v1.12.5

keephq/keepv1.12.5Oct 6, 2026by github-actions[bot]

Upgrading?

AI Summary

This release focuses on resolving bugs, enhancing security, and upgrading dependencies. Key improvements include fixes for MCP session management, security restrictions on code execution and attachments, and corrections in data manipulation and API endpoints.

Key Highlights

  • Security enhancements restricting built-in code execution to administrators and confining chat attachments to authorized storage.
  • MCP fixes addressing session leaks, timeouts, and proper tool argument resolution.
  • Dependency upgrades to address vulnerable packages.
  • Data manipulation fixes including prevention of list mutation and matching of numeric columns in filter operators.
  • API improvements bounding session lists returned by monitoring endpoints.

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v1.12.5 -->

## What's Changed
### 🐛 Bug Fixes
* fix(mcp): stop session leak and timeout retries by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15460
* fix(mcp): bound server discovery concurrency and cleanup by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15522
* fix(mcp): forward global variable headers from the environment by @erichare in https://github.com/langflow-ai/langflow/pull/15500
* fix(mcp): redact server credentials from management responses by @erichare in https://github.com/langflow-ai/langflow/pull/15529
* fix(a2a): enforce authenticated execution policy by @erichare in https://github.com/langflow-ai/langflow/pull/15530
* fix(security): restrict built-in code execution to administrators by @erichare in https://github.com/langflow-ai/langflow/pull/15531
* fix(security): confine stored chat attachments to authorized storage by @erichare in https://github.com/langflow-ai/langflow/pull/15532
* fix(deps): upgrade vulnerable dependencies for 1.12.5 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15505
* fix(lfx): stop Data addition from mutating the left operand's lists by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15514
* fix(mcp): replace a pooled session whose server died by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15469
* fix(memory): preserve cancelled ingestion status on release-1.12.5 by @erichare in https://github.com/langflow-ai/langflow/pull/15554
* fix(lfx): match numeric columns in the Filter equals operators by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15486
* fix(api): bound the session list returned by /monitor/messages/sessions by @AhsanAkhlaq in https://github.com/langflow-ai/langflow/pull/15466
* fix(lfx): skip the markdown delimiter row in Text to DataFrame by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15485
* fix(tools): disambiguate duplicate tool names by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15556
* fix(mcp): resolve tool arguments from configured values by @erichare in https://github.com/langflow-ai/langflow/pull/15565
* fix: preserve source columns when merging tables by @LimbC-C in https://github.com/langflow-ai/langflow/pull/15543
* fix(playground): keep new chats out of older sessions now that the session list is capped by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15581

## New Contributors
* @MohammadHijjawi97 made their first contribution in https://github.com/langflow-ai/langflow/pull/15486
* @LimbC-C made their first contribution in https://github.com/langflow-ai/langflow/pull/15543

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.12.4...v1.12.5

Related Repositories