Workspace panel also surfaces packages from repositories that had no snapshots before: previously only repositories subscribed to a public source carried the date-based snapshot labels the panel needs.

• Flows run on remote Data Planes by default, through the com.cerebro.domino.flows.enableRemoteDataPlaneSupport central configuration flag. Flows fixes in this release: NetApp Volume snapshots declared in a Task’s data configuration now mount, input files are no longer removed by executor cleanup, artifact export succeeds at large artifact counts, and raw file uploads retry on transient idle-connection errors.

• Extensions improvements: Domino-official Extensions sort first, install cards link to the matching configuration accordion and back, and NetApp Volume and NetApp Volume file mount points are available in manifest v1 (data volume links now carry the snapshot ID). The installer warns when an installed Extension reports isCompatible=false, when a version lookup fails, and when the install list is degraded. Cancelling an upgrade restarts the previous App version rather than leaving the Extension down.

• Job and scheduling fixes: an invalid cron expression is rejected before it’s saved instead of deleting the scheduled job, editing a scheduled job saves the revision shown in the Environment field rather than defaulting to Active, External Data Volume checkboxes in Start a Job default to checked again, and job cluster launch forms accept unrestricted Hardware Tiers for Spark, Ray, and Dask worker slots instead of silently clearing the selection.

• The global Apps list loads faster on large deployments, where a separate instance lookup for every App previously caused timeouts. Saving Edit App configuration with no changes no longer creates an empty version, App view counts are consistent, and the list no longer fails on older App records that are missing user information.

• Governance fixes and polish: the Policy Enforcement page has updated terms and an Edit button for safeguards, published policies no longer display as archived, findings from earlier policy versions stay reachable after an upgrade, resetting a bundle uses the correct policy version, approval notification links point to the right place, and the Attach button is disabled until a policy is selected.

• Idle timeout preserves your context. When Domino signs you out for inactivity, signing back in returns you to where you were, such as a Workspace or a Dataset, instead of the home page.

• Git fixes: the Project code view loads after Git credentials are removed, so you can select a new credential from the UI, and default credential fallback no longer picks a credential for the wrong provider. Bitbucket Cloud HTTPS credentials support the username and API key scheme that replaces App Passwords. In Workspaces, Continue sync stays enabled when conflicting files are in subdirectories.

• Data fixes: mounting a Dataset that was shared with you works, mounts resolve for Dataset selections on remote Data Plane executions, and Volume tags appear in the volumes list. The /entity-tags endpoint filters on the caller’s permissions, tag search filters nested items in tree view, App, Dataset, and Volume tags and properties copy into Project templates, and a nightly job clears orphaned tags and properties.

• Agent performance charts get usability and functional improvements. Domino Model Monitor (DMM) notification settings accept an SMTP relay with no username or password, which unblocks internal IP-based relays that don’t require authentication.

• Tags now extend to Models. Tag, filter, and browse Models through your organization’s tag structure, which completes tag coverage across Apps, Projects, Project Templates, Datasets, NetApp Volumes, and Models. Tags on a Model are separate from any MLflow tags on the underlying model. See Tags.

​

Notes for platform administrators

• Secure identity propagation for Apps is enabled by default in Domino Cloud. SecureIdentityPropagationToAppsEnabled (enhanced) and com.cerebro.domino.apps.extendedIdentityPropagationToAppsEnabled (extended) both default to true. Previously both were off by default and had to be requested. Running Apps aren’t affected until they’re restarted. Action is required only for Apps that host secondary pages or additional assets: those need the root-path change described in the App security and identity documentation before their next restart.

• The API Gateway (Envoy Gateway with a gRPC external-authorization service) gained a large set of routing and authentication fixes ahead of general availability. Nucleus routes outside /api/ and /v4/ no longer return 404 from execution pods, the Governance, Cost, and Audit Trail APIs resolve in-cluster whether or not the gateway is on, Arrow FlightService keeps its audit trail and API-key authentication, the nginx sidecar stops overwriting an explicit Authorization or X-Domino-Api-Key header set by user code, and the external-authorization check has an explicit timeout so a slow check can’t stall the gateway. Envoy Gateway is re-pinned to 1.8.2 before 1.7.3 reaches end of life. No action is required.

