v2026.09.21 v2026.09.22
medium risk
QwenAudio/SenseVoiceSep 20, 2026 → Sep 21, 20261 day between releases
What's New
Upgrade JSONPath evaluation to RFC 9535 standard with security restrictions and add migration path for existing agents.
Breaking Changes
- Switch to RFC 9535 JSONPath evaluation by default.
- Restrict legacy JSONPath method calls to an allowlist.
New Features
- RFC 9535 JSONPath evaluation.
- JSONPath allowlist for legacy method calls.
- Database migration for uncertain expressions.
- Legacy mode flag (`use_legacy_jsonpath: true`).
Improvements
- JSONPath security improvements with method allowlist.
- Database migration path for existing agents.
- Migration lists affected Agent URLs without exposing sensitive data.
Upgrade Notes
The database migration converts expressions conservatively. Agents with uncertain expressions retain their original paths and receive `use_legacy_jsonpath: true`. Review these Agents before removing the compatibility flag.
The Two Releases
v2026.09.21
v2026.09.21
Sep 20, 2026· 1 month ago
Improves recovery from stalled background jobs, adds opt-in proxy routing for Agents, and upgrades the Ruby and Docker runtimes.
Full release notesv2026.09.22
v2026.09.22
Sep 21, 2026· 1 month ago
Upgrades JSONPath evaluation to RFC 9535 standard with security restrictions and provides a database migration path for existing agents.
Full release notes