Starstruk Logo MarkStarstruk

2.10.1

Zyphra/Zonos2.10.1Mar 27, 2026by asvishnyakov

AI Summary

A security patch release for Chainlit that addresses a vulnerability in WebSocket session ownership validation and migrates npm publishing to OIDC.

Key Highlights

  • Security fix: Validates session ownership on websocket restore to prevent unauthorized access
  • Migrated npm publishing process to use OpenID Connect (OIDC)

New Features

  • No new functional features; this is a security maintenance release

Full Release Notes

## What's Changed
* chore: move to oidc for npm publishing by @willydouhard in https://github.com/Chainlit/chainlit/pull/2854
* fix: validate session ownership on websocket restore by @willydouhard in https://github.com/Chainlit/chainlit/pull/2857
  * ⚠️ This is a **fix for a security vulnerability** in Chainlit


**Full Changelog**: https://github.com/Chainlit/chainlit/compare/2.10.0...2.10.1