26.05.5

HeyPuter/puter26.05.5May 28, 2026by Salazareo

AI Summary

This release focuses on a complete overhaul of the authentication system, introducing v2 auth with silent migration capabilities. It also improves worker session management and adds GUI v2 modal support.

Key Highlights

  • Implemented v2 authentication system with silent v1 to v2 migration.
  • Added worker sessions isolated by user, app, and worker_name.
  • Added GUI v2 modal for reauthentication handling.
  • Improved session revocation and storage logic.
  • Added unit tests for speech-to-text and session management.

New Features

  • V2 authentication endpoints
  • Worker sessions isolation
  • Silent token migration
  • GUI v2 reauth modal
  • Unit tests for XAISpeechToTextDriver

Full Release Notes

## What's Changed
* fix: add back AGENTS.md by @Salazareo in https://github.com/HeyPuter/puter/pull/3154
* feat: add verification for v2 auth by @Salazareo in https://github.com/HeyPuter/puter/pull/3155
* feat (put-1022 put-1023 put-1024): puter.js reauth handling + GUI v2 modal + silent v1 migration by @Salazareo in https://github.com/HeyPuter/puter/pull/3157
* feat (put-1019 put-1021): v2 auth revoke endpoints + silent v1->v2 to… by @Salazareo in https://github.com/HeyPuter/puter/pull/3158
* chore: drop linear/issue ticket references from source comments by @Salazareo in https://github.com/HeyPuter/puter/pull/3159
* feat: worker sessions get their own kind + per-(user, app, worker_name) row by @Salazareo in https://github.com/HeyPuter/puter/pull/3160
* chore: package-lock update by @Salazareo in https://github.com/HeyPuter/puter/pull/3161
* fix: session revocation by @Salazareo in https://github.com/HeyPuter/puter/pull/3163
* feat (PUT-1016 & PUT-1020) by @Salazareo in https://github.com/HeyPuter/puter/pull/3164
* feat (PUT-1025 PUT-1026 and PUT-1017): better handling old token auth required in gui by @Salazareo in https://github.com/HeyPuter/puter/pull/3166
* fix: small fixes for perf and username checks by @Salazareo in https://github.com/HeyPuter/puter/pull/3169
* fix: session store kind column + duplicate error handling by @Salazareo in https://github.com/HeyPuter/puter/pull/3172
* tests: Add unit tests for XAISpeechToTextDriver by @Salazareo in https://github.com/HeyPuter/puter/pull/3173
* tests: more tests for session and auth by @Salazareo in https://github.com/HeyPuter/puter/pull/3174
* Don't use passed in authorization in workers by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3175
* fix: missing english i18n by @Salazareo in https://github.com/HeyPuter/puter/pull/3176


**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.05.4...26.05.5