What's Changed

🐛 Bug Fixes

• fix: increment previous_content with content streamed by @lucaseduoli in #14234
• fix: add default fallback to instantiation.py and removed default ollama base url from components by @lucaseduoli in #14236
• fix(tracing): detach orphan spans before database flush by @erichare in #14243
• fix(settings): enable agentic experience by default by @Cristhianzl in #14244
• fix(auth): keep refresh sessions alive on HTTP by @erichare in #14252
• fix(mem0): defer client import during startup by @Success6666 in #14247
• fix(components): stop legacy aliases from importing every bundle at startup by @erichare in #14259
• fix(frontend): reset modifier-only saved shortcuts to default by @Cristhianzl in #14245
• fix(ssrf): honor connector loopback policy for A2A agent and PaddleOCR base URLs by @erichare in #14265
• fix(components): send chained input as user turn by @Cristhianzl in #14286
• fix(cuga): correct event debug log typo by @erichare in #14275
• fix(mcp): match display_name and description in search_registry query filter by @Simonzhaohui in #14270
• fix(mcp): backport MCP SDK <2.0 pin for uvx-launched servers by @viktoravelino in #14298
• fix(deps): restore FastAPI range by @erichare in #14301

📝 Documentation Updates

• docs: fastapi pagination error troubleshooting by @mendonk in #14294

🛠 Maintenance Tasks

• refactor(frontend): Add customization hook for API timestamp parsing by @Cristhianzl in #14246

Others

• chore: update deps 1.11.1 by @Adam-Aghili in #14280

New Contributors

• @Success6666 made their first contribution in #14247
• @Simonzhaohui made their first contribution in #14270

Full Changelog: v1.11.0...v1.11.1

What's Changed

🐛 Bug Fixes

• fix(docker): remove broken npm self-upgrade by @erichare in #14052
• fix(security): protect Docling Serve outbound requests by @erichare in #14033
• fix(auth): verify current password on password changes by @erichare in #14034
• fix(security): harden MCP stdio configuration by @erichare in #14036
• fix(security): harden component code module access by @erichare in #14032
• fix: correct deprecated model settings behavior by @erichare in #14047
• fix(voice): enforce flow authorization on websocket by @erichare in #14043
• fix(security): block native FFI imports in generated code by @erichare in #14040
• fix(security): confine AssemblyAI audio file access by @erichare in #14037
• fix: track assignment aliases in component code scanner by @erichare in #14041
• fix(kb): enforce per-user component path containment by @erichare in #14065
• fix(security): consolidate release-1.10.3 hardening backports by @erichare in #14071
• fix(security): protect SQL runtime configuration by @erichare in #14076
• fix(kb): enforce server-owned folder connector limits by @erichare in #14039
• fix(lfx): deduplicate Google embedding model aliases by @erichare in #14081
• fix: expose stable Langfuse trace IO for evaluators by @erichare in #14087
• fix(voice): preserve public flow websocket access by @erichare in #14097
• fix(security): require docker run for MCP stdio by @erichare in #14122
• fix(security): block indirect component code bypasses by @erichare in #14121
• fix(security): close remaining indirect code bypasses (1.10.3) by @erichare in #14132
• fix(security): compare API keys in constant time by @erichare in #14127
• fix(security): redact secret component inputs from traces by @erichare in #14128
• fix(security): bind MCP SSE sessions to users by @erichare in #14129
• fix(security): default access token cookie to HttpOnly by @erichare in #14131
• fix(security): rate limit public flow builds (1.10.3) by @erichare in #14134
• fix(security): isolate lfx serve request logs by @erichare in #14130
• fix(security): bind MCP stdio to code-exec lockdown by @erichare in #14149

