v1.10.0

<!-- Release notes generated using configuration in .github/release.yml at main -->

## What's Changed
### ✨ New Features
* feat: allow users to name flow snapshots when saving (LE-874) by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12742
* feat: Ship Calculator default tool + dynamic system prompt injection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12864
* feat: disable frontend retries for client errors by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12890
* feat: refresh deployed success step by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12853
* feat: Add Memory Base APIs models migrations service endpoints and tests by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12417
* feat: Add an Astra DB Data API Component by @erichare in https://github.com/langflow-ai/langflow/pull/12766
* feat: add envs to deployment list response for wxo agents by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12881
* feat(deployments): add agent name validation during deployment creation by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12858
* feat: Clear all traces for flow  by @severfire in https://github.com/langflow-ai/langflow/pull/12354
* feat: backend i18n — serve translated component metadata via Accept-Language by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12517
* feat(i18n): translate default node titles on language change, preserve user-customized names by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12928
* feat: MemoryBases GUI Component by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12903
* feat: Add draft version CTA in deployment modal by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12925
* feat: add sandboxed File System component for agents                                                                                              by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12901
* feat: native structured output on AgentComponent with prompt fallback by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12935
* feat(lfx): extension manifest schema, validate CLI, and error formatter (LE-1014) by @erichare in https://github.com/langflow-ai/langflow/pull/12952
* feat(assistant): Add Refresh List and Manage Model Providers to model selector by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12985
* feat: Frontend memory by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12293
* feat: Added API support for BE endpoints by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12423
* feat(deployments): support multi-version flows by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12950
* feat(agents): structured default system prompt with runtime env injection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12855
* feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in https://github.com/langflow-ai/langflow/pull/13016
* feat(components): Add Code Agents (CodeAct agent and OpenDsStar agent) and file ingestion components with supporting fixes by @yoavkantor in https://github.com/langflow-ai/langflow/pull/12713
* feat: Isolate FileSystem tool sandbox per authenticated user by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13031
* feat(kb): Knowledge Bases — Infrastructure Overhaul by @erichare in https://github.com/langflow-ai/langflow/pull/12802
* feat: Add agent preprocessing to perform compaction/gating for MemoryBases by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12975
* feat: regression bucket by @mendonk in https://github.com/langflow-ai/langflow/pull/12948
* feat: Redis-backed job queue for multi-worker deployments by @severfire in https://github.com/langflow-ai/langflow/pull/12588
* feat(mcp): pass session_id through MCP tool calls by @erichare in https://github.com/langflow-ai/langflow/pull/13124
* feat: add UTM tracking to outbound watsonx Orchestrate links by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/12888
* feat(lfx): Bundle Separation and LFX Extension Framework by @erichare in https://github.com/langflow-ai/langflow/pull/13043
* feat(knowledge): merge ingestion + retrieval into mode-driven Knowledge component by @erichare in https://github.com/langflow-ai/langflow/pull/13120
* feat: Add langflow-stepflow package by @bjchambers in https://github.com/langflow-ai/langflow/pull/12015
* feat: promote OpenRouter to a first-class unified model provider by @erichare in https://github.com/langflow-ai/langflow/pull/13185
* feat: Redesign deployment environment cards by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13109
* feat(memory): improve memory UI with empty states, toasts, and model by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13116
* feat(i18n): globalization pipeline — frontend i18n with backend locale support by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12933
* feat(memories): surface memory config in summary card with popover by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13209
* feat(memories): make preprocessing instructions required with tooltip hint by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13250
* feat(memory): session_id filtering as optional for MemoryBases by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13298
* feat: wxo oauth sso support by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/12917
* feat(job_queue): cross-worker cancel + polling watchdog for multi-worker Redis-backed builds by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13084
* feat(memories): redesign MemoryDetailsHeader UI and update tests by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13263
* feat(memories): add in-product docs links and tooltips to Memory Base UI by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13265
* feat: add DB migration validation workflow (LE-1259) [backport 1.9.4] by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13348
