langflow-ai / langflow

Alperemrehas Proposed prevent empty asChild slot crash

tarciorodrigues Proposed decompose oversized modelInput, nodeToolbar and flowSidebar into hooks and pr…

erichare Reviewed PR #14316 with commented

erichare Reviewed PR #14323 with commented

erichare Reviewed PR #14323 with commented

erichare Proposed govern provider configuration paths

erichare Proposed fail closed on denied provider runtime

erichare Proposed enforce provider policy on reads

erichare Proposed add approved provider policy store

erichare Proposed establish provider governance foundation

erichare Proposed enforce component policy at runtime

erichare Proposed filter starter templates by policy

erichare Proposed filter component palette by policy

erichare Proposed expose governance config flag

erichare Proposed add policy service and admin API

erichare Completed bump release versions to 1.11.2

erichare Proposed bump release versions to 1.11.2

erichare Proposed agent catalog foundations and migration

Cristhianzl Completed skip template update for group nodes

keval718 Completed dismiss welcome overlay synchronously when picking a template

erichare Completed use stable float input selector

erichare Proposed use stable float input selector

erichare Completed stop automatic provider field binding

lucaseduoli Reviewed PR #14311 with approved

Jkavia Completed clean up Write File local staging under remote storage

viktoravelino Reviewed PR #14314 with approved

Cristhianzl Completed unique DOM ids for node params

Cristhianzl Proposed skip template update for group nodes

keval718 Reviewed PR #14313 with approved

olayinkaadelakun Completed remove unused delete account flow (dead route, stub page, orphaned translatio…

viktoravelino Proposed name command palette, dialogs, and crash screen (LE 2043)

olayinkaadelakun Completed resolve IBM Equal Access violations on sidebar, canvas, and note contrast

olayinkaadelakun Completed announce recorded key combo via aria live and add accessibility test coverage

erichare Reviewed PR #14312 with approved

Cristhianzl Completed retry project delete on sqlite lock

erichare Reviewed PR #14312 with approved

erichare Reviewed PR #14312 with changes requested

Cristhianzl Reviewed PR #14310 with approved

Cristhianzl Proposed unique DOM ids for node params

viktoravelino Completed shared playground IBM scan and jest axe coverage for untested modals and prim…

viktoravelino Completed remove broken orphaned /flow/:id/view route

olayinkaadelakun Completed fix invalid ARIA, unnamed buttons, list markup, and touch targets on flow page

erichare Reviewed PR #14311 with commented

erichare Reviewed PR #14311 with commented

erichare Proposed stop automatic provider field binding

keval718 Proposed dismiss welcome overlay synchronously when picking a template

deon-sanchez Completed settings/model provider Accessibility

Adam-Aghili Reviewed PR #14308 with approved

erichare Advanced Merge release 1.11.1 into main

Cristhianzl Proposed retry project delete on sqlite lock

erichare Proposed add authz team role assignment table (teams hold roles)

Cristhianzl Reviewed PR #14304 with approved

tarciorodrigues Proposed align inspector panel API exposure with what the backend accepts

viktoravelino Proposed remove broken orphaned /flow/:id/view route

viktoravelino Proposed shared playground IBM scan and jest axe coverage for untested modals and prim…

keval718 Completed align shortcut label with Parameters button

erichare Advanced restore FastAPI range (#14301)

erichare Completed restore FastAPI range

erichare Proposed restore FastAPI range

viktoravelino Proposed accessible names, dialog titles, keyboard controls, and toast dismissal acros…

viktoravelino Completed backport MCP SDK <2.0 pin for uvx launched servers

viktoravelino Advanced backport MCP SDK <2.0 pin for uvx launched servers (#14298)

olayinkaadelakun Completed remove legacy Store page and routes

viktoravelino Completed settings/mcp servers accessibility

olayinkaadelakun Proposed resolve dialog naming, nested interactive, and label defects across the deplo…

viktoravelino Proposed backport MCP SDK <2.0 pin for uvx launched servers

viktoravelino Completed pin MCP SDK <2.0 for uvx launched servers

viktoravelino Proposed pin MCP SDK <2.0 for uvx launched servers

erichare Advanced Merge release 1.11.1 into main

olayinkaadelakun Completed label Password and Profile Picture form landmarks on settings/general

tarciorodrigues Proposed align the deploy choice phase machine with the shared stepper primitive

erichare Completed correct role assignment domain types in model docstring

erichare Proposed correct role assignment domain types in model docstring

mendonk Advanced fastapi pagination error troubleshooting (#14294)

mendonk Completed fastapi pagination error troubleshooting

viktoravelino Completed settings/mcp client accessibility

mendonk Proposed fastapi pagination error troubleshooting

erichare Completed align share level double with enterprise enforcement semantics

erichare Proposed align share level double with enterprise enforcement semantics

Simonzhaohui Proposed retry without temperature when rejected

erichare Advanced Merge release 1.11.1 into main

Jkavia Proposed serve deployed flows from a warm in memory registry in PROD (LANGFLOW PROD)

erichare Proposed stop stale flows list refetch from bouncing New Flow back to the list

erichare Advanced cap FastAPI below 0.140

Simonzhaohui Advanced match display name and description in search registry query filter (#14270)

