Langflow

What's Changed

✨ New Features

• feat: allow users to name flow snapshots when saving (LE-874) by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12742
• feat: Ship Calculator default tool + dynamic system prompt injection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12864
• feat: disable frontend retries for client errors by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12890
• feat: refresh deployed success step by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12853
• feat: Add Memory Base APIs models migrations service endpoints and tests by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12417
• feat: Add an Astra DB Data API Component by @erichare in https://github.com/langflow-ai/langflow/pull/12766
• feat: add envs to deployment list response for wxo agents by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12881
• feat(deployments): add agent name validation during deployment creation by @HzaRashid in https://github.com/langflow-ai/langflow/pull/12858
• feat: Clear all traces for flow by @severfire in https://github.com/langflow-ai/langflow/pull/12354
• feat: backend i18n — serve translated component metadata via Accept-Language by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12517
• feat(i18n): translate default node titles on language change, preserve user-customized names by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12928
• feat: MemoryBases GUI Component by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12903
• feat: Add draft version CTA in deployment modal by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12925
• feat: add sandboxed File System component for agents by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12901
• feat: native structured output on AgentComponent with prompt fallback by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12935
• feat(lfx): extension manifest schema, validate CLI, and error formatter (LE-1014) by @erichare in https://github.com/langflow-ai/langflow/pull/12952
• feat(assistant): Add Refresh List and Manage Model Providers to model selector by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12985
• feat: Frontend memory by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12293
• feat: Added API support for BE endpoints by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12423
• feat(deployments): support multi-version flows by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12950
• feat(agents): structured default system prompt with runtime env injection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12855
• feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in https://github.com/langflow-ai/langflow/pull/13016
• feat(components): Add Code Agents (CodeAct agent and OpenDsStar agent) and file ingestion components with supporting fixes by @yoavkantor in https://github.com/langflow-ai/langflow/pull/12713
• feat: Isolate FileSystem tool sandbox per authenticated user by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13031
• feat(kb): Knowledge Bases — Infrastructure Overhaul by @erichare in https://github.com/langflow-ai/langflow/pull/12802
• feat: Add agent preprocessing to perform compaction/gating for MemoryBases by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12975
• feat: regression bucket by @mendonk in https://github.com/langflow-ai/langflow/pull/12948
• feat: Redis-backed job queue for multi-worker deployments by @severfire in https://github.com/langflow-ai/langflow/pull/12588
• feat(mcp): pass session_id through MCP tool calls by @erichare in https://github.com/langflow-ai/langflow/pull/13124
• feat: add UTM tracking to outbound watsonx Orchestrate links by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/12888
• feat(lfx): Bundle Separation and LFX Extension Framework by @erichare in https://github.com/langflow-ai/langflow/pull/13043
• feat(knowledge): merge ingestion + retrieval into mode-driven Knowledge component by @erichare in https://github.com/langflow-ai/langflow/pull/13120
• feat: Add langflow-stepflow package by @bjchambers in https://github.com/langflow-ai/langflow/pull/12015
• feat: promote OpenRouter to a first-class unified model provider by @erichare in https://github.com/langflow-ai/langflow/pull/13185
• feat: Redesign deployment environment cards by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13109
• feat(memory): improve memory UI with empty states, toasts, and model by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13116
• feat(i18n): globalization pipeline — frontend i18n with backend locale support by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/12933
• feat(memories): surface memory config in summary card with popover by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13209
• feat(memories): make preprocessing instructions required with tooltip hint by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13250
• feat(memory): session_id filtering as optional for MemoryBases by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13298
• feat: wxo oauth sso support by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/12917
• feat(job_queue): cross-worker cancel + polling watchdog for multi-worker Redis-backed builds by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13084
• feat(memories): redesign MemoryDetailsHeader UI and update tests by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13263
• feat(memories): add in-product docs links and tooltips to Memory Base UI by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13265
• feat: add DB migration validation workflow (LE-1259) [backport 1.9.4] by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13348
• feat: LE-1017 Event bus for bundle events by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13253
• feat(memory): align Create Memory modal layout and spacing with Create Variable modal design system by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13287
• feat: OSS authorization foundations for enterprise RBAC by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/13153
• feat: accept v2 workflow globals in request body by @erichare in https://github.com/langflow-ai/langflow/pull/13351
• feat(memory): default session filter to All Sessions and add it as a selectable dropdown option by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13350
• feat(authz): admin APIs, share-aware build_flow, and base service additions by @erichare in https://github.com/langflow-ai/langflow/pull/13371
• feat(memory): add inline docs link to preprocessing instructions tooltip by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13352
• feat(authz): add DI dependencies and permission decorators by @HimavarshaVS in https://github.com/langflow-ai/langflow/pull/13368
• feat: flow builder assistant with real-time canvas updates by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12575
• feat: Add DB migration validation workflow for nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13249
• feat(components): Add IBM DB2 Vector Store component by @DhruvChaturvediIBM in https://github.com/langflow-ai/langflow/pull/13237
• feat: add MCP timeout configuration support by @Jkavia in https://github.com/langflow-ai/langflow/pull/12999
• feat(i18n): translate missing frontend strings across Memories, Knowledge Base, toasts, and notifications by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13279
• feat(ci): reduce macOS Intel CI matrix and add macOS support documentation by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13328
• feat: sync wxO agent name and description with db by @HzaRashid in https://github.com/langflow-ai/langflow/pull/13026
• feat: Add embedded mode configuration flags by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13095
• feat: MCP lock enforcement + UI/tests by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13097
• feat: Gate custom component creation for admins only by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13098
• feat: Hide UI elements in embedded mode by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13099
• feat(logging): production-grade structured logs for Grafana/Loki by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13164
• feat: mark Text Input and Text Output components as legacy by @erichare in https://github.com/langflow-ai/langflow/pull/13420
• feat: add custom comp execution override by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13177
• feat: Improve canvas deploy review flow by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13246
• feat(authz): finalize authz_share — variable share-aware fetch, dedup, tests by @erichare in https://github.com/langflow-ai/langflow/pull/13444
• feat: improve lfx serve production-readiness by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13121
• feat: mention canvas components in the assistant input by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13486
• feat: Add IP-based rate limiting to login endpoint by @Jkavia in https://github.com/langflow-ai/langflow/pull/13469
• feat: sync langflow and lfx versions by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/13176

