tinyauth Releases

Focuses on security hardening (SQL injection, IDOR, CSPRNG), multi-organization workspaces, and audit logs.

Jun 20, 2026

Introduces Ponytail code generation, Headroom proxy lifecycle management, and a new CodeBuddy CN OAuth provider.

Jun 20, 2026

This release focuses on fixing provider issues for Kiro, AG, and Xiaomi, while improving the LLM selector and resolving tool history handling in Fusion/Combo to prevent errors.

Jun 18, 2026

This release addresses a critical security vulnerability affecting the TensorZero Gateway. It serves as a security patch to mitigate the high-risk issue detailed in the associated advisory. Users are strongly encouraged to update to this version immediately.

Jun 4, 2026

This release improves the browser installation process with better progress bars and concurrency support, while refactoring internal dependencies to remove legacy tools like semver, debug, and progress libraries.

May 26, 2026

The core library updates to support the latest browser versions (Chrome 149 and Firefox 151) and refactors documentation to use ESM and top-level await.

May 26, 2026

The main Puppeteer package rolls forward to Chrome 149 and refactors the configuration loader to use lilconfig, improving the installation process and dependency management.

May 26, 2026

This release enhances the OpenAI-compatible inference endpoint by accepting both strings and arrays for the `stop` parameter and adds OpenInference attributes for Arize compatibility.

May 20, 2026

A bug fix ensures that a specific error type, TargetCloseError, is thrown when a session ID is not found, improving error handling consistency.

May 18, 2026

A maintenance release that synchronizes the versions of the main puppeteer package with the puppeteer-core dependency.

May 18, 2026

A critical bug fix ensures that Server-Sent Events (SSE) body decoding errors are now treated as fatal errors to prevent silent failures.

May 15, 2026

This beta release announces that a Windows build is nearing completion pending final testing and small fixes before being promoted to production and made available on pip packages.

May 11, 2026

This release implements stricter security by requiring UI authentication when the gateway requires it, alongside improvements to error handling for complex streaming inferences.

May 8, 2026

This release introduces async observability writes by default to reduce latency, deprecates the Autopilot Sessions page, and adds new features including TypeScript evaluators and vLLM reasoning support.

Apr 24, 2026

This is the final release under the previous username, focusing on OpenID Connect enhancements and Envoy proxy compatibility before the project moves to the new organization.

Apr 17, 2026

A patch release addressing a browser detection issue in proxies and updating project dependencies.

Apr 2, 2026

This patch addresses a security vulnerability in the OAuth flow and rewrites proxy handling code to improve compatibility with Nginx and Envoy proxy servers.

Apr 1, 2026

A maintenance release focusing on bug fixes for report printing and transaction API endpoints, along with developer tooling improvements.

Mar 28, 2026

This release introduces comprehensive SDK and API enhancements, including support for multiple export formats (JSON, CSV, XLSX, PDF) for reports. It adds new integrations for Payment Links, Stripe, and Plaid, alongside the migration of the ExchangeRates module to NestJS. Additionally, the release improves the CI/CD pipeline with automated SDK type generation and self-contained e2e testing workflows.

Mar 16, 2026

A patch release addressing issues with header handling, specifically related to the `X-Forwarded-URI` header.

Mar 12, 2026