1.11.3 Latest$$$@github-actions github-actions released this yesterday$$$ v1.11.3$$$ 14ad03a $$$Whats Changed$$$?? Bug Fixes$$$fix(files): honor AWS fallbacks in Write File by @erichare in #14446$$$fix(api): retry flow updates on sqlite locks by @erichare in #14447$$$fix(frontend): close protocol gaps in markdown sanitize schema (GHSA-7rw4-v4gc-r864 audit) by @erichare in #14424$$$fix(security): block SQL connection target query overrides by @erichare in #14431$$$fix: keep explicitly cleared model selection empty instead of filling cross-provider options[0] by @erichare in #14465$$$fix(security): contain bundle FileInput paths by @erichare in #14438$$$fix(security): skip symlinks in GitExtractor by @erichare in #14427$$$fix(security): reject ambiguous URL authorities by @erichare in #14430$$$fix(security): protect OpenAI model discovery requests by @erichare in #14435$$$fix(security): enforce admin-only component builds by @erichare in #14436$$$fix(security): join repeated X-Forwarded-For lines before taking the last hop by @erichare in #14425$$$fix(security): make S3 file cleanup storage-aware by @erichare in #14428$$$fix(security): contain ChatInput file references by @erichare in #14434$$$fix(mcp): disable HTTP client redirects after one-shot SSRF check by @SashaMIT in #14474$$$fix(lfx): stop reporting tool-mode nodes as breaking by @erichare in #14481$$$fix(lfx): compare template keys directionally in the upgrade checker by @erichare in #14482$$$fix(components): bound Web Search payload size by @Cristhianzl in #14489$$$fix: mend scans should now scan all codebase deps by @Adam-Aghili in #14488$$$fix(frontend): add manifest icon files missing from public/ by @erichare in #14506$$$fix(models): normalize Azure AI Foundry project endpoints to the OpenAI-compatible form by @erichare in #14508$$$fix(models): discover live Azure AI Foundry deployments for the model picker by @erichare in #14509$$$Others$$$chore: bump release versions to 1.11.3 by @erichare in #14468$$$chore: dep upgrades by @Adam-Aghili in #14490$$$chore: address dependency review findings by @erichare in #14491

Whats Changed$$$ Bug Fixes$$$fix: increment previous_content with content streamed by @lucaseduoli in #14234$$$fix: add default fallback to instantiation.py and removed default ollama base url from components by @lucaseduoli in #14236$$$fix(tracing): detach orphan spans before database flush by @erichare in #14243$$$fix(settings): enable agentic experience by default by @Cristhianzl in #14244$$$fix(auth): keep refresh sessions alive on HTTP by @erichare in #14252$$$fix(mem0): defer client import during startup by @Success6666 in #14247$$$fix(components): stop legacy aliases from importing every bundle at startup by @erichare in #14259$$$fix(frontend): reset modifier-only saved shortcuts to default by @Cristhianzl in #14245$$$fix(ssrf): honor connector loopback policy for A2A agent and PaddleOCR base URLs by @erichare in #14265$$$fix(components): send chained input as user turn by @Cristhianzl in #14274$$$fix(frontend): align shortcut label with Parameters button by @keval718 in #14282$$$fix(api): retry project delete on sqlite lock by @Cristhianzl in #14308$$$fix(frontend): unique DOM ids for node params by @Cristhianzl in #14312$$$fix(models): stop automatic provider field binding by @erichare in #14311$$$fix(frontend): dismiss welcome overlay synchronously when picking a template by @keval718 in #14310$$$fix(frontend): skip template update for group nodes by @Cristhianzl in #14314$$$fix(models): retry without rejected temperature by @Cristhianzl in #14331$$$fix(frontend): stop stale flows-list refetch from bouncing New Flow back to the list by @erichare in #14288$$$fix(frontend): stop flow route request storm by @erichare in #14349$$$fix(security): enforce SSRF policy for unified models by @erichare in #14348$$$fix(tools): block protected RunFlow tweaks by @erichare in #14343$$$fix(tools): constrain serialized schema types by @erichare in #14344$$$fix(playground): separate public identity namespaces by @erichare in #14345$$$fix(mcp): scope public projects to their owner by @erichare in #14346$$$fix(api): sanitize public v2 workflow execution by @erichare in #14341$$$fix(api): authorize deprecated vertex streams by @erichare in #14342$$$fix(a2a): guard public flow execution by @erichare in #14347$$$fix(auth): flush user insert before sso_user_profile during JIT provisioning by @sch0penheimer in #14338$$$fix(docker): use writable runtime home by @erichare in #14354$$$fix(agent): exclude callback latency from tool duration by @erichare in #14355$$$fix: align inspector panel API exposure with what the backend accepts by @tarciorodrigues in #14304$$$fix(agent): track parallel tool durations per run by @erichare in #14360$$$fix(agent): remediate connected OpenAI models by @erichare in #14363$$$fix(playground): align shared message namespaces by @erichare in #14373$$$fix(policies): load Windows-generated ToolGuard modules by @erichare in #14374$$$fix(security): enforce code execution policy at runtime by @erichare in #14375$$$fix(policies): preserve generated ToolGuard code by @erichare in #14378$$$fix(crewai): apply convert_llm and convert_tools in SequentialTaskAgentComponent by @Cristhianzl in #14379$$$fix(custom): keep falsy input defaults in set_attributes fallback by @Cristhianzl in #14383$$$fix(policies): load stored guards without local cache by @erichare in #14388$$$fix: replace models of disconnected providers by @Cristhianzl in #14386$$$fix(policies): prevent guarded tool serialization recursion by @erichare in #14390$$$fix(file): run Read File tool loaders off the event loop by @erichare in #14391$$$fix(policies): make model optional in guard mode by @erichare in #14392$$$fix(crewai): support crewai 1.x LLM factory in convert_llm by @Cristhianzl in #14397