Simonzhaohui Completed match display name and description in search registry query filter

erichare Completed correct event debug log typo

erichare Advanced correct event debug log typo (#14275)

dkaushik94 Proposed pgVector implementation for MBs and KBs

Cristhianzl Completed send chained input as user turn

Cristhianzl Advanced send chained input as user turn (#14286)

Cristhianzl Proposed send chained input as user turn

Adam-Aghili Proposed force upgrade tar and brace expansion

tarciorodrigues Proposed unify the stepper machinery behind a shared provider and rebuild the deployme…

Adam-Aghili Proposed remove npm from container

keval718 Proposed align shortcut label with Parameters button

Adam-Aghili Advanced update deps 1.11.1 (#14280)

Adam-Aghili Completed update deps 1.11.1

ogabrielluiz Proposed run tests when Filter Paths fails instead of skipping them

Adam-Aghili Proposed update deps 1.11.1

thesaadmirza Completed optimistic lock concurrent MCP server PATCHes

Cristhianzl Completed add customization seam for A2A publish origin

Cristhianzl Proposed add customization seam for A2A publish origin

olayinkaadelakun Proposed resolve Lighthouse button name and aria valid attr value failures in output m…

robertkeus Proposed add GreenPT extension provider

deon-sanchez Proposed add enterprise feature flag and custom admin menu item

erichare Proposed correct event debug log typo

erichare Advanced Merge release 1.11.1 history into main

Cristhianzl Completed send chained input as user turn

Cristhianzl Proposed send chained input as user turn

erichare Advanced honor connector loopback policy for A2A agent and PaddleOCR base URLs (#14265)

Cristhianzl Advanced reset modifier only saved shortcuts to default (#14245)

erichare Advanced stop legacy aliases from importing every bundle at startup (#14259)

Cristhianzl Advanced Add customization hook for API timestamp parsing (#14246)

erichare Advanced keep refresh sessions alive on HTTP (#14252)

Success6666 Advanced defer client import during startup (#14247)

Cristhianzl Advanced enable agentic experience by default (#14244)

lucaseduoli Advanced add default fallback to instantiation.py and removed default ollama base url…

lucaseduoli Advanced increment previous content with content streamed (#14234)

erichare Advanced detach orphan spans before database flush (#14243)

erichare Completed make agentic MCP server removal actually delete the row

tarciorodrigues Proposed extract useGlobalVariableUpsert and adopt it in global variable modal and set…

erichare Proposed make agentic MCP server removal actually delete the row

minderm Proposed validate edge source/target before adding connection

Simonzhaohui Proposed match display name and description in search registry query filter

xueG-zhou Proposed 同步上游提交

erichare Completed honor connector loopback policy for A2A agent and PaddleOCR base URLs

erichare Advanced honor connector loopback policy for A2A agent and PaddleOCR base URLs (#14265)

erichare Proposed honor connector loopback policy for A2A agent and PaddleOCR base URLs

HzaRashid Proposed add beta Locust runtime suite

HzaRashid Proposed create flows for perf testing

Cristhianzl Completed reset modifier only saved shortcuts to default

Cristhianzl Advanced reset modifier only saved shortcuts to default (#14245)

erichare Completed render flows whose nodes have no position instead of crashing the canvas

erichare Completed stop legacy aliases from importing every bundle at startup

erichare Advanced stop legacy aliases from importing every bundle at startup (#14259)

erichare Proposed stop legacy aliases from importing every bundle at startup

Cristhianzl Completed Add customization hook for API timestamp parsing

Cristhianzl Advanced Add customization hook for API timestamp parsing (#14246)

