v1.0.3 v1.12.0
azophy/sshifuSep 15, 2026 → Sep 17, 20263 days between releases
What's New
Adds OpenAI app challenge support and exposes certification metadata in Looker tools.
Breaking Changes
- Looker embed URL generation tool now requires mandatory embed parameters for security.
New Features
- Added logic to serve /.well-known/openai-apps-challenge for OpenAI compatibility.
- Looker tools now expose certification metadata in dashboard and look tools.
- Additional annotations added to support OpenAI plugins in Looker tools.
Improvements
- Next.js upgraded to patch critical remote code execution vulnerability.
- Access-code tokens now enforce a 7-day server-side lifetime and rate limits.
- Render service now applies Content-Security-Policy to prevent untrusted execution.
- Audio provider requests now validate DNS resolution to prevent SSRF attacks.
Bug Fixes
- Clarified cloud-sql-postgres execute_sql tool description.
- Release handle when connect attempt fails for cockroachdb and redis.
- Added additional annotations to support OpenAI plugins in Looker tools.
Upgrade Notes
Update code generating Looker embed URLs to include mandatory parameters. Review cloud-sql-postgres documentation for updated behavior.
The Two Releases
OpenMAIC v1.0.3 — Security
Sep 15, 2026· 1 month ago
This security release addresses three advisories by upgrading Next.js to patch a critical RCE and enforcing stricter token lifetimes and rate limits. It also introduces new storage asset lifecycle features and an inquiry-based teaching skill, alongside various bug fixes.
Full release notesv1.12.0
Sep 17, 2026· 1 month ago
This release introduces support for OpenAI app challenges and exposes certification metadata in Looker tools. It also includes bug fixes for cloud-sql-postgres documentation and looker tool annotations.
Full release notes