✅ Tests

• test(mcp): isolate timeout tests from SSRF validation by @erichare in #14075

Others

• chore: bump versions by @Adam-Aghili in #14077

Full Changelog: v1.10.2...v1.10.3

What's Changed

✨ New Features

• feat: docs page copy-as-markdown keyboard shortcut by @mendonk in #13628
• feat: add docs feedback components by @mendonk in #13627
• feat: New Bundle support for Multi-vector NextPLAID vector store by @meetdoshi90 in #13553
• feat: upgrade Firecrawl to v2 SDK and extract into the lfx-firecrawl extension bundle by @rakshith48 in #13495
• feat(auth): external trusted JWT auth + JIT user mapping + access ceiling by @erichare in #13293
• feat(lfx): verified-JWT identity forwarding for lfx serve by @jordanrfrazier in #13632
• feat: native v2 workflows endpoint with pluggable stream protocols by @ogabrielluiz in #13307
• feat(bundles): metapackage split (Phase A) — engine-only lfx, lfx-bundles long tail, 5 graduated partner packages by @erichare in #13563
• feat(frontend): RBAC permission gating via /authz/me/permissions by @erichare in #13543
• feat: wire list_visible_resource_ids prefilter into list endpoints by @erichare in #13541
• feat(lfx): add pre-warm functionality by @jordanrfrazier in #13682
• feat: a11y by @viktoravelino in #13561
• feat(lfx): introduce pluggable executor seam by @ogabrielluiz in #12981
• feat: make content_blocks the source of truth for Message content by @ogabrielluiz in #13364
• feat(starter-projects): refresh starter flows for 1.10.x, add Multi Agent Flow, remove 4 deprecated templates by @rafaelgiln in #13879
• feat: add PaddleOCR partner bundle (lfx-paddle) — inherits #13779 by @erichare in #13908
• feat: add EmpirioLabs partner bundle (lfx-empiriolabs) — refactor of #13645 by @erichare in #13918
• feat(lfx): let extension bundles register model providers by @erichare in #13916
• feat: add OpenAI Compatible as a first-class unified model provider by @erichare in #13940
• feat: unify JSON/Table/Text operations into a single Operations component by @erichare in #13743
• feat(embeddings): populate available_models from configured providers by @HimavarshaVS in #13820
• feat(exa): update Exa Search to the exa-py SDK and graduate it to the standalone lfx-exa bundle by @erichare in #13968
• feat(bundles): add torch-free all-no-torch extra to lfx-bundles by @jordanrfrazier in #13886
• feat(lfx-serve): v2 workflow endpoints (sync + stream) by @ogabrielluiz in #13783
• feat(lfx-serve): lfx owns the v2 workflow router via a host-DI seam by @ogabrielluiz in #13816
• feat(mcp): persist MCP servers in a database table by @thesaadmirza in #13976
• feat(playground): content blocks frontend renderer for v2 workflows by @ogabrielluiz in #13391
• feat(api): durable background execution service (store + default backend) by @ogabrielluiz in #13507
• feat(frontend): render the flow share seam in the editor Share dropdown by @keval718 in #14009
• feat(models): add Azure AI Foundry to unified model provider setup by @HimavarshaVS in #13912
• feat(assistant): QA fixes + model portability, budget, and error visibility by @Cristhianzl in #14038
• feat(lfx): multi-worker serving with per-request isolation for lfx serve by @jordanrfrazier in #13818
• feat: durable background execution + HITL suspend/resume schema by @Cristhianzl in #13633
• feat(frontend): add OpenRAG icon by @erichare in #14095
• feat: add Valkey vector store and chat memory components by @MatthiasHowellYopp in #12530
• feat(a2a): A2A protocol support by @ogabrielluiz in #13831
• feat(job_queue): export cancel_stats and active_jobs to OpenTelemetry by @ogabrielluiz in #13123
• feat(frontend): turn inspector panel into a parameter manager by @tarciorodrigues in #14078
• feat(valkey): restore components as 1.11 extension bundle by @erichare in #14151