Success6666 Completed defer client import during startup

Success6666 Advanced defer client import during startup (#14247)

erichare Completed populate name and description on starter projects API response

erichare Proposed render flows whose nodes have no position instead of crashing the canvas

erichare Proposed populate name and description on starter projects API response

erichare Advanced keep refresh sessions alive on HTTP (#14252)

erichare Completed keep refresh sessions alive on HTTP

erichare Completed normalize MCP resource flow IDs

erichare Proposed normalize MCP resource flow IDs

erichare Proposed keep refresh sessions alive on HTTP

Adam-Dalloul Proposed use EmpirioLabs AI consistently

erichare Completed graduate Azure and Ollama bundles

olayinkaadelakun Proposed resolve ARIA violations in MCP selector and sidebar settings, add axe coverage

tarciorodrigues Proposed extract shared DataTableTab shell for files and knowledge tabs

erichare Proposed graduate Azure and Ollama bundles

Success6666 Proposed defer client import during startup

Cristhianzl Proposed Add customization hook for API timestamp parsing

Cristhianzl Advanced enable agentic experience by default (#14244)

Cristhianzl Completed enable agentic experience by default

Cristhianzl Proposed reset modifier only saved shortcuts to default

erichare Advanced align 1.11.1 RC versioning

Cristhianzl Proposed enable agentic experience by default

erichare Completed detach orphan spans before database flush

erichare Advanced detach orphan spans before database flush (#14243)

erichare Proposed detach orphan spans before database flush

erichare Completed target 1.12 release nightlies

erichare Advanced target 1.12 release nightlies (#14240)

erichare Proposed target 1.12 release nightlies

dkaushik94 Proposed Unified KBs and MBs to use common vector db backends

lucaseduoli Completed add default fallback to instantiation.py and removed default ollama base url…

lucaseduoli Advanced add default fallback to instantiation.py and removed default ollama base url…

lucaseduoli Completed increment previous content with content streamed

lucaseduoli Advanced increment previous content with content streamed (#14234)

Jkavia Proposed clean up Write File local staging under remote storage

lucaseduoli Proposed add default fallback to instantiation.py and removed default ollama base url…

tarciorodrigues Proposed unify prompt modals into a strategy driven PromptEditorModal

lucaseduoli Proposed increment previous content with content streamed

ogabrielluiz Proposed detect Azure OpenAI before OpenAI in provider attribution

ogabrielluiz Proposed detect Azure OpenAI before OpenAI in provider attribution

ogabrielluiz Proposed leak safe LLM provider latency and error metrics

erichare Completed Complete RBAC and distribution contracts

HzaRashid Completed add permission checks in api and use owner id for provider sync

erichare Proposed Complete RBAC and distribution contracts

ashutoshdharibm Proposed disable autoflush on async sessionmaker to prevent span FK violations

vjgit96 Completed make nightly release branch static and fix workflow structure

vjgit96 Advanced make nightly release branch static and fix workflow structure (#14219)

ogabrielluiz Proposed add an OTLP doctor to confirm telemetry delivery

LauraGPT Proposed add FunASR transcription component

Dhruvy0804 Proposed preserve subclass type when deep copying Data

erichare Completed poll PyPI before publishing nightly

erichare Advanced poll PyPI before publishing nightly (#14222)

erichare Proposed poll PyPI before publishing nightly

erichare Completed ci: fix flaky Playwright report aggregation

erichare Advanced ci: fix flaky Playwright report aggregation (#14221)

erichare Proposed ci: fix flaky Playwright report aggregation

erichare Completed include Google as a default partner bundle

erichare Advanced Merge release 1.11.0 into main

erichare Proposed include Google as a default partner bundle

vjgit96 Proposed make nightly release branch static and fix workflow structure

erichare Completed Complete release 1.12 RBAC authorization foundations

erichare Advanced prevent frontend restore source collision (#14218)

erichare Completed prevent frontend restore source collision

erichare Proposed prevent frontend restore source collision

edendalexis Proposed add SERPdive Search API component

erichare Completed preserve secret values across graph edges

erichare Proposed preserve secret values across graph edges

erichare Proposed Complete release 1.12 RBAC authorization foundations

erichare Completed reap cancelled session transports

erichare Proposed reap cancelled session transports

deon-sanchez Completed settings/db provider accessibility

ogabrielluiz Proposed export application telemetry to any OTLP backend

erichare Completed align Docker and PyPI artifacts

erichare Advanced align Docker and PyPI artifacts (#14211)

keval718 Advanced render provider logo on models.dev catalog rows (#14178)

keval718 Completed render provider logo on models.dev catalog rows

Cristhianzl Completed stop cross flow chat history leak in legacy flows (LE 1929)

keval718 Completed serve favicon from a dedicated route

olayinkaadelakun Proposed resolve IBM Equal Access violations on sidebar, canvas, and note contrast

erichare Proposed align Docker and PyPI artifacts

keval718 Advanced serve favicon from a dedicated route (#14166)

olayinkaadelakun Proposed fix invalid ARIA, unnamed buttons, list markup, and touch targets on flow page

keval718 Completed reject modifier only keyboard shortcuts

keval718 Completed snapshot before duplicate so undo reverts one action

Cristhianzl Advanced stop cross flow chat history leak in legacy flows (LE 1929) (#14191)

