v1.0.3 v4.20.5
juanfont/headscaleSep 15, 2026 → Sep 15, 20260 days between releases
What's New
Upgrading to v4.20.5 introduces unrelated graph traversal bug fixes and index performance improvements, diverging from the previous security updates in v1.0.3.
Breaking Changes
- Access-code tokens now enforce a 7-day server-side lifetime and are rejected if exceeded.
Improvements
- Improved handling of model output containing NUL or lone surrogates
- Improved batch processing performance by releasing read locks between edge batches
Bug Fixes
- Fixed `count(*)` under-counting parallel edges
- Resolved index population hangs and skipped rows caused by unsynced delta matrices
- Fixed untrusted HTML rendering vulnerabilities
- Fixed access-code token expiration and rate-limiting issues
Upgrade Notes
Access-code tokens now have a 7-day server-side lifetime limit; no configuration changes are needed for the new graph traversal fixes, but monitor index population performance.
The Two Releases
OpenMAIC v1.0.3 — Security
Sep 15, 2026· 1 month ago
This is a security release addressing critical vulnerabilities in access code verification, untrusted HTML rendering, and audio provider requests, alongside a Next.js upgrade and storage lifecycle improvements.
Full release notesv4.20.5
Sep 15, 2026· 1 month ago
This release focuses on critical bug fixes for graph traversal and index management. It resolves an issue where `count(*)` queries incorrectly collapsed parallel edges and fixes a performance/stability problem in index population involving unsynced delta matrices.
Full release notes