langflow-ai/langflow v1.12.7 on GitHub

What's Changed

fix(security): validate OpenSearch connector URLs by @erichare in #15756
fix(security): scope original-file S3 uploads by @erichare in #15757
fix(deps): dependency upgrades for 1.12.7 by @Adam-Aghili in #15762
fix(security): reject process and code loader capabilities by @erichare in #15758
fix(api): reconstruct workflow status without component instantiation by @erichare in #15781
fix(kb): honor environment fallback and redact connection errors by @erichare in #15783
fix(security): preserve jq conditional expressions during validation by @erichare in #15782
fix(security): block runtime object recovery in generated components by @erichare in #15873
fix(security): enforce admin policy on public component builds by @erichare in #15874
fix(security): reject runtime loader and environment capabilities by @erichare in #15879
fix: backport runtime URL prefixes and cookie isolation to 1.12.7 by @erichare in #15880
fix(security): enforce model policy in standalone builders by @erichare in #15877
fix(security): restrict non-owner graph overrides and local cleanup by @erichare in #15878
fix(security): separate saved flows from public history identifiers by @erichare in #15876
fix(deps): keep core package versions aligned on 1.12.7 by @erichare in #15900

test(files): verify unsafe renames preserve safe downloads by @erichare in #15759

Full Changelog: v1.12.6...v1.12.7