* feat: LE-1017 Event bus for bundle events by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13253
* feat(memory): align Create Memory modal layout and spacing with Create Variable modal design system by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13287
* feat: OSS authorization foundations for enterprise RBAC by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/13153
* feat: accept v2 workflow globals in request body by @erichare in https://github.com/langflow-ai/langflow/pull/13351
* feat(memory): default session filter to All Sessions and add it as a selectable dropdown option by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13350
* feat(authz): admin APIs, share-aware build_flow, and base service additions by @erichare in https://github.com/langflow-ai/langflow/pull/13371
* feat(memory): add inline docs link to preprocessing instructions tooltip by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13352
* feat(authz): add DI dependencies and permission decorators by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/13368
* feat: flow builder assistant with real-time canvas updates by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12575
* feat: Add DB migration validation workflow for nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13249
* feat(components): Add IBM DB2 Vector Store component by @DhruvChaturvediIBM in https://github.com/langflow-ai/langflow/pull/13237
* feat: add MCP timeout configuration support by @Jkavia in https://github.com/langflow-ai/langflow/pull/12999
* feat(i18n): translate missing frontend strings across Memories, Knowledge Base, toasts, and notifications by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13279
* feat(ci): reduce macOS Intel CI matrix and add macOS support documentation by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13328
* feat: sync wxO agent name and description with db by @HzaRashid in https://github.com/langflow-ai/langflow/pull/13026
* feat: Add embedded mode configuration flags by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13095
* feat: MCP lock enforcement + UI/tests by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13097
* feat: Gate custom component creation for admins only by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13098
* feat: Hide UI elements in embedded mode by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13099
* feat(logging): production-grade structured logs for Grafana/Loki by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13164
* feat: mark Text Input and Text Output components as legacy by @erichare in https://github.com/langflow-ai/langflow/pull/13420
* feat: add custom comp execution override by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13177
* feat: Improve canvas deploy review flow by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13246
* feat(authz): finalize authz_share — variable share-aware fetch, dedup, tests by @erichare in https://github.com/langflow-ai/langflow/pull/13444
* feat: improve lfx serve production-readiness by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13121
* feat: mention canvas components in the assistant input by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13486
* feat: Add IP-based rate limiting to login endpoint by @Jkavia in https://github.com/langflow-ai/langflow/pull/13469
* feat: sync langflow and lfx versions by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13176
### 🐛 Bug Fixes
* fix: Make sdk env flag idempotent by @erichare in https://github.com/langflow-ai/langflow/pull/12716
* fix: respect renamed/deleted default folder across logins by @erichare in https://github.com/langflow-ai/langflow/pull/12746
* fix: filter out null objects in mergeNodeTemplates function by @paulina-grunwald in https://github.com/langflow-ai/langflow/pull/12688
* fix(tests): Skip assistant-panel e2e test when OPENAI_API_KEY is missing                                                                                       by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12747
* fix: MCP Auth Error on restart / swapping auth by @erichare in https://github.com/langflow-ai/langflow/pull/12715
* fix: resolve ghosting issues in preload optimization by @severfire in https://github.com/langflow-ai/langflow/pull/12587
* fix(frontend): cap MCP server modal height by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12743
* fix(mcp): reconnect Streamable HTTP after MCP server restart by @schuellerf in https://github.com/langflow-ai/langflow/pull/12777
* fix(frontend): show backend error detail on project upload failure by @keval718 in https://github.com/langflow-ai/langflow/pull/12791
* fix: mcp component dyanamic tool by @mansura-habiba in https://github.com/langflow-ai/langflow/pull/12779
* fix: propagate x-api-key and authorization headers to nested MCP calls by @octo-patch in https://github.com/langflow-ai/langflow/pull/12541
* fix(frontend): keep KnowledgeBase modal centered when side panel opens by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12764
* fix: update npm overrides by @Jkavia in https://github.com/langflow-ai/langflow/pull/12843
* fix(security): use CodeQL-recognized sanitizer for path-injection alerts #205-213 by @erichare in https://github.com/langflow-ai/langflow/pull/12841
* fix(security): drop URL substring checks for WXO auth scheme selection (#201-204) by @erichare in https://github.com/langflow-ai/langflow/pull/12842
* fix(frontend): preserve IME composition for dead-key accents by @keval718 in https://github.com/langflow-ai/langflow/pull/12801
* fix: serialize concurrent MCP session access to prevent race conditions by @erichare in https://github.com/langflow-ai/langflow/pull/12761
* fix: MCP server PATCH field clearing in backend and frontend [LE-891] by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12763
