v3.5.171 v1.841.0

medium risk

firecrawl/pdf-inspectorOct 18, 2026 → Oct 18, 20260 days between releases

What's New

Agent workers now support workload identity tokens and private MCP server URLs can be explicitly named.

New Features

  • Agent workers can authenticate using workload identity tokens
  • Private MCP server URLs can be explicitly named via configuration
  • Added nsjail probing with a real jail and gVisor compatibility mode

Bug Fixes

  • Insert ApiAuthed into request extensions in no-auth mode
  • Reject out-of-range integer args to narrow SQL types instead of wrapping
  • Warn when an autoscaled worker group has no tags to count

Upgrade Notes

Update `ALLOW_PRIVATE_MCP_SERVER_URLS` to explicitly name private hosts if needed. No-auth mode now properly inserts `ApiAuthed` into request extensions.

The Two Releases

v3.5.171

BetterDesk 3.5.171

Oct 18, 2026· 3 days ago

Minimal release notes: "## [3.5.171] — 2026-10-18 ### Fixed - Go Server release job: set `GH_REPO` so `gh` works without a git checkout (upload"

Full release notes
v1.841.0

v1.841.0

Oct 18, 2026· 3 days ago

Full release notes