Whats Changed$$$? New Features$$$feat: add global variable model overrides$$$?? Bug Fixes$$$fix: use session exec in telemetry writer$$$fix: disable mem0 telemetry by default$$$fix: handle invalid session auth tokens$$$fix: remove hardcoded default superuser password$$$fix: isolate FAISS persistence by user$$$fix: block public builds of code execution agents$$$fix: validate file paths by resolved cache containment$$$fix: restrict log retrieval to superusers$$$fix: block dangerous MCP stdio env vars$$$fix: Block Python interpreter format traversal$$$fix: constrain Directory component paths$$$fix(mcp): launch stdio servers with shell=False (no bash -c / cmd /c wrapper)$$$fix: gate litellm off Python 3.14 so pip install langflow resolves$$$fix: scope local vector store collections by user$$$fix: cascade span deletes when clearing traces for a flow$$$? Tests$$$test(frontend): harden model dropdown footer clicks in select-gpt-model$$$Others$$$chore: upgrade lock files

Whats Changed$$$? New Features$$$feat: add global variable model overrides$$$?? Bug Fixes$$$fix: use session exec in telemetry writer$$$fix: disable mem0 telemetry by default$$$fix: handle invalid session auth tokens$$$fix: remove hardcoded default superuser password$$$fix: isolate FAISS persistence by user$$$fix: block public builds of code execution agents$$$fix: validate file paths by resolved cache containment$$$fix: restrict log retrieval to superusers$$$fix: block dangerous MCP stdio env vars$$$fix: Block Python interpreter format traversal$$$fix: constrain Directory component paths$$$fix(mcp): launch stdio servers with shell=False (no bash -c / cmd /c wrapper)$$$fix: gate litellm off Python 3.14 so pip install langflow resolves$$$fix: scope local vector store collections by user$$$fix: cascade span deletes when clearing traces for a flow$$$? Tests$$$test(frontend): harden model dropdown footer clicks in select-gpt-model$$$Others$$$chore: upgrade lock files