* fix: MCP Tools component now works in LFX standalone mode by @erichare in https://github.com/langflow-ai/langflow/pull/12760
* fix: Handle videos with no comments in YouTube Comments component by @rodrigosnader in https://github.com/langflow-ai/langflow/pull/10633
* fix(custom): include __future__ imports in component sandbox compilation by @erichare in https://github.com/langflow-ai/langflow/pull/12865
* fix: guard output logs against non-dict artifacts by @erichare in https://github.com/langflow-ai/langflow/pull/12877
* fix(frontend): align shareable playground input style with in-IDE playground  by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12862
* fix(chroma): replace deprecated Client(settings=) with HttpClient for chromadb >=1.0 by @erichare in https://github.com/langflow-ai/langflow/pull/12900
* fix: migrate orphaned MCP servers config across DB resets by @erichare in https://github.com/langflow-ai/langflow/pull/12762
* fix(tests): Restore Windows-compatible slider Playwright test                                                                                             by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12904
* fix(frontend): validate deployment agent name by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12896
* fix(mcp): enforce auth on /streamable for auth_type=oauth projects by @erichare in https://github.com/langflow-ai/langflow/pull/12756
* fix(composio): prevent KeyError('type') on Gmail/Calendar tool execution by @keval718 in https://github.com/langflow-ai/langflow/pull/12905
* fix: Add microseconds support for PostgreSQL data store by @dzbanek717 in https://github.com/langflow-ai/langflow/pull/9941
* fix(mcp): render connection handles for non-string MCP tool inputs by @erichare in https://github.com/langflow-ai/langflow/pull/12782
* fix: Don't show empty category for MCP search in sidebar by @erichare in https://github.com/langflow-ai/langflow/pull/12930
* fix(LE-602): Update Pydantic to >=2.13.0 for fastapi-pagination v0.16.0 compatibility by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12938
* fix(tests): Stabilize Windows-only Playwright e2e failures by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12942
* fix: route custom Loguru logs through Langflow logger by @erichare in https://github.com/langflow-ai/langflow/pull/12926
* fix(tests): Stabilize Playwright e2e suite on Windows CI                                                                                               by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12964
* fix(deployments): rename env labels by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12949
* fix: prevents credential types vars from being used as inputs/outputs unless specifically typed as secretstr by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/12908
* fix: Pagination shows "-19-0 of 0 items" in traces view when empty by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12941
* fix(ui): Hide native Edge password reveal icon on desktop by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12972
* fix(model-input): hide wrench when saved model's provider is configured by @erichare in https://github.com/langflow-ai/langflow/pull/12971
* fix: MCP connection refresh state by @erichare in https://github.com/langflow-ai/langflow/pull/12931
* fix: Duplicate lines rendered in the tracing view by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12944
* fix(frontend): render node dropdowns above build/notification overlays by @keval718 in https://github.com/langflow-ai/langflow/pull/12973
* fix: encode non-ASCII filenames in Content-Disposition headers (RFC 5987) by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12918
* fix: Notifications overlap the bottom-center menubar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12946
* fix: update Docker base images to latest Python 3.12 and Debian Trixie to resolve CVEs by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12990
* fix: Respect proxy environment variables in URL Component by @erichare in https://github.com/langflow-ai/langflow/pull/12989
* fix(mcp): make run_tool wait_for timeout configurable, raise floor to… by @mansura-habiba in https://github.com/langflow-ai/langflow/pull/12996
* fix(frontend): paginator empty state shows "0 items" instead of "1-0 of 0 items" by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12965
* fix(tests): Stabilize traces and user-flow-cleanup e2e on Windows CI                                                                                 by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12997
* fix(frontend): default event_delivery to streaming to match server config by @keval718 in https://github.com/langflow-ai/langflow/pull/12978
* fix: force pull latest base images in Docker nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13014
* fix: update Docker base images to Trixie and force pull latest images in nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13015
* fix: pin postgres image to bookworm in docker_example by @erichare in https://github.com/langflow-ai/langflow/pull/13027
* fix(security): prevent arbitrary file read via public flow build endpoint (GHSA-rcjh-r59h-gq37) by @keval718 in https://github.com/langflow-ai/langflow/pull/13029
* fix: remove stepper modal close button by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12986
* fix: skip missing server file when delete_after_processing=True to avoid race condition by @octo-patch in https://github.com/langflow-ai/langflow/pull/12556
* fix(tests): Stabilize Windows-only Playwright e2e failures by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13062
* fix: Unblock nightly install on macOS x86_64 due OpenDsStar by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13061
