v0.8.3 v1.43.0

high risk

CaviraOSS/LongMemoryAug 30, 2026 → Aug 31, 20261 day between releases

What's New

Adds Spanish (Mexico) support and hardens security with SSRF protection and token validation.

Breaking Changes

  • Third-party Account API now restricts data mutations.
  • Token exchange validation requires `at+jwt` type headers.

New Features

  • Sign-in Experience now supports Spanish (Mexico) locale.
  • Microsoft Azure AD connector adds `disableEmailSync` option.

Improvements

  • SSRF protection blocks outbound requests to loopback and private addresses.
  • Token exchange validation ensures JWTs are actual access tokens.

Bug Fixes

  • Fixed Spanish locale list formatter placeholders and untranslated MFA messages.

Upgrade Notes

Third-party applications using the Account API for mutations will break; review permissions. Ensure your token exchange logic complies with the new `at+jwt` header requirement.

The Two Releases

v0.8.3

v0.8.3

Aug 30, 2026· 2 months ago

This release focuses on stabilizing CI/CD pipelines and fixing user interface issues, specifically regarding the selection of actions within the application's picker interface.

Full release notes
v1.43.0

v1.43.0

Aug 31, 2026· 2 months ago

A major security-focused release that adds Spanish (Mexico) support, hardens SSRF protection for webhooks and enterprise SSO, and restricts third-party applications from mutating account data.

Full release notes