Cristhianzl Completed default agentic env mirror off

Cristhianzl Advanced default agentic env mirror off (#14189)

Cristhianzl Completed derive secret key ACL from process token SID

Cristhianzl Advanced derive secret key ACL from process token SID (#14190)

Cristhianzl Completed restore user id on HITL checkpoint resume

Cristhianzl Advanced restore user id on HITL checkpoint resume (#14195)

keval718 Advanced reject modifier only keyboard shortcuts (#14187)

keval718 Advanced snapshot before duplicate so undo reverts one action (#14179)

olayinkaadelakun Proposed add accessible names for canvas handles, edges, and toolbar controls

mendonk Completed add blog links for 1.11

erichare Completed add declarative downstream bundle profiles

erichare Proposed add declarative downstream bundle profiles

ashutoshdharibm Completed prevent session cleanup CPU spin and reuse hangs

ashutoshdharibm Advanced prevent session cleanup CPU spin and reuse hangs (#14205)

mendonk Advanced add blog links for 1.11 (#14207)

mendonk Proposed add blog links for 1.11

Adityai1411 Proposed preserve raw secret output values

erichare Completed complete shared resource access (LE 1828)

ashutoshdharibm Proposed prevent session cleanup CPU spin and reuse hangs

erichare Completed automate bundle version propagation and release ordering

erichare Completed add scoped authorization visibility prefilter

Souptik96 Proposed stop secret masking from corrupting values passed to connected components

erichare Completed ci: add core/full release inventory gates

erichare Advanced publish langflow core nightlies

erichare Advanced normalize missing tool call IDs (#14201)

erichare Completed normalize missing tool call IDs

erichare Proposed ci: add core/full release inventory gates

erichare Completed bump release versions to 1.12.0

erichare Completed discover embeddings from custom OpenAI endpoints

erichare Advanced discover embeddings from custom OpenAI endpoints (#14199)

ashutoshdharibm Proposed prevent CPU spin and workflow hangs in MCPSessionManager

erichare Completed preserve agent tool cache across invocations

erichare Advanced preserve agent tool cache across invocations (#14198)

erichare Completed respect server timeout during session validation

erichare Advanced respect server timeout during session validation (#14200)

erichare Proposed normalize missing tool call IDs

erichare Proposed respect server timeout during session validation

erichare Proposed discover embeddings from custom OpenAI endpoints

erichare Proposed preserve agent tool cache across invocations

erichare Completed enforce locked flows in backend

erichare Advanced enforce locked flows in backend (#14192)

deon-sanchez Completed settings/messages accessibility

erichare Completed make langflow core the shared bundle free distribution

erichare Proposed bump release versions to 1.12.0

erichare Completed remove lfx bundles from default Langflow install

erichare Completed add pluggable provider policy

Cristhianzl Proposed restore user id on HITL checkpoint resume

erichare Completed validate IBM WatsonX credentials against a live model

erichare Advanced validate IBM WatsonX credentials against a live model (#14185)

deon-sanchez Completed assets/knowledge base accessibility

mendonk Completed bump API spec and version to 1.11

RamGopalSrikar Completed update translations from Globalization Pipeline

mendonk Advanced bump API spec and version to 1.11 (#14173)

RamGopalSrikar Advanced update translations from Globalization Pipeline (#14184)

erichare Proposed enforce locked flows in backend

erichare Completed stabilize Tool Mode activation

erichare Advanced stabilize Tool Mode activation (#14188)

Cristhianzl Proposed stop cross flow chat history leak in legacy flows (LE 1929)

Cristhianzl Proposed derive secret key ACL from process token SID

Cristhianzl Proposed default agentic env mirror off

viktoravelino Completed admin and auth pages accessibility

erichare Proposed stabilize Tool Mode activation

erichare Completed materialize Blog Writer URL prompt input

erichare Advanced materialize Blog Writer URL prompt input (#14186)

keval718 Proposed reject modifier only keyboard shortcuts

erichare Proposed materialize Blog Writer URL prompt input

erichare Proposed validate IBM WatsonX credentials against a live model

RamGopalSrikar Proposed update translations from Globalization Pipeline

RamGopalSrikar Proposed fix GP upload condition and remove broken download schedule

Cristhianzl Completed unclip file delete button

Cristhianzl Advanced unclip file delete button (#14169)

