26.07.1

HeyPuter/puter26.07.1Jul 15, 2026by Salazareo

AI Summary

This release focuses on AI model upgrades, including Grok 4.5 and 5.6, alongside critical security patches for XSS entrypoints. It also introduces development enhancements like local Cloudflare workers support and improved authentication UI.

Key Highlights

  • Added Grok 4.5 and 5.6 AI models
  • Fixed potential XSS entrypoints for security
  • Added GUI button for custom OIDC authentication
  • Implemented local development support for workers without Cloudflare

New Features

  • Grok 4.5 AI model support
  • 5.6 AI model support
  • Sign-in flow for crossOriginIsolated contexts
  • GUI button for custom OIDC
  • Local worker implementation without Cloudflare

Full Release Notes

## What's Changed
* add grok 4.5 by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3360
* fix: misc auth bug fixes by @Salazareo in https://github.com/HeyPuter/puter/pull/3362
* chore: cleanup uneeded ai messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3363
* update user pays model docs by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3364
* fix grok 4.5 release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3365
* add 5.6 models by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3366
* fix: add phone errors into kv for debugging by @Salazareo in https://github.com/HeyPuter/puter/pull/3367
* fix possible XSS entrypoints by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3368
* fix: OIDC state by @Salazareo in https://github.com/HeyPuter/puter/pull/3370
* fix: ai rate limits by @Salazareo in https://github.com/HeyPuter/puter/pull/3371
* fingerprint: use device info for rate limit too by @Salazareo in https://github.com/HeyPuter/puter/pull/3372
* add support for ignoring specific issues in healthcheck by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3374
* fix: cache healthcheck in mem for each node by @Salazareo in https://github.com/HeyPuter/puter/pull/3375
* Add spans to drivers and high frequency paths by @Salazareo in https://github.com/HeyPuter/puter/pull/3376
* fix: missing OIDC error messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3377
* add support for ndjson logging by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3381
* Check if user is suspended on WebDAV basic auth and others by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3369
* feat: add sign-in flow for crossOriginIsolated contexts, take two by @velzie in https://github.com/HeyPuter/puter/pull/3338
* Add GUI button for custom OIDC by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3384
* fix: ui signup order by @Salazareo in https://github.com/HeyPuter/puter/pull/3385
* fix: admin gates by @Salazareo in https://github.com/HeyPuter/puter/pull/3386
* Implement workers without cloudflare for local dev testing by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3389
* fix: sanitize get user response by @Salazareo in https://github.com/HeyPuter/puter/pull/3390
* feat: email api wip by @Salazareo in https://github.com/HeyPuter/puter/pull/3391
* Fix static hosting domain fallback for self-hosted custom domains by @tamilselvanp57 in https://github.com/HeyPuter/puter/pull/3382

## New Contributors
* @tamilselvanp57 made their first contribution in https://github.com/HeyPuter/puter/pull/3382

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.07...26.07.1