v1.12.5

resend/react-emailv1.12.5Oct 6, 2026by github-actions[bot]

Upgrading?

AI Summary

This release focuses on stability and security improvements, fixing session management leaks in the Model Context Protocol (MCP), enforcing authenticated execution policies, and upgrading vulnerable dependencies.

Key Highlights

  • Fixes session leaks and timeout retries in MCP.
  • Enforces authenticated execution policy and restricts built-in code execution to administrators.
  • Fixes Data addition mutation issues.
  • Upgrades vulnerable dependencies.

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v1.12.5 -->

## What's Changed
### 🐛 Bug Fixes
* fix(mcp): stop session leak and timeout retries by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15460
* fix(mcp): bound server discovery concurrency and cleanup by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15522
* fix(mcp): forward global variable headers from the environment by @erichare in https://github.com/langflow-ai/langflow/pull/15500
* fix(mcp): redact server credentials from management responses by @erichare in https://github.com/langflow-ai/langflow/pull/15529
* fix(a2a): enforce authenticated execution policy by @erichare in https://github.com/langflow-ai/langflow/pull/15530
* fix(security): restrict built-in code execution to administrators by @erichare in https://github.com/langflow-ai/langflow/pull/15531
* fix(security): confine stored chat attachments to authorized storage by @erichare in https://github.com/langflow-ai/langflow/pull/15532
* fix(deps): upgrade vulnerable dependencies for 1.12.5 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15505
* fix(lfx): stop Data addition from mutating the left operand's lists by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15514
* fix(mcp): replace a pooled session whose server died by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15469
* fix(memory): preserve cancelled ingestion status on release-1.12.5 by @erichare in https://github.com/langflow-ai/langflow/pull/15554
* fix(lfx): match numeric columns in the Filter equals operators by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15486
* fix(api): bound the session list returned by /monitor/messages/sessions by @AhsanAkhlaq in https://github.com/langflow-ai/langflow/pull/15466
* fix(lfx): skip the markdown delimiter row in Text to DataFrame by @MohammadHijjawi97 in https://github.com/langflow-ai/langflow/pull/15485
* fix(tools): disambiguate duplicate tool names by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/15556
* fix(mcp): resolve tool arguments from configured values by @erichare in https://github.com/langflow-ai/langflow/pull/15565
* fix: preserve source columns when merging tables by @LimbC-C in https://github.com/langflow-ai/langflow/pull/15543
* fix(playground): keep new chats out of older sessions now that the session list is capped by @viktoravelino in https://github.com/langflow-ai/langflow/pull/15581

## New Contributors
* @MohammadHijjawi97 made their first contribution in https://github.com/langflow-ai/langflow/pull/15486
* @LimbC-C made their first contribution in https://github.com/langflow-ai/langflow/pull/15543

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.12.4...v1.12.5

Related Repositories