Cristhianzl Completed block duplicate flow input on add

Cristhianzl Completed i18n: translate Human Input component metadata

Cristhianzl Advanced i18n: translate Human Input component metadata (#14168)

Cristhianzl Advanced block duplicate flow input on add (#14167)

Solaris-star Proposed live fetch OpenAI compatible embeddings when base url set

erichare Completed support data lists in Parser

erichare Advanced support data lists in Parser (#14175)

keval718 Proposed snapshot before duplicate so undo reverts one action

keval718 Proposed render provider logo on models.dev catalog rows

loulanyue Proposed reap cancelled session transports

keval718 Completed fixed width zoom control so the menubar stops resizing

keval718 Advanced fixed width zoom control so the menubar stops resizing (#14116)

erichare Completed rebuild incomplete structured tools

erichare Advanced rebuild incomplete structured tools (#14176)

erichare Proposed rebuild incomplete structured tools

erichare Completed rebuild incomplete SDK root models

erichare Advanced rebuild incomplete SDK root models (#14159)

ogabrielluiz Completed re check IPv4 embedded in 6to4 / NAT64 addresses

ogabrielluiz Advanced re check IPv4 embedded in 6to4 / NAT64 addresses (#14174)

erichare Completed preserve short key credential upgrades

erichare Advanced preserve short key credential upgrades (#14163)

erichare Proposed support data lists in Parser

erichare Completed honor env file precedence in serve

erichare Advanced honor env file precedence in serve (#14162)

erichare Completed preserve model validation during server import

erichare Advanced preserve model validation during server import (#14165)

ogabrielluiz Proposed re check IPv4 embedded in 6to4 / NAT64 addresses

Adam-Aghili Completed upgrade fast uri version

Adam-Aghili Advanced upgrade fast uri version (#14171)

mendonk Proposed bump API spec and version to 1.11

erichare Completed enable LiteLLM on Python 3.14

erichare Advanced enable LiteLLM on Python 3.14 (#14170)

Adam-Aghili Completed remove restrictive default settings

Adam-Aghili Advanced remove restrictive default settings (#14164)

Adam-Aghili Proposed upgrade fast uri version

erichare Proposed enable LiteLLM on Python 3.14

mendonk Completed security hardening for untrusted multitenancy deployments

Cristhianzl Proposed unclip file delete button

Cristhianzl Proposed i18n: translate Human Input component metadata

Cristhianzl Proposed block duplicate flow input on add

keval718 Completed fire logout request when auto login is disabled

keval718 Proposed serve favicon from a dedicated route

erichare Proposed preserve model validation during server import

Adam-Aghili Proposed remove restrictive default settings

mendonk Advanced security hardening for untrusted multitenancy deployments (#14061)

erichare Completed preserve model defaults during server lazy import

erichare Advanced preserve model defaults during server lazy import (#14157)

keval718 Advanced fire logout request when auto login is disabled (#14158)

erichare Proposed preserve short key credential upgrades

erichare Proposed honor env file precedence in serve

erichare Proposed automate bundle version propagation and release ordering

Cristhianzl Completed don't reschedule restored vertices on resume

Cristhianzl Advanced don't reschedule restored vertices on resume (#14156)

mendonk Completed a2a server and component

erichare Proposed rebuild incomplete SDK root models

mendonk Advanced a2a server and component (#14143)

keval718 Proposed fire logout request when auto login is disabled

erichare Proposed preserve model defaults during server lazy import

Cristhianzl Proposed don't reschedule restored vertices on resume

alexander-schneider Proposed add Adanos market sentiment bundle

loulanyue Proposed preserve secret values for connected components

erichare Advanced bump lfx amazon for compatible langchain aws

erichare Advanced gate valkey glide off Windows to fix nightly build

erichare Completed restore components as 1.11 extension bundle

erichare Advanced restore components as 1.11 extension bundle (#14151)

erichare Proposed restore components as 1.11 extension bundle

erichare Completed rebuild compatibility model annotations

erichare Advanced rebuild compatibility model annotations (#14145)

erichare Completed bind MCP stdio to code exec lockdown

erichare Advanced bind MCP stdio to code exec lockdown (#14150)

