Whats Changed$$$? New Features$$$feat: add telemetry to deployments APIs$$$?? Bug Fixes$$$fix: lfx env var resolution when value is empty$$$fix: pass Google embedding dimensions$$$fix: fallback to sync call in lfx run when stream=true$$$fix: namespace inputs.session on build_public_tmp$$$fix(security): reject symlinks/hardlinks in BaseFileComponent TAR extraction (GHSA-ccv6-r384-xp75)$$$fix: update playwright to 1.59.0$$$?? Documentation Updates$$$docs: wxo deployment is behind feature flag$$$docs: add telemetry for deployments endpoints$$$Others$$$chore: bump versions to 1.9.2$$$ref: flip wxo ff$$$chore: update deps

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

Release notes are not available yet

Release notes are not available yet

Release notes are not available yet

Release notes are not available yet