* fix: Restore resolved release-branch ref in nightly build by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13064
* fix: OpenTelemetry trace context propagation by @ringerc in https://github.com/langflow-ai/langflow/pull/12962
* fix: update `isinstance(value, Data)` logic by @muhammadravi251001 in https://github.com/langflow-ai/langflow/pull/12769
* fix: use stable UUIDs for Qdrant document IDs to prevent duplicate ingestion by @octo-patch in https://github.com/langflow-ai/langflow/pull/12642
* fix: strip reserved 'code' param before build() in component reuse path by @aayushbaluni in https://github.com/langflow-ai/langflow/pull/12712
* fix: gracefully handle pyperclip failure in headless/remote environments by @octo-patch in https://github.com/langflow-ai/langflow/pull/12614
* fix: add [proxy] extra to litellm dependency for langflow-ide by @Jah-yee in https://github.com/langflow-ai/langflow/pull/12235
* fix: Skip built-in tool when external tool has same name by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13036
* fix: update security dependencies by @Jkavia in https://github.com/langflow-ai/langflow/pull/13053
* fix: restore Langfuse feedback trace linking by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13081
* fix: ValidationError reduction on OSS and Desktop by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12920
* fix(ui): distinguish Memory and Model icons (BrainCog / BrainCircuit) by @keval718 in https://github.com/langflow-ai/langflow/pull/13111
* fix: stabilize model toggle and refresh Agent dropdown after provider changes by @erichare in https://github.com/langflow-ai/langflow/pull/13113
* fix: prevent canvas text-selection highlight on shift+drag in Tauri by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12995
* fix: normalise legacy uppercase SpanStatus/SpanType values on DB read by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13000
* fix(knowledge-base): align Filter by metadata pickers with app dropdowns by @keval718 in https://github.com/langflow-ai/langflow/pull/13117
* fix: upgrade langchain-classic to 1.0.7 by @Jkavia in https://github.com/langflow-ai/langflow/pull/13130
* fix(frontend): stop empty-state splash from flashing after login by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12966
* fix: Remove redundant Components entry from the left sidebar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13090
* fix: backport policies ToolGuard lazy imports by @erichare in https://github.com/langflow-ai/langflow/pull/13144
* fix: Memory Base Table output causes JSON serialization error when saving Agent message by @erichare in https://github.com/langflow-ai/langflow/pull/13136
* fix: validate review tool names inline by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13040
* fix: added per-user endpoint for flows by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13072
* fix: reuse single Langfuse client across flow runs to stop thread leak by @erichare in https://github.com/langflow-ai/langflow/pull/13107
* fix(api): resolve global-variable default_fields on API runs (#11781) by @erichare in https://github.com/langflow-ai/langflow/pull/13129
* fix(api): parse multipart/form-data on /run so session_id is preserved by @erichare in https://github.com/langflow-ai/langflow/pull/13092
* fix(initial_setup): upsert by (user_id, name) when loading flows from disk by @erichare in https://github.com/langflow-ai/langflow/pull/13132
* fix(schema): resolve nested $ref objects to named models instead of dict by @erichare in https://github.com/langflow-ai/langflow/pull/13128
* fix: Remove duplicate Lock flow control from bottom-center menubar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13088
* fix: Auto-create write parents and reject unsafe glob patterns by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13075
* fix: add stream toggle back to agent by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13155
* fix: update embedded chat CDN URL to langflow-ai org and v1.0.8 by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13118
* fix: avoid pickling vertex component instances by @newmattock in https://github.com/langflow-ai/langflow/pull/13172
* fix(ci): rename bundles to -nightly during nightly build by @erichare in https://github.com/langflow-ai/langflow/pull/13193
* fix: File upload toast showing only after successful upload by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12984
* fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in https://github.com/langflow-ai/langflow/pull/13201
* fix(openrouter): validate against /api/v1/auth/key and disconnect all variables by @erichare in https://github.com/langflow-ai/langflow/pull/13214
* fix: UI polish for Memories and Traces sidebar sections by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13205
* fix: upgrade dependencies for security fixes by @Jkavia in https://github.com/langflow-ai/langflow/pull/13218
* fix: coerce numpy scalars in Memory Base metadata to Python primitives by @erichare in https://github.com/langflow-ai/langflow/pull/13211
* fix(extensions): discover editable bundles; clean up ticket refs and reload UX by @erichare in https://github.com/langflow-ai/langflow/pull/13219
* fix(agent): scope chat history retrieval by flow_id to prevent cross-flow leak by @erichare in https://github.com/langflow-ai/langflow/pull/13087
* fix: Expose Message connection handle on Run Flow's exposed text inputs (LE-1233) by @erichare in https://github.com/langflow-ai/langflow/pull/13180
* fix(ci): use local bundle wheels in nightly install tests by @erichare in https://github.com/langflow-ai/langflow/pull/13257
* fix(composio): handle Python keywords and non-identifier field names in action schemas by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13139
