v0.13.7 v1.1.4

high risk

tashfeenahmed/freellmapiOct 11, 2026 → Oct 11, 20260 days between releases

What's New

Major version jump enforces model authorization and binds render jobs to owners.

Breaking Changes

  • Server-managed model authorization requires explicit configuration of `*_MODELS` lists or YAML `models` lists.

New Features

  • Server-managed providers now authorize the selected model before access.
  • Render jobs are bound to the requesting owner to prevent unauthorized access.

Improvements

  • Media responses use private caching with revalidation.
  • Mixed service versions fail closed through a dedicated owner-bound job namespace.

Bug Fixes

  • Legacy classroom media URLs stop serving when the associated course is deleted.
  • Fixed missing model authorization for server-managed provider credentials.
  • Fixed MP4 render jobs not bound to the requesting owner.

Upgrade Notes

Upgrade the render-service together with or before the app. Providers without a list will only authorize DEFAULT_MODEL and operator MODEL_ROUTES. Mixed service versions fail closed through a dedicated owner-bound job namespace.

The Two Releases

v0.13.7

v0.13.7

Oct 11, 2026· 11 days ago

FreeLLMAPI v0.13.7 adds Cohere/Jina-style reranking and OpenAI-compatible moderation endpoints, introduces a reliability floor for routing, and enables custom endpoint grouping. It also brings the compact panel to Windows and improves routing performance through caching.

Full release notes
v1.1.4

OpenMAIC v1.1.4 — Security

Oct 11, 2026· 11 days ago

A security release that enforces model authorization for server-managed providers, binds render jobs to owners, and revokes legacy media for deleted courses.

Full release notes