v0.54.0 v6.14.2
codewhale-hq/CodewhaleSep 27, 2026 → Sep 27, 20260 days between releases
What's New
Added custom fonts, image style transfer, and security fixes for path traversal and password handling.
New Features
- Import custom fonts for use with the Canvas text tool
- Transfer an image's style to krea-2 by providing a reference image
Improvements
- Fix path traversal security vulnerability in object-serializer names and model keys
- Improve password-change token handling during routine refreshes
- Clarify proxy destination policy without blocking local proxies
Bug Fixes
- Keep a password-change token when a routine refresh lands first
- Reject path traversal in object-serializer names and model keys
- Clarify proxy destination policy without blocking local proxies
- Remove FP4 Mistral starter, fix model rename validation, limit Z-Image to Qwen3 4B encoders
- Stop the SDNQ guards from aborting folder-encoder identification
Upgrade Notes
You can now import custom fonts for use with the Canvas text tool and transfer an image's style to krea-2 by providing a reference image. Security improvements address path traversal vulnerabilities in object-serializer names and model keys.
The Two Releases
v0.54.0
Sep 27, 2026· 24 days ago
This release adds detailed call timeline events to the protocol, allowing servers to visualize call flows like LiveKit, including bot turns, barge-ins, and recording events.
Full release notesVersion 6.14.2
Sep 27, 2026· 24 days ago
This release addresses a number of bugs from v6.14.1, focusing on security improvements and password handling, while introducing new features for custom fonts and image style transfer.
Full release notes