tashfeenahmed/freellmapi v0.16.8

on GitHub

The Docker image now runs on Node.js 24.22.1. Node 20 reached end of life and the 21 October 2026 Node security release (including the Brotli decoder out-of-bounds write, CVE-2026-111497) only ships fixes for 22.x, 24.x and 26.x. This release also adds the IteraCompute provider, Keenable keyless search, a Host-header allowlist, per-key proxies and a fix for long-reasoning streams.

Docker

• The image base moves from node:20-bookworm-slim to node:24.22.1-bookworm-slim, pinned to the exact patched version (#1673). Nothing changes in how you run it; pull the new tag and restart.
• CI now runs the test suite on Node 20, 22 and 24 (#1673).

Providers

• IteraCompute. New adapter for IteraCompute's free OpenAI-compatible gateway, with chat, streaming, tools and vision on qwen/qwen3.8-27b. Models arrive through the catalog: Premium now, free tier on 21 November (#1655, #1649).
• Keenable is available as a keyless web search engine once a catalog row enables it (#1594).

Routing and streams

• Long-reasoning streams are committed early so idle clients stay connected instead of timing out while the model thinks (#1645, #1642).
• A served search now spends its key's monthly budget (#1648, #1158).

Security

• Host-header allowlist (opt-in). Set ALLOWED_HOSTS to refuse requests whose Host header is not on the list, which blocks DNS rebinding. Unset means off; localhost means loopback only (#1644, #1637).

Dashboard

• Set a per-key proxy from the Edit key dialog (#1598, #1526).
• The custom provider URL error shows an example base URL (#1653, #1554).
• Password visibility toggle on the sign-in form (#1585).
• Importing a .env now reads export NAME=value lines (#1569).
• Simplified Chinese translations completed (#1596).

Updating

Desktop installers below cover Windows, Apple Silicon and Intel macOS, and Linux. Docker: ghcr.io/tashfeenahmed/freellmapi:v0.16.8 (latest also points here). Existing keys and profiles are retained. No new migrations in this release.

Thanks to everyone who contributed to this release; you're credited in the README (#1654, #1672).

Full changelog: v0.16.7...v0.16.8

⭐ Like the free router? Go Premium — the live signed catalog, $19/yr, cancel anytime.