✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryUpdates Bug Fixes, 19.2.0, and 2026-07-19 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
gate admin tabs behind authentication in settings gate admin tabs behind authentication in settings Source: granite4.1:30b@2026-07-19-audit Confidence: low |
— |
| Feature | Low |
improve server startup banner in cli improve server startup banner in cli Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
show dev tooling info in server boot banner show dev tooling info in server boot banner Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
add Antigravity and OpenCode MCP client instructions to settings add Antigravity and OpenCode MCP client instructions to settings Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
assume Responses API when unspecified in playground assume Responses API when unspecified in playground Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
default OpenAI models to Responses API in playground default OpenAI models to Responses API in playground Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
default to gpt-5.6-sol in playground default to gpt-5.6-sol in playground Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
inline codemirror-json-schema in vitest to fix ESM resolution issue inline codemirror-json-schema in vitest to fix ESM resolution issue Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
sanitize startup banner on Windows in cli sanitize startup banner on Windows in cli Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
adapt MCP auth wording when authentication is disabled in settings adapt MCP auth wording when authentication is disabled in settings Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
adapt MCP client instructions when authentication is disabled in settings adapt MCP client instructions when authentication is disabled in settings Source: llm_adapter@2026-07-19 Confidence: high |
— |
Full changelog
19.2.0 (2026-07-19)
Features
- cli: improve server startup banner (3904c49)
- server: show dev tooling info in boot banner (7e36376)
- settings: add Antigravity and OpenCode MCP client instructions (8180357)
Bug Fixes
- app: inline codemirror-json-schema in vitest to fix ESM resolution (dc0d641)
- cli: sanitize startup banner on windows (1474c9b)
- playground: assume Responses API when unspecified (3476db9)
- playground: default OpenAI models to Responses API (3a8f361)
- playground: default to gpt-5.6-sol (dc1258f)
- settings: adapt MCP auth wording when authentication is disabled (1e9132a)
- settings: adapt MCP client instructions when authentication is disabled (93ac955)
- settings: gate admin tabs behind authentication (518e909)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- varize-phoenix-v19.0.0 GraphQL createUserApiKey and createSystemApiKey reject API-key callers.
- varize-phoenix-v18.0.0 Changes session time-range filters to use interval-overlap semantics.
- varize-phoenix-v17.0.0 Adds system settings for admin-managed assistant enablement and trace recording policy
- varize-phoenix-v16.0.0 Sandboxing and Code Evaluators introduce breaking changes in Phoenix v16.0.0.
- varize-phoenix-v15.7.0 Removes v1 /chat route and associated code
Beta — feedback welcome: [email protected]