v2026.9.28 v1.1.2
cheaper-inference/OmniRouteSep 28, 2026 → Sep 28, 20260 days between releases
What's New
Releases are from different repositories; older focuses on automation/ADB, newer on SSRF security.
Breaking Changes
- Removed adb-shell dependency from pyproject.toml
- Caller-supplied URLs with redirects or query strings are refused
- Loopback or private addresses require ALLOW_LOCAL_NETWORKS unless server-configured
- Provider check and generation errors now return fixed messages without provider details
New Features
- Automated PyPI deployments for tagged releases
- Support for descending into OEM wrapper archives
- MinerU Cloud parsing uses strict provider transport to prevent SSRF
- Classroom media generation downloads through strict provider transport
Improvements
- Refines bugreport parsing logic to handle OEM wrapper archives and malformed data
- Improved handling of malformed battery daily update lines
- Provider connections now pin validated addresses and refuse redirects
- Error responses no longer carry provider response bodies or connection details
Bug Fixes
- Do not treat a section's timing line as a section boundary
- Skip a malformed battery daily Update line instead of aborting
Upgrade Notes
For the older release, ensure your build does not rely on the removed adb-shell dependency. For the newer release, update caller-supplied URLs to remove redirects or query strings, and configure ALLOW_LOCAL_NETWORKS if accessing private addresses.
The Two Releases
v2026.9.28
Sep 28, 2026· 24 days ago
Introduces automated PyPI deployments and refines bugreport parsing logic to handle OEM wrapper archives and malformed data more robustly.
Full release notesOpenMAIC v1.1.2 — Security
Sep 28, 2026· 24 days ago
A security release tightening provider URL connections to prevent Server-Side Request Forgery (SSRF) and information leakage.
Full release notes