What's Changed
Security Improvements
- Encrypt OAuth tokens with AES-256-GCM by @WashizuRyo in #2462
- Prevent Host Header Injection in OAuth callback URLs by @WashizuRyo in #2473
- Use timing-safe comparison for signed cookie verification by @WashizuRyo in #2475
Improvements
- Workspace-Driven App Connectivity State Management and App Schema Refactor by @toyamarinyon in #2483
- Refine Task Output Logic by Tracking Node IDs Connected to End Nodes by @toyamarinyon in #2484
Full Changelog: v0.56.1...v0.56.2
Originally released: 2025-12-16 (UTC)