v2026.09.21 v2026.09.22

high risk

vadimdemedes/inkSep 20, 2026 → Sep 21, 20261 day between releases

What's New

Upgrades JSONPath evaluation to RFC 9535 and restricts legacy method calls for security.

Breaking Changes

  • Restricts legacy JSONPath method calls to an allowlist
  • Requires a database migration for compatibility

New Features

  • Uses RFC 9535 JSONPath evaluation by default
  • Implements allowlist for JSONPath method calls
  • Includes database migration for compatibility

Improvements

  • Improves security posture by restricting JSONPath calls
  • Provides gradual migration path via compatibility flags

Upgrade Notes

Run the database migration to convert expressions. Agents with uncertain expressions will be marked with `use_legacy_jsonpath: true`. Review affected Agents before removing the compatibility flag.

The Two Releases

v2026.09.21

v2026.09.21

Sep 20, 2026· 1 month ago

Huginn v2026.09.21 enhances background job reliability with new worker processes and watchdogs, adds proxy routing for Agents, and upgrades the Ruby runtime to 4.0.7.

Full release notes
v2026.09.22

v2026.09.22

Sep 21, 2026· 1 month ago

Huginn v2026.09.22 updates JSONPath evaluation to RFC 9535 by default and restricts legacy method calls for security, requiring a database migration for compatibility.

Full release notes