v0.6.8 v1.1.4
high risk
imbhargav5/open-recorderOct 10, 2026 → Oct 11, 20261 day between releases
What's New
Security release enforces model authorization and binds render jobs to owners.
Breaking Changes
- Providers with server credentials now require explicit `*_MODELS` configuration lists.
- Render jobs are bound to the requesting owner, requiring render-service upgrades.
- Legacy classroom media URLs are revoked when courses are deleted.
New Features
- Enforcement of model authorization for server-managed provider credentials.
- Render jobs are bound to the requesting owner.
- Legacy classroom media URLs are revoked upon course deletion.
Improvements
- Media responses now use private caching with revalidation.
- Mixed service versions fail closed through a dedicated owner-bound job namespace.
- Legacy classroom media stops serving when its course is deleted.
Bug Fixes
- Fixes missing model authorization for server-managed provider credentials (High severity).
- Fixes MP4 render jobs not bound to the requesting owner (Medium severity).
- Fixes deleted courses not revoking legacy classroom media URLs (Low severity).
Upgrade Notes
Read Breaking change before upgrading, and upgrade the render-service together with or before the app.
The Two Releases
v0.6.8
Astryx v0.6.8
Oct 10, 2026· 11 days ago
A patch release focused on interaction reliability, accessible state management, and enhanced integration tooling for the Astryx design system.
Full release notesv1.1.4
OpenMAIC v1.1.4 — Security
Oct 11, 2026· 11 days ago
Security release enforcing model authorization for server-managed provider credentials and binding render jobs to the requesting owner to prevent unauthorized access.
Full release notes