🐛 Bug Fixes

• fix: Make sdk env flag idempotent by @erichare in https://github.com/langflow-ai/langflow/pull/12716
• fix: respect renamed/deleted default folder across logins by @erichare in https://github.com/langflow-ai/langflow/pull/12746
• fix: filter out null objects in mergeNodeTemplates function by @paulina-grunwald in https://github.com/langflow-ai/langflow/pull/12688
• fix(tests): Skip assistant-panel e2e test when OPENAI_API_KEY is missing by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12747
• fix: MCP Auth Error on restart / swapping auth by @erichare in https://github.com/langflow-ai/langflow/pull/12715
• fix: resolve ghosting issues in preload optimization by @severfire in https://github.com/langflow-ai/langflow/pull/12587
• fix(frontend): cap MCP server modal height by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12743
• fix(mcp): reconnect Streamable HTTP after MCP server restart by @schuellerf in https://github.com/langflow-ai/langflow/pull/12777
• fix(frontend): show backend error detail on project upload failure by @keval718 in https://github.com/langflow-ai/langflow/pull/12791
• fix: mcp component dyanamic tool by @mansura-habiba in https://github.com/langflow-ai/langflow/pull/12779
• fix: propagate x-api-key and authorization headers to nested MCP calls by @octo-patch in https://github.com/langflow-ai/langflow/pull/12541
• fix(frontend): keep KnowledgeBase modal centered when side panel opens by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12764
• fix: update npm overrides by @Jkavia in https://github.com/langflow-ai/langflow/pull/12843
• fix(security): use CodeQL-recognized sanitizer for path-injection alerts #205-213 by @erichare in https://github.com/langflow-ai/langflow/pull/12841
• fix(security): drop URL substring checks for WXO auth scheme selection (#201-204) by @erichare in https://github.com/langflow-ai/langflow/pull/12842
• fix(frontend): preserve IME composition for dead-key accents by @keval718 in https://github.com/langflow-ai/langflow/pull/12801
• fix: serialize concurrent MCP session access to prevent race conditions by @erichare in https://github.com/langflow-ai/langflow/pull/12761
• fix: MCP server PATCH field clearing in backend and frontend [LE-891] by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12763
• fix: MCP Tools component now works in LFX standalone mode by @erichare in https://github.com/langflow-ai/langflow/pull/12760
• fix: Handle videos with no comments in YouTube Comments component by @rodrigosnader in https://github.com/langflow-ai/langflow/pull/10633
• fix(custom): include future imports in component sandbox compilation by @erichare in https://github.com/langflow-ai/langflow/pull/12865
• fix: guard output logs against non-dict artifacts by @erichare in https://github.com/langflow-ai/langflow/pull/12877
• fix(frontend): align shareable playground input style with in-IDE playground by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12862
• fix(chroma): replace deprecated Client(settings=) with HttpClient for chromadb >=1.0 by @erichare in https://github.com/langflow-ai/langflow/pull/12900
• fix: migrate orphaned MCP servers config across DB resets by @erichare in https://github.com/langflow-ai/langflow/pull/12762
• fix(tests): Restore Windows-compatible slider Playwright test by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12904
• fix(frontend): validate deployment agent name by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12896
• fix(mcp): enforce auth on /streamable for auth_type=oauth projects by @erichare in https://github.com/langflow-ai/langflow/pull/12756
• fix(composio): prevent KeyError('type') on Gmail/Calendar tool execution by @keval718 in https://github.com/langflow-ai/langflow/pull/12905
• fix: Add microseconds support for PostgreSQL data store by @dzbanek717 in https://github.com/langflow-ai/langflow/pull/9941
• fix(mcp): render connection handles for non-string MCP tool inputs by @erichare in https://github.com/langflow-ai/langflow/pull/12782
• fix: Don't show empty category for MCP search in sidebar by @erichare in https://github.com/langflow-ai/langflow/pull/12930
• fix(LE-602): Update Pydantic to >=2.13.0 for fastapi-pagination v0.16.0 compatibility by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12938
• fix(tests): Stabilize Windows-only Playwright e2e failures by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12942
• fix: route custom Loguru logs through Langflow logger by @erichare in https://github.com/langflow-ai/langflow/pull/12926
• fix(tests): Stabilize Playwright e2e suite on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12964
• fix(deployments): rename env labels by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12949
• fix: prevents credential types vars from being used as inputs/outputs unless specifically typed as secretstr by @jordanrfrazier in https://github.com/langflow-ai/langflow/pull/12908
• fix: Pagination shows "-19-0 of 0 items" in traces view when empty by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12941
• fix(ui): Hide native Edge password reveal icon on desktop by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12972
