v0.6.40 v1.1.4
Mesh-LLM/mesh-llmOct 11, 2026 → Oct 11, 20260 days between releases
What's New
New release introduces strict model authorization and security fixes (different project from previous release)
Breaking Changes
- Server-managed model authorization requires an explicit `*_MODELS` configuration or YAML `models` list.
- Migration requires listing all selectable model IDs, restarting the server, and updating saved selections.
New Features
- Providers using server credentials now authorize the selected model before access across chat, generation, and media.
- Render jobs are bound to the requesting owner to prevent unauthorized access.
- Legacy classroom media is revoked when its course is deleted.
- Mixed service versions fail closed through a dedicated owner-bound job namespace.
Improvements
- Providers now only send authorized models to server-managed credentials.
- Media responses use private caching with revalidation for legacy classroom media.
Bug Fixes
- Fixes for High, Medium, and Low severity security advisories.
- Legacy classroom media URLs are revoked when courses are deleted.
Upgrade Notes
Server-managed model authorization requires an explicit `*_MODELS` configuration or YAML `models` list; without an explicit list, only `DEFAULT_MODEL` and `MODEL_ROUTES` are authorized. Migration requires listing all selectable model IDs, restarting the server, and updating saved selections.
The Two Releases
DBX v0.6.40
Oct 11, 2026· 11 days ago
A major update introducing real-time query message display, enhanced SQL auto-completion for nested CTEs, and improved data import/export capabilities.
Full release notesOpenMAIC v1.1.4 — Security
Oct 11, 2026· 11 days ago
This security release introduces strict model authorization for server-managed providers, binds render jobs to requesting owners, and ensures deleted courses stop serving legacy media.
Full release notes