What's Changed

• Traversal env var by @christopherholland-workday in #5962
• Fix/agentflow model parameters by @j-sanaa in #5967
• fix: migrate Weaviate to weaviate-client v3 for agentKnowledgeVSEmbeddings compatibility (#5991) by @aayushbaluni in #5993
• feat(agentflow): add Rich Text editor for Content Editing (FLOWISE-342) by @jocelynlin-wd in #5988
• chore: bump @flowiseai/agentflow to 0.0.0-dev.4 by @github-actions[bot] in #5997
• update README and remove mocks in dist by @jocelynlin-wd in #6000
• fix (AgentFlow) - generate ArrayInput item keys synchronously to prevent missing React keys by @j-sanaa in #6001
• chore: bump @flowiseai/agentflow to 0.0.0-dev.5 by @github-actions[