v2.129.0 v1.6.1

medium risk

inboundemail/inboundSep 18, 2026 → Sep 18, 20261 day between releases

What's New

Adds OpenAI instance segmentation, Kafka blocks, and webhook security hardening to Inbound.

Breaking Changes

  • Webhook sink now validates URLs and refuses redirects unless `ALLOW_WEBHOOK_WORKFLOWS_SINK_TO_NON_GLOBAL_ADDRESSES` is set.

New Features

  • Instance segmentation from the OpenAI block
  • Added `resolved_model` fields to inference responses
  • Anomaly detection support with PatchCore and FoundAD
  • Kafka Producer and Consumer blocks
  • Webhook sink validates where it connects

Improvements

  • Webhook security hardening
  • Refactored chart extraction with generic engine options

Bug Fixes

  • More improvements for chandra ocr parsing
  • Wrap strict quote errors as DocumentLoadError in CSV
  • Default zero colspan or rowspan to 1 in HTML tables

Upgrade Notes

If you rely on webhook redirects, set the `ALLOW_WEBHOOK_WORKFLOWS_SINK_TO_NON_GLOBAL_ADDRESSES` environment variable to bypass validation. Note that the older release notes describe the `docling-project/docling` repository, whereas the newer release is for `inboundemail/inbound`.

The Two Releases

v2.129.0

Sep 18, 2026· 1 month ago

This release focuses on document parsing improvements, including a refactor of chart extraction, support for ambient S3 credentials, and fixes for various formats like AsciiDoc, HTML, and CSV.

Full release notes
v1.6.1

v1.6.1

Sep 18, 2026· 1 month ago

Adds instance segmentation to OpenAI blocks, adds `resolved_model` fields to inference responses, anomaly detection support, and Kafka blocks. Implements webhook security hardening.

Full release notes