v2026.09.22
QwenAudio/SenseVoicev2026.09.22Sep 21, 2026by knu
Upgrading?
AI Summary
Upgrades JSONPath evaluation to RFC 9535 standard with security restrictions and provides a database migration path for existing agents.
Key Highlights
- JSONPath security improvements with method allowlist
- Switch to RFC 9535 JSONPath evaluation by default
- Database migration for expressions with conservative compatibility checks
- Legacy mode flag for agents requiring old behavior
- Migration lists affected Agents without exposing sensitive data
Breaking Changes
- Switch to RFC 9535 JSONPath evaluation by default
- Restrict legacy JSONPath method calls to an allowlist
New Features
- RFC 9535 JSONPath evaluation
- JSONPath allowlist for legacy method calls
- Database migration for uncertain expressions
- Legacy mode flag (`use_legacy_jsonpath: true`)
Full Release Notes
# v2026.09.22 ## JSONPath safety and compatibility - Restrict legacy JSONPath method calls to an allowlist for JSON value types. The guard also covers filters, computed indexes, and direct uses of the jsonpath gem. See [GHSA-9x7r-mpvj-vj8v](https://github.com/huginn/huginn/security/advisories/GHSA-9x7r-mpvj-vj8v). - Use RFC 9535 JSONPath evaluation by default. Agents requiring legacy behavior can use `use_legacy_jsonpath: true`; legacy evaluation remains subject to the method allowlist. - Normalize examples and defaults to JSONPath expressions with an explicit `$` root. ## Upgrading The database migration converts expressions only when compatibility can be established conservatively. Agents with uncertain expressions retain their original paths and receive `use_legacy_jsonpath: true`. The migration lists affected Agent URLs grouped by user, without exposing expressions or event data. Review these Agents before removing the compatibility flag. See the [upgrade guide](https://github.com/huginn/huginn/blob/v2026.09.22/UPGRADING.md#gradual-migration-to-rfc-9535-jsonpath) for migration steps and compatibility considerations. **Full Changelog**: https://github.com/huginn/huginn/compare/v2026.09.21...v2026.09.22
Related Repositories
Genymobile/scrcpy★ 152,826
Display and control your Android device
ffmpegwasm/ffmpeg.wasm★ 17,898
FFmpeg for browser, powered by WebAssembly
bol-van/zapret★ 16,285
DPI bypass multi platform
haiwen/seafile★ 15,364
Beyond file syncing and sharing, a new way to organize your files with extensible file properties and flexible views
betaflight/betaflight★ 11,688
Open Source Flight Controller Firmware