Release LoadGen Api, Appliance and MCP Server: 1.0.0.11922

LoadGen General

• No general changes in this release.

LoadGen Api

• [#8806] Fixed My Profile → Save failing with "The requested resource was not found" when updating the Display Name. The profile dialog called a self-service endpoint that did not exist in the API, so every Display Name save returned a 404 (for newly created users and administrators alike), while saving the Email field kept working. The missing endpoint has been added: it updates only the signed-in user's own display name, and clearing the field falls back to the username.
• [#8710] Fixed Sign in with SSO redirecting back to the login page with "metadata\_unavailable" when the SSO provider's Authority was configured as the IdP's full discovery-document URL (ending in /.well-known/openid-configuration) instead of the bare issuer URL. The API appended the discovery suffix unconditionally, producing a doubled URL the identity provider could not serve (IDX20803/IDX20807). Both Authority forms are now accepted for sign-in initiation and callback alike; Authentik, Keycloak and Okta all surface the discovery URL prominently in their admin consoles, so pasting it is now safe.
• [#8774] Fixed the PowerShell uptime check's Test Request running scripts in Constrained Language Mode even when the script was marked Full, failing with "Cannot invoke method. Method invocation is supported only on core types in this language mode." Test Request now honors the script's configured language mode and timeout exactly like scheduled runs; unsaved drafts without a saved script still default to the safe Constrained mode.
• [#8791] Reworked Repository enrollment between Local and Master appliances so it no longer requires copying an API key from one operator to another. The Local appliance now submits an enrollment request and polls for the outcome; a Master administrator approves or denies it from a new pending-approvals list (with live notifications), and on approval the API key is minted and delivered automatically to the requesting Local, exactly once: the administrator never sees the key. Requests are rate-limited per source IP and pending requests expire after 7 days. The previous admin-initiated Create Repository and Invite Machine endpoints keep working but are deprecated and scheduled for removal in v2.
• [#8790] Fixed the default API Testing datasource not being created automatically: it was only inserted when the datasource wizard ran, so appliances upgraded from earlier versions never received it. The API now guarantees a default LoadGen-ApiTesting-Json entry on every startup, so existing appliances self-heal on the next API restart with no operator action. The automatic entry is skipped when an API Testing datasource already exists, including renamed or custom ones.
• [#8764] Fixed the ICMP Ping uptime check failing Test Request and Test Check with "Ping failed: The system's ping utility could not be found." Ping-based checks execute inside the API container, whose image did not include a ping utility; the image now ships iputils-ping, so ICMP checks work out of the box once the appliance is updated to this API version.
• [#8801] Fixed the Uptime Monitoring Dashboard's per-card "X open" incident badge disappearing while an incident was still active. The card metrics only counted incidents that started inside the selected period (24 hours by default), so a long-running outage that began earlier (first observed on ICMP Ping) vanished from the card even though the Recent Incidents table still listed it as Open. The metrics now include every incident active during the selected period, keeping the badge and the incident list consistent for any check type.

LoadGen Appliance

• [#8660] Fixed the SSL Status panel still reporting self-signed certificates (CN=grafana. / CN=influx.) for the Grafana and InfluxDB rows after applying a custom certificate through the HTTPS Setup Wizard. The reverse proxy was already serving the correct custom certificate; the panel, however, reads from a second certificate location that kept stale files from an earlier self-signed configuration. Applying a custom certificate now updates both locations, and existing appliances self-heal on the next agent restart: stale self-signed remnants are replaced with the active custom certificate automatically.
• Appliance boot resilience after kernel updates. An appliance reboot could drop into the initramfs emergency shell ("ALERT! /dev/mapper/ubuntu--vg-ubuntu--lv does not exist") when an automatic kernel security update produced a boot image without LVM support; the failure stays dormant until the next reboot. Appliances now validate the boot image after every kernel installation and regenerate it on the spot if LVM support is missing. On already-deployed appliances the agent installs this validator at startup and sweeps existing boot images, repairing any affected kernel before it can strand the machine. Non-LVM appliances are unaffected.
• [#8665] Fixed changing the InfluxDB credentials from the appliance Services tab failing with "Failed to change credentials: User 'admin' not found in InfluxDB." on appliances where the InfluxDB admin password had drifted from the value recorded at first installation; the previous recovery path depended on that original password, so it could never succeed there. The agent now recovers using the operator token InfluxDB keeps inside its own container and stores it for future use, so subsequent credential operations succeed immediately. After a successful change, signing in to the InfluxDB UI with the new password works again. Closes duplicate [#8664].

LoadGen MCP Server

• No MCP Server changes in this release.