This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
ReleasePort's take
Light signalLocal file uploads for final answers are now gated behind the telegram.upload_final_answer_files flag and disabled by default. Dexgram has been updated to version 0.1.13.
Why it matters: Patch immediately if you rely on local file uploads; disable the flag unless required, then upgrade Dexgram to 0.1.13.
Summary
AI summaryLocal file uploads for final answers are now gated behind the telegram.upload_final_answer_files flag and disabled by default.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Gate final-answer local file uploads behind configuration, defaulting disabled Gate final-answer local file uploads behind configuration, defaulting disabled Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump Dexgram to version 0.1.13 Bump Dexgram to version 0.1.13 Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
- Gate final-answer local file uploads behind [telegram].upload_final_answer_files, defaulting to disabled.\n- Bump Dexgram to 0.1.13.
Breaking Changes
- Local file uploads for final answers are disabled by default and require the telegram.upload_final_answer_files flag to be enabled.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Dexgram
All releases →Beta — feedback welcome: [email protected]