• SpiceDB authorization data migrations run by default. A readiness gate reads the domino-platform/authz-data-migrations ConfigMap and keeps authorization on the legacy path until the required migrations are applied, blocking grant writes only while a planned migration is pending. Pre-flight and post-migration checks compare expected and written relationship counts and sample permission checks. Organization membership reads move to SpiceDB as the source of truth, behind a flag that can be reverted at runtime, and Domino logs a message when the legacy and SpiceDB authorization systems disagree. No action is required.

• Keycloak client secrets are randomized per deployment. The domino-play and realm-management clients previously shipped with a secret hardcoded in the realm configuration, which anyone with that value and network access could use to mint a service-account token. A dedicated Keycloak client is also added for the workload service. No action is required.

• ECR credential handling: the nucleus-ecr-credential-refresher CronJob refreshes credentials for image.registry as well as config.dockerRegistry.host. Where those point at different ECR accounts, the platform-image token previously expired after roughly 12 hours and remote Data Planes started failing with ImagePullBackOff. On AWS GovCloud, the credential refresher init job now calls the GovCloud STS endpoint instead of the commercial one, which unblocks upgrades that use ECR as the external Docker registry. No action is required.

• Karpenter EC2NodeClass resolves the root device name from the Amazon Machine Image (AMI) that’s actually selected. Previously the device name was set from the global eks.use_domino_ami flag, so a node class pinning a stock AL2023 image attached its configured 100Gi or 500Gi volume to /dev/sda1 as an orphan while the node booted on the image’s default root volume of roughly 20 GiB. No action is required.

• All SMB volume mounts failed in 6.2.3 and now work. NetApp Trident components are updated to 26.06.0, with the Trident, Trident operator, and tridentctl images moved to Chainguard. No action is required.

• Model endpoints work in offline and air-gapped deployments. The harness-proxy image can be overridden and resolves from the Data Plane rather than being pulled from Quay. No action is required.

• Provisioning Project partitions is partly automated for admins, and HPC job submission checks partition configuration before accepting a job.

• Taxonomy service reliability: the taxonomy-postgres-migrations job no longer fails on hardcoded credentials, GET /api/taxonomy/v1/namespaces no longer returns 500 during Cloud Release windows, and idsm-audit-trail-mongodb memory limits were reviewed. No action is required.

• New Grafana dashboards cover the API Gateway, and the Restart Nucleus admin page is easier to use. No action is required.

• Platform maintenance: Kubernetes 1.35 is validated for GKE and 1.34 for OpenShift 4.21, platform apps move to Python 3.14, and Fluent Bit images move to Chainguard. This release also includes a security hardening pass across platform components and Environment images, removes committed secrets from model development lifecycle repositories, and stops the deployer from printing sensitive values in its configuration output. No action is required.

• The workload operator can be configured not to mount /tmp from the execution volume. This is opt-in and the default behavior is unchanged.

​

Breaking changes & deprecations

• The CreateApp and CreateEndpoint gate actions are deprecated in favor of Deploy. Existing gates that reference them keep working and can still be read, but gate creation and updates that use them are rejected. Update gate YAML to Deploy before your next policy edit. The deprecated failOpen key no longer appears in gate YAML.

• The Jira integration item is removed from the admin panel.
• The project.tag.approved= search operator is removed. It filtered on the approved flag of the previous free-form Project tags, which the shared tag structure replaces; queries using it no longer resolve. Filter a result set by tag from the filter side panel beside your search results or by typing the tag into the search bar instead. The project.tag= operator is unchanged. See Use Domino search.
• Project Tasks, Goals, and the Project Stages and Status UI are removed. Domino no longer shows the Tasks and Goals page, the Project stage box and stage filters, the combined Stage and Status component in the Project sidebar, the Stage and Tasks columns in the Projects Portfolio, or the Admin console’s Project stages entry. The read-only Project Status badge next to the Project name remains, and the Activity feed still records Job, Workspace, and file-comment events. Use your organization’s issue tracker for task-level milestones. The backend Goal APIs remain available through the API and CLI.
• The Project-level Jira integration UI is removed. Domino no longer shows the UI to link a Domino Project to a Jira ticket or to sync Domino tasks with Jira subtasks, and existing per-Project Jira links are no longer surfaced in the Project. The backend Jira APIs and the deployment-wide Jira OAuth registration at /admin/jiraConfig are unchanged.

