Langflow

What's Changed

✨ New Features

• feat(ci): nightly → stable bundles via canonical pre-releases + decision record [gated] by @erichare in https://github.com/langflow-ai/langflow/pull/13528
• feat: first-class local-model support for the assistant by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13641

🐛 Bug Fixes

• fix: Model handling for tool calling in agents and update IBM models by @mfortman11 in https://github.com/langflow-ai/langflow/pull/13191
• fix(ci): backport bundle rename step to nightly workflow on main by @erichare in https://github.com/langflow-ai/langflow/pull/13195
• fix(ci): gate nightly release on successful tag creation by @erichare in https://github.com/langflow-ai/langflow/pull/13198
• fix(ci): use local bundle wheels in nightly install tests by @erichare in https://github.com/langflow-ai/langflow/pull/13256
• fix: properly set nightly-base skipped by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13338
• fix(ci): lockstep langflow-nightly and langflow-base-nightly versions (forward-port #13413) by @erichare in https://github.com/langflow-ai/langflow/pull/13416
• fix(ci): give extension bundles a nightly track so langflow-nightly resolves (forward-port #13418) by @erichare in https://github.com/langflow-ai/langflow/pull/13419
• fix(ci): re-enable migration-pip-venv now that nightly bundles resolve (forward-port #13421) by @erichare in https://github.com/langflow-ai/langflow/pull/13422
• fix: remove duplicate base uv.lock from workflows (forward-port #13326 to main) by @erichare in https://github.com/langflow-ai/langflow/pull/13427
• fix(observability): make grafana-loki reference stack instructions work end to end by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13454
• fix(lfx): restamp component index version after 1.10.1 fork bump by @erichare in https://github.com/langflow-ai/langflow/pull/13575
• fix(ci): rebalance backend test splits with measured durations + raise unit-test step timeout (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13585
• fix(test): raise spawn-child join timeout in test_multi_process_visibility (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13590
• fix(ci): anchor langflow-base version extraction in nightly docker build (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13593
• fix(test): gate models.dev background refresh out of tests (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13598
• fix(ci): allow pre-releases when pinning the nightly in migration validation (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13601
• fix(ci): scope nightly migration-test pre-releases to the langflow stack (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13605
• fix(ci): create GitHub releases on the dispatched v-prefixed tag (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13609
• fix(components): follow HTTP redirects in URL component with per-hop SSRF revalidation by @erichare in https://github.com/langflow-ai/langflow/pull/13572
• fix(ci): make release Biome lint green — NUL-delimit file list + clear pre-existing lint errors by @erichare in https://github.com/langflow-ai/langflow/pull/13550
• fix: limit public flow endpoint from displaying private flow streams by @Jkavia in https://github.com/langflow-ai/langflow/pull/13602
• fix: enforce the FileSystemTool credential deny-list by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13625
• fix(database): resolve Alembic log to writable config dir, never crash on read-only filesystems by @erichare in https://github.com/langflow-ai/langflow/pull/13559
• fix: protect URL components from SSRF by @erichare in https://github.com/langflow-ai/langflow/pull/13643
• fix(security): run trusted server code on unauthenticated public flow builds by @erichare in https://github.com/langflow-ai/langflow/pull/13540
• fix: guard CUGA CodeAgent local execution by @erichare in https://github.com/langflow-ai/langflow/pull/13644
• fix: guard event serialization against unserializable component payloads (#12591) by @erichare in https://github.com/langflow-ai/langflow/pull/13651
• fix: run trusted server copy on custom-component hash-gate match (#13496) by @erichare in https://github.com/langflow-ai/langflow/pull/13532
• fix: nest root LLM runs under the flow trace in Langfuse (#13429) by @erichare in https://github.com/langflow-ai/langflow/pull/13539
• fix: accept Data and Message inputs in LoopComponent by @putramkti in https://github.com/langflow-ai/langflow/pull/13646
• fix: restore route discovery under FastAPI 0.137 lazy include_router by @erichare in https://github.com/langflow-ai/langflow/pull/13710
• fix(security): block code-bearing nodes with empty type in flow validation (GHSA-mfp9-86w4-493f) by @erichare in https://github.com/langflow-ai/langflow/pull/13697
• fix(security): bump residual deprecated transitive uuid to v11 by @erichare in https://github.com/langflow-ai/langflow/pull/13703
• fix(security): gate public user self-registration (CWE-862) by @erichare in https://github.com/langflow-ai/langflow/pull/13706
• fix(load): bound remote flow fetches by @pony-maggie in https://github.com/langflow-ai/langflow/pull/13660
• fix: route IBM WatsonX selections to model_id endpoint in unified get_llm (#13671) by @erichare in https://github.com/langflow-ai/langflow/pull/13684
• fix(security): require authentication for POST /api/v2/registration/ (CWE-306) by @erichare in https://github.com/langflow-ai/langflow/pull/13707
• fix(security): block code injection via the Tweaks API (CWE-94) by @erichare in https://github.com/langflow-ai/langflow/pull/13705
• fix(security): derive Fernet key from short secrets with SHA-256 (GHSA-jxw3-mjmx-3pqm) by @erichare in https://github.com/langflow-ai/langflow/pull/13704
• fix(security): do not execute code in validate_code (GHSA-2wcq-pvw2-xh7v) by @erichare in https://github.com/langflow-ai/langflow/pull/13696
• fix: downgrade torchvision until cpu index fix by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13745
• fix(security): stop issuing 365-day superuser token via auto_login (GHSA-fjgc-vj2f-77hm) by @erichare in https://github.com/langflow-ai/langflow/pull/13699
• fix(security): HMAC-sign RedisCache payloads before dill deserialization by @erichare in https://github.com/langflow-ai/langflow/pull/13698
• fix(security): sanitize APIRequest Content-Disposition filename (GHSA-h3c6-fqr4-m99p) by @erichare in https://github.com/langflow-ai/langflow/pull/13695
• fix(security): disable credentials for wildcard CORS origins (CWE-942) by @erichare in https://github.com/langflow-ai/langflow/pull/13708
• fix(security): gate PythonREPL execution on allow_custom_components (GHSA-8qpj-27x8-pwpq) by @erichare in https://github.com/langflow-ai/langflow/pull/13700
• fix(security): scope voice-mode clients per user by @erichare in https://github.com/langflow-ai/langflow/pull/13702
• fix(security): gate ToolGuard guard-code execution on allow_custom_components by @erichare in https://github.com/langflow-ai/langflow/pull/13701
• fix: validate uploaded MCP servers config to close command-injection path by @erichare in https://github.com/langflow-ai/langflow/pull/13709
• fix(docker): force HTTP/1.1 on frontend nginx upstream proxy (#9010) by @keval718 in https://github.com/langflow-ai/langflow/pull/13725
• fix(smart-router): stop unselected branches from executing downstream nodes by @erichare in https://github.com/langflow-ai/langflow/pull/13536
• fix(lfx): preserve custom static models through models.dev override by @erichare in https://github.com/langflow-ai/langflow/pull/13676
• fix: stop temp_dirs masking startup errors; fail-fast on unresolvable SQLite path (#13634) by @erichare in https://github.com/langflow-ai/langflow/pull/13729
• fix: handle Windows path separators in Policies ToolGuard Guard mode (#13727) by @erichare in https://github.com/langflow-ai/langflow/pull/13751
• fix(frontend): stop browser autofill from corrupting component config fields by @erichare in https://github.com/langflow-ai/langflow/pull/13748
• fix(lfx): make OpenDsStar optional by @erichare in https://github.com/langflow-ai/langflow/pull/13749
• fix(ci): resolve pre-release cross-platform install failure; graduate py3.13, add py3.14 experimental by @erichare in https://github.com/langflow-ai/langflow/pull/13772
• fix(ci): drop macOS Intel from py3.14 cross-platform set (onnxruntime x86_64 wheel gap) by @erichare in https://github.com/langflow-ai/langflow/pull/13773
• fix(i18n): fix MCP hardcoded strings by @RamGopalSrikar in https://github.com/langflow-ai/langflow/pull/13621
• fix: make IBM WatsonX models selectable and runnable in the Langflow Assistant by @Cristhianzl in https://github.com/langflow-ai/langflow/pull/13771
• fix(agents): stop leaking LangChain chain markers to stdout (#13662) by @erichare in https://github.com/langflow-ai/langflow/pull/13730
• fix(component): reconnect stale cached SQL database connections on SQL Database component by @dutitello in https://github.com/langflow-ai/langflow/pull/13733
• fix: release candidate version selection by @erichare in https://github.com/langflow-ai/langflow/pull/13776
• fix: degrade gracefully when caching unpicklable values in RedisCache by @erichare in https://github.com/langflow-ai/langflow/pull/13781
• fix(security): block socket/urllib network egress in component code scanner by @erichare in https://github.com/langflow-ai/langflow/pull/13784

