26.07.1

glanceapp/glance26.07.1Jul 15, 2026by Salazareo

AI Summary

A patch release adding Grok 4.5 and 5.6 models, fixing various auth bugs, XSS entrypoints, OIDC state, and AI rate limits, plus improvements to healthcheck caching and device info for rate limiting.

Key Highlights

Grok 4.5 models added
5.6 models added
Auth bug fixes including OIDC state and missing error messages
XSS entrypoint fixes
AI rate limits improved with device info for rate limiting
Healthcheck caching in memory for each node

New Features

Grok 4.5 models added
5.6 models added
Worktree setup-script failures surfaced in TUI
Skills-catalog path containment with descriptor-pinned os.Root walks
Device info for rate limiting
Healthcheck ignore specific issues support
ndjson logging support
Cross-origin isolated sign-in flow (take two)
GUI button for custom OIDC
Email API WIP
Static hosting domain fallback for self-hosted custom domains
Phone verification errors added to kv for debugging
Admin moderation events table
Custom icon support for web links
WhatsApp support
Force locale en-US
Suspended_at column added
Ability to suspend apps
Suspension reasons added

Full Release Notes

## What's Changed
* add grok 4.5 by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3360
* fix: misc auth bug fixes by @Salazareo in https://github.com/HeyPuter/puter/pull/3362
* chore: cleanup uneeded ai messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3363
* update user pays model docs by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3364
* fix grok 4.5 release date by @reynaldichernando in https://github.com/HeyPuter/puter/pull/3365
* add 5.6 models by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3366
* fix: add phone errors into kv for debugging by @Salazareo in https://github.com/HeyPuter/puter/pull/3367
* fix possible XSS entrypoints by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3368
* fix: OIDC state by @Salazareo in https://github.com/HeyPuter/puter/pull/3370
* fix: ai rate limits by @Salazareo in https://github.com/HeyPuter/puter/pull/3371
* fingerprint: use device info for rate limit too by @Salazareo in https://github.com/HeyPuter/puter/pull/3372
* add support for ignoring specific issues in healthcheck by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3374
* fix: cache healthcheck in mem for each node by @Salazareo in https://github.com/HeyPuter/puter/pull/3375
* Add spans to drivers and high frequency paths by @Salazareo in https://github.com/HeyPuter/puter/pull/3376
* fix: missing OIDC error messages by @Salazareo in https://github.com/HeyPuter/puter/pull/3377
* add support for ndjson logging by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3381
* Check if user is suspended on WebDAV basic auth and others by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3369
* feat: add sign-in flow for crossOriginIsolated contexts, take two by @velzie in https://github.com/HeyPuter/puter/pull/3338
* Add GUI button for custom OIDC by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3384
* fix: ui signup order by @Salazareo in https://github.com/HeyPuter/puter/pull/3385
* fix: admin gates by @Salazareo in https://github.com/HeyPuter/puter/pull/3386
* Implement workers without cloudflare for local dev testing by @ProgrammerIn-wonderland in https://github.com/HeyPuter/puter/pull/3389
* fix: sanitize get user response by @Salazareo in https://github.com/HeyPuter/puter/pull/3390
* feat: email api wip by @Salazareo in https://github.com/HeyPuter/puter/pull/3391
* Fix static hosting domain fallback for self-hosted custom domains by @tamilselvanp57 in https://github.com/HeyPuter/puter/pull/3382

## New Contributors
* @tamilselvanp57 made their first contribution in https://github.com/HeyPuter/puter/pull/3382

**Full Changelog**: https://github.com/HeyPuter/puter/compare/26.07...26.07.1