v1.7.19 v1.0.1
cheaper-inference/OmniRouteSep 6, 2026 → Sep 6, 20260 days between releases
What's New
Newer release (v1.0.1) prioritizes security and Node.js upgrades, while older release (v1.7.19) focused on UI features like calendar widgets and formula completion.
Breaking Changes
- Node.js requirement increased to 22.19 (was 20.9).
- Client-supplied provider base URLs on private addresses are now rejected outside production.
- Development persistence authenticator fails closed in production.
- POST /api/classroom now rejects invalid scenes and stage IDs.
New Features
- Fact-check skill.
- Asynchronous video generation.
- Interactive-widget hints.
- PPT element references in Pro chat.
- Exa web-search provider.
Improvements
- Outbound URL guard now runs in non-production builds.
- Redirects on provider requests are now re-validated.
- Stored slide HTML rendering is now sanitized at the persistence boundary.
Bug Fixes
- Fixed Classroom persistence path traversal vulnerability.
- Fixed stored slide HTML rendering without sanitization.
- Redirects on provider requests now re-validated.
Upgrade Notes
Upgrade requires Node.js 22.19 or newer. Be aware that client-supplied provider base URLs on private addresses are now rejected outside production, and the development persistence authenticator fails closed in production.
The Two Releases
v1.7.19
Sep 6, 2026· 2 months ago
The calendar widget is now a standalone type, the formula editor offers column completion, and the API now supports a reason for disabling users. Dark mode formula errors are also fixed.
Full release notesOpenMAIC v1.0.1 — Security and stability
Sep 6, 2026· 2 months ago
Security and stability release tightening defaults, fixing path traversal and HTML injection, and upgrading Node.js requirements.
Full release notes