Cristhianzl Completed correct HITL gate span label and dedupe paused trace rows

Cristhianzl Advanced correct HITL gate span label and dedupe paused trace rows (#14148)

erichare Proposed bind MCP stdio to code exec lockdown

erichare Completed bind MCP stdio to code exec lockdown

erichare Proposed bind MCP stdio to code exec lockdown

Cristhianzl Proposed correct HITL gate span label and dedupe paused trace rows

erichare Completed keep serve message persistence DB less

erichare Advanced keep serve message persistence DB less (#14147)

erichare Completed honor connector loopback policy for requests

erichare Advanced honor connector loopback policy for requests (#14146)

erichare Proposed keep serve message persistence DB less

erichare Completed preserve structured tool output artifacts

erichare Advanced preserve structured tool output artifacts (#14142)

erichare Proposed honor connector loopback policy for requests

erichare Proposed rebuild compatibility model annotations

mendonk Completed lfx prewarm

mendonk Advanced lfx prewarm (#14012)

erichare Completed preserve async helpers in component scope

mendonk Completed human in the loop feature

erichare Advanced preserve async helpers in component scope (#14140)

mendonk Advanced human in the loop feature (#13993)

loulanyue Proposed isolate component tool message suppression

mendonk Proposed a2a server and component

erichare Proposed preserve structured tool output artifacts

keval718 Completed trim Write File description to match other components

keval718 Advanced trim Write File description to match other components (#14107)

mendonk Completed add valkey bundle

olayinkaadelakun Proposed remove legacy Store page and routes

mendonk Advanced add valkey bundle (#14119)

erichare Proposed preserve async helpers in component scope

erichare Advanced bump unreleased bundle versions

erichare Advanced make core catalog assertion dynamic

erichare Completed keep core index check wheel only

erichare Advanced keep core index check wheel only (#14139)

erichare Proposed keep core index check wheel only

hjben Proposed Add Korean translations

erichare Completed forward port LFOSS security fixes to 1.11.0

erichare Advanced forward port LFOSS security fixes to 1.11.0 (#14135)

vjgit96 Completed make core runtime wheel metadata assertion dynamic

vjgit96 Advanced make core runtime wheel metadata assertion dynamic (#14133)

erichare Proposed add pluggable provider policy

erichare Proposed add pluggable provider policy

erichare Proposed forward port LFOSS security fixes to 1.11.0

erichare Completed isolate lfx serve request logs

Cristhianzl Completed backfill thinking field on Anthropic requests

Cristhianzl Advanced backfill thinking field on Anthropic requests (#14092)

erichare Completed rate limit public flow builds (1.10.3)

erichare Completed default access token cookie to HttpOnly

erichare Completed bind MCP SSE sessions to users

erichare Completed redact secret component inputs from traces

erichare Completed compare API keys in constant time

erichare Proposed rate limit public flow builds (1.10.3)

erichare Completed close remaining indirect code bypasses (1.10.3)

vjgit96 Proposed make core runtime wheel metadata assertion dynamic

erichare Proposed close remaining indirect code bypasses (1.10.3)

erichare Advanced backport indirect component code bypass protections (#14125)

erichare Completed backport indirect component code bypass protections

erichare Completed require docker run for MCP stdio

erichare Advanced require docker run for MCP stdio (#14123)

erichare Proposed default access token cookie to HttpOnly

tarciorodrigues Completed turn inspector panel into a parameter manager

erichare Proposed isolate lfx serve request logs

erichare Proposed bind MCP SSE sessions to users

erichare Proposed redact secret component inputs from traces

erichare Proposed compare API keys in constant time

erichare Proposed compare API keys in constant time

erichare Proposed backport indirect component code bypass protections

erichare Proposed redact secret component inputs from traces

tarciorodrigues Advanced turn inspector panel into a parameter manager (#14078)

erichare Completed block indirect component code bypasses

erichare Proposed require docker run for MCP stdio

erichare Completed require docker run for MCP stdio

erichare Proposed require docker run for MCP stdio

erichare Proposed block indirect component code bypasses

erichare Proposed block indirect component code bypasses

erichare Advanced preserve chronological message ordering (#14114)

erichare Completed preserve chronological message ordering

ogabrielluiz Completed export cancel stats and active jobs to OpenTelemetry

ogabrielluiz Advanced export cancel stats and active jobs to OpenTelemetry (#13123)

erichare Advanced link legacy operations to Data Operations (#14118)

erichare Completed link legacy operations to Data Operations

mendonk Proposed add valkey bundle

erichare Proposed link legacy operations to Data Operations

erichare Completed preserve OpenSearch JWT global variables

erichare Advanced preserve OpenSearch JWT global variables (#14117)

ogabrielluiz Completed A2A protocol support

ogabrielluiz Advanced A2A protocol support (#13831)

erichare Proposed preserve OpenSearch JWT global variables

keval718 Proposed fixed width zoom control so the menubar stops resizing

erichare Proposed preserve OpenSearch JWT global variables

erichare Proposed preserve chronological message ordering

erichare Proposed restore global variables in Chat Input

MatthiasHowellYopp Advanced add Valkey vector store and chat memory components (#12530)

viktoravelino Proposed settings/mcp client accessibility

olayinkaadelakun Proposed remove unused delete account flow (dead route, stub page, orphaned translatio…

olayinkaadelakun Proposed add accessible names to icon only controls and fix invalid ARIA on animated/s…

weilliam1818-maker Proposed add APIMart provider

hanxing95 Proposed Add Talordata SERP API bundle

keval718 Proposed trim Write File description to match other components

Cristhianzl Completed rename inputs, advanced timeout + HITL palette and control polish

