pi-v0.4.1 v1.1.4

high risk

UNITRONIX/BetterDeskOct 10, 2026 → Oct 11, 20261 day between releases

What's New

Major version jump introduces security hardening for model authorization and render job ownership.

Breaking Changes

  • Server-managed model authorization requires explicit configuration of `*_MODELS` or provider YAML `models` list. Without a list, only `DEFAULT_MODEL` is authorized.

New Features

  • Server-managed provider credentials now authorize the selected model.
  • Render jobs are bound to the requesting owner.
  • Deleted courses stop serving legacy classroom media URLs.

Improvements

  • Media responses use private caching with revalidation.
  • Mixed service versions fail closed via owner-bound job namespace.

Bug Fixes

  • Fixed missing model authorization for server-managed providers.
  • Fixed MP4 render jobs not bound to the requesting owner.
  • Fixed deleted courses not revoking legacy media URLs.

Upgrade Notes

Upgrade the render-service together with or before the app. Ensure you configure `*_MODELS` or provider YAML `models` list to authorize server-managed models, or ensure `DEFAULT_MODEL` is authorized.

The Two Releases

pi-v0.4.1

gentle-engram v0.4.1

Oct 10, 2026· 12 days ago

This release aligns the package and compatibility diagnostics to version 0.4.1, shipping a merged correction that reserves session summaries for explicit closure while ensuring idempotent upgrades that preserve unrelated settings.

Full release notes
v1.1.4

OpenMAIC v1.1.4 — Security

Oct 11, 2026· 11 days ago

A security release addressing model authorization, render job ownership, and legacy media revocation for server-managed providers.

Full release notes