• fix(model-input): hide wrench when saved model's provider is configured by @erichare in https://github.com/langflow-ai/langflow/pull/12971
• fix: MCP connection refresh state by @erichare in https://github.com/langflow-ai/langflow/pull/12931
• fix: Duplicate lines rendered in the tracing view by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12944
• fix(frontend): render node dropdowns above build/notification overlays by @keval718 in https://github.com/langflow-ai/langflow/pull/12973
• fix: encode non-ASCII filenames in Content-Disposition headers (RFC 5987) by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12918
• fix: Notifications overlap the bottom-center menubar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12946
• fix: update Docker base images to latest Python 3.12 and Debian Trixie to resolve CVEs by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12990
• fix: Respect proxy environment variables in URL Component by @erichare in https://github.com/langflow-ai/langflow/pull/12989
• fix(mcp): make run_tool wait_for timeout configurable, raise floor to… by @mansura-habiba in https://github.com/langflow-ai/langflow/pull/12996
• fix(frontend): paginator empty state shows "0 items" instead of "1-0 of 0 items" by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12965
• fix(tests): Stabilize traces and user-flow-cleanup e2e on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12997
• fix(frontend): default event_delivery to streaming to match server config by @keval718 in https://github.com/langflow-ai/langflow/pull/12978
• fix: force pull latest base images in Docker nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13014
• fix: update Docker base images to Trixie and force pull latest images in nightly builds by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13015
• fix: pin postgres image to bookworm in docker_example by @erichare in https://github.com/langflow-ai/langflow/pull/13027
• fix(security): prevent arbitrary file read via public flow build endpoint (GHSA-rcjh-r59h-gq37) by @keval718 in https://github.com/langflow-ai/langflow/pull/13029
• fix: remove stepper modal close button by @viktoravelino in https://github.com/langflow-ai/langflow/pull/12986
• fix: skip missing server file when delete_after_processing=True to avoid race condition by @octo-patch in https://github.com/langflow-ai/langflow/pull/12556
• fix(tests): Stabilize Windows-only Playwright e2e failures by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13062
• fix: Unblock nightly install on macOS x86_64 due OpenDsStar by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13061
• fix: Restore resolved release-branch ref in nightly build by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13064
• fix: OpenTelemetry trace context propagation by @ringerc in https://github.com/langflow-ai/langflow/pull/12962
• fix: update isinstance(value, Data) logic by @muhammadravi251001 in https://github.com/langflow-ai/langflow/pull/12769
• fix: use stable UUIDs for Qdrant document IDs to prevent duplicate ingestion by @octo-patch in https://github.com/langflow-ai/langflow/pull/12642
• fix: strip reserved 'code' param before build() in component reuse path by @aayushbaluni in https://github.com/langflow-ai/langflow/pull/12712
• fix: gracefully handle pyperclip failure in headless/remote environments by @octo-patch in https://github.com/langflow-ai/langflow/pull/12614
• fix: add [proxy] extra to litellm dependency for langflow-ide by @Jah-yee in https://github.com/langflow-ai/langflow/pull/12235
• fix: Skip built-in tool when external tool has same name by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13036
• fix: update security dependencies by @Jkavia in https://github.com/langflow-ai/langflow/pull/13053
• fix: restore Langfuse feedback trace linking by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13081
• fix: ValidationError reduction on OSS and Desktop by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12920
• fix(ui): distinguish Memory and Model icons (BrainCog / BrainCircuit) by @keval718 in https://github.com/langflow-ai/langflow/pull/13111
• fix: stabilize model toggle and refresh Agent dropdown after provider changes by @erichare in https://github.com/langflow-ai/langflow/pull/13113
• fix: prevent canvas text-selection highlight on shift+drag in Tauri by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12995
• fix: normalise legacy uppercase SpanStatus/SpanType values on DB read by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13000
• fix(knowledge-base): align Filter by metadata pickers with app dropdowns by @keval718 in https://github.com/langflow-ai/langflow/pull/13117
• fix: upgrade langchain-classic to 1.0.7 by @Jkavia in https://github.com/langflow-ai/langflow/pull/13130
• fix(frontend): stop empty-state splash from flashing after login by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12966
• fix: Remove redundant Components entry from the left sidebar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13090
• fix: backport policies ToolGuard lazy imports by @erichare in https://github.com/langflow-ai/langflow/pull/13144
• fix: Memory Base Table output causes JSON serialization error when saving Agent message by @erichare in https://github.com/langflow-ai/langflow/pull/13136
