What's Changed
🐛 Bug Fixes
- fix(deps): backport filelock 4 upgrade to 1.13.1 by @Adam-Aghili in #15966
- fix: confine Git loader files to repository by @erichare in #15972
- fix(oracle): confine loader local file access by @erichare in #15973
- fix(security): protect MCP component reserved fields by @erichare in #15974
- fix(security): isolate MCP batch login and request state by @erichare in #15978
- fix: secure quickstart PostgreSQL configuration by @erichare in #15979
- fix(auth): restrict external resolver credentials by @erichare in #15980
- fix: require OAuth attestation for Slack workspace routing by @erichare in #15981
- fix: separate user and flow storage namespaces by @erichare in #15982
- fix: fence stale listener delivery across trigger replicas by @erichare in #15942
- fix(agentic): check implicit calls in component definitions by @erichare in #15943
- fix(models): validate unified model credential destinations by @erichare in #15944
- fix(mcp): validate final shell arguments after headers by @erichare in #15946
- fix(python): require isolation for untrusted global imports by @erichare in #15945
- fix: stop listeners when background consent is withdrawn by @erichare in #16012
- fix(security): pin agentic MCP calls to the backend listener by @erichare in #16044
- fix(logging): redact credentials from query strings by @erichare in #16042
- fix(security): validate component connection targets by @erichare in #16043
- fix(security): block runtime readers in generated components by @erichare in #16040
- fix(security): enforce MCP HTTP destination policy by @erichare in #16041
- fix(security): block shipped inspect re-export bypasses by @Adam-Aghili in #16048
- fix: preserve SSO triggers during migration replay by @erichare in #16058
- fix: block assistant expression evaluation bypasses by @erichare in #16055
- fix: absorb image dependency CVE workarounds for 1.13.1 by @erichare in #16121
- fix(deps): dependency upgrades for 1.13.1 by @Adam-Aghili in #16131
📝 Documentation Updates
🛠 Maintenance Tasks
- build: remove the unused MCP Fetch development dependency by @Adam-Aghili in #15585
✅ Tests
- test(audio): cover packaged worklet playback and startup failures by @Adam-Aghili in #15584
- test(mcp): cover safe authenticated global and project tool listings by @erichare in #16047
- test(a2a): cover safe agent-card discovery after owner deactivation by @erichare in #16045
- test(mcp): cover component policy before tool input preprocessing by @erichare in #16046
Full Changelog: v1.13.0...v1.13.1