v0.13.7 v1.1.4
meituan-longcat/LongCat-VideoOct 11, 2026 → Oct 11, 20260 days between releases
What's New
Major security release introduces breaking authorization and job binding changes.
Breaking Changes
- Server-managed model authorization now requires a configured `*_MODELS` list or provider YAML models.
- Render jobs are now bound to the requesting owner, requiring render-service upgrades.
New Features
- Enforcement of model authorization for server credentials.
- Automatic revocation of legacy classroom media on course deletion.
- Per-model verification in Fluid Intelligence.
- Qwen clone voice mapping configuration.
Improvements
- Mixed service versions now fail closed via owner-bound job namespaces.
Bug Fixes
- Fixed missing model authorization for server-managed providers.
- Fixed unbound MP4 render jobs.
- Fixed legacy classroom media URLs persisting after course deletion.
Upgrade Notes
Configure `*_MODELS` or provider YAML `models` lists to authorize specific models; otherwise, only `DEFAULT_MODEL` is allowed. Upgrade or drain all render-service instances to bind jobs to the requesting owner.
The Two Releases
v0.13.7
Oct 11, 2026· 11 days ago
This release introduces re-ranking and moderation endpoints, a reliability floor for routing, and custom endpoint grouping, along with support for new providers like Inferbase and Plugsky.
Full release notesOpenMAIC v1.1.4 — Security
Oct 11, 2026· 11 days ago
A security release addressing missing model authorization, unbound render jobs, and legacy media serving. It introduces a significant breaking change requiring configuration updates for server-managed model authorization.
Full release notes