v3.2.6

allenai/olmocrv3.2.6Jul 5, 2026by poeti8

AI Summary

This release focuses on security hardening and configuration improvements for the OIDC authentication flow, alongside general maintenance updates and bug fixes.

Key Highlights

Configurable OIDC authentication flow via `OIDC_PROMPT` and `OIDC_BUTTON_TEXT`
Security updates including switch to `express-useragent`, updated `nodemailer`, and `SameSite: Lax` cookie settings
General bug fixes including a typo correction and HTTP status code consistency

New Features

Configurable OIDC prompt settings
Customizable OIDC login button text

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page