1.10.1 Latest$$$Whats Changed$$$? New Features$$$feat(ci): nightly ? stable bundles via canonical pre-releases + decision record [gated] by @erichare in #13528$$$feat: first-class local-model support for the assistant by @Cristhianzl in #13641$$$?? Bug Fixes$$$fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in #13191$$$fix(ci): backport bundle rename step to nightly workflow on main by @erichare in #13195$$$fix(ci): gate nightly release on successful tag creation by @erichare in #13198$$$fix(ci): use local bundle wheels in nightly install tests by @erichare in #13256$$$fix: properly set nightly-base skipped by @Adam-Aghili in #13338$$$fix(ci): lockstep langflow-nightly and langflow-base-nightly versions (forward-port #13413) by @erichare in #13416$$$fix(ci): give extension bundles a nightly track so langflow-nightly resolves (forward-port #13418) by @erichare in #13419$$$fix(ci): re-enable migration-pip-venv now that nightly bundles resolve (forward-port #13421) by @erichare in #13422$$$fix: remove duplicate base uv.lock from workflows (forward-port #13326 to main) by @erichare in #13427$$$fix(observability): make grafana-loki reference stack instructions work end to end by @ogabrielluiz in #13454$$$fix(lfx): restamp component index version after 1.10.1 fork bump by @erichare in #13575$$$fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout (1.10.1) by @erichare in #13585$$$fix(test): raise spawn-child join timeout in test_multi_process_visibility (1.10.1) by @erichare in #13590$$$fix(ci): anchor langflow-base version extraction in nightly docker build (1.10.1) by @erichare in #13593$$$fix(test): gate models.dev background refresh out of tests (1.10.1) by @erichare in #13598$$$fix(ci): allow pre-releases when pinning the nightly in migration validation (1.10.1) by @erichare in #13601$$$fix(ci): scope nightly migration-test pre-releases to the langflow stack (1.10.1) by @erichare in #13605$$$fix(ci): create GitHub releases on the dispatched v-prefixed tag (1.10.1) by @erichare in #13609$$$fix(components): follow HTTP redirects in URL component with per-hop SSRF revalidation by @erichare in #13572$$$fix(ci): make release Biome lint green — NUL-delimit file list + clear pre-existing lint errors by @erichare in #13550$$$fix: limit public flow endpoint from displaying private flow streams by @Jkavia in #13602$$$fix: enforce the FileSystemTool credential deny-list by @Cristhianzl in #13625$$$fix(database): resolve Alembic log to writable config dir; never crash on read-only filesystems by @erichare in #13559$$$fix: protect URL components from SSRF by @erichare in #13643$$$fix(security): run trusted server code on unauthenticated public flow builds by @erichare in #13540$$$fix: guard CUGA CodeAgent local execution by @erichare in #13644$$$fix: guard event serialization against unserializable component payloads (#12591) by @erichare in #13651$$$fix: run trusted server copy on custom-component hash-gate match (#13496) by @erichare in #13532$$$fix: nest root LLM runs under the flow trace in Langfuse (#13429) by @erichare in #13539$$$fix: accept Data and Message inputs in LoopComponent by @putramkti in #13646$$$fix: restore route discovery under FastAPI 0.137 lazy include_router by @erichare in #13710$$$fix(security): block code-bearing nodes with empty type in flow validation (GHSA-mfp9-86w4-493f) by @erichare in #13697$$$fix(security): bump residual deprecated transitive uuid to v11 by @erichare in #13703$$$fix(security): gate public user self-registration (CWE-862) by @erichare in #13706$$$fix(load): bound remote flow fetches by @pony-maggie in #13660$$$fix: route IBM WatsonX selections to model_id endpoint in unified get_llm (#13671) by @erichare in #13684$$$fix(security): require authentication for POST /api/v2/registration/ (CWE-306) by @erichare in #13707$$$fix(security): block code injection via the Tweaks API (CWE-94) by @erichare in #13705$$$fix(security): derive Fernet key from short secrets w

