Starstruk Logo MarkStarstruk

v1.7.7 v0.3.23

medium risk

tobychui/zoraxySep 30, 2026 → Oct 1, 20261 day between releases

What's New

Adds MCP forwarding and Docker Windows fixes

Breaking Changes

  • Upgrade servers sharing verification storage together for Magic Link security

New Features

  • Forward hooks_timeout, min_confidence, and sort_by_length on laya_predict_batch
  • Forward hooks_timeout on laya_route_batch
  • Forward per-call controls for MCP features

Improvements

  • Docker now correctly reads file-backed secrets on Windows

Bug Fixes

  • Fixed Magic Link account-takeover vulnerability
  • Fixed OAuth Proxy accepting sign-in state incorrectly
  • Fixed CAPTCHA and rate-limit errors missing JSON Content-Type header
  • Fixed Docker to read file-backed secrets past Windows editor BOM
  • Fixed examples to show correct answer_confidence fields

Upgrade Notes

For the older release, upgrade servers sharing verification storage and restart pending OAuth sign-ins. For the newer release, no specific configuration changes are required, though Docker users on Windows may experience fewer issues with file-backed secrets.

The Two Releases

v1.7.7

v1.7.7

Sep 30, 2026· 21 days ago

A critical security patch release addressing a Magic Link account-takeover vulnerability and fixing various authentication-related bugs.

Full release notes
v0.3.23

v0.3.23

Oct 1, 2026· 21 days ago

This release focuses on MCP (Model Context Protocol) feature forwarding and Docker improvements, including fixes for file-backed secrets on Windows and corrections to various examples.

Full release notes