v0.77.0 v1.1.2

high risk

UNITRONIX/BetterDeskSep 28, 2026 → Sep 28, 20260 days between releases

What's New

Major security release pins provider connections to validated addresses and refuses redirects to prevent internal address probing.

Breaking Changes

  • Caller-supplied URLs that redirect are refused.
  • Client-supplied AliDocMind endpoints must be official hosts.
  • Local network addresses require `ALLOW_LOCAL_NETWORKS` configuration.

New Features

  • Classroom media generation downloads now use strict transport (HTTPS public addresses only).

Improvements

  • Error responses no longer carry provider response bodies or connection details.
  • Provider connections now pin validated addresses and refuse redirects.
  • Caller-facing errors are fixed text.

Upgrade Notes

Local network access is now restricted by default and requires the `ALLOW_LOCAL_NETWORKS` configuration flag. Caller-supplied URLs must be valid and not redirect, and AliDocMind endpoints must be official hosts. Error messages are now fixed text rather than exposing provider details.

The Two Releases

v0.77.0

v0.77.0

Sep 28, 2026· 24 days ago

A major release focusing on certification improvements for llama models, the implementation of a payments engine, and enhanced OpenAI API compatibility.

Full release notes
v1.1.2

OpenMAIC v1.1.2 — Security

Sep 28, 2026· 24 days ago

A security release tightening provider URL validation and connection handling to prevent internal address probing.

Full release notes