26.05.4

Orange-OpenSource/hurl26.05.4May 25, 2026by Salazareo

AI Summary

Addresses bugs in AI error handling, file system writes, and token validation, while introducing a new Gemini 3.5 flash model and token expiry capabilities.

Key Highlights

  • Added support for token expiry and invalidation.
  • New Gemini 3.5 flash AI model support.
  • Fixed private app token validation and signed URL issues.
  • Improved AI limits and severity alerting.

New Features

  • Token expiry and invalidation logic
  • New AI model (Gemini 3.5 flash)
  • Signed URL validation improvements
  • Private app token validation

Full Release Notes

## What's Changed
* fix: expose upstream ai errors as not 500s by @Salazareo in https://github.com/HeyPuter/puter/pull/3123
* fix: validate private apps token too by @Salazareo in https://github.com/HeyPuter/puter/pull/3124
* fix: misc write issues with fs + openrouter refresh  by @Salazareo in https://github.com/HeyPuter/puter/pull/3125
* update Indonesian section (Indonesian language) by @kenjiew in https://github.com/HeyPuter/puter/pull/3117
* import ESM by URL instead of path by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3129
* fix: app creation dupped names limit by @Salazareo in https://github.com/HeyPuter/puter/pull/3130
* feat: new gemini 3.5 flash model by @Salazareo in https://github.com/HeyPuter/puter/pull/3131
* more validation for signed URLs by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3133
* fix: subdomain index.htmls by @Salazareo in https://github.com/HeyPuter/puter/pull/3134
* Update gemini 3.5 flash release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3135
* fix: agents.md name by @Salazareo in https://github.com/HeyPuter/puter/pull/3136
* fix: event types + emit subdomain serve event by @Salazareo in https://github.com/HeyPuter/puter/pull/3137
* fix: event types by @Salazareo in https://github.com/HeyPuter/puter/pull/3138
* Add cssstyle to docs dependencies by @jelveh in https://github.com/HeyPuter/puter/pull/3139
* fix together provider issues by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3140
* fix: fixing misc issues around alerting and bugs by @Salazareo in https://github.com/HeyPuter/puter/pull/3141
* feat: ai limits tightning and add severity alert by @Salazareo in https://github.com/HeyPuter/puter/pull/3142
* Add OpenRouter model release dates by @nightt5879 in https://github.com/HeyPuter/puter/pull/3144
* fix: bring back puter site config logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3145
* fix bug with signed url directory listings by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3146
* Add preamble versioning by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3147
* fix: associated app ids as input by @Salazareo in https://github.com/HeyPuter/puter/pull/3149
* fix: search leaking metadata by @Salazareo in https://github.com/HeyPuter/puter/pull/3150
* feat: start adding support for token expiry and invalidation by @Salazareo in https://github.com/HeyPuter/puter/pull/3151
* feat (put-1012 put-1014): new tokens version signature and logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3152
* fix: fs event emissions by @Salazareo in https://github.com/HeyPuter/puter/pull/3153

## New Contributors
* @kenjiew made their first contribution in https://github.com/HeyPuter/puter/pull/3117
* @nightt5879 made their first contribution in https://github.com/HeyPuter/puter/pull/3144

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.05.3...26.05.4