Cristhianzl Advanced rename inputs, advanced timeout + HITL palette and control polish (#14090)

erichare Advanced add OpenRAG icon (#14095)

erichare Completed add OpenRAG icon

erichare Completed forward port release 1.10.3 hardening

erichare Advanced forward port release 1.10.3 hardening (#14073)

Cristhianzl Completed honor iterations limit in builds

Cristhianzl Advanced honor iterations limit in builds (#14094)

erichare Completed keep nv ingest compatible with urllib3 security floor

erichare Advanced keep nv ingest compatible with urllib3 security floor (#14106)

erichare Proposed keep nv ingest compatible with urllib3 security floor

erichare Advanced scope bundle RC versioning

erichare Advanced scope bundle RC versioning

mendonk Advanced openai compatible provider bundle (#14000)

mendonk Completed openai compatible provider bundle

erichare Completed keep LFX index aligned in release workflows

erichare Advanced keep LFX index aligned in release workflows (#14105)

erichare Proposed keep LFX index aligned in release workflows

erichare Advanced forward advertised flow input fields (#14074)

erichare Completed forward advertised flow input fields

HzaRashid Proposed add permission checks in api and use owner id for provider sync

erichare Proposed enforce admin only flow deployment authorization

erichare Proposed add scoped authorization visibility prefilter

erichare Proposed complete shared resource access (LE 1828)

erichare Proposed make langflow core the shared bundle free distribution

erichare Completed make the 1.11 core runtime self contained

erichare Advanced make the 1.11 core runtime self contained (#14098)

erichare Proposed ship langflow core for 1.11

erichare Proposed make the 1.11 core runtime self contained

erichare Completed expose stable Langfuse trace IO for evaluators

erichare Advanced expose stable Langfuse trace IO for evaluators (#14089)

erichare Completed preserve public flow websocket access

erichare Proposed preserve public flow websocket access

erichare Completed deduplicate Google embedding model aliases

erichare Advanced deduplicate Google embedding model aliases (#14082)

erichare Proposed add OpenRAG icon

ogabrielluiz Completed enforce sync only output ids across modes and correct documented auth status…

ogabrielluiz Advanced enforce sync only output ids across modes and correct documented auth status…

Cristhianzl Proposed honor iterations limit in builds

Success6666 Proposed isolate component tool message suppression

erichare Completed close RBAC enforcement and permission UX gaps

erichare Advanced close RBAC enforcement and permission UX gaps (#14068)

Cristhianzl Proposed backfill thinking field on Anthropic requests

ogabrielluiz Proposed enforce sync only output ids across modes and correct documented auth status…

erichare Completed expose stable Langfuse trace IO for evaluators

Cristhianzl Proposed rename inputs, advanced timeout + HITL palette and control polish

erichare Proposed expose stable Langfuse trace IO for evaluators

erichare Proposed expose stable Langfuse trace IO for evaluators

Cristhianzl Completed prefer strong model as assistant composer default

Cristhianzl Advanced prefer strong model as assistant composer default (#14058)

keval718 Completed hide assistant 'New' badge once feature is discovered

keval718 Advanced hide assistant 'New' badge once feature is discovered (#14060)

jinhaosong-source Proposed add OrcaRouter model provider

erichare Completed deduplicate Google embedding model aliases

erichare Proposed deduplicate Google embedding model aliases

erichare Proposed deduplicate Google embedding model aliases

erichare Proposed deduplicate Google embedding model aliases

Adam-Aghili Completed bump versions

erichare Completed enforce server owned folder connector limits

tarciorodrigues Proposed turn inspector panel into a parameter manager

mendonk Completed component input and component index telemetry events

Adam-Aghili Proposed bump versions

Adam-Aghili Completed update deps

mendonk Advanced component input and component index telemetry events (#14062)