Whats Changed$$$? New Features$$$feat: add telemetry to deployments APIs$$$?? Bug Fixes$$$fix: lfx env var resolution when value is empty$$$fix: pass Google embedding dimensions$$$fix: fallback to sync call in lfx run when stream=true$$$fix: namespace inputs.session on build_public_tmp$$$fix(security): reject symlinks/hardlinks in BaseFileComponent TAR extraction (GHSA-ccv6-r384-xp75)$$$fix: update playwright to 1.59.0$$$?? Documentation Updates$$$docs: wxo deployment is behind feature flag$$$docs: add telemetry for deployments endpoints$$$Others$$$chore: bump versions to 1.9.2$$$ref: flip wxo ff$$$chore: update deps

Whats Changed$$$? New Features$$$feat: add telemetry to deployments APIs$$$?? Bug Fixes$$$fix: lfx env var resolution when value is empty$$$fix: pass Google embedding dimensions$$$fix: fallback to sync call in lfx run when stream=true$$$fix: namespace inputs.session on build_public_tmp$$$fix(security): reject symlinks/hardlinks in BaseFileComponent TAR extraction (GHSA-ccv6-r384-xp75)$$$fix: update playwright to 1.59.0$$$?? Documentation Updates$$$docs: wxo deployment is behind feature flag$$$docs: add telemetry for deployments endpoints$$$Others$$$chore: bump versions to 1.9.2$$$ref: flip wxo ff$$$chore: update deps

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

1.9.1$$$Whats Changed$$$New Features$$$feat: Enhance config loading by applying GUNICORN_CMD_ARGS before programmatic options by @severfire in #12313$$$feat: filter out live connections from wxo adapter by @HzaRashid in #12744$$$feat(deployments): filter WXO agent list to drafts when load_from_provider=true by @HzaRashid in #12745$$$feat(google): refresh Gemini model list and enable tool calling for Gemini 3 by @erichare in #12797$$$feat: e2e tests for deployments api by @HzaRashid in #12767$$$Bug Fixes$$$fix(frontend): filter duplicate draft/live connections in deploy modal by @viktoravelino in #12724$$$fix(custom): honor asname in from X import Y as Z for custom components by @erichare in #12813$$$fix(mcp): close path traversal + cross-user disclosure (PVR0754098) by @erichare in #12818$$$fix: db guards for deployments by @HzaRashid in #12339$$$fix(traces): serialize enum values for PostgreSQL on trace/span tables by @erichare in #12820$$$fix: preserve spaces in shareable playground chat input by @Cristhianzl in #12833$$$fix(security): require auth on deprecated /api/v1/upload/{flow_id} by @erichare in #12831$$$fix: prevent XSS in chat messages with rehype-sanitize by @Jkavia in #12718$$$fix(security): close IDOR in get_flow_by_id_or_endpoint_name (LE-639) by @erichare in #12832$$$fix(security): default WEBHOOK_AUTH_ENABLE to True by @erichare in #12845$$$fix: route memory ops to stubs when DB service is noop by @jordanrfrazier in #12808$$$fix: allow backend/frontend Docker builds when main version exists by @vjgit96 in #12854$$$Documentation Updates$$$docs: clarify autosaving and versioned flow saving by @mendonk in #12794$$$docs: add multi-model opensearch component by @mendonk in #12799$$$docs: wxo feature by @mendonk in #12677$$$docs: clarify trace storage when multiple providers are enabled by @mendonk in #12816$$$docs: concatenate and merge options for dataframe operations component by @mendonk in #12835$$$docs: tip for running local ollama models by @mendonk in #12840$$$?? Maintenance Tasks$$$refactor: Center truncate deployment provider URL by @a-effort in #12579$$$chore: upgrade wxo adk to 2.8.0 by @HzaRashid in #12707$$$ref: removes retries from wxo api calls by @jordanrfrazier in #12770$$$ref: set wxo ff to true by default by @jordanrfrazier in #12826$$$fix(ci): prevent duplicate tags and validate tag format in release workflow by @vjgit96 in #12847$$$chore: security patch by @Adam-Aghili in #12725$$$Tests$$$test: add missing test coverage for wxo deployments by @jordanrfrazier in #12689$$$fix: Update signature for WXO tests by @erichare

Release notes are not available yet

Release notes are not available yet

Release notes are not available yet

Release notes are not available yet