26.07.1
Textualize/textual26.07.1Jul 15, 2026by Salazareo
AI Summary
This release adds support for Grok 4.5 and 5.6 models while addressing security vulnerabilities and authentication bugs. It also introduces new debugging tools and sign-in flows for isolated contexts.
Key Highlights
- Added Grok 4.5 and 5.6 AI models
- Fixed XSS entrypoints and OIDC state handling
- Improved healthcheck caching and NDJSON logging
- Added crossOriginIsolated sign-in flow
New Features
- Grok 4.5 support
- 5.6 models support
- NDJSON logging support
- GUI button for custom OIDC
- Email API (WIP)
Full Release Notes
## What's Changed * add grok 4.5 by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3360 * fix: misc auth bug fixes by @Salazareo in https://github.com/HeyPuter/puter/pull/3362 * chore: cleanup uneeded ai messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3363 * update user pays model docs by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3364 * fix grok 4.5 release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3365 * add 5.6 models by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3366 * fix: add phone errors into kv for debugging by @Salazareo in https://github.com/HeyPuter/puter/pull/3367 * fix possible XSS entrypoints by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3368 * fix: OIDC state by @Salazareo in https://github.com/HeyPuter/puter/pull/3370 * fix: ai rate limits by @Salazareo in https://github.com/HeyPuter/puter/pull/3371 * fingerprint: use device info for rate limit too by @Salazareo in https://github.com/HeyPuter/puter/pull/3372 * add support for ignoring specific issues in healthcheck by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3374 * fix: cache healthcheck in mem for each node by @Salazareo in https://github.com/HeyPuter/puter/pull/3375 * Add spans to drivers and high frequency paths by @Salazareo in https://github.com/HeyPuter/puter/pull/3376 * fix: missing OIDC error messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3377 * add support for ndjson logging by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3381 * Check if user is suspended on WebDAV basic auth and others by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3369 * feat: add sign-in flow for crossOriginIsolated contexts, take two by @velzie in https://github.com/HeyPuter/puter/pull/3338 * Add GUI button for custom OIDC by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3384 * fix: ui signup order by @Salazareo in https://github.com/HeyPuter/puter/pull/3385 * fix: admin gates by @Salazareo in https://github.com/HeyPuter/puter/pull/3386 * Implement workers without cloudflare for local dev testing by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3389 * fix: sanitize get user response by @Salazareo in https://github.com/HeyPuter/puter/pull/3390 * feat: email api wip by @Salazareo in https://github.com/HeyPuter/puter/pull/3391 * Fix static hosting domain fallback for self-hosted custom domains by @tamilselvanp57 in https://github.com/HeyPuter/puter/pull/3382 ## New Contributors * @tamilselvanp57 made their first contribution in https://github.com/HeyPuter/puter/pull/3382 **Full Changelog**: https://github.com/HeyPuter/puter/compare/26.07...26.07.1