What's Changed
- Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage by @christopherholland-workday in #5901
- Additional Improvements to MCP Server Config security by @christopherholland-workday in #5943
- fix: session cleanup when using mysql for storing sessions by @0xi4o in #5984
- Fix Mass Assignment in Tools Endpoint by @christopherholland-workday in #5954
- Fix Credential Data Leak by @christopherholland-workday in #6042
- Fix Chatflow Query to Protect Against Cross-Workspace Chatflow Disclosure by @christopherholland-workday in #6043
- fix(ui): limit Markdown rendering on RichInput by @jocelynlin-wd in #6061
- Fix Mass Assignment in Variables Endpoints by @christopherholland-workday in #5955
- Fix IDOR Takeover in PUT /api/v1/user by @christopherholland-workday in #5986
- fix: redis pub/sub and streaming response issue by @0xi4o in #6008
- Revert "fix: redis pub/sub and streaming response issue" by @yau-wd in #6084
- chore: bump @flowiseai/agentflow to 0.0.0-dev.7 by @github-actions[bot] in #6087
- Update README.md for @flowiseai/agentflow by @jocelynlin-wd in #6088
- Fix/agentflow fix field name mismatch between SDK internal representation and server expectation by @j-sanaa in #6092
- chore: bump @flowiseai/agentflow to 0.0.0-dev.8 by @github-actions[bot] in #6096
- feat: add Pipedream MCP support by @rohan-patil2 in #5858
- fix(models): correct sonar-deep-research model name in Perplexity config by @AbdulSamad94 in #6069
- fix(models): correct o4-mini pricing under chatOpenAI by @AbdulSamad94 in #6079
- mini-feat: Store page sizes of views in local storage by @Mewyii in #5830
- Mass Assignment in Assistant Update Endpoint by @christopherholland-workday in #5945
- Feat/agentflow add support for Variable System & Syntax Support by @j-sanaa in #6067
- chore: bump @flowiseai/agentflow to 0.0.0-dev.9 by @github-actions[bot] in #6106
- Fix Mass Assignment in Chatflow Endpoints by @christopherholland-workday in #5953
- fix(models): correct multiple model label typos (Groq, Mistral, Bedrock) by @AbdulSamad94 in #6104
- Fix IDOR in Evaluators and Evaluations Endpoints by @christopherholland-workday in #6050
- feat: email change confirmation flow by @0xi4o in #5992
- fix(gmail): include draft id in update_draft tool schema by @tsubasakong in #5925
- fix: skip empty metadata filter in RetrieverTool to prevent vector store error by @majiayu000 in #5976
- Add Permission Checks to Vector Store API's by @christopherholland-workday in #6045
- fix: preserve sourceDocuments and metadata in ExecuteFlow node by @majiayu000 in #5972
- fix: lint issues by @0xi4o in #6115
- feat(ChatOllama): add 'think' input option for reasoning support by @HenryHengZJ in #6116
- Fix: restore token-by-token streaming for chains using createTextOnlyOutputParser by @HenryHengZJ in #6086
- fix(components): reuse extracted response content for ConditionAgent JSON parsing by @jslim-23 in #6072
- fix: streaming response due to high number of redis pub/sub channels, better handling of connection issues by @0xi4o in #6114
- Feature/Add Audit and Deletion by @yau-wd in #5994
- fix(ui): allow XML tag for markdown rich input by @jocelynlin-wd in #6095
- Fix Mass Assignment in Dataset and DatasetRow Operations by @christopherholland-workday in #6051
- feat(agentflow): enhance state management with StateKeyValueInput and variable support by @jocelynlin-wd in #6119
- Feat/agentflow Port Markdown Editor & Edit/Source Toggle from legacy UI to agentflow by @j-sanaa in #6125
- fix: better errors for sso login by @0xi4o in #6113
- fix(agentflow): resolve stale $flow.state reads in iteration node by @manojnaidu619 in #6099
- feat(ui): add document store rename/delete actions for cards and table by @sahil2448 in #6041
- Fix Mass Assignment in Assistants Endpoints by @christopherholland-workday in #6128
- Fix Mass Assignment on Save Custom Template by @christopherholland-workday in #6129
- feat(agentflow): Add refresh button for Available Actions dropdown by @jocelynlin-wd in #6134
- feat: add client-scoped filtering to node input params by @jchui-wd in #6107
- Add barrel export and exports map to packages/components by @michaell-workday in #6130
- Fix/agentflow Add support for XML tag in markdown input and render markdown conditionally by @j-sanaa in #6145
- chore: bump @flowiseai/agentflow to 0.0.0-dev.10 by @github-actions[bot] in #6162
- fix(agentflow): $flow.state inaccessible inside iteration node execution by @manojnaidu619 in #6142
- docs: fix Hugging Face deployment links by @ming1523 in #6124
- chore: update GitHub Actions dependency version by @jocelynlin-wd in #6165
- feat(ui): add accessible show/hide password toggle on signin by @sahil2448 in #6098
- update eslint-plugin-jsx-a11y and remove pinned version for es-iterat… by @mmattu-wd in #6159
- Feat/docstore rename delete actions (optimised for dark theme) by @sahil2448 in #6144
- fix: flowise-317 by @0xi4o in #6168
- Fix/agentflow Integration and verification test fixes by @j-sanaa in #6175
- fix(evaluations): use correct total_cost property in CostCalculator by @aviu16 in #6183
- feat: Browserless MCP integration by @andyMrtnzP in #6171
- fix(evaluations): correct DoesNotContainAny/All operator logic by @aviu16 in #6182
- fix: remove basic auth by @0xi4o in #5680
- refactor(api): update caching mechanism in deduplicatedClient to differentiate TTL for GET and load-method responses by @jocelynlin-wd in #6188
- Fix/agentflow - Fixes for minor UI issues in extracted canvas by @j-sanaa in #6190
- Bugfix/add compact table transformer for NotionAPILoader by @HenryHengZJ in #6187
- Bugfix/add groq sdk by @HenryHengZJ in #6194
- Chore/include action metadata from API responses by @HenryHengZJ in #6204
- Bugfix/Silent fallback to vm2 for sandbox execution by @HenryHengZJ in #6206
- feat(components): improve Baidu Wenxin chat model configuration by @jimmyzhuu in #6140
- feat(components): add Baidu Qianfan embeddings node by @jimmyzhuu in #6147
- fix/agentflow: Update default values and auto-add Start node for empty state by @jocelynlin-wd in #6210
- Release/3.1.2 by @HenryHengZJ in #6215
New Contributors
- @michaell-workday made their first contribution in #6044
- @AbdulSamad94 made their first contribution in #6069
- @tsubasakong made their first contribution in #5925
- @majiayu000 made their first contribution in #5976
- @jslim-23 made their first contribution in #6072
- @manojnaidu619 made their first contribution in #6099
- @sahil2448 made their first contribution in #6041
- @ming1523 made their first contribution in #6124
- @mmattu-wd made their first contribution in #6159
- @andyMrtnzP made their first contribution in #6171
- @jimmyzhuu made their first contribution in #6140
Full Changelog: https://github.com/FlowiseAI/Flowise/compare/flowise@3.1.1...flowise@3.1.2