v1.15.1 v1.0.1
high risk
NVIDIA/NeMo-Speech.cppSep 5, 2026 → Sep 6, 20261 day between releases
What's New
Major version jump introduces security fixes and Node.js 22 requirement
Breaking Changes
- Node.js version requirement bumped to 22.19 or newer
- Client-supplied provider base URLs on loopback addresses are rejected outside production builds
- Development persistence authenticator now fails closed in production
- `POST /api/classroom` now rejects scenes that do not satisfy the slide DSL and invalid stage IDs
New Features
- Asynchronous `generate_video` function
- New fact-check skill and Exa web-search provider
- Interactive-widget hints for `generate_scene`
- PPT element references in Pro chat
- `POST /preview` endpoint
Improvements
- Dependency bumps
- Stored HTML is now sanitized at persistence boundary
- Outbound URL guard now runs in all builds
Bug Fixes
- Fixed classroom persistence accepting a stage id that escaped the classrooms directory
- Fixed stored slide HTML being rendered without sanitization
Upgrade Notes
Upgrade Node.js to version 22.19 or newer. Review configuration for provider base URLs on loopback addresses. Ensure classroom stage IDs are valid before upgrading.
The Two Releases
v1.15.1
v1.15.1
Sep 5, 2026· 2 months ago
Fixes dashboard installation logic and adds comprehensive end-to-end testing for the dashboard lifecycle.
Full release notesv1.0.1
OpenMAIC v1.0.1 — Security and stability
Sep 6, 2026· 2 months ago
This release addresses four security vulnerabilities including path traversal, HTML sanitization, URL guard scope, and redirect validation, alongside dependency bumps and new features like video generation and fact-checking skills.
Full release notes