🐛 Bug Fixes

• fix(lfx): restamp component index version after 1.11.0 fork bump by @erichare in #13574
• fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout by @erichare in #13583
• fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout (main) by @erichare in #13584
• fix(test): raise spawn-child join timeout in test_multi_process_visibility by @erichare in #13588
• fix(test): raise spawn-child join timeout in test_multi_process_visibility (main) by @erichare in #13589
• fix(ci): anchor langflow-base version extraction in nightly docker build by @erichare in #13591
• fix(ci): anchor langflow-base version extraction in nightly docker build (1.11.0) by @erichare in #13592
• fix(test): gate models.dev background refresh out of tests by @erichare in #13596
• fix(test): gate models.dev background refresh out of tests (main) by @erichare in #13597
• fix(ci): allow pre-releases when pinning the nightly in migration validation by @erichare in #13599
• fix(ci): allow pre-releases when pinning the nightly in migration validation (1.11.0) by @erichare in #13600
• fix(ci): scope nightly migration-test pre-releases to the langflow stack by @erichare in #13603
• fix(ci): scope nightly migration-test pre-releases to the langflow stack (1.11.0) by @erichare in #13604
• fix(ci): create GitHub releases on the dispatched v-prefixed tag by @erichare in #13608
• fix(ci): resolve validate-version output in release-lfx changelog link by @erichare in #13610
• fix: fail fast when Redis job queue backend is unreachable by @ogabrielluiz in #13456
• fix(frontend): duplicate tooltip + raw i18n key on collapsed sidebar nav (1.11.0) by @keval718 in #13652
• fix(frontend): restore Inspection Panel access to hidden advanced fields (1.11.0) by @keval718 in #13626
• fix(authz): schedule periodic audit-log retention cleanup by @erichare in #13546
• fix: Raise on an undecryptable secret at the variable-resolution by @Jkavia in #13681
• fix: warn on empty value and decrypt failure in get_all variable listing by @Jkavia in #13741
• fix: skip provider-component tests while bundles are temporarily disabled by @Cristhianzl in #13797
• fix: guard temporarily-disabled bundle deps across backend + frontend tests by @Cristhianzl in #13801
• fix: keep tests and the starter-projects endpoint green while bundles are temporarily unpublished by @Cristhianzl in #13809
• fix: keep nightly prerelease wheels explicit by @erichare in #13815
• fix: keep nightly prerelease wheels explicit by @erichare in #13817
• fix: share policy refresh and owner permissions by @erichare in #13830
• fix: release QA component follow-ups for bundles by @erichare in #13834
• fix(telemetry): use SQLAlchemy AsyncSession to stop deprecation-warning log flood by @erichare in #13845
• fix: authz flow permission gates by @erichare in #13857
• fix: handle invalid session auth tokens by @erichare in #13863
• fix(a11y): label icon-only controls by @viktoravelino in #13678
• fix: changed image base to be ubi10 by @lucaseduoli in htt...

What's Changed

✨ New Features

• feat: add global variable model overrides by @erichare in #13935

🐛 Bug Fixes

• fix: use session exec in telemetry writer by @erichare in #13821
• fix: disable mem0 telemetry by default by @erichare in #13824
• fix: handle invalid session auth tokens by @erichare in #13823
• fix: remove hardcoded default superuser password by @erichare in #13822
• fix: isolate FAISS persistence by user by @erichare in #13871
• fix: block public builds of code execution agents by @erichare in #13875
• fix: validate file paths by resolved cache containment by @erichare in #13872
• fix: restrict log retrieval to superusers by @erichare in #13873
• fix: block dangerous MCP stdio env vars by @erichare in #13874
• fix: Block Python interpreter format traversal by @erichare in #13880
• fix: constrain Directory component paths by @erichare in #13878
• fix(mcp): launch stdio servers with shell=False (no bash -c / cmd /c wrapper) by @erichare in #13900
• fix: gate litellm off Python 3.14 so pip install langflow resolves by @erichare in #13814
• fix: scope local vector store collections by user by @erichare in #13882
• fix: cascade span deletes when clearing traces for a flow by @andifilhohub in #13960