​

Cloud Release 89

​

New features

Knowledge management: tags and properties

Browser-based CLI login

​

Enhancements

• The bundle view now shows an indicator when a policy on the bundle is enforced, so reviewers can see at a glance which policies are enforced.

• Governance admins get a new admin view for creating policy enforcers, making it easier to see and manage enforcement without digging through policy YAML.

• Sequential governance workflows support bulk updates, and the Deliverables table got usability improvements to match.

• Extension installs now show a Cancel button, so you can stop an in-progress installation instead of waiting for it to finish.

• The Audit Trail OpenAPI schema now includes the e-signature fields that were missing, so programmatic consumers of the Audit Trail get the full record.

• Snapshot events for Domino Datasets and NetApp Volumes now carry more detail, including on “Create Snapshot” and “Mark Snapshot for Deletion” events, for better traceability.

• Runs now get an environment variable pointing to the NetApp Volume location, so scripts can reference it without hardcoding paths.

• Imported dataset mount paths can now include the project name, so identically named datasets from different projects stay distinguishable. The old paths remain available as symlinks for backward compatibility, and the behavior is enabled with a central configuration flag. This continues last release’s fix to imported dataset naming.

• Notifications are less noisy: several fixes address notifications that were unclear, overly persistent, or queued incorrectly.

• Fixed bugs affecting page navigation and display: the Audit Trail page could appear completely empty instead of showing logs, refreshing the tags page in tree view sent the browser to a 404 page, and tag display was broken in table columns that have been widened.

• Fixed a failure in experiment execution when running on a remote data plane, and an issue where using a Git tag (instead of a branch) in a Git-based project could break the Jobs output.

• Fixed environment-related issues: domino_data.data_sources was not found in the R reticulate environment (restoring Data Source access from R through the Python SDK), a package mismatch in the Ray GPU cluster environment, and a bug where updating an app’s environment could produce a version that couldn’t actually be deployed.

• Assorted governance UI polish: corrected wording on the bundle-creation toast, fixed formatting in the policy description modal, and fixed several deploy-modal bugs.

​

Notes for platform administrators

• Fixed an issue that blocked upgrading nginx-ingress-fips to 1.13.9-r29: the upgraded nginx drops legacy TLS ciphers that AWS Classic Load Balancers depend on, which could take deployments behind those load balancers offline. The fix enables DHE, a cipher both sides support, so deployments behind Classic Load Balancers upgrade safely. No action is required.

• Air-gapped SpiceDB deployments now upgrade correctly. This is a fix to the upgrade path itself, not a configuration change; no action is required.

• Domino Standard Environment (DSE) images are upgraded to Ubuntu 24.04.

• Fixed a remote data plane failure where the workload-operator chart could not install because of a missing nucleus-execution-jwt secret. No action is required.

• This release includes a broad security hardening pass across platform components and environment images, remediating known vulnerabilities in dependencies such as log4j, netty, aiohttp, and nginx ingress. No action is required.

• Keycloak 26.6.2 tightens token introspection to require the calling client in the token’s audience. Domino now includes the client ID in the audience for service accounts and Personal Access Tokens, so both keep authenticating after the Keycloak upgrade. This change is transparent and no action is required.

• The Audit Trail UI used a hardcoded one-year date range even though the back end retains five years by default; the UI now reflects the configured retention period. No action is required.

• Fixed a bug where workspace /tmp permissions were set to 777 even when nonRootExecutions was disabled. No action is required, but if you rely on restrictive /tmp permissions for compliance, confirm the fix took effect after upgrading.

​

Breaking changes & deprecations

• CLI versions older than 6.2.3 use a retired authentication client and can no longer log in. If domino login fails after this release, download and install the latest Domino CLI.

​

Cloud Release 88

​

New features

Relative revalidation schedules for Governance approvals

Secondary Git repositories in Flow tasks

​

Enhancements

• The Flyte Domino agent now supports runtime overrides, so you can customize a task’s execution parameters when you launch it without editing the underlying task definition.

