v0.80.0 v1.1.2
ffmpegwasm/ffmpeg.wasmSep 27, 2026 → Sep 28, 20261 day between releases
What's New
Security release restricts provider URLs and fixes error response leakage.
Breaking Changes
- Caller-supplied URLs that redirect are refused instead of followed.
- Caller-supplied URLs containing query strings or fragments are refused.
- Loopback or private addresses require `ALLOW_LOCAL_NETWORKS` unless server-configured.
- Client-supplied AliDocMind endpoints must be official hosts.
- Provider check and generation errors return fixed messages without provider text.
New Features
- Strict provider transport for classroom media downloads.
- Agent-runtime video and poster downloads require HTTPS.
- Pinned provider requests do not use Node environment proxy.
Improvements
- Provider connections are restricted to validated addresses only.
- Error responses no longer carry provider response bodies or connection details.
- Classroom media generation downloads use strict provider transport.
Bug Fixes
- Fixed error response leakage of provider bodies and connection details.
- Fixed requests to internal addresses and probing of internal services.
Upgrade Notes
URLs provided by callers must be static and validated; redirects and query strings are now blocked. Configure `ALLOW_LOCAL_NETWORKS` if your environment uses loopback or private addresses. Error messages for provider failures are now standardized and stripped of sensitive details.
The Two Releases
0.80.0
Sep 27, 2026· 24 days ago
This release focuses on performance optimizations for worktree management, particularly for repositories with many branches. It also improves the reliability of merge and prune operations and introduces signed release manifests.
Full release notesOpenMAIC v1.1.2 — Security
Sep 28, 2026· 24 days ago
A security release fixing provider URL validation, redirect handling, and error response leakage.
Full release notes