✅ Tests

• test(frontend): harden model dropdown footer clicks in select-gpt-model by @erichare in #13936

Others

• chore: upgrade lock files by @Adam-Aghili in #13971

Full Changelog: v1.10.1...v1.10.2

What's Changed

✨ New Features

• feat(ci): nightly → stable bundles via canonical pre-releases + decision record [gated] by @erichare in #13528
• feat: first-class local-model support for the assistant by @Cristhianzl in #13641

🐛 Bug Fixes

• fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in #13191
• fix(ci): backport bundle rename step to nightly workflow on main by @erichare in #13195
• fix(ci): gate nightly release on successful tag creation by @erichare in #13198
• fix(ci): use local bundle wheels in nightly install tests by @erichare in #13256
• fix: properly set nightly-base skipped by @Adam-Aghili in #13338
• fix(ci): lockstep langflow-nightly and langflow-base-nightly versions (forward-port #13413) by @erichare in #13416
• fix(ci): give extension bundles a nightly track so langflow-nightly resolves (forward-port #13418) by @erichare in #13419
• fix(ci): re-enable migration-pip-venv now that nightly bundles resolve (forward-port #13421) by @erichare in #13422
• fix: remove duplicate base uv.lock from workflows (forward-port #13326 to main) by @erichare in #13427
• fix(observability): make grafana-loki reference stack instructions work end to end by @ogabrielluiz in #13454
• fix(lfx): restamp component index version after 1.10.1 fork bump by @erichare in #13575
• fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout (1.10.1) by @erichare in #13585
• fix(test): raise spawn-child join timeout in test_multi_process_visibility (1.10.1) by @erichare in #13590
• fix(ci): anchor langflow-base version extraction in nightly docker build (1.10.1) by @erichare in #13593
• fix(test): gate models.dev background refresh out of tests (1.10.1) by @erichare in #13598
• fix(ci): allow pre-releases when pinning the nightly in migration validation (1.10.1) by @erichare in #13601
• fix(ci): scope nightly migration-test pre-releases to the langflow stack (1.10.1) by @erichare in #13605
• fix(ci): create GitHub releases on the dispatched v-prefixed tag (1.10.1) by @erichare in #13609
• fix(components): follow HTTP redirects in URL component with per-hop SSRF revalidation by @erichare in #13572
• fix(ci): make release Biome lint green — NUL-delimit file list + clear pre-existing lint errors by @erichare in #13550
• fix: limit public flow endpoint from displaying private flow streams by @Jkavia in #13602
• fix: enforce the FileSystemTool credential deny-list by @Cristhianzl in #13625
• fix(database): resolve Alembic log to writable config dir, never crash on read-only filesystems by @erichare in #13559
• fix: protect URL components from SSRF by @erichare in #13643
• fix(security): run trusted server code on unauthenticated public flow builds by @erichare in #13540
• fix: guard CUGA CodeAgent local execution by @erichare in #13644
• fix: guard event serialization against unserializable component payloads (#12591) by @erichare in #13651
• fix: run trusted server copy on custom-component hash-gate match (#13496) by @erichare in #13532
• fix: nest root LLM runs under the flow trace in Langfuse (#13429) by @erichare in #13539
• fix: accept Data and Message inputs in LoopComponent by @putramkti in #13646
