diegosouzapw/OmniRoute v3.6.3 on GitHub

OpenAI-Compatible Loose Validation: Empty API keys can now be naturally submitted and saved for any openai-compatible-* providers (e.g. Pollinations, localized routes) directly in the UI instead of blocking save actions (#1152)
Cloudflare Configuration: Updated the provider schema and UI integration for Cloudflare AI to officially expose and support the backend accountId field securely without overrides (#1150)

Vertex JSON Validation Crash: Prevented invalid character in header crashes inside the /validate endpoint by creating a native authentication parser that correctly handles Google Identity Service Account JSON flows prior to pinging endpoints (#1153)
Extraneous Payload Rejection: Globally prevented upstream 400 Bad Request execution crashes by stripping the non-standard prompt_cache_retention attribute forcibly attached by Cursor/Cline IDE engines when targeting strict OpenAI/Anthropic routes (#1154)
Reasoning Content Drop: Prevented pure reasoning packets, common in advanced fallback models like DeepSeek, from being aborted mid-stream by explicitly adjusting the Empty Content (502) circuit breakers to acknowledge reasoning_content states as valid (#1155)
Desktop Windows Build Crash: Fixed better_sqlite3.node is not a valid Win32 application preventing OmniRoute Desktop from launching on Windows by properly removing the ABI-mismatched sqlite cache from Next.js standalone and falling back to the cross-compiled Electron equivalent during packager build steps (#1163)
Login Visual Security: Removed the raw fallback hash dump that artificially rendered underneath the login modal in Docker instances missing OMNIROUTE_API_KEY_BASE64 flags (#1148)

Dependabot Updates: Safely bumped GitHub Actions docker/build-push-action to v7 and actions/download-artifact to v8
Electron Updates: Upgraded desktop wrapper core to Electron 41.2.0 and electron-builder to 26.8.1, incorporating essential V8/Chromium security patches
NPM Package Groups: Updated production and development NPM groups to securely handle minor audit warnings and keep toolchains modern
CI/CD Reliability: Fixed persistent Snyk token-absence failures on automated pull requests by appropriately bypassing on dependabot actions

What's Changed

chore(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1156
chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #1157
deps: bump electron from 40.8.5 to 41.2.0 in /electron by @dependabot[bot] in #1158
deps: bump the production group with 3 updates by @dependabot[bot] in #1161
deps: bump the development group with 7 updates by @dependabot[bot] in #1162
chore(release): v3.6.3 — Fix cloudflare config, prompt cache payloads, and openai-compatible validation by @diegosouzapw in #1164

Full Changelog: v3.6.2...v3.6.3