react-v1.4.0 web-v0.136.0

medium risk

achtungsoftware/alarikOct 8, 2026 → Oct 9, 20261 day between releases

What's New

Adds DISABLE_NEW_SIGNUPS config and migrates from framer-motion to motion

New Features

  • Gate new signups behind DISABLE_NEW_SIGNUPS flag.

Improvements

  • Migrate dependency framer-motion to motion.
  • Update dependency js-yaml to v4.3.0 (security).
  • Bump dompurify to ^3.4.11 (security).

Bug Fixes

  • Remediate open security alerts.
  • Replace dependency framer-motion with motion ^12.29.0.

Upgrade Notes

Review the new `DISABLE_NEW_SIGNUPS` configuration flag to ensure it aligns with your application's signup requirements. The `framer-motion` library has been replaced with `motion`; inspect your code for potential API incompatibilities.

The Two Releases

react-v1.4.0

react: v1.4.0

Oct 8, 2026· 13 days ago

The React SDK release prepares for the Tambo Cloud shutdown and addresses security vulnerabilities. It also updates the ag-ui dependency and improves client compatibility.

Full release notes
web-v0.136.0

web: v0.136.0

Oct 9, 2026· 12 days ago

This release focuses on preparing infrastructure for the Tambo Cloud shutdown and introduces a configuration flag to restrict new user signups. It also includes security remediations and updates to core dependencies.

Full release notes