• fix: restore route discovery under FastAPI 0.137 lazy include_router by @erichare in #13710
• fix(security): block code-bearing nodes with empty type in flow validation (GHSA-mfp9-86w4-493f) by @erichare in #13697
• fix(security): bump residual deprecated transitive uuid to v11 by @erichare in #13703
• fix(security): gate public user self-registration (CWE-862) by @erichare in #13706
• fix(load): bound remote flow fetches by @pony-maggie in #13660
• fix: route IBM WatsonX selections to model_id endpoint in unified get_llm (#13671) by @erichare in #13684
• fix(security): require authentication for POST /api/v2/registration/ (CWE-306) by @erichare in #13707
• fix(security): block code injection via the Tweaks API (CWE-94) by @erichare in #13705
• fix(security): derive Fernet key from short secrets with SHA-256 (GHSA-jxw3-mjmx-3pqm) by @erichare in #13704
• fix(security): do not execute code in validate_code (GHSA-2wcq-pvw2-xh7v) by @erichare in #13696
• fix: downgrade torchvision until cpu index fix by @Adam-Aghili in #13745
• fix(security): stop issuing 365-day superuser token via auto_login (GHSA-fjgc-vj2f-77hm) by @erichare in #13699
• fix(security): HMAC-sign RedisCache payloads before dill deserialization by @erichare in #13698
• fix(security): sanitize APIRequest Content-Disposition filename (GHSA-h3c6-fqr4-m99p) by @erichare in #13695
• fix(security): disable credentials for wildcard CORS origins (CWE-942) by @erichare in #13708
• fix(security): gate PythonREPL execution on allow_custom_components (GHSA-8qpj-27x8-pwpq) by @erichare in #13700
• fix(security): scope voice-mode clients per user by @erichare in #13702
• fix(security): gate ToolGuard guard-code execution on allow_custom_components by @erichare in #13701
• fix: validate uploaded MCP servers config to close command-injection path by @erichare in #13709
• fix(docker): force HTTP/1.1 on frontend nginx upstream proxy (#9010) by @keval718 in #13725
• fix(smart-router): stop unselected branches from executing downstream nodes by @erichare in #13536
• fix(lfx): preserve custom static models through models.dev override by @erichare in #13676
• fix: stop temp_dirs masking startup errors; fail-fast on unresolvable SQLite path (#13634) by @erichare in #13729
• fix: handle Windows path separators in Policies ToolGuard Guard mode (#13727) by @erichare in #13751
• fix(frontend): stop browser autofill from corrupting component config fields by @erichare in #13748
• fix(lfx): make OpenDsStar optional by @erichare in #13749
• fix(ci): resolve pre-release cross-platform install failure; graduate py3.13, add py3.14 experimental by @erichare in #13772
• fix(ci): drop macOS Intel from py3.14 cross-platform set (onnxruntime x86_64 wheel gap) by @erichare in #13773
• fix(i18n): fix MCP hardcoded strings by @RamGopalSrikar in #13621
• fix: make IBM WatsonX models selectable and runnable in the Langflow Assistant by @Cristhianzl in #13771
• fix(agents): stop leaking LangChain chain markers to stdout (#13662) by @erichare in #13730
• fix(component): reconnect stale cached SQL database connections on SQL Database component by @dutitello in #13733
• fix: release candidate version selection by @erichare in #13776
• fix: degrade gracefully when caching unpicklable values in RedisCache by @erichare in #13781
• fix(security): block socket/urllib network egress in component code scanner by @erichare in #13784