• fix: validate review tool names inline by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13040
• fix: added per-user endpoint for flows by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13072
• fix: reuse single Langfuse client across flow runs to stop thread leak by @erichare in https://github.com/langflow-ai/langflow/pull/13107
• fix(api): resolve global-variable default_fields on API runs (#11781) by @erichare in https://github.com/langflow-ai/langflow/pull/13129
• fix(api): parse multipart/form-data on /run so session_id is preserved by @erichare in https://github.com/langflow-ai/langflow/pull/13092
• fix(initial_setup): upsert by (user_id, name) when loading flows from disk by @erichare in https://github.com/langflow-ai/langflow/pull/13132
• fix(schema): resolve nested $ref objects to named models instead of dict by @erichare in https://github.com/langflow-ai/langflow/pull/13128
• fix: Remove duplicate Lock flow control from bottom-center menubar by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13088
• fix: Auto-create write parents and reject unsafe glob patterns by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13075
• fix: add stream toggle back to agent by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13155
• fix: update embedded chat CDN URL to langflow-ai org and v1.0.8 by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13118
• fix: avoid pickling vertex component instances by @newmattock in https://github.com/langflow-ai/langflow/pull/13172
• fix(ci): rename bundles to -nightly during nightly build by @erichare in https://github.com/langflow-ai/langflow/pull/13193
• fix: File upload toast showing only after successful upload by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/12984
• fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in https://github.com/langflow-ai/langflow/pull/13201
• fix(openrouter): validate against /api/v1/auth/key and disconnect all variables by @erichare in https://github.com/langflow-ai/langflow/pull/13214
• fix: UI polish for Memories and Traces sidebar sections by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13205
• fix: upgrade dependencies for security fixes by @Jkavia in https://github.com/langflow-ai/langflow/pull/13218
• fix: coerce numpy scalars in Memory Base metadata to Python primitives by @erichare in https://github.com/langflow-ai/langflow/pull/13211
• fix(extensions): discover editable bundles; clean up ticket refs and reload UX by @erichare in https://github.com/langflow-ai/langflow/pull/13219
• fix(agent): scope chat history retrieval by flow_id to prevent cross-flow leak by @erichare in https://github.com/langflow-ai/langflow/pull/13087
• fix: Expose Message connection handle on Run Flow's exposed text inputs (LE-1233) by @erichare in https://github.com/langflow-ai/langflow/pull/13180
• fix(ci): use local bundle wheels in nightly install tests by @erichare in https://github.com/langflow-ai/langflow/pull/13257
• fix(composio): handle Python keywords and non-identifier field names in action schemas by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13139
• fix(memory-base): Product Review Improvements by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13248
• fix(frontend): blur upload button so "Upload File" tooltip doesn't persist after file picker closes by @erichare in https://github.com/langflow-ai/langflow/pull/13178
• fix(guardrails): add message pass-through outputs by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13096
• fix(docker): pre-create LANGFLOW_CONFIG_DIR so named volumes inherit uid=1000 ownership by @erichare in https://github.com/langflow-ai/langflow/pull/13212
• fix(tracing): forward request body user_id to Langfuse trace by @erichare in https://github.com/langflow-ai/langflow/pull/13266
• fix: upgrade litellm to 1.85.1 by @erichare in https://github.com/langflow-ai/langflow/pull/13272
• fix(flows): show readable API error messages on flow creation failure by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13140
• fix: quiet extension migration warnings by @erichare in https://github.com/langflow-ai/langflow/pull/13275
• fix: Sync Agent-as-tool description by removing deprecated agent_description by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13151
• fix: update mem0 and qdrant dependencies by @erichare in https://github.com/langflow-ai/langflow/pull/13292
• fix: canvas deploy attach/detach flow bugs by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13247
• fix(auth): AUTO_LOGIN parity on protected endpoints + model-load error UI by @erichare in https://github.com/langflow-ai/langflow/pull/13192
• fix: error with loop in grouped components by @erichare in https://github.com/langflow-ai/langflow/pull/13281
• fix: chromadb trust remote code mitigation by @erichare in https://github.com/langflow-ai/langflow/pull/13288
• fix: Update package to safer version to address the CVEs by @Jkavia in https://github.com/langflow-ai/langflow/pull/13270
• fix(db): serialize concurrent Alembic migrations via Postgres advisory lock by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13204
• fix(playground): auto-focus chat input when active session changes by @keval718 in https://github.com/langflow-ai/langflow/pull/13310