• The global navigation now includes Governance, making policies, evidence, and bundles easier to find from anywhere in the product.

• The Job detail page now shows the default branch name for jobs started from a Flow. Previously the branch was not shown for Flow-started jobs, which made runs harder to trace back to their source.

• Environment variables now have an optional description field, so teams can record what each variable is for alongside its name and value.

​

Breaking changes & deprecations

​

Cloud Release 86

​

New features

Compute usage visibility to manage compute costs

​

Enhancements

• New columns in the Jobs dashboard: Finished (completion timestamp) and Total Duration. You can spot slow or stuck jobs from the list without opening each one.

• R jobs can now accept any command-line parameter that the R executable accepts.

• More control over email notifications when you share an App. Admins can set whether sharing an App sends a notification email by default.

• When you use an Extension, the sidebar now highlights which Extension you are in.

• Fixed a defect that allowed Apps to be created with special characters in their names that later caused routing and deployment failures. Invalid names are now rejected at creation with a clear error.

​

Notes for platform administrators

• A new admin policy can block project invitations to email addresses outside your Domino organization. When the policy is enabled, project access and sharing rejects email invites to non-Domino addresses and shows the inviter a message explaining the policy. Adding existing Domino users through the user picker is unchanged, and the default behavior without the policy is unchanged. Action required only if you want to enforce the boundary: enable the policy.

• Access to Grafana dashboards is now enforced through Keycloak, so observability access follows the same roles as the rest of the platform. No action is required.

• enableServiceLinks is now disabled for components in the domino-compute namespace, so Kubernetes no longer injects service-discovery environment variables into workload pods. This change is transparent and does not affect workload behavior; no action is required.

• Domino Model Monitor (DMM) ingestion job health checks were added to the admin toolkit, and DMM-related checks were consolidated. No action is required.

​

Breaking changes & deprecations

​

Authentication, identity & security

• User information API: New backend API to retrieve user information based on user ID.
• Iframe permissions for microphone and clipboard: Customer-driven addition of “microphone” and “clipboard” to the iframe allow src tags.
• Grant ReadOnlySupportStaff ViewEnvironments permissions: Fixes ReadOnlySupportStaff global role to have permissions to view environments.
• Personal Access Tokens: Domino now supports Personal Access Tokens (PATs), allowing users to generate their own API credentials with a custom name, description, and expiration time. Administrators can oversee and manage tokens across the platform, including the ability to revoke or delete them when needed.

​

Platform & UI

• Workspace Breadcrumb Project Link: Workspace breadcrumbs now link back to their parent project.
• Env Vars Table: Sort & Copy: The environment variables table now supports sorting, and each value has a copy button.
• Custom Job Email Template Cleanup: Removed test content from the custom job email template.
• NetApp Volume Mount Points: Full support for NetApp Volume mount points in the Domino UI, including a new API component, details panel, file-open integration, and UI adjustments to accommodate the new mount point type.
• Model Details: Full Markdown Overview: The Model Details page now renders the full model overview markdown instead of a truncated preview.
• Scheduled Jobs Notifications: Security controls: Logs no longer included by default in emails; ability to restrict custom recipients via CC flag.

​

Tag Browser

• Tagging now extends to NetApp Volumes. Tag, search, and browse NetApp Volumes through your custom tag structure. We’ll be integrating tagging with more assets in updates coming soon.
• Tagging extends to Domino Datasets. Tag, search, and browse Datasets through your custom tag structure.

​

App Governance & SDLC

• AI Gateway UI is now hidden by default behind a feature flag.

​

Curated configuration records management

• New API Endpoints: Added backend endpoints for Curated Configuration Records, enabling Cloud Admins to manage curated configuration sets for their tenants.
• Feature Flag: Added feature flag to show/hide the Curated Configuration Records section, allowing controlled rollout per tenant.
• Project Behavior Page: UI Sections: Built the Long-running Workspaces, Restrictions & Limitations, and Flexibility & Customization sections of the Project Behavior configuration page.