📝 Documentation Updates

• docs: rewrite AGENTS.md as hub with topical project philosophy docs by @ogabrielluiz in #13038
• docs: fix empty see also sections in extensions by @mendonk in #13774

🛠 Maintenance Tasks

• refactor(settings): ...

What's Changed

✨ New Features

• feat: allow users to name flow snapshots when saving (LE-874) by @viktoravelino in #12742
• feat: Ship Calculator default tool + dynamic system prompt injection by @Cristhianzl in #12864
• feat: disable frontend retries for client errors by @HzaRashid in #12890
• feat: refresh deployed success step by @viktoravelino in #12853
• feat: Add Memory Base APIs models migrations service endpoints and tests by @dkaushik94 in #12417
• feat: Add an Astra DB Data API Component by @erichare in #12766
• feat: add envs to deployment list response for wxo agents by @HzaRashid in #12881
• feat(deployments): add agent name validation during deployment creation by @HzaRashid in #12858
• feat: Clear all traces for flow by @severfire in #12354
• feat: backend i18n — serve translated component metadata via Accept-Language by @RamGopalSrikar in #12517
• feat(i18n): translate default node titles on language change, preserve user-customized names by @RamGopalSrikar in #12928
• feat: MemoryBases GUI Component by @dkaushik94 in #12903
• feat: Add draft version CTA in deployment modal by @viktoravelino in #12925
• feat: add sandboxed File System component for agents by @Cristhianzl in #12901
• feat: native structured output on AgentComponent with prompt fallback by @Cristhianzl in #12935
• feat(lfx): extension manifest schema, validate CLI, and error formatter (LE-1014) by @erichare in #12952
• feat(assistant): Add Refresh List and Manage Model Providers to model selector by @Cristhianzl in #12985
• feat: Frontend memory by @olayinkaadelakun in #12293
• feat: Added API support for BE endpoints by @olayinkaadelakun in #12423
• feat(deployments): support multi-version flows by @viktoravelino in #12950
• feat(agents): structured default system prompt with runtime env injection by @Cristhianzl in #12855
• feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in #13016
• feat(components): Add Code Agents (CodeAct agent and OpenDsStar agent) and file ingestion components with supporting fixes by @yoavkantor in #12713
• feat: Isolate FileSystem tool sandbox per authenticated user by @Cristhianzl in #13031
• feat(kb): Knowledge Bases — Infrastructure Overhaul by @erichare in #12802
• feat: Add agent preprocessing to perform compaction/gating for MemoryBases by @dkaushik94 in #12975
• feat: regression bucket by @mendonk in #12948
• feat: Redis-backed job queue for multi-worker deployments by @severfire in #12588
• feat(mcp): pass session_id through MCP tool calls by @erichare in #13124
• feat: add UTM tracking to outbound watsonx Orchestrate links by @jordanrfrazier in #12888
• feat(lfx): Bundle Separation and LFX Extension Framework by @erichare in #13043
• feat(knowledge): merge ingestion + retrieval into mode-driven Knowledge component by @erichare in #13120
• feat: Add langflow-stepflow package by @bjchambers in #12015
• feat: promote OpenRouter to a first-class unified model provider by @erichare in #13185
• feat: Redesign deployment environment cards by @viktoravelino in #13109
• feat(memory): improve memory UI with empty states, toasts, and model by @olayinkaadelakun in #13116
• feat(i18n): globalization pipeline — frontend i18n with backend locale support by @RamGopalSrikar in #12933
• feat(memories): surface memory config in summary card with popover by @olayinkaadelakun in #13209
• feat(memories): make preprocessing instructions required with tooltip hint by @olayinkaadelakun in #13250
• feat(memory): session_id filtering as optional for MemoryBases by @dkaushik94 in #13298
• feat: wxo oauth sso support by @HimavarshaVS in #12917
• feat(job_queue): cross-worker cancel + polling watchdog for multi-worker Redis-backed builds by @ogabrielluiz in #13084
• feat(memories): redesign MemoryDetailsHeader UI and update tests by @olayinkaadelakun in #13263
• feat(memories): add in-product docs links and tooltips to Memory Base UI by @olayinkaadelakun in #13265
• feat: add DB migration validation workflow (LE-1259) [backport 1.9.4] by @vjgit96 in #13348
• feat: LE-1017 Event bus for bundle events by @dkaushik94 in #13253
• feat(memory): align Create Memory modal layout and spacing with Create Variable modal design system by @olayinkaadelakun in #13287
• feat: OSS authorization foundations for enterprise RBAC by @HimavarshaVS in #13153
• feat: accept v2 workflow globals in request body by @erichare in #13351
• feat(memory): default session filter to All Sessions and add it as a selectable dropdown option by @olayinkaadelakun in #13350
• feat(authz): admin APIs, share-aware build_flow, and base service additions by @erichare in #13371
• feat(memory): add inline docs link to preprocessing instructions tooltip by @olayinkaadelakun in #13352
• feat(authz): add DI dependencies and permission decorators by @HimavarshaVS in #13368
• feat: flow builder assistant with real-time canvas updates by @ogabrielluiz in #12575
• feat: Add DB migration validation workflow for nightly builds by @vjgit96 in #13249
• feat(components): Add IBM DB2 Vector Store component by @DhruvChaturvediIBM in #13237
• feat: add MCP timeout configuration support by @Jkavia in #12999
• feat(i18n): translate missing frontend strings across Memories, Knowledge Base, toasts, and notifications by @RamGopalSrikar in #13279
• feat(ci): reduce macOS Intel CI matrix and add macOS support documentation by @vjgit96 in #13328
• feat: sync wxO agent name and description with db by @HzaRashid in #13026
• feat: Add embedded mode configuration flags by @vjgit96 in #13095
• feat: MCP lock enforcement + UI/tests by @vjgit96 in #13097
• feat: Gate custom component creation for admins only by @vjgit96 in #13098
• feat: Hide UI elements in embedded mode by @vjgit96 in #13099
• feat(logging): production-grade structured logs for Grafana/Loki by @ogabrielluiz in #13164
• feat: mark Text Input and Text Output components as legacy by @erichare in #13420
• feat: add custom comp execution override by @jordanrfrazier in #13177
• feat: Improve canvas deploy review flow by @viktoravelino in #13246
• feat(authz): finalize authz_share — variable share-aware fetch, dedup, tests by @erichare in #13444
• feat: improve lfx serve production-readiness by @jordanrfrazier in #13121
• feat: mention canvas components in the assistant input by @Cristhianzl in #13486
• feat: Add IP-based rate limiting to login endpoint by @Jkavia in #13469
• feat: sync langflow and lfx versions by @jordanrfrazier in #13176