• fix(playground): distinguish active session row during multi-select by @keval718 in https://github.com/langflow-ai/langflow/pull/13312
• fix(canvas): replace panel toggle icon with SlidersHorizontal and add pressed/unpressed visual states by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13286
• fix(playground): align Select All bulk-delete icon with session ⋮ column by @keval718 in https://github.com/langflow-ai/langflow/pull/13313
• fix(canvas): remove fixed width on zoom percentage causing excess gap before chevron by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13284
• fix: use langchain-mongodb and langchain-qdrant. Port mem0 update by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13329
• fix: port chroma collection hardening by @erichare in https://github.com/langflow-ai/langflow/pull/13339
• fix(playground): hide session-row checkbox until hover or selection by @keval718 in https://github.com/langflow-ai/langflow/pull/13314
• fix(playground): add gap between consecutive error cards in chat messages by @keval718 in https://github.com/langflow-ai/langflow/pull/13325
• fix(frontend): Safari Selected Components by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13283
• fix(tracing): surface Langfuse setup failures, pin pydantic>=2.13 (Py3.14) by @erichare in https://github.com/langflow-ai/langflow/pull/13341
• fix: set graph inputs by component type by @erichare in https://github.com/langflow-ai/langflow/pull/13343
• fix(traces): bypass impl result_processor in _LegacyCaseEnum so legacy uppercase rows load by @erichare in https://github.com/langflow-ai/langflow/pull/13346
• fix(server): refuse to start with multiple workers and the default in-memory job queue by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13202
• fix(mcp): fix validation, session isolation, and update_flow_from_spec parity by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12528
• fix(api-keys): add expiration date support for API keys by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13330
• fix(tracing): isolate Langfuse OTel tracer to stop HTTP span pollution by @erichare in https://github.com/langflow-ai/langflow/pull/13344
• fix(agent): Force streaming on Agent LLM so tokens stream incrementally by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13356
• fix: change docling remote component to receive task id and to throw processing errors by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13353
• fix: Force streaming on AgentComponent regardless of toggle by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13358
• fix: Run Flow mutable state leak by @erichare in https://github.com/langflow-ai/langflow/pull/13340
• fix: Restore custom Agent prompts in starter projects by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13282
• fix(chat): align message card surfaces by @viktoravelino in https://github.com/langflow-ai/langflow/pull/13354
• fix: Add defense in depth user_id filter to handle list tools MCP handler by @Jkavia in https://github.com/langflow-ai/langflow/pull/13373
• fix: Respect OpenAI embeddings API base for Knowledge Base by @erichare in https://github.com/langflow-ai/langflow/pull/13380
• fix: bundle event inconsistency and other fixes by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13374
• fix(traces): full-height trace panel, and status badge position by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13385
• fix(playground): expand session checkbox click target to full row height by @keval718 in https://github.com/langflow-ai/langflow/pull/13349
• fix: improve trace search functionality by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13383
• fix(ci): lockstep langflow-nightly and langflow-base-nightly versions by @erichare in https://github.com/langflow-ai/langflow/pull/13413
• fix: separate docling chunking dependencies by @lucaseduoli in https://github.com/langflow-ai/langflow/pull/13411
• fix: Resolve API keys from global variable before .env by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13408
• fix: use Langflow logo on loading screen and remove size jump glitch by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13417
• fix: add failed login logging with IP tracking and other relevant details by @Jkavia in https://github.com/langflow-ai/langflow/pull/13409
• fix(ci): give extension bundles a nightly track so langflow-nightly resolves by @erichare in https://github.com/langflow-ai/langflow/pull/13418
• fix(i18n): backend locale translation fixes — custom component nodes, Toolset output, RAG template notes, UI banner strings by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13296
• fix(i18n): default to English regardless of browser locale by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13324
• fix(ci): re-enable migration-pip-venv now that nightly bundles resolve by @erichare in https://github.com/langflow-ai/langflow/pull/13421
• fix: remove duplicate uv.lock from workspace member by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13326
• fix(db): hold migration advisory lock for create_db_and_tables too by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13393