​

Governance

• Governance Enhancements: Governance demands more than a one-time sign-off: approvals can now be scheduled to renew on a recurring basis, so your compliance posture stays current as models and projects evolve. Approvers are notified when renewal is due, and bundles automatically fall out of compliance if a renewal lapses.

​

Knowledge management

​

Tags

​

Platform & infrastructure

• GPU metrics panel now renders based on available GPU data rather than presence of DCGM label.

​

Compute Environments & DSE

• Admin access to cluster Web UIs for troubleshooting: Admins can now view the Spark, Ray, and Dask cluster Web UIs for other users’ workspace sessions to inspect executor logs, configs, and worker state, without being granted access to the user’s notebook/IDE. When an admin opens another user’s workspace session, the session page now opens directly on the Cluster UI tab, giving admins a working diagnostic view even though the IDE itself remains restricted. Enabled by default: no central configuration or feature-flag change required.
• Environment select pattern: A consistent environment select UI pattern introduced across Domino for choosing a compute environment when launching tasks.

​

UI & UX improvements

• Expanded span type support in tracing decorator: The manual span tracing decorator now accepts the span_type argument, enabling full MLflow tracing argument support. Users can now manually instrument unsupported scenarios without accessing raw MLflow features directly, and traces display the correct icons in the trace viewer.
• Improved terminology in Experiment Manager: When agent traces are detected, the UI now displays “Agent Versions” in place of “Runs,” allowing users to distinguish agent version tracking from traditional ML run tracking within the Experiment Manager.

​

Extensions

​

App versioning & Apps

• PPM language update: Updated PPM-related language in UI and documentation.
• API access section on Dataset details page: The API access UI on the Dataset details page has been relocated to accommodate the new Extensions card mount point.
• Version-specific start/stop: Users can start and stop historical as well as current App versions.
• Edit previous App versions: Pen icon controls added to App detail cards for previous versions.
• App list view cleanup: Edit option removed from the App list view row menu to avoid version ambiguity; editing is now only available from the App details page.
• Edit App wizard update: Deployment step updated to clarify that editing hardware tier no longer triggers a new App version.
• App list performance: Resolved N+1 query issues in the listApps endpoint, significantly reducing MongoDB queries per request.
• Reproducibility for imported repos: App versions now snapshot imported project and Git repo state to ensure reproducibility when restarting older versions.
• App search: Apps now appear as a dedicated tab in global search and in the global search dropdown.

​

AI Governance & model lifecycle

• Policy version diff: Governance Admins can now visualize the diff between policy versions, both in YAML and through the UI.
• Bundle reset: Reviewers in regulated environments can now reset a bundle at any stage moving it back to the first stage, with flexible control over which attachments are retained, while all approvals and evidence answers are cleared for resubmission. A complete reset audit trail is automatically captured in the bundle’s history view.

​

AutoML

• AutoML compute routing: Training jobs from the AutoML Extension now run in the project where the dataset lives via the Domino Jobs API, ensuring correct experiment tracking, per-user compute isolation, and proper permission scoping.

​

Workspace coding assistants

• Includes built-in support for Copilot, Claude Code, and Codex; available as pre-installed VS Code extensions and CLI tools.
• Agents are Domino-aware, with automatic access to datasets, jobs, and registered models.
• A new skills framework adds Domino-specific actions (model training, job execution, deployment, and more).
• Coding agent extensions and settings and chat history persist across workspace restarts.

​

Extensions framework

​

AI Governance & policy versioning

​

Audit Trail

• Telemetry and audit trail for policy versioning; audit events for policy versioning operations added.

​

Policy versioning

• “Reason for Change” field (renamed from “Version Description”) is now required to publish.
• Create versions of existing policies directly from the Policy Builder.
• Upgrade prompts notify data science practitioners when newer policy versions are available.

​

Bundle lifecycle management

• Reset bundles and bulk-delete attachments from the bundle management interface
• Email notifications now track stage transitions

​

Compliance visibility

• Compliance status displayed directly in the policies and bundles tables
• Policy usage counts now reflect bundles across all versions

​

Authentication & security

​

Auth persistence

• Execution now knows if home persistence is enabled.