🐛 Bug Fixes

• fix: Make sdk env flag idempotent by @erichare i...

What's Changed

🐛 Bug Fixes

• fix(agent): Force streaming on Agent LLM so tokens stream incrementally by @Cristhianzl in #13356
• fix: change docling remote component to receive task id and to throw processing errors by @lucaseduoli in #13353
• fix(ci): lockstep langflow-nightly and langflow-base-nightly versions (forward-port #13413) by @erichare in #13416
• fix(ci): give extension bundles a nightly track so langflow-nightly resolves (forward-port #13418) by @erichare in #13419
• fix(ci): re-enable migration-pip-venv now that nightly bundles resolve (forward-port #13421) by @erichare in #13422
• fix: remove duplicate base uv.lock from workflows (forward-port #13326 to main) by @erichare in #13427

Others

• chore: bump versions by @Adam-Aghili in #13370

Full Changelog: 1.9.5...1.9.6

What's Changed

🐛 Bug Fixes

• fix: update Docker base images to Trixie and force pull latest images in nightly builds by @vjgit96 in #13015
• fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in #13191
• fix(ci): backport bundle rename step to nightly workflow on main by @erichare in #13195
• fix(ci): gate nightly release on successful tag creation by @erichare in #13198
• fix(ci): use local bundle wheels in nightly install tests by @erichare in #13256
• fix: properly set nightly-base skipped by @Adam-Aghili in #13338

📝 Documentation Updates

• docs: rewrite AGENTS.md as hub with topical project philosophy docs by @ogabrielluiz in #13038

🛠 Maintenance Tasks

• refactor(settings): split monolithic Settings into per-domain group mixins by @ogabrielluiz in #13141