• fix: Remove Playwright from Dependencies by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13382
• fix(tracing): warn clearly when LangWatch is unavailable on Python 3.14 (Docker) by @erichare in https://github.com/langflow-ai/langflow/pull/13410
• fix: ibm db2 bulk insert pr 13438 by @erichare in https://github.com/langflow-ai/langflow/pull/13449
• fix: restrict builtins and validate code in Python Interpreter components by @erichare in https://github.com/langflow-ai/langflow/pull/13397
• fix: point file manager empty-state link to the files page route by @erichare in https://github.com/langflow-ai/langflow/pull/13450
• fix: add SSRF protection to legacy RSS Reader and SearXNG components by @erichare in https://github.com/langflow-ai/langflow/pull/13395
• fix: re-validate redirects against SSRF protection in API Request component by @erichare in https://github.com/langflow-ai/langflow/pull/13394
• fix(logging): keep JSON level field clean when stdlib level names are mutated by @erichare in https://github.com/langflow-ai/langflow/pull/13457
• fix(memory): show dashes for stat cards in All Sessions view by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13443
• fix(stepflow): route multi-output fan-out to the correct step per connection by @erichare in https://github.com/langflow-ai/langflow/pull/13412
• fix(memories): return 422 instead of 500 when request body is missing by @erichare in https://github.com/langflow-ai/langflow/pull/13452
• fix: Move Docling components into bundle by @erichare in https://github.com/langflow-ai/langflow/pull/13442
• fix: declare kb_allowed_folder_roots on Settings so KB folder ingestion works by @erichare in https://github.com/langflow-ai/langflow/pull/13448
• fix: Fix timestamp rendering for expires_at in API Key model by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13471
• fix: populate _embeddings for upload-ingested KBs in Knowledge retrieve by @erichare in https://github.com/langflow-ai/langflow/pull/13446
• fix: prevent MCP server edit from creating a duplicate on name change by @erichare in https://github.com/langflow-ai/langflow/pull/13464
• fix: make playground code block background theme-reactive by @keval718 in https://github.com/langflow-ai/langflow/pull/13470
• fix: enforce mutually exclusive component constraint on paste by @keval718 in https://github.com/langflow-ai/langflow/pull/13468
• fix(conditional-router): route Text Input when Case True/False are blank by @erichare in https://github.com/langflow-ai/langflow/pull/13389
• fix(frontend): clean up new-flow onboarding, no orphaned placeholders, named templates, assistant tooltip stacking by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13451
• fix: Warm circular imports to avoid deadlock by @erichare in https://github.com/langflow-ai/langflow/pull/13490
• fix: add back in the missing npm docker changes by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13501
• fix: replace GradientSave icon with plain Save in saved components sidebar by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13485
• fix: Improved styling of DatePicker icon in dark theme by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13506
• fix: enable IBM watsonx.ai bundle on Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13512
• fix: enable agent-lifecycle-toolkit (altk) on Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13513
• fix: decouple Db2 vector store ingestion from search query by @erichare in https://github.com/langflow-ai/langflow/pull/13514
• fix(bundles): sync lfx pin to the 1.10.0 line after version realignment by @erichare in https://github.com/langflow-ai/langflow/pull/13516
• fix: prevent X-Forwarded-For bypass of login rate limit by @Jkavia in https://github.com/langflow-ai/langflow/pull/13509
• fix(i18n): translate QA-identified missing strings for 1.10.0 by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13503
• fix: add ssrf protection to url component by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13488
• fix: slider value lost when adjusting before the node is selected by @erichare in https://github.com/langflow-ai/langflow/pull/13515
• fix(canvas): anchor new note bottom-center to cursor on placement by @olayinkaadelakun in https://github.com/langflow-ai/langflow/pull/13441
• fix: standardize playground code block + container backgrounds on shadcn tokens by @keval718 in https://github.com/langflow-ai/langflow/pull/13520
• fix: Remove getenvvar component and update locales by @Jkavia in https://github.com/langflow-ai/langflow/pull/13521
• fix: serialize DataFrames in tool mode to prevent pandas truncation by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13504
• fix(security): block code-execution components on unauthenticated public flow builds by @erichare in https://github.com/langflow-ai/langflow/pull/13538
• fix(bundles): republish lfx-* at 0.1.1 with corrected pin + relax lfx floor for RC builds by @erichare in https://github.com/langflow-ai/langflow/pull/13542
• fix(ci): make Biome lint non-blocking for release workflow calls by @vjgit96 in https://github.com/langflow-ai/langflow/pull/13547
• fix(security): remove the disabled Python Code Structured tool component by @erichare in https://github.com/langflow-ai/langflow/pull/13560