📝 Documentation Updates

• docs: rewrite AGENTS.md as hub with topical project philosophy docs by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13038
• docs: fix empty see also sections in extensions by @mendonk in https://github.com/langflow-ai/langflow/pull/13774

🛠 Maintenance Tasks

• refactor(settings): split monolithic Settings into per-domain group mixins by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/13141
• perf: cache Ollama model capabilities to fix slow Cloud model toggles by @erichare in https://github.com/langflow-ai/langflow/pull/13722

Others

• chore(ci): timeout bump + harden langflow grep + build/publish src/bundles/* wheels by @erichare in https://github.com/langflow-ai/langflow/pull/13199
• ci: stop publishing -nightly bundle variants; release bundles on demand by @erichare in https://github.com/langflow-ai/langflow/pull/13206
• ci(release_bundles): build lfx wheel locally for smoke test by @erichare in https://github.com/langflow-ai/langflow/pull/13207
• ci(nightly): re-pin bundle lfx deps to lfx-nightly during nightly build by @erichare in https://github.com/langflow-ai/langflow/pull/13208
• ci: port safe workflow fixes from release-1.10.0 to main by @erichare in https://github.com/langflow-ai/langflow/pull/13401
• chore: Merge release-1.9.6 into main by @erichare in https://github.com/langflow-ai/langflow/pull/13465
• fix(ci): resolve validate-version output in release-lfx changelog link (1.10.1) by @erichare in https://github.com/langflow-ai/langflow/pull/13611
• chore: upgrade langchain by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/13750
• chore(deps): bump toolguard floor to 0.2.20 by @erichare in https://github.com/langflow-ai/langflow/pull/13769

New Contributors

• @putramkti made their first contribution in https://github.com/langflow-ai/langflow/pull/13646
• @pony-maggie made their first contribution in https://github.com/langflow-ai/langflow/pull/13660
• @dutitello made their first contribution in https://github.com/langflow-ai/langflow/pull/13733

Full Changelog: https://github.com/langflow-ai/langflow/compare/v1.10.0...v1.10.1