Others

• ci: block PR titles ending in ellipsis by @ogabrielluiz in #13004
• chore: improve AI-agent context (CLAUDE.md auto-load + AGENTS.md tweaks) by @ogabrielluiz in #13028
• chore(ci): timeout bump + harden langflow grep + build/publish src/bundles/* wheels by @erichare in #13199
• ci: stop publishing -nightly bundle variants; release bundles on demand by @erichare in #13206
• ci(release_bundles): build lfx wheel locally for smoke test by @erichare in #13207
• ci(nightly): re-pin bundle lfx deps to lfx-nightly during nightly build by @erichare in #13208
• ci: port safe workflow fixes from release-1.10.0 to main by @erichare in #13401

Full Changelog: v1.9.4...1.9.5

What's Changed

🐛 Bug Fixes

• fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in #13191
• fix(ci): backport bundle rename step to nightly workflow on main by @erichare in #13195
• fix(ci): gate nightly release on successful tag creation by @erichare in #13198
• fix(ci): use local bundle wheels in nightly install tests by @erichare in #13256
• fix: properly set nightly-base skipped by @Adam-Aghili in #13338

📝 Documentation Updates

• docs: rewrite AGENTS.md as hub with topical project philosophy docs by @ogabrielluiz in #13038

🛠 Maintenance Tasks

• refactor(settings): split monolithic Settings into per-domain group mixins by @ogabrielluiz in #13141

Others

• chore(ci): timeout bump + harden langflow grep + build/publish src/bundles/* wheels by @erichare in #13199
• ci: stop publishing -nightly bundle variants; release bundles on demand by @erichare in #13206
• ci(release_bundles): build lfx wheel locally for smoke test by @erichare in #13207
• ci(nightly): re-pin bundle lfx deps to lfx-nightly during nightly build by @erichare in #13208

Full Changelog: 1.9.3...1.9.4

What's Changed

✨ New Features

• feat: add DB migration validation workflow (LE-1259) [backport 1.9.4] by @vjgit96 in #13348

🐛 Bug Fixes

• fix: upgrade dependencies for security fixes by @Jkavia in #13218
• fix: Update package to safer version to address the CVEs by @Jkavia in #13270
• fix: use langchain-mongodb and langchain-qdrant. Port mem0 update by @Adam-Aghili in #13329
• fix: port chroma collection hardening by @erichare in #13339

Others

• chore: port Remove the diskcache dependency by @Adam-Aghili in #13334
• chore: port pre-create LANGFLOW_CONFIG_DIR #13212 by @Adam-Aghili in #13342

Full Changelog: v1.9.3...v1.9.4

🔒 Security Release - Critical Updates

This release includes critical security fixes. We strongly recommend upgrading to v1.9.3 immediately.

Security Fixes:

• SSRF vulnerability protection (LE-763)
• CVE fixes from MEND/CIMS scans (LE-1123)
• Updated security dependencies including langchain-classic to 1.0.7

What's Changed

✨ New Features

• feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in #13016
• feat: Python 3.14 support by @erichare in #13085

🐛 Bug Fixes

• fix: update security dependencies by @Jkavia in #13053
• fix: pin postgres image to bookworm in docker_example by @erichare in #13027
• fix: stabilize model toggle and refresh Agent dropdown after provider changes by @erichare in #13113
• fix: upgrade langchain-classic to 1.0.7 by @Jkavia in #13130
• fix: backport policies ToolGuard lazy imports by @erichare in #13144

📝 Documentation Updates

• docs: SSRF protection enabled by default by @mendonk in #13106

Others

• chore: Add DESIGN.md for Langflow's visual design system by @ogabrielluiz in #12830

📦 Package Versions

• langflow: 1.9.3
• langflow-base: 0.9.3
• lfx: 0.4.3
• langflow-sdk: 0.1.3

📥 Installation

pip install langflow==1.9.3

🐳 Docker Images

docker pull langflowai/langflow:1.9.3
docker pull langflowai/langflow:latest

Full Changelog: v1.9.2...v1.9.3