v0.6.8 v1.1.4
high risk
megadose/holeheOct 10, 2026 → Oct 11, 20261 day between releases
What's New
Releases are from different repositories (Astryx vs OpenMAIC); no direct compatibility changes detected.
Breaking Changes
- Server-managed providers require explicit `*_MODELS` or YAML `models` list configuration.
- TTS, ASR, image, video, and search providers substitute unlisted models with the first listed model.
- Migration required: list all selectable model IDs and restart the server.
New Features
- Model authorization refusals return a consistent HTTP 403 PROVIDER_DISABLED response.
- Deleted courses stop serving legacy media URLs.
Improvements
- Render jobs are bound to the requesting owner.
- Legacy classroom media stops being served when its course is deleted.
- Mixed service versions fail closed through an owner-bound job namespace.
Bug Fixes
- Providers using server credentials now authorize the selected model before access.
- MP4 render jobs are now bound to the requesting owner.
- Deleted courses revoke legacy classroom media URLs.
Upgrade Notes
List all selectable model IDs and restart the server. Server-managed providers require an explicit `*_MODELS` or YAML `models` list configuration.
The Two Releases
v0.6.8
Astryx v0.6.8
Oct 10, 2026· 11 days ago
Patch release focused on interaction reliability, accessible state management, and clearer integration tooling with several UX improvements.
Full release notesv1.1.4
OpenMAIC v1.1.4 — Security
Oct 11, 2026· 11 days ago
A security release that binds render jobs to the requesting owner and enforces model authorization for server-managed provider credentials to prevent unauthorized model selection and rendering.
Full release notes