​

Infrastructure

• Vault agent injector removed from the cluster
• Keycloak service account provisioned
• AuthZ and unified auth foundations established

​

Platform & infrastructure

​

Grafana

• Single source of truth for dashboards and alerts via Grafana Operator CRs.

​

Environments

• DSE split into AI-enabled and standard variants; Copilot VS Code extension added; VS Code marketplace switched.

​

GPU monitoring

• kube_pod_labels metrics now available from remote data planes for GPU workload monitoring

​

Logging

• Fluent-bit event filtering reduces fluentd load for more efficient log processing

​

GenAI & model serving

​

Support for multicloud deployments

• GenAI model registration and deployment now supported on Azure (AKS) and GCP
• NVIDIA environment variables and CUDA toolkit included in vLLM environment for GCP

​

Data Plane improvements

• Remote data plane support added for model APIs
• Fixed Istio resource configuration and control/data plane compatibility

​

Agent deployment

• Fixed issue preventing agent deployment from the experiment run overview page

​

Experiment runs table

• 3-dot menu column is now pinned on the Experiment Runs table

​

Agent monitoring & tracing

​

Chart bucketing

• Monitoring charts automatically re-bucket to 1-hour intervals on 24-hour windows
• Time axis now scales correctly across window sizes

​

Latency and metrics

• Fixed latency chart rendering issues and corrected unit display
• Fixed LLM chart failures when runs are stopped mid-session
• Fixed LLM metrics bucket edges incorrectly based on start time

​

Tracing UI

• Tool call span outputs now wrap correctly within the UI container

​

Data, compute & workloads

​

MPI

• MPI cluster support enabled by default and no longer requires manual feature flag enablement

​

Blob storage backend

• Azure Blob Storage now supported as a storage backend for Workspace File Audit Trail

​

Workspaces

• New Long-running Workspaces section added to Project behavior settings
• Administrators can configure automatic shutdown duration and notification preferences

​

Deprecations

• Governance “Complete” stage removed in favor of the new compliance-based workflow

​

Agentic system experimentation

​

LLM registration & deployment

• Pull models directly from Hugging Face or your experiment runs
• Deploy with OpenAI-compatible APIs
• Make LLMs available to applications and agentic systems

​

Production monitoring & tracing

• Capture every LLM call, agent interaction, and prompt chain as traces
• Works with MLflow auto-tracing integrations (LangChain, OpenAI, Pydantic AI) or standalone functions
• Attach evaluations to traces to measure quality, accuracy, or safety
• Compare performance across experiments to understand what’s working

​

Production deployment & iteration

• Use the same proven infrastructure as Domino Apps
• Instrumentation carries over automatically from experimentation
• Relaunch production configurations into a workspace for debugging
• Maintain clear lineage between production agents and source experiments

​

Workspace audit capabilities

• Log all file operations (read, write, create, rename, delete) on NetApp Volumes and Datasets
• Investigate activity quickly with a dedicated UI for searching, filtering, and exporting events
• Customize the audit app or integrate programmatically with governance tools
• Retain events long-term in customer-managed blob storage with automatic deduplication
• Meet GxP and SOC 2 requirements with comprehensive, auditable records of in-workspace data access

​

Reduce compute costs with spot instances

• Select hardware tiers marked Spot tag to use spot pricing automatically
• Ideal for batch jobs, distributed training, and parallel analytics that tolerate interruptions
• Falls back to on-demand infrastructure if spot capacity is unavailable
• Interrupted workloads retry automatically on available capacity

​

Governance update: Bundle history tab

​

Governance monitoring checks

​

Certificate-based authentication

​

Flow integration with NetApp Volumes

• Export Flow Outputs via UI: Flow Artifacts of type DATA can now be exported to NetApp Volume snapshots via the UI, making them consumable for downstream tools like Apps.
• Programmatic Output Registration: You can also use the Flyte Python SDK to export Flow artifacts to a NetApp Volume and snapshot them automatically as part of your Flow.