* fix(memory-base): Product Review Improvements  by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13248
* fix(frontend): blur upload button so "Upload File" tooltip doesn't persist after file picker closes by @erichare in https://github.com/langflow-ai/langflow/pull/13178
* fix(guardrails): add message pass-through outputs by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13096
* fix(docker): pre-create LANGFLOW_CONFIG_DIR so named volumes inherit uid=1000 ownership by @erichare in https://github.com/langflow-ai/langflow/pull/13212
* fix(tracing): forward request body user_id to Langfuse trace by @erichare in https://github.com/langflow-ai/langflow/pull/13266
* fix: upgrade litellm to 1.85.1 by @erichare in https://github.com/langflow-ai/langflow/pull/13272
* fix(flows): show readable API error messages on flow creation failure by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13140
* fix: quiet extension migration warnings by @erichare in https://github.com/langflow-ai/langflow/pull/13275
* fix: Sync Agent-as-tool description by removing deprecated agent_description by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13151
* fix: update mem0 and qdrant dependencies by @erichare in https://github.com/langflow-ai/langflow/pull/13292
* fix: canvas deploy attach/detach flow bugs by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13247
* fix(auth): AUTO_LOGIN parity on protected endpoints + model-load error UI by @erichare in https://github.com/langflow-ai/langflow/pull/13192
* fix: error with loop in grouped components by @erichare in https://github.com/langflow-ai/langflow/pull/13281
* fix: chromadb trust remote code mitigation by @erichare in https://github.com/langflow-ai/langflow/pull/13288
* fix: Update package to safer version to address the CVEs by @Jkavia in https://github.com/langflow-ai/langflow/pull/13270
* fix(db): serialize concurrent Alembic migrations via Postgres advisory lock by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13204
* fix(playground): auto-focus chat input when active session changes by @keval718 in https://github.com/langflow-ai/langflow/pull/13310
* fix(playground): distinguish active session row during multi-select by @keval718 in https://github.com/langflow-ai/langflow/pull/13312
* fix(canvas): replace panel toggle icon with SlidersHorizontal and add pressed/unpressed visual states by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13286
* fix(playground): align Select All bulk-delete icon with session ⋮ column by @keval718 in https://github.com/langflow-ai/langflow/pull/13313
* fix(canvas): remove fixed width on zoom percentage causing excess gap before chevron by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13284
* fix: use langchain-mongodb and langchain-qdrant. Port mem0 update by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13329
* fix: port chroma collection hardening by @erichare in https://github.com/langflow-ai/langflow/pull/13339
* fix(playground): hide session-row checkbox until hover or selection by @keval718 in https://github.com/langflow-ai/langflow/pull/13314
* fix(playground): add gap between consecutive error cards in chat messages by @keval718 in https://github.com/langflow-ai/langflow/pull/13325
* fix(frontend): Safari Selected Components by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13283
* fix(tracing): surface Langfuse setup failures, pin pydantic>=2.13 (Py3.14) by @erichare in https://github.com/langflow-ai/langflow/pull/13341
* fix: set graph inputs by component type by @erichare in https://github.com/langflow-ai/langflow/pull/13343
* fix(traces): bypass impl result_processor in _LegacyCaseEnum so legacy uppercase rows load by @erichare in https://github.com/langflow-ai/langflow/pull/13346
* fix(server): refuse to start with multiple workers and the default in-memory job queue by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13202
* fix(mcp): fix validation, session isolation, and update_flow_from_spec parity by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12528
* fix(api-keys): add expiration date support for API keys by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13330
* fix(tracing): isolate Langfuse OTel tracer to stop HTTP span pollution by @erichare in https://github.com/langflow-ai/langflow/pull/13344
* fix(agent): Force streaming on Agent LLM so tokens stream incrementally by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13356
* fix: change docling remote component to receive task id and to throw processing errors by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13353
* fix: Force streaming on AgentComponent regardless of toggle by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13358
* fix: Run Flow mutable state leak by @erichare in https://github.com/langflow-ai/langflow/pull/13340
* fix: Restore custom Agent prompts in starter projects by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13282
* fix(chat): align message card surfaces by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13354
* fix: Add defense in depth user_id filter to handle list tools MCP handler by @Jkavia in https://github.com/langflow-ai/langflow/pull/13373
* fix: Respect OpenAI embeddings API base for Knowledge Base by @erichare in https://github.com/langflow-ai/langflow/pull/13380
* fix: bundle event inconsistency and other fixes by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13374
* fix(traces): full-height trace panel, and status badge position by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13385
* fix(playground): expand session checkbox click target to full row height by @keval718 in https://github.com/langflow-ai/langflow/pull/13349
* fix: improve trace search functionality by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13383
