Starstruk Logo MarkStarstruk

26.05.3

Avatar-Home-Automation/A.V.A.T.A.R-Server26.05.3May 16, 2026by Salazareo

AI Summary

This release expands AI capabilities with new models (GPT 5.4) and image/video output, improves the desktop web components, and adds a new Alibaba AI provider while fixing cross-origin security issues and rate limiting.

Key Highlights

  • AI image, video, and file system output support
  • New GPT 5.4 models and Alibaba AI provider
  • Restriction of cross-origin session-cookie auth for security
  • Significant updates to Puter JS Web Components and MenuBar
  • Double rate limit fixes across the board

New Features

  • AI image/video output
  • GPT 5.4 models
  • Alibaba provider
  • Puter JS UI updates
  • Cross-origin auth restriction

Full Release Notes

## What's Changed
* ai image video fs output by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3079
* fix: updaet deepseek models by @Salazareo in https://github.com/HeyPuter/puter/pull/3082
* add missing GPT 5.4 models by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3083
* fix: don't allow dav access control credentials by @Salazareo in https://github.com/HeyPuter/puter/pull/3084
* fix: potential fix for some linux distros by @Salazareo in https://github.com/HeyPuter/puter/pull/3085
* Puter JS Web Component update by @miikakuisma in https://github.com/HeyPuter/puter/pull/3073
* PuterJS menubar web component improvements by @miikakuisma in https://github.com/HeyPuter/puter/pull/3086
* fix: correct xAI TTS pricing to $15.00/1M characters by @jelveh in https://github.com/HeyPuter/puter/pull/3089
* chore: update mistralAi provider by @Salazareo in https://github.com/HeyPuter/puter/pull/3090
* fix: mistral ai tests from renames by @Salazareo in https://github.com/HeyPuter/puter/pull/3091
* Restrict cross-origin session-cookie auth by @slashdevcorpse in https://github.com/HeyPuter/puter/pull/3088
* fix: whoami by @Salazareo in https://github.com/HeyPuter/puter/pull/3092
* expose hasDevAccountAccess at top level by @Salazareo in https://github.com/HeyPuter/puter/pull/3093
* fix: add user_agent to email signup by @Salazareo in https://github.com/HeyPuter/puter/pull/3094
* fix: dev accounts not showing by @Salazareo in https://github.com/HeyPuter/puter/pull/3095
* fix: return code by @Salazareo in https://github.com/HeyPuter/puter/pull/3096
* Fix link formatting in BUG-BOUNTY.md by @jelveh in https://github.com/HeyPuter/puter/pull/3097
* fix: puter site redirect for non paid apps by @Salazareo in https://github.com/HeyPuter/puter/pull/3104
* alibaba provider by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3103
* Puter JS UI Component updates by @miikakuisma in https://github.com/HeyPuter/puter/pull/3105
* fix: double rate limits across the board by @Salazareo in https://github.com/HeyPuter/puter/pull/3108
* accept web input in speech2txt by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3110
* fix: treat access tokens as non-auth unless opted in by @Salazareo in https://github.com/HeyPuter/puter/pull/3111
* fix: express proxy chain by @Salazareo in https://github.com/HeyPuter/puter/pull/3112
* Puter JS MenuBar Web Component improvements by @miikakuisma in https://github.com/HeyPuter/puter/pull/3114
* PuterJS - Fix submenu behavior on mobile devices in Menubar web component by @miikakuisma in https://github.com/HeyPuter/puter/pull/3115
* Update README.md by @Salazareo in https://github.com/HeyPuter/puter/pull/3116
* fix: bad cookie parse test by @Salazareo in https://github.com/HeyPuter/puter/pull/3120
* assert normalized paths by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3119
* Make confirming an email unconfirm any other accounts using that email by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3121

## New Contributors
* @slashdevcorpse made their first contribution in https://github.com/HeyPuter/puter/pull/3088

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.05.2...26.05.3