Starstruk Logo MarkStarstruk

26.05.4

getlago/lago26.05.4May 25, 2026by Salazareo

AI Summary

Includes security fixes, AI limits tightening, the introduction of the Gemini 3.5 Flash model, and initial support for token expiry.

Key Highlights

  • New Gemini 3.5 Flash model
  • AI limits tightening and severity alerts
  • Start of token expiry and invalidation support
  • Improved signed URL validation
  • Exposure of upstream AI errors

New Features

  • Gemini 3.5 Flash model
  • AI limits
  • Token expiry support
  • Signed URL validation
  • Subdomain serve event emission

Full Release Notes

## What's Changed
* fix: expose upstream ai errors as not 500s by @Salazareo in https://github.com/HeyPuter/puter/pull/3123
* fix: validate private apps token too by @Salazareo in https://github.com/HeyPuter/puter/pull/3124
* fix: misc write issues with fs + openrouter refresh  by @Salazareo in https://github.com/HeyPuter/puter/pull/3125
* update Indonesian section (Indonesian language) by @kenjiew in https://github.com/HeyPuter/puter/pull/3117
* import ESM by URL instead of path by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3129
* fix: app creation dupped names limit by @Salazareo in https://github.com/HeyPuter/puter/pull/3130
* feat: new gemini 3.5 flash model by @Salazareo in https://github.com/HeyPuter/puter/pull/3131
* more validation for signed URLs by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3133
* fix: subdomain index.htmls by @Salazareo in https://github.com/HeyPuter/puter/pull/3134
* Update gemini 3.5 flash release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3135
* fix: agents.md name by @Salazareo in https://github.com/HeyPuter/puter/pull/3136
* fix: event types + emit subdomain serve event by @Salazareo in https://github.com/HeyPuter/puter/pull/3137
* fix: event types by @Salazareo in https://github.com/HeyPuter/puter/pull/3138
* Add cssstyle to docs dependencies by @jelveh in https://github.com/HeyPuter/puter/pull/3139
* fix together provider issues by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3140
* fix: fixing misc issues around alerting and bugs by @Salazareo in https://github.com/HeyPuter/puter/pull/3141
* feat: ai limits tightning and add severity alert by @Salazareo in https://github.com/HeyPuter/puter/pull/3142
* Add OpenRouter model release dates by @nightt5879 in https://github.com/HeyPuter/puter/pull/3144
* fix: bring back puter site config logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3145
* fix bug with signed url directory listings by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3146
* Add preamble versioning by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3147
* fix: associated app ids as input by @Salazareo in https://github.com/HeyPuter/puter/pull/3149
* fix: search leaking metadata by @Salazareo in https://github.com/HeyPuter/puter/pull/3150
* feat: start adding support for token expiry and invalidation by @Salazareo in https://github.com/HeyPuter/puter/pull/3151
* feat (put-1012 put-1014): new tokens version signature and logic by @Salazareo in https://github.com/HeyPuter/puter/pull/3152
* fix: fs event emissions by @Salazareo in https://github.com/HeyPuter/puter/pull/3153

## New Contributors
* @kenjiew made their first contribution in https://github.com/HeyPuter/puter/pull/3117
* @nightt5879 made their first contribution in https://github.com/HeyPuter/puter/pull/3144

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.05.3...26.05.4