What's Changed
🐛 Bug Fixes
- fix(files): honor AWS fallbacks in Write File by @erichare in #14446
- fix(api): retry flow updates on sqlite locks by @erichare in #14447
- fix(frontend): close protocol gaps in markdown sanitize schema (GHSA-7rw4-v4gc-r864 audit) by @erichare in #14424
- fix(security): block SQL connection target query overrides by @erichare in #14431
- fix: keep explicitly cleared model selection empty instead of filling cross-provider options[0] by @erichare in #14465
- fix(security): contain bundle FileInput paths by @erichare in #14438
- fix(security): skip symlinks in GitExtractor by @erichare in #14427
- fix(security): reject ambiguous URL authorities by @erichare in #14430
- fix(security): protect OpenAI model discovery requests by @erichare in #14435
- fix(security): enforce admin-only component builds by @erichare in #14436
- fix(security): join repeated X-Forwarded-For lines before taking the last hop by @erichare in #14425
- fix(security): make S3 file cleanup storage-aware by @erichare in #14428
- fix(security): contain ChatInput file references by @erichare in #14434
- fix(mcp): disable HTTP client redirects after one-shot SSRF check by @SashaMIT in #14474
- fix(lfx): stop reporting tool-mode nodes as breaking by @erichare in #14481
- fix(lfx): compare template keys directionally in the upgrade checker by @erichare in #14482
- fix(components): bound Web Search payload size by @Cristhianzl in #14489
- fix: mend scans should now scan all codebase deps by @Adam-Aghili in #14488
- fix(frontend): add manifest icon files missing from public/ by @erichare in #14506
- fix(models): normalize Azure AI Foundry project endpoints to the OpenAI-compatible form by @erichare in #14508
- fix(models): discover live Azure AI Foundry deployments for the model picker by @erichare in #14509
Others
- chore: bump release versions to 1.11.3 by @erichare in #14468
- chore: dep upgrades by @Adam-Aghili in #14490
- chore: address dependency review findings by @erichare in #14491
New Contributors
Full Changelog: v1.11.2...v1.11.3