​

NetApp permissioning for Apps via Data Sources

​

Snowflake deprecation of single-factor authentication

​

Default branch selection for Git repos

​

Custom autoscaling settings for Apps

​

NetApp Volumes enhancements

• Project Template Support: NetApp Volumes can now be included when creating or using project templates, making it easier to standardize data access across projects.
• Snapshot Tags for Mounting: Tag NetApp Volume snapshots for programmatic mounting. Add optional commit messages at creation time to improve traceability and workflow automation

​

Flow integration with NetApp Volumes

• Mounting Snapshots in Flows: Flows can now mount NetApp Volume snapshots at runtime, providing read-optimized data across execution contexts.

​

Streamlined Governance policy editing

​

Apps autoscaling

• Automatic pod scaling: Adjusts app pods based on CPU and memory usage.
• Default configurations: Ships with built-in settings.

​

Enhanced App discovery experience

• New card-based layout with filtering, sorting, and support for app thumbnails.
• Pin your favorite apps for quick access.
• Lite Users get a dedicated home screen and improved project search.

​

Domino Governance

​

Real-time autosave for evidence notebooks

​

Attach snapshots and flow artifacts

​

NetApp Volumes previews

• Tabular data - .csv, .xls, .xlsx, .parquet
• SAS formats - .sas7bdat
• R formats - .rds
• Text and metadata - .rtf, Define.XML, .xpt

​

Audit Trail enhanced filtering

​

Authenticate with a Personal Access Token

​

Cost Center dashboard updates

​

Keycloak updates

• Upgraded Keycloak to 26.3.5.

​

Track, evaluate, and compare generative AI experiments

• Logging SDK to allow for Universal Tracing: Single-line instrumentation of GenAI across frameworks, such as LangChain, LlamaIndex, Pydantic, and OpenAI Agents SDK, makes it easy to track interactions in your GenAI System.
• Trace Explorer: Visualize GenAI interactions with execution paths, inputs and outputs, and latency to make debugging faster and clearer.
• Evaluations: Add metrics or labels to traces from the SDK or UI, enabling programmatic evaluations with your preferred framework or quick hand scoring by SMEs.
• Trace Diffs: Compare traces and evaluation metrics across runs to understand how different configurations perform, with a granular view into sample-level differences in your evaluation set.

​

RabbitMQ updates

​

Enhanced model endpoint monitoring

• In Domino: Data scientists can view endpoint performance metrics directly from endpoint version pages, without leaving the interface.
• In Grafana: Administrators get advanced monitoring dashboards with deeper visibility into system metrics and performance trends.

​

App sharing and access management updates

• A new Access & sharing view adapts based on viewer settings, with additional user management options for project-specific apps and clear notices for broader access levels.
• A new Access & sharing button is now available on the app overview page.
• After publication, app access is managed through the Share App dialog.
• Users now receive an email and in-platform notifications when they are granted app access, including the app name and a direct link to the app details page.

​

Governance: Sequential workflows enforce stage order

​

TLS 1.3 update

​

Governance gates for Apps and model endpoints

​

UX driven Governance policy configuration

​

Self-service node pool management

​

Domino Apps enhancements

• A new app publishing UI.
• The ability to create multiple apps in a single Domino Project.
• The new global apps list page and viewing running applications that use iFrames vs those without iFrames (which can use deep links with query parameters).
• The new app details page and switching between viewing different versions.
• (Soft-)Deleting an app.
• Managing user access to apps.
• App users can now deploy an app using any file type. They are no longer limited to .sh files only.

​

Domino Governance enhancements

• Multiple Policies per Bundle: Multiple policies can now be applied to a single bundle, reducing duplication and simplifying reviews. Learn more about creating or reviewing bundles.
• Policy Archiving: Policies can now be archived from the Policies screen. Archived policies are only visible with the Archived filter and can’t be restored or removed if still in use by active bundles. Learn more about defining policies.
• Improved PDF Bundle Report: Improved experience in the PDF bundle report, including displaying attachments in an appendix section.
• Per-Bundle Approval Customization: Different approvers can now be assigned to individual bundles under the same policy, enabling more flexible and context-specific reviews.
• Users can now assign individuals to stages, manage multiple bundles at once, and rename terms like “Bundle” or “Deliverable” to match industry standards.