Adam-Aghili Advanced update deps (#14069)

keval718 Completed stop assistant 'New' pill from shifting on hover

keval718 Completed anchor alert notifications flush to bottom corner

erichare Completed protect SQL runtime configuration

erichare Completed isolate timeout tests from SSRF validation

erichare Proposed protect SQL runtime configuration

erichare Proposed isolate timeout tests from SSRF validation

erichare Proposed forward advertised flow input fields

erichare Proposed forward port release 1.10.3 hardening

keval718 Advanced anchor alert notifications flush to bottom corner (#14027)

keval718 Advanced stop assistant 'New' pill from shifting on hover (#14035)

olayinkaadelakun Proposed announce recorded key combo via aria live and add accessibility test coverage

erichare Completed consolidate release 1.10.3 hardening backports

erichare Completed enforce per user component path containment

erichare Completed track assignment aliases in component code scanner

erichare Completed confine AssemblyAI audio file access

erichare Proposed consolidate release 1.10.3 hardening backports

erichare Completed correct deprecated model settings behavior

HzaRashid Proposed add langflow base[services] extra for service backends

keval718 Completed tighten horizontal spacing in generated flow layout

Adam-Aghili Proposed update deps

erichare Completed block native FFI imports in generated code

erichare Completed enforce flow authorization on websocket

erichare Completed correct deprecated model settings behavior

erichare Advanced correct deprecated model settings behavior (#14048)

erichare Proposed close RBAC enforcement and permission UX gaps

erichare Completed harden component code module access

erichare Proposed close RBAC enforcement and permission UX gaps

badarfaisal01 Proposed preserve non config StrInput values in convert kwargs

erichare Completed harden MCP stdio configuration

mendonk Completed unified operations component

mendonk Advanced unified operations component (#13920)

erichare Completed verify current password on password changes

keval718 Advanced tighten horizontal spacing in generated flow layout (#14059)

erichare Completed protect Docling Serve outbound requests

erichare Proposed enforce per user component path containment

erichare Completed preserve variable bindings when loading flows from disk

erichare Advanced preserve variable bindings when loading flows from disk (#14053)

deon-sanchez Proposed settings/messages accessibility

viktoravelino Proposed settings/mcp servers accessibility

mendonk Proposed component input and component index telemetry events

mendonk Proposed security hardening for untrusted multitenancy deployments

keval718 Proposed hide assistant 'New' badge once feature is discovered

keval718 Proposed tighten horizontal spacing in generated flow layout

Cristhianzl Proposed prefer strong model as assistant composer default

TheDarkniteFalls Proposed add Delegation Planner starter template

erichare Completed gate lfx bundles ALTK on Python 3.14

erichare Advanced gate lfx bundles ALTK on Python 3.14 (#14055)

erichare Proposed gate lfx bundles ALTK on Python 3.14

tarciorodrigues Proposed decompose dropdown and prompt components into hooks and helpers

Cristhianzl Completed durable background execution + HITL suspend/resume schema

Cristhianzl Advanced durable background execution + HITL suspend/resume schema (#13633)

erichare Proposed preserve variable bindings when loading flows from disk

erichare Advanced refresh agentic MCP snapshots

jordanrfrazier Completed multi worker serving with per request isolation for lfx serve

jordanrfrazier Advanced multi worker serving with per request isolation for lfx serve (#13818)

erichare Completed close tenant isolation gaps in security hardening

erichare Advanced close tenant isolation gaps in security hardening (#14044)

erichare Completed remove broken npm self upgrade

erichare Proposed remove broken npm self upgrade

saitejabandaru-in Proposed document ComponentInputsPayload and ComponentIndexPayload on telemetry page

Cristhianzl Completed QA fixes + model portability, budget, and error visibility

Cristhianzl Advanced QA fixes + model portability, budget, and error visibility (#14038)

tarciorodrigues Proposed decompose DBProvidersPage into components hooks and helpers

erichare Proposed correct deprecated model settings behavior

erichare Proposed correct deprecated model settings behavior

ogabrielluiz Completed bump fastapi to 0.139.0, serve frontend via app.frontend()

ogabrielluiz Advanced bump fastapi to 0.139.0, serve frontend via app.frontend() (#13978)

erichare Proposed correct deprecated model settings behavior

HimavarshaVS Completed allow Azure AI Foundry deployment names instead of catalog IDs

HimavarshaVS Advanced allow Azure AI Foundry deployment names instead of catalog IDs (#14023)

jordanrfrazier Completed harden multi tenant surfaces

jordanrfrazier Advanced harden multi tenant surfaces (#13530)

mendonk Completed add additional packages gated by python 3.14

mendonk Advanced add additional packages gated by python 3.14 (#13828)

erichare Completed preserve asyncio cancellation

mendonk Completed paddle OCR component bundle

tarciorodrigues Proposed re file use refresh model inputs into services and utils