* fix(ci): lockstep langflow-nightly and langflow-base-nightly versions by @erichare in https://github.com/langflow-ai/langflow/pull/13413
* fix: separate docling chunking dependencies by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13411
* fix: Resolve API keys from global variable before .env by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13408
* fix: use Langflow logo on loading screen and remove size jump glitch by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13417
* fix: add failed login logging with IP tracking and other relevant details by @Jkavia in https://github.com/langflow-ai/langflow/pull/13409
* fix(ci): give extension bundles a nightly track so langflow-nightly resolves by @erichare in https://github.com/langflow-ai/langflow/pull/13418
* fix(i18n): backend locale translation fixes — custom component nodes, Toolset output, RAG template notes, UI banner strings by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13296
* fix(i18n): default to English regardless of browser locale by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13324
* fix(ci): re-enable migration-pip-venv now that nightly bundles resolve by @erichare in https://github.com/langflow-ai/langflow/pull/13421
* fix: remove duplicate uv.lock from workspace member by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13326
* fix(db): hold migration advisory lock for create_db_and_tables too by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13393
* fix: Remove Playwright from Dependencies by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13382
* fix(tracing): warn clearly when LangWatch is unavailable on Python 3.14 (Docker) by @erichare in https://github.com/langflow-ai/langflow/pull/13410
* fix: ibm db2 bulk insert pr 13438 by @erichare in https://github.com/langflow-ai/langflow/pull/13449
* fix: restrict builtins and validate code in Python Interpreter components by @erichare in https://github.com/langflow-ai/langflow/pull/13397
* fix: point file manager empty-state link to the files page route by @erichare in https://github.com/langflow-ai/langflow/pull/13450
* fix: add SSRF protection to legacy RSS Reader and SearXNG components by @erichare in https://github.com/langflow-ai/langflow/pull/13395
* fix: re-validate redirects against SSRF protection in API Request component by @erichare in https://github.com/langflow-ai/langflow/pull/13394
* fix(logging): keep JSON level field clean when stdlib level names are mutated by @erichare in https://github.com/langflow-ai/langflow/pull/13457
* fix(memory): show dashes for stat cards in All Sessions view by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13443
* fix(stepflow): route multi-output fan-out to the correct step per connection by @erichare in https://github.com/langflow-ai/langflow/pull/13412
* fix(memories): return 422 instead of 500 when request body is missing by @erichare in https://github.com/langflow-ai/langflow/pull/13452
* fix: Move Docling components into bundle by @erichare in https://github.com/langflow-ai/langflow/pull/13442
* fix: declare kb_allowed_folder_roots on Settings so KB folder ingestion works by @erichare in https://github.com/langflow-ai/langflow/pull/13448
* fix: Fix timestamp rendering for expires_at in API Key model by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13471
* fix: populate _embeddings for upload-ingested KBs in Knowledge retrieve by @erichare in https://github.com/langflow-ai/langflow/pull/13446
* fix: prevent MCP server edit from creating a duplicate on name change by @erichare in https://github.com/langflow-ai/langflow/pull/13464
* fix: make playground code block background theme-reactive by @keval718 in https://github.com/langflow-ai/langflow/pull/13470
* fix: enforce mutually exclusive component constraint on paste by @keval718 in https://github.com/langflow-ai/langflow/pull/13468
* fix(conditional-router): route Text Input when Case True/False are blank by @erichare in https://github.com/langflow-ai/langflow/pull/13389
* fix(frontend): clean up new-flow onboarding, no orphaned placeholders, named templates, assistant tooltip stacking by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13451
* fix: Warm circular imports to avoid deadlock by @erichare in https://github.com/langflow-ai/langflow/pull/13490
* fix: add back in the missing npm docker changes by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13501
* fix: replace GradientSave icon with plain Save in saved components sidebar by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13485
* fix: Improved styling of DatePicker icon in dark theme by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13506
* fix: enable IBM watsonx.ai bundle on Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13512
* fix: enable agent-lifecycle-toolkit (altk) on Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13513
* fix: decouple Db2 vector store ingestion from search query by @erichare in https://github.com/langflow-ai/langflow/pull/13514
* fix(bundles): sync lfx pin to the 1.10.0 line after version realignment by @erichare in https://github.com/langflow-ai/langflow/pull/13516
* fix: prevent X-Forwarded-For bypass of login rate limit by @Jkavia in https://github.com/langflow-ai/langflow/pull/13509
* fix(i18n): translate QA-identified missing strings for 1.10.0 by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13503
* fix: add ssrf protection to url component by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13488
* fix: slider value lost when adjusting before the node is selected by @erichare in https://github.com/langflow-ai/langflow/pull/13515
* fix(canvas): anchor new note bottom-center to cursor on placement by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13441
* fix: standardize playground code block + container backgrounds on shadcn tokens by @keval718 in https://github.com/langflow-ai/langflow/pull/13520