​

Workload observability

​

Project environment variable redaction in Audit Trail

​

Package persistence for Workspaces

​

Domino Volumes for NetApp ONTAP

​

Configurable datetime precision for Data Sources

​

Attach Dataset snapshot files to Governance bundles

​

Keycloak updates

• Upgraded Keycloak to 26.1.4.

​

Domino Governance

• Scripted checks: Use centralized scripts to evaluate information on a Governed Bundle. Scripted checks can also be used to measure bias consistently in a dataset.
• Findings: An enhancement to Findings is now available to allow for conditional approval, allowing approvers to select findings that must be completed for the bundle to be fully approved, without obstructing productivity. This also includes the ability to set due dates for findings and receive notifications based on the lifecycle of the approval.

​

Streamlined flow output registration to Domino Datasets

​

Cost Center dashboard

​

Automatic environment rebuilds

​

Self-service IP allowlisting

​

Custom App URLs

​

Governance: Support for Git based Projects

​

Flexible Git reference support for Apps

​

In-product guides & alerting

​

Updates to Domino Governance

• Governance Findings: Create, track, and manage compliance gaps and potential risks within a governed bundle with Governance Findings.
• Metrics Checks: Automatically attach metrics to a governed bundle, eliminating the need for manual entry.

​

Configurable idle timeout

​

Project templates support for “Other” Git providers

​

Cloud Admin global role improvements

​

CSV download for Audit Trail

​

Unified Audit Trail

• Datasets
• Project configurations
• User roles
• Data access

​

Support for Trainium instances

​

Keycloak updates

​

Deploy models to SageMaker

​

New Domino user interface

​

NetApp integration

​

Domino Governance

​

Datasets in Nexus

​

Project templates

​

App secure identity propagation

​

Upgrade notes

• The new Data Plane version has advanced to a major release (now 4.1.1-3). As a result, the upgrade button does not function due to the version gap. To complete the upgrade successfully, a manual process is required. For details, refer to the upgrade the Data Plane section.

​

RabbitMQ updates

​

Removing support widget

​

Run Job from Workspace

​

Changes to the Admin navbar

• Key changes in the components include:

  Previous implementation	Changes to new implementation
  Admin Area.	Renamed to Admin Panel.
  Link assigned to Admin Home menu item.	Link assigned to app logo.
  Search was in the old implementation.	Removed from the new implementation.
  -	Page titles and Browser tab titles changed according to the name changes for the menu items.

• Key changes in the menu items include:

  Menu items	Previous implementation	Changes to new implementation
  Projects, Workspaces, Executions	At the top-level navigation.	Part of the submenu of the top-level menu item Reports.
  Usage, Resource usage report, User activity report, Monitoring (renamed to Grafana Monitoring)	Part of the submenu of the top-level menu item Advanced.	Part of the submenu of the top-level menu item Reports.
  Datasets	Part of the submenu of the top-level menu item Data.	Part of the submenu of the top-level menu item Reports.
  Users, Organizations	Tabs of the top-level menu item Users.	Part of the submenu of the top-level menu item Manage resources
  Governance, Data Planes, Notifications, Manage Cost (renamed to Cost Tracking)	Were top-level menu items.	Part of the submenu of the top-level menu item Manage Resources.
  Manage Environments (renamed to Environments), Hardware tiers, Resource quotas, External deployments	Part of the submenu of the top-level menu item Advanced.	Part of the submenu of the top-level menu item Manage Resources.
  Data Sources, Feature Store	Part of the submenu of the top-level menu item Data.	Part of the submenu of the top-level menu item Manage Resources.
  Project Stage Configuration (renamed to Project stages), Jira Configuration (renamed to JIRA integration), Diagnostics toolkit	Part of the submenu of the top-level menu item Advanced.	Part of the submenu of the top-level menu item Platform settings.
  Username	Was a top-level menu item.	Part of the submenu of the top-level menu item Account.
  Account settings, Download CLI, Log out	Part of the top-level menu item Username.	Part of the top-level menu item Account.
  Feedback (opens a feedback modal on click), Exit Admin panel, App Version	Not in the old implementation.	New menu items added to the submenu of the top-level menu item Account.

​

Qdrant vector DB Data Source

​

AI Gateway

​

Pinecone vector DB Data Source