Skip to content
Support
  • There are no suggestions because the search field is empty.

Rhino Release Notes - 3.08.0

Rhino 3.08.0 continues the platform's shift toward Knowledge Reserve as the system of record, while adding two significant new tracks: Custom Edge Types for modeling richer graph relationships, and External MCP support for connecting Rhino to outside tool servers. Alongside these, this release carries a large batch of Copilot/MCP reliability fixes, continued 2.x → 3.x migration work, and a substantial security and dependency hardening pass.

Audience: Product owners, solution architects, documentation authors, admins, and technical teams upgrading from 3.07.0

Highlights
  • Custom Edge Types: a new graph modeling capability spanning Copilot and agentic task tool integration, Graph Explorer management UX, and artifact export/import round-tripping.
  • System Reserve: a new admin only view of items that are global instead of project specific from the Knowledge Reserve, Artifacts, and Routines.
  • External MCP: Rhino can now connect to external MCP servers, with config schema and feature flagging, a client adapter with Copilot tool injection, circuit breaker and observability, token encryption at rest, and an admin connection-management UI.
  • 2.x → 3.x migration: made legacy UAN and Document Studio write surfaces read-only after Knowledge Reserve migration, plus a Postgres 16→18 upgrade script and partner runbook.
  • Model support: Opus 5 and Sonnet 5 are now supported in Rhino, across both Copilot and non-Copilot paths.
  • Authentication hardening: MFA (TOTP) for local authentication, local-auth password policy hardening, and JWT issuer validation.
  • Security and dependency hardening: a large batch of CVE and Dependabot-flagged fixes across frontend and backend dependencies (undici, cryptography, brace-expansion, React Router, PostCSS, DOMPurify, @babel/core), plus progress toward a Docker Hardened base image for PostgreSQL and container supply chain verification (signing, provenance, SBOM).
What changed in 3.08.0Custom Edge Types

A new epic landed in 3.08.0 to support richer, more flexible relationships in the graph beyond the built-in edge types.

  • Copilot and agentic task tool integration, so edge-type-aware operations can be driven through Copilot.
  • Graph Explorer management UX for viewing and managing custom edge types directly.
  • Artifacts capability and export/import round-trip, so custom edge type data survives artifact packaging and project transfer.

Why this matters: teams working with non-standard relationship models (beyond simple hierarchical or reference links) get a first-class way to represent and query them.

External MCP

3.08.0 introduces the ability to connect Rhino's Copilot to external MCP servers, not just Rhino's own built-in tools.

  • Config schema and feature flag to control rollout.
  • Client adapter and Copilot tool injection, exposing external MCP tools inside Copilot conversations.
  • Circuit breaker and observability, so a misbehaving external server doesn't take down a Copilot session.
  • Token encryption at rest for stored credentials.
  • Admin About Page, connection management, and test-connection flow, plus end-to-end validation across the full path.

Why this matters: this is the foundation for customers and partners to bring their own tool servers into Rhino's agentic workflows, rather than being limited to what ships built-in.

2.x → 3.x migration and platform cleanup

Migration-related work continued moving customers off legacy 2.x surfaces and toward Knowledge Reserve as the source of truth.

  • Read-only enforcement: both 2.x UAN write surfaces and Document Studio write surfaces are now read-only after a project has migrated to Knowledge Reserve, preventing divergence between old and new data. You can still export UAN and Documents, which can then be manually imported into the Knowledge Reserve.
  • Postgres 16→18 upgrade script and partner runbook, verifying migrated assets land correctly in Knowledge Reserve.
  • 2.x → 3.x data port, "SAQ create-once" copies pre-existing UAN and Document Studio documents into the Knowledge Reserve. UAN is imported into the Apps bucket and Document Studio documents are imported into the Generated Knowledge bucket.
Copilot, Knowledge Reserve, and artifact reliability

As with prior releases, a large share of 3.08.0 is stabilization work found during release-candidate testing.

  • Copilot fixes: corrected handling of KR PDF reads on Bedrock models, fixed "Unknown action type" failures when confirming several full-control write actions, fixed dropped path scope on scoped routine runs, and fixed run_routine confirm/replay dropping path targeting.
  • Knowledge Reserve fixes: corrected folder counts to match nested file totals, linked KR document references directly from Copilot chat, fixed supporting documents not being queued for smart indexing after extraction, and fixed the Skills idle view hiding global/plugin skill bundles.
  • System Reserve: new admin visibility for Knowledge Reserve items along with Artifacts and Routines that are global as opposed to project specific and enable/disable controls for system-level content, plus provenance tags (Built In / Installed) and built-in skills for power users.
  • Artifacts: fixed react_sandbox artifacts losing evidence/citation child data after a Dynamic Object scaling change, added on-demand Dynamic Object queries for sandbox artifacts, added the ability to rename and delete custom artifacts, fixed a clipped Copilot chat artifact preview, and added support for editing data bindings and safely updating published library artifacts without breaking consumer links.