26.05.4

Avatar-Home-Automation/A.V.A.T.A.R-Server26.05.4May 25, 2026by Salazareo

AI Summary

A maintenance-focused release that enhances security by tightening AI limits, validating private app tokens, and implementing token expiry logic, alongside fixes for file system operations and the introduction of a new Gemini 3.5 Flash model.

Key Highlights

Tightening of AI limits with severity alerts
Implementation of token expiry and invalidation signatures
New Gemini 3.5 Flash model support
Fixes for file system write issues and signed URL directory listings
Validation improvements for private apps and signed URLs

New Features

Token expiry logic
Gemini 3.5 Flash model
AI limit tightening
FS write fixes
Signed URL validation

Full Release Notes

## What's Changed
* fix: expose upstream ai errors as not 500s by @Salazareo in https://github.com/HeyPuter/puter/pull/3123
* fix: validate private apps token too by @Salazareo in https://github.com/HeyPuter/puter/pull/3124
* fix: misc write issues with fs + openrouter refresh  by @Salazareo in https://github.com/HeyPuter/puter/pull/3125
* update Indonesian section (Indonesian language) by @kenjiew in https://github.com/HeyPuter/puter/pull/3117
* import ESM by URL instead of path by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3129
* fix: app creation dupped names limit by @Salazareo in https://github.com/HeyPuter/puter/pull/3130
* feat: new gemini 3.5 flash model by @Salazareo in https://github.com/HeyPuter/puter/pull/3131
* more validation for signed URLs by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3133
* fix: subdomain index.htmls by @Salazareo in https://github.com/HeyPuter/puter/pull/3134
* Update gemini 3.5 flash release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3135
* fix: agents.md name by @Salazareo in https://github.com/HeyPuter/puter/pull/3136
* fix: event types + emit subdomain serve event by @Salazareo in https://github.com/HeyPuter/puter/pull/3137
* fix: event types by @Salazareo in https://github.com/HeyPuter/puter/pull/3138
* Add cssstyle to docs dependencies by @jelveh in https://github.com/HeyPuter/puter/pull/3139
* fix together provider issues by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3140
* fix: fixing misc issues around alerting and bugs by @Salazareo in https://github.com/HeyPuter/puter/pull/3141
* feat: ai limits tightning and add severity alert by @Salazareo in https://github.com/HeyPuter/puter/pull/3142
* Add OpenRouter model release dates by @nightt5879 in https://github.com/HeyPuter/puter/pull/3144
* fix: bring back puter site config logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3145
* fix bug with signed url directory listings by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3146
* Add preamble versioning by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3147
* fix: associated app ids as input by @Salazareo in https://github.com/HeyPuter/puter/pull/3149
* fix: search leaking metadata by @Salazareo in https://github.com/HeyPuter/puter/pull/3150
* feat: start adding support for token expiry and invalidation by @Salazareo in https://github.com/HeyPuter/puter/pull/3151
* feat (put-1012 put-1014): new tokens version signature and logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3152
* fix: fs event emissions by @Salazareo in https://github.com/HeyPuter/puter/pull/3153

## New Contributors
* @kenjiew made their first contribution in https://github.com/HeyPuter/puter/pull/3117
* @nightt5879 made their first contribution in https://github.com/HeyPuter/puter/pull/3144

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.05.3...26.05.4