📝 Documentation Updates

• docs: document tag format requirements and release artifacts in RELEASE.md by @vjgit96 in https://github.com/langflow-ai/langflow/pull/12867
• docs: include host field for external db in Helm chart by @mendonk in https://github.com/langflow-ai/langflow/pull/12899
• docs: change upgrade reinstall order by @mendonk in https://github.com/langflow-ai/langflow/pull/12911
• docs: troubleshoot desktop errors from telemetry by @mendonk in https://github.com/langflow-ai/langflow/pull/11282
• docs: deprecate voice to voice websocket endpoint by @mendonk in https://github.com/langflow-ai/langflow/pull/12970
• docs: release note refactor by @mendonk in https://github.com/langflow-ai/langflow/pull/12987
• docs: opensearch connector feature by @mendonk in https://github.com/langflow-ai/langflow/pull/12998
• docs: update mdc file to reflect current usage by @mendonk in https://github.com/langflow-ai/langflow/pull/13019
• docs: uninstall langflow by @mendonk in https://github.com/langflow-ai/langflow/pull/13017
• docs: fix sidebar and TOC styles for Redocusaurus by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/12748
• docs: SSRF protection enabled by default by @mendonk in https://github.com/langflow-ai/langflow/pull/13106
• docs: mcp tool call configurable timeouts by @mendonk in https://github.com/langflow-ai/langflow/pull/13051
• docs: add directory depth limitation warning to custom components by @AntonioABLima in https://github.com/langflow-ai/langflow/pull/13104
• docs: directory component is legacy by @mendonk in https://github.com/langflow-ai/langflow/pull/13186
• docs: merge knowledge base components by @mendonk in https://github.com/langflow-ai/langflow/pull/13150
• docs: text operations component by @mendonk in https://github.com/langflow-ai/langflow/pull/13152
• docs: file system component by @mendonk in https://github.com/langflow-ai/langflow/pull/13183
• docs: troubleshooting for container mismatch by @mendonk in https://github.com/langflow-ai/langflow/pull/13217
• docs: openrouter promoted to global provider by @mendonk in https://github.com/langflow-ai/langflow/pull/13271
• docs: macos support matrix by @mendonk in https://github.com/langflow-ai/langflow/pull/13363
• docs: lfx bundles by @mendonk in https://github.com/langflow-ai/langflow/pull/13142
• docs: update database tables by @mendonk in https://github.com/langflow-ai/langflow/pull/13254
• docs: agent improvements by @mendonk in https://github.com/langflow-ai/langflow/pull/13269
• docs: bump python version reqs to 3.14 and add release note by @mendonk in https://github.com/langflow-ai/langflow/pull/13289
• docs: fixes for consulting advantage by @mendonk in https://github.com/langflow-ai/langflow/pull/13300
• docs: memory base feature and component by @mendonk in https://github.com/langflow-ai/langflow/pull/13094
• docs: add chroma cloud provider by @mendonk in https://github.com/langflow-ai/langflow/pull/13122
• docs: non-feature fixes and updates for 1.10 by @mendonk in https://github.com/langflow-ai/langflow/pull/13396
• docs: redis worker queue by @mendonk in https://github.com/langflow-ai/langflow/pull/13386
• docs: lf assistant flow building example by @mendonk in https://github.com/langflow-ai/langflow/pull/13445
• docs: clarify local CLAUDE.md hard-rules import behavior by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13467
• docs: update vector store rag template by @mendonk in https://github.com/langflow-ai/langflow/pull/13291
• docs: bundle separation and component updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13472
• docs: wxo deploy updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13345
• docs: firecrawl component by @mendonk in https://github.com/langflow-ai/langflow/pull/13487
• docs: add env vars for login endpoint rate limiting by @mendonk in https://github.com/langflow-ai/langflow/pull/13489
• docs: lfx readme and lfx mcp by @mendonk in https://github.com/langflow-ai/langflow/pull/13010
• docs: gunicorn worker configuration by @mendonk in https://github.com/langflow-ai/langflow/pull/13511
• docs: JSON logging structure and grafana integration by @mendonk in https://github.com/langflow-ai/langflow/pull/13251
• docs: add code agents and file processing components by @mendonk in https://github.com/langflow-ai/langflow/pull/13285
• docs: lfx compatibility matrix and lfx serve updates by @mendonk in https://github.com/langflow-ai/langflow/pull/13518
• docs: build OpenAPI spec and cut version 1.10 by @mendonk in https://github.com/langflow-ai/langflow/pull/13537
• docs: LF assistant ampersand and dot selectors by @mendonk in https://github.com/langflow-ai/langflow/pull/13544

