v6.14.2

feyninc/chonkiev6.14.2Sep 27, 2026by lstein

Upgrading?

AI Summary

This release focuses on security improvements and bug fixes, including path traversal rejection and VRAM optimization. It adds new features such as custom font import for the Canvas text tool and style transfer capabilities to Krea-2.

Key Highlights

  • Custom font import support for the Canvas text tool.
  • Style transfer to Krea-2 via reference images.
  • Security fix: Rejection of path traversal in object-serializer names.
  • VRAM optimization for Qwen2.5-VL encoder.
  • Fixes for FP4 Mistral starter and model rename validation.

New Features

  • Custom font import functionality.
  • Style transfer to Krea-2 engine.
  • Security hardening for object serialization.
  • Improved VRAM management for specific model encoders.
  • Fixes for proxy destination policies and hotkey functionality.

Full Release Notes

This release fixes a number of bugs in version 6.14.1 and adds a couple of useful new features.

## New Features in this release
* You can now import custom fonts for use with the Canvas text tool (@DustyShoe)
* You can now transfer an image's style to krea-2 by providing a reference image (@Pfannkuchensack)

## Bug fixes
* Keep a password-change token when a routine refresh lands first by @MohammadHijjawi97 in https://github.com/invoke-ai/InvokeAI/pull/9599
* Reject path traversal in object-serializer names and model keys by @lstein in https://github.com/invoke-ai/InvokeAI/pull/9595
* Clarify proxy destination policy without blocking local proxies by @wunianze666-netizen in https://github.com/invoke-ai/InvokeAI/pull/9554
* Accept epoch-changing token refreshes by @wunianze666-netizen in https://github.com/invoke-ai/InvokeAI/pull/9560
* Remove FP4 Mistral starter, fix model rename validation, limit Z-Image to Qwen3 4B encoders by @Pfannkuchensack in https://github.com/invoke-ai/InvokeAI/pull/9587
* Stop the SDNQ guards from aborting folder-encoder identification by @Pfannkuchensack in https://github.com/invoke-ai/InvokeAI/pull/9561
* img2img posterization - noise scaling and sigma schedule by @Pfannkuchensack in https://github.com/invoke-ai/InvokeAI/pull/9556
* Make I hotkey work in Canvas, Gallery, and Viewer by @DustyShoe in https://github.com/invoke-ai/InvokeAI/pull/9569
* Make room in VRAM for the quantized Qwen2.5-VL encoder and release it afterwards (#9147) by @lstein in https://github.com/invoke-ai/InvokeAI/pull/9572
* Buffer upload metadata in a bounded bytearray, not a list[bytes] by @lstein in https://github.com/invoke-ai/InvokeAI/pull/9583
* Ignore unexpected checkpoint keys, report them at debug only by @lstein in https://github.com/invoke-ai/InvokeAI/pull/9581
* Pin the scope of the socket's server-disconnect retry bound by @lstein in https://github.com/invoke-ai/InvokeAI/pull/9582
* Honor ComfyUI's comfy.gguf.orig_shape metadata by @Pfannkuchensack in https://github.com/invoke-ai/InvokeAI/pull/9564

## New Contributors
* @MohammadHijjawi97 made their first contribution in https://github.com/invoke-ai/InvokeAI/pull/9599

**Full Changelog**: https://github.com/invoke-ai/InvokeAI/compare/v6.14.1...v6.14.2

Related Repositories