* fix: Remove getenvvar component and update locales by @Jkavia in https://github.com/langflow-ai/langflow/pull/13521
* fix: serialize DataFrames in tool mode to prevent pandas truncation by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13504
* fix(security): block code-execution components on unauthenticated public flow builds by @erichare in https://github.com/langflow-ai/langflow/pull/13538
* fix(bundles): republish lfx-* at 0.1.1 with corrected pin + relax lfx floor for RC builds by @erichare in https://github.com/langflow-ai/langflow/pull/13542
* fix(ci): make Biome lint non-blocking for release workflow calls by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13547
* fix(security): remove the disabled Python Code Structured tool component by @erichare in https://github.com/langflow-ai/langflow/pull/13560
### 📝 Documentation Updates
* docs: document tag format requirements and release artifacts in RELEASE.md by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12867
* docs: include host field for external db in Helm chart by @mendonk in https://github.com/langflow-ai/langflow/pull/12899
* docs: change upgrade reinstall order by @mendonk in https://github.com/langflow-ai/langflow/pull/12911
* docs: troubleshoot desktop errors from telemetry by @mendonk in https://github.com/langflow-ai/langflow/pull/11282
* docs: deprecate voice to voice websocket endpoint by @mendonk in https://github.com/langflow-ai/langflow/pull/12970
* docs: release note refactor by @mendonk in https://github.com/langflow-ai/langflow/pull/12987
* docs: opensearch connector feature by @mendonk in https://github.com/langflow-ai/langflow/pull/12998
* docs: update mdc file to reflect current usage by @mendonk in https://github.com/langflow-ai/langflow/pull/13019
* docs: uninstall langflow by @mendonk in https://github.com/langflow-ai/langflow/pull/13017
* docs: fix sidebar and TOC styles for Redocusaurus by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12748
* docs: SSRF protection enabled by default by @mendonk in https://github.com/langflow-ai/langflow/pull/13106
* docs: mcp tool call configurable timeouts by @mendonk in https://github.com/langflow-ai/langflow/pull/13051
* docs: add directory depth limitation warning to custom components by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13104
* docs: directory component is legacy by @mendonk in https://github.com/langflow-ai/langflow/pull/13186
* docs: merge knowledge base components by @mendonk in https://github.com/langflow-ai/langflow/pull/13150
* docs: text operations component by @mendonk in https://github.com/langflow-ai/langflow/pull/13152
* docs: file system component by @mendonk in https://github.com/langflow-ai/langflow/pull/13183
* docs: troubleshooting for container mismatch by @mendonk in https://github.com/langflow-ai/langflow/pull/13217
* docs: openrouter promoted to global provider by @mendonk in https://github.com/langflow-ai/langflow/pull/13271
* docs: macos support matrix by @mendonk in https://github.com/langflow-ai/langflow/pull/13363
* docs: lfx bundles  by @mendonk in https://github.com/langflow-ai/langflow/pull/13142
* docs: update database tables by @mendonk in https://github.com/langflow-ai/langflow/pull/13254
* docs: agent improvements by @mendonk in https://github.com/langflow-ai/langflow/pull/13269
* docs: bump python version reqs to 3.14 and add release note by @mendonk in https://github.com/langflow-ai/langflow/pull/13289
* docs: fixes for consulting advantage by @mendonk in https://github.com/langflow-ai/langflow/pull/13300
* docs: memory base feature and component by @mendonk in https://github.com/langflow-ai/langflow/pull/13094
* docs: add chroma cloud provider by @mendonk in https://github.com/langflow-ai/langflow/pull/13122
* docs: non-feature fixes and updates for 1.10 by @mendonk in https://github.com/langflow-ai/langflow/pull/13396
* docs: redis worker queue by @mendonk in https://github.com/langflow-ai/langflow/pull/13386
* docs: lf assistant flow building example by @mendonk in https://github.com/langflow-ai/langflow/pull/13445
* docs: clarify local CLAUDE.md hard-rules import behavior by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13467
* docs: update vector store rag template by @mendonk in https://github.com/langflow-ai/langflow/pull/13291
* docs: bundle separation and component updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13472
* docs: wxo deploy updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13345
* docs: firecrawl component by @mendonk in https://github.com/langflow-ai/langflow/pull/13487
* docs: add env vars for login endpoint rate limiting by @mendonk in https://github.com/langflow-ai/langflow/pull/13489
* docs: lfx readme and lfx mcp by @mendonk in https://github.com/langflow-ai/langflow/pull/13010
* docs: gunicorn worker configuration by @mendonk in https://github.com/langflow-ai/langflow/pull/13511
* docs: JSON logging structure and grafana integration by @mendonk in https://github.com/langflow-ai/langflow/pull/13251
* docs: add code agents and file processing components by @mendonk in https://github.com/langflow-ai/langflow/pull/13285
* docs: lfx compatibility matrix and lfx serve updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13518
* docs: build OpenAPI spec and cut version 1.10 by @mendonk in https://github.com/langflow-ai/langflow/pull/13537
* docs: LF assistant ampersand and dot selectors by @mendonk in https://github.com/langflow-ai/langflow/pull/13544
### 🛠 Maintenance Tasks
* perf: Enhance Gunicorn preload functionality for Langflow by @severfire in https://github.com/langflow-ai/langflow/pull/12778
* refactor: refine MCP Server tab layout and alignment by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13032