🛠 Maintenance Tasks

• perf: Enhance Gunicorn preload functionality for Langflow by @severfire in https://github.com/langflow-ai/langflow/pull/12778
• refactor: refine MCP Server tab layout and alignment by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13032
• refactor: Move File System component to Files & Knowledge category by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13223
• refactor: change agent to use langchain 1.0 by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/12992
• perf(telemetry): batched off-pool writer for transactions + vertex_builds by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13126

✅ Tests

• test: fix flow state clean test on windows by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13013
• test: Skip user-flow-state-cleanup e2e on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13070
• test: Refactor Playwright suite with shared helpers and remove redundant tests by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13278
• test: cover cross-user cache pollution on deprecated vertices endpoint (supplied-data path) by @erichare in https://github.com/langflow-ai/langflow/pull/13398
• test(e2e): Replace non-terminal waits to fix flaky Windows specs by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13407
• test: Skip starter-projects shard4 on Windows CI by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13439
• test: fix flaky Windows Playwright tests for error popups, settings nav, and output inspection by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13463

Others

• ci: unblock community PRs from spurious CI failures by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12916
• [backend] fix: add cache_dir setting to avoid multi-instance conflicts by @erichare in https://github.com/langflow-ai/langflow/pull/12940
• chore: Remove the diskcache dependency by @erichare in https://github.com/langflow-ai/langflow/pull/12953
• chore: Add DESIGN.md for Langflow's visual design system by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12830
• ci: block PR titles ending in ellipsis by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13004
• Fix: Migration 1.9.2 to 1.10.0 back to 1.9.2 idempotency issue by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/12991
• chore(starter-projects): new Vector Store RAG template by @Empreiteiro in https://github.com/langflow-ai/langflow/pull/13018
• chore: improve AI-agent context (CLAUDE.md auto-load + AGENTS.md tweaks) by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13028
• chore: remove internal ticket references from code by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13073
• chore: support Python 3.14 by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13085
• Fix: preprocessing related fields removed from PATCH endpoint by @dkaushik94 in https://github.com/langflow-ai/langflow/pull/13112
• chore: Block hardcoded Tailwind palette via Biome lint by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13125
• chore: Add non-blocking test coverage advisor for PRs by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13148
• ci: stop transient Windows npm/cache flakes from failing frontend tests (1.10.0) by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13175
• chore: Clean up the startup warnings for Python 3.14 by @erichare in https://github.com/langflow-ai/langflow/pull/13156
• ci: backport bundle/nightly CI fixes from main (#13206, #13207, #13208) by @erichare in https://github.com/langflow-ai/langflow/pull/13210
• chore: port Remove the diskcache dependency by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13334
• chore: port pre-create LANGFLOW_CONFIG_DIR #13212 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13342
• chore: bump versions by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13370
• chore(ci): Fix 403 in DB migration validation witness flow by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13376
• chore(frontend): Clean up biome violations on release-1.10.0 by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13375
• ci: sync workflow fixes from main into release-1.10.0 (fix broken nightly) by @erichare in https://github.com/langflow-ai/langflow/pull/13400
• ci: isolate bundle installs from the core release gate; lazy-import ibm-db by @erichare in https://github.com/langflow-ai/langflow/pull/13402
• chore: unconstrained lfx version for bundles by @erichare in https://github.com/langflow-ai/langflow/pull/13415
• chore: Merge release-1.9.6 into release-1.10.0 by @erichare in https://github.com/langflow-ai/langflow/pull/13466
• chore: prevent UnicodeEncodeError crashing error logging on Windows consoles by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13482
• chore: update lock files by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13483
• chore: remove aws scripts by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13534

New Contributors

• @paulina-grunwald made their first contribution in https://github.com/langflow-ai/langflow/pull/12688
• @mansura-habiba made their first contribution in https://github.com/langflow-ai/langflow/pull/12779
• @octo-patch made their first contribution in https://github.com/langflow-ai/langflow/pull/12541
• @dzbanek717 made their first contribution in https://github.com/langflow-ai/langflow/pull/9941
• @yoavkantor made their first contribution in https://github.com/langflow-ai/langflow/pull/12713
• @ringerc made their first contribution in https://github.com/langflow-ai/langflow/pull/12962
• @muhammadravi251001 made their first contribution in https://github.com/langflow-ai/langflow/pull/12769
• @aayushbaluni made their first contribution in https://github.com/langflow-ai/langflow/pull/12712
• @Jah-yee made their first contribution in https://github.com/langflow-ai/langflow/pull/12235
• @newmattock made their first contribution in https://github.com/langflow-ai/langflow/pull/13172
• @bjchambers made their first contribution in https://github.com/langflow-ai/langflow/pull/12015
• @DhruvChaturvediIBM made their first contribution in https://github.com/langflow-ai/langflow/pull/13237

Full Changelog: https://github.com/langflow-ai/langflow/compare/v1.9.0...v1.10.0