v1.15.1 v1.0.1

high risk

fregante/GhostTextSep 5, 2026 → Sep 6, 20261 day between releases

What's New

Major version jump introduces Node.js 22.19 requirement and security fixes in OpenMAIC, while older notes describe mtproto.zig dashboard fixes.

Breaking Changes

  • Node.js 22.19 or newer is now required (was 20.9)
  • Client-supplied provider base URLs on loopback addresses are rejected outside production
  • Development persistence authenticator now fails closed in production
  • POST /api/classroom now rejects scenes not satisfying DSL or invalid stage IDs

New Features

  • Fact-check skill
  • Asynchronous generate_video
  • Interactive-widget hints for generate_scene
  • PPT element references in Pro chat
  • Exa web-search provider

Improvements

  • Security fixes for directory traversal, HTML sanitization, and redirect validation
  • Development persistence authenticator now fails in production
  • Repository-scanning test for outbound URL guard

Upgrade Notes

Ensure Node.js 22.19+ is installed; verify provider base URLs are valid outside production; ensure POST /api/classroom payloads meet DSL requirements.

The Two Releases

v1.15.1

v1.15.1

Sep 5, 2026· 2 months ago

v1.15.1 fixes dashboard installation by handling uv version parsing failures and explicitly selecting Python 3.11 or newer.

Full release notes
v1.0.1

OpenMAIC v1.0.1 — Security and stability

Sep 6, 2026· 2 months ago

A security and stability release that tightens defaults, introduces new features like asynchronous video generation and fact-checking skills, and updates dependencies to Node 22.19+.

Full release notes