v1.10.1

<!-- Release notes generated using configuration in .github/release.yml at v1.10.1 -->

## What's Changed
### ✨ New Features
* feat(ci): nightly → stable bundles via canonical pre-releases + decision record [gated] by @erichare in https://github.com/langflow-ai/langflow/pull/13528
* feat: first-class local-model support for the assistant by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13641
### 🐛 Bug Fixes
* fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in https://github.com/langflow-ai/langflow/pull/13191
* fix(ci): backport bundle rename step to nightly workflow on main by @erichare in https://github.com/langflow-ai/langflow/pull/13195
* fix(ci): gate nightly release on successful tag creation by @erichare in https://github.com/langflow-ai/langflow/pull/13198
* fix(ci): use local bundle wheels in nightly install tests by @erichare in https://github.com/langflow-ai/langflow/pull/13256
* fix: properly set nightly-base skipped by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13338
* fix(ci): lockstep langflow-nightly and langflow-base-nightly versions (forward-port #13413) by @erichare in https://github.com/langflow-ai/langflow/pull/13416
* fix(ci): give extension bundles a nightly track so langflow-nightly resolves (forward-port #13418) by @erichare in https://github.com/langflow-ai/langflow/pull/13419
* fix(ci): re-enable migration-pip-venv now that nightly bundles resolve (forward-port #13421) by @erichare in https://github.com/langflow-ai/langflow/pull/13422
* fix: remove duplicate base uv.lock from workflows (forward-port #13326 to main) by @erichare in https://github.com/langflow-ai/langflow/pull/13427
* fix(observability): make grafana-loki reference stack instructions work end to end by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13454
* fix(lfx): restamp component index version after 1.10.1 fork bump by @erichare in https://github.com/langflow-ai/langflow/pull/13575
* fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13585
* fix(test): raise spawn-child join timeout in test_multi_process_visibility (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13590
* fix(ci): anchor langflow-base version extraction in nightly docker build (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13593
* fix(test): gate models.dev background refresh out of tests (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13598
* fix(ci): allow pre-releases when pinning the nightly in migration validation (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13601
* fix(ci): scope nightly migration-test pre-releases to the langflow stack (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13605
* fix(ci): create GitHub releases on the dispatched v-prefixed tag (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13609
* fix(components): follow HTTP redirects in URL component with per-hop SSRF revalidation by @erichare in https://github.com/langflow-ai/langflow/pull/13572
* fix(ci): make release Biome lint green — NUL-delimit file list + clear pre-existing lint errors by @erichare in https://github.com/langflow-ai/langflow/pull/13550
* fix: limit public flow endpoint from displaying private flow streams by @Jkavia in https://github.com/langflow-ai/langflow/pull/13602
* fix: enforce the FileSystemTool credential deny-list by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13625
* fix(database): resolve Alembic log to writable config dir, never crash on read-only filesystems by @erichare in https://github.com/langflow-ai/langflow/pull/13559
* fix: protect URL components from SSRF by @erichare in https://github.com/langflow-ai/langflow/pull/13643
* fix(security): run trusted server code on unauthenticated public flow builds by @erichare in https://github.com/langflow-ai/langflow/pull/13540
* fix: guard CUGA CodeAgent local execution by @erichare in https://github.com/langflow-ai/langflow/pull/13644
* fix: guard event serialization against unserializable component payloads (#12591) by @erichare in https://github.com/langflow-ai/langflow/pull/13651
* fix: run trusted server copy on custom-component hash-gate match (#13496) by @erichare in https://github.com/langflow-ai/langflow/pull/13532
* fix: nest root LLM runs under the flow trace in Langfuse (#13429) by @erichare in https://github.com/langflow-ai/langflow/pull/13539
* fix: accept Data and Message inputs in LoopComponent by @putramkti in https://github.com/langflow-ai/langflow/pull/13646
* fix: restore route discovery under FastAPI 0.137 lazy include_router by @erichare in https://github.com/langflow-ai/langflow/pull/13710
* fix(security): block code-bearing nodes with empty type in flow validation (GHSA-mfp9-86w4-493f) by @erichare in https://github.com/langflow-ai/langflow/pull/13697
* fix(security): bump residual deprecated transitive uuid to v11 by @erichare in https://github.com/langflow-ai/langflow/pull/13703
* fix(security): gate public user self-registration (CWE-862) by @erichare in https://github.com/langflow-ai/langflow/pull/13706
* fix(load): bound remote flow fetches by @pony-maggie in https://github.com/langflow-ai/langflow/pull/13660
* fix: route IBM WatsonX selections to model_id endpoint in unified get_llm (#13671) by @erichare in https://github.com/langflow-ai/langflow/pull/13684
* fix(security): require authentication for POST /api/v2/registration/ (CWE-306) by @erichare in https://github.com/langflow-ai/langflow/pull/13707
* fix(security): block code injection via the Tweaks API (CWE-94) by @erichare in https://github.com/langflow-ai/langflow/pull/13705
* fix(security): derive Fernet key from short secrets with SHA-256 (GHSA-jxw3-mjmx-3pqm) by @erichare in https://github.com/langflow-ai/langflow/pull/13704
