v1.15.1 v1.0.1

high risk

NVIDIA/NeMo-Speech.cppSep 5, 2026 → Sep 6, 20261 day between releases

What's New

Major version jump introduces security fixes and Node.js 22 requirement

Breaking Changes

  • Node.js version requirement bumped to 22.19 or newer
  • Client-supplied provider base URLs on loopback addresses are rejected outside production builds
  • Development persistence authenticator now fails closed in production
  • `POST /api/classroom` now rejects scenes that do not satisfy the slide DSL and invalid stage IDs

New Features

  • Asynchronous `generate_video` function
  • New fact-check skill and Exa web-search provider
  • Interactive-widget hints for `generate_scene`
  • PPT element references in Pro chat
  • `POST /preview` endpoint

Improvements

  • Dependency bumps
  • Stored HTML is now sanitized at persistence boundary
  • Outbound URL guard now runs in all builds

Bug Fixes

  • Fixed classroom persistence accepting a stage id that escaped the classrooms directory
  • Fixed stored slide HTML being rendered without sanitization

Upgrade Notes

Upgrade Node.js to version 22.19 or newer. Review configuration for provider base URLs on loopback addresses. Ensure classroom stage IDs are valid before upgrading.

The Two Releases

v1.15.1

v1.15.1

Sep 5, 2026· 2 months ago

Fixes dashboard installation logic and adds comprehensive end-to-end testing for the dashboard lifecycle.

Full release notes
v1.0.1

OpenMAIC v1.0.1 — Security and stability

Sep 6, 2026· 2 months ago

This release addresses four security vulnerabilities including path traversal, HTML sanitization, URL guard scope, and redirect validation, alongside dependency bumps and new features like video generation and fact-checking skills.

Full release notes