v0.76.1 v1.0.2
UNITRONIX/BetterDeskSep 12, 2026 → Sep 13, 20261 day between releases
What's New
Major version update introduces security fixes and blocks CGNAT by default.
Breaking Changes
- POST /api/classroom no longer honors client-supplied stage.id (server-generated now)
- CGNAT addresses are blocked by default (requires ALLOW_LOCAL_NETWORKS=true to allow)
New Features
- GenUI and Interactive component referencing in playback
- Render queue preflight before export compilation
- GLM-5.3 and GLM-5.3-Flash model support
- One JSON lifecycle event per render and preview transition
Improvements
- Fixed cloud instance-metadata addresses bypassing the outbound URL guard
- Fixed DNS rebinding bypassing the SSRF guard on proxy-media
- Fixed POST /api/classroom allowing overwriting existing classrooms
- Blocks CGNAT addresses by default in the URL guard
Upgrade Notes
Set ALLOW_LOCAL_NETWORKS=true to allow CGNAT addresses. Remove client-side stage.id generation for POST /api/classroom. TTS generation now validates response content and rejects non-audio.
The Two Releases
v0.76.1
Sep 12, 2026· 1 month ago
This release focuses on bug fixes and diagnostics for the Mesh-LLM serving infrastructure, including improved GPU memory reporting, handling of direct connections, and fixes for tool definitions and OpenMP linking.
Full release notesOpenMAIC v1.0.2 — Security
Sep 13, 2026· 1 month ago
A security release addressing three advisories related to cloud metadata access, DNS rebinding, and classroom overwriting. It modifies the behavior of the classroom API and blocks CGNAT addresses by default to prevent SSRF attacks.
Full release notes