* refactor: Move File System component to Files & Knowledge category by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13223
* refactor: change agent to use langchain 1.0 by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12992
* perf(telemetry): batched off-pool writer for transactions + vertex_builds by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13126
### ✅ Tests
* test: fix flow state clean test on windows by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13013
* test: Skip user-flow-state-cleanup e2e on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13070
* test: Refactor Playwright suite with shared helpers and remove redundant tests by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13278
* test: cover cross-user cache pollution on deprecated vertices endpoint (supplied-data path) by @erichare in https://github.com/langflow-ai/langflow/pull/13398
* test(e2e): Replace non-terminal waits to fix flaky Windows specs by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13407
* test: Skip starter-projects shard4 on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13439
* test: fix flaky Windows Playwright tests for error popups, settings nav, and output inspection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13463
### Others
* ci: unblock community PRs from spurious CI failures by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12916
* [backend] fix: add cache_dir setting to avoid multi-instance conflicts by @erichare in https://github.com/langflow-ai/langflow/pull/12940
* chore: Remove the diskcache dependency by @erichare in https://github.com/langflow-ai/langflow/pull/12953
* chore: Add DESIGN.md for Langflow's visual design system by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12830
* ci: block PR titles ending in ellipsis by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13004
* Fix: Migration 1.9.2 to 1.10.0 back to 1.9.2 idempotency issue by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12991
* chore(starter-projects): new Vector Store RAG template by @Empreiteiro in https://github.com/langflow-ai/langflow/pull/13018
* chore: improve AI-agent context (CLAUDE.md auto-load + AGENTS.md tweaks) by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13028
* chore: remove internal ticket references from code by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13073
* chore: support Python 3.14 by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13085
* Fix: preprocessing related fields removed from PATCH endpoint by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13112
* chore: Block hardcoded Tailwind palette via Biome lint by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13125
* chore: Add non-blocking test coverage advisor for PRs by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13148
* ci: stop transient Windows npm/cache flakes from failing frontend tests (1.10.0) by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13175
* chore: Clean up the startup warnings for Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13156
* ci: backport bundle/nightly CI fixes from main (#13206, #13207, #13208) by @erichare in https://github.com/langflow-ai/langflow/pull/13210
* chore: port Remove the diskcache dependency by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13334
* chore: port pre-create LANGFLOW_CONFIG_DIR #13212 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13342
* chore: bump versions by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13370
* chore(ci): Fix 403 in DB migration validation witness flow by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13376
* chore(frontend): Clean up biome violations on release-1.10.0 by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13375
* ci: sync workflow fixes from main into release-1.10.0 (fix broken nightly) by @erichare in https://github.com/langflow-ai/langflow/pull/13400
* ci: isolate bundle installs from the core release gate; lazy-import ibm-db by @erichare in https://github.com/langflow-ai/langflow/pull/13402
* chore: unconstrained lfx version for bundles by @erichare in https://github.com/langflow-ai/langflow/pull/13415
* chore: Merge release-1.9.6 into release-1.10.0 by @erichare in https://github.com/langflow-ai/langflow/pull/13466
* chore: prevent UnicodeEncodeError crashing error logging on Windows consoles by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13482
* chore: update lock files by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13483
* chore: remove aws scripts by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13534

## New Contributors
* @paulina-grunwald made their first contribution in https://github.com/langflow-ai/langflow/pull/12688
* @mansura-habiba made their first contribution in https://github.com/langflow-ai/langflow/pull/12779
* @octo-patch made their first contribution in https://github.com/langflow-ai/langflow/pull/12541
* @dzbanek717 made their first contribution in https://github.com/langflow-ai/langflow/pull/9941
* @yoavkantor made their first contribution in https://github.com/langflow-ai/langflow/pull/12713
* @ringerc made their first contribution in https://github.com/langflow-ai/langflow/pull/12962
* @muhammadravi251001 made their first contribution in https://github.com/langflow-ai/langflow/pull/12769
* @aayushbaluni made their first contribution in https://github.com/langflow-ai/langflow/pull/12712
* @Jah-yee made their first contribution in https://github.com/langflow-ai/langflow/pull/12235
* @newmattock made their first contribution in https://github.com/langflow-ai/langflow/pull/13172
* @bjchambers made their first contribution in https://github.com/langflow-ai/langflow/pull/12015
* @DhruvChaturvediIBM made their first contribution in https://github.com/langflow-ai/langflow/pull/13237

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.9.0...v1.10.0