* fix(security): do not execute code in validate_code (GHSA-2wcq-pvw2-xh7v) by @erichare in https://github.com/langflow-ai/langflow/pull/13696
* fix: downgrade torchvision until cpu index fix by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13745
* fix(security): stop issuing 365-day superuser token via auto_login (GHSA-fjgc-vj2f-77hm) by @erichare in https://github.com/langflow-ai/langflow/pull/13699
* fix(security): HMAC-sign RedisCache payloads before dill deserialization by @erichare in https://github.com/langflow-ai/langflow/pull/13698
* fix(security): sanitize APIRequest Content-Disposition filename (GHSA-h3c6-fqr4-m99p) by @erichare in https://github.com/langflow-ai/langflow/pull/13695
* fix(security): disable credentials for wildcard CORS origins (CWE-942) by @erichare in https://github.com/langflow-ai/langflow/pull/13708
* fix(security): gate PythonREPL execution on allow_custom_components (GHSA-8qpj-27x8-pwpq) by @erichare in https://github.com/langflow-ai/langflow/pull/13700
* fix(security): scope voice-mode clients per user by @erichare in https://github.com/langflow-ai/langflow/pull/13702
* fix(security): gate ToolGuard guard-code execution on allow_custom_components by @erichare in https://github.com/langflow-ai/langflow/pull/13701
* fix: validate uploaded MCP servers config to close command-injection path by @erichare in https://github.com/langflow-ai/langflow/pull/13709
* fix(docker): force HTTP/1.1 on frontend nginx upstream proxy (#9010) by @keval718 in https://github.com/langflow-ai/langflow/pull/13725
* fix(smart-router): stop unselected branches from executing downstream nodes by @erichare in https://github.com/langflow-ai/langflow/pull/13536
* fix(lfx): preserve custom static models through models.dev override by @erichare in https://github.com/langflow-ai/langflow/pull/13676
* fix: stop temp_dirs masking startup errors; fail-fast on unresolvable SQLite path (#13634) by @erichare in https://github.com/langflow-ai/langflow/pull/13729
* fix: handle Windows path separators in Policies ToolGuard Guard mode (#13727) by @erichare in https://github.com/langflow-ai/langflow/pull/13751
* fix(frontend): stop browser autofill from corrupting component config fields by @erichare in https://github.com/langflow-ai/langflow/pull/13748
* fix(lfx): make OpenDsStar optional by @erichare in https://github.com/langflow-ai/langflow/pull/13749
* fix(ci): resolve pre-release cross-platform install failure; graduate py3.13, add py3.14 experimental by @erichare in https://github.com/langflow-ai/langflow/pull/13772
* fix(ci): drop macOS Intel from py3.14 cross-platform set (onnxruntime x86_64 wheel gap) by @erichare in https://github.com/langflow-ai/langflow/pull/13773
* fix(i18n): fix MCP hardcoded strings by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13621
* fix: make IBM WatsonX models selectable and runnable in the Langflow Assistant by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13771
* fix(agents): stop leaking LangChain chain markers to stdout (#13662) by @erichare in https://github.com/langflow-ai/langflow/pull/13730
* fix(component): reconnect stale cached SQL database connections on SQL Database component by @dutitello in https://github.com/langflow-ai/langflow/pull/13733
* fix: release candidate version selection by @erichare in https://github.com/langflow-ai/langflow/pull/13776
* fix: degrade gracefully when caching unpicklable values in RedisCache by @erichare in https://github.com/langflow-ai/langflow/pull/13781
* fix(security): block socket/urllib network egress in component code scanner by @erichare in https://github.com/langflow-ai/langflow/pull/13784
### 📝 Documentation Updates
* docs: rewrite AGENTS.md as hub with topical project philosophy docs by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13038
* docs: fix empty see also sections in extensions by @mendonk in https://github.com/langflow-ai/langflow/pull/13774
### 🛠 Maintenance Tasks
* refactor(settings): split monolithic Settings into per-domain group mixins by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13141
* perf: cache Ollama model capabilities to fix slow Cloud model toggles by @erichare in https://github.com/langflow-ai/langflow/pull/13722
### Others
* chore(ci): timeout bump + harden langflow grep + build/publish src/bundles/* wheels by @erichare in https://github.com/langflow-ai/langflow/pull/13199
* ci: stop publishing -nightly bundle variants; release bundles on demand by @erichare in https://github.com/langflow-ai/langflow/pull/13206
* ci(release_bundles): build lfx wheel locally for smoke test by @erichare in https://github.com/langflow-ai/langflow/pull/13207
* ci(nightly): re-pin bundle lfx deps to lfx-nightly during nightly build by @erichare in https://github.com/langflow-ai/langflow/pull/13208
* ci: port safe workflow fixes from release-1.10.0 to main by @erichare in https://github.com/langflow-ai/langflow/pull/13401
* chore: Merge release-1.9.6 into main by @erichare in https://github.com/langflow-ai/langflow/pull/13465
* fix(ci): resolve validate-version output in release-lfx changelog link (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13611
* chore: upgrade langchain by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13750
* chore(deps): bump toolguard floor to 0.2.20 by @erichare in https://github.com/langflow-ai/langflow/pull/13769

## New Contributors
* @putramkti made their first contribution in https://github.com/langflow-ai/langflow/pull/13646
* @pony-maggie made their first contribution in https://github.com/langflow-ai/langflow/pull/13660
* @dutitello made their first contribution in https://github.com/langflow-ai/langflow/pull/13733

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.10.0...v1.10.1