v3.15.4

ChatGPTNextWeb/NextChatv3.15.4Jan 13, 2026by github-actions[bot]

AI Summary

This release focuses on dependency updates across the backend, CDK Lambda, and frontend to enhance security and stability. It includes fixes for decompression-bomb safeguards, improvements to retry handling, and the addition of validation for redirect locations.

Key Highlights

Updated urllib3 to 2.6.3 with security fixes for decompression-bomb safeguards.
Updated @smithy/config-resolver to support asterisk regions in CDK Lambda.
Updated React Router to add validation for redirect locations in the frontend.

New Features

Added validation for redirect locations in the frontend router.
Improved security handling for decompression attacks in the backend.
Enhanced Retry-After handling in urllib3.

Full Release Notes

## Enhancements
- Updated urllib3 from 2.6.0 to 2.6.3 in backend, including security fixes for decompression-bomb safeguards and improvements to Retry-After handling by @app/dependabot (#995)
- Updated @smithy/config-resolver from 4.3.0 to 4.4.5 in CDK Lambda knowledge-base-custom-transformation, including support for asterisk region with warning by @app/dependabot (#996)
- Updated @remix-run/router to 1.23.2 and react-router-dom to 6.30.3 in frontend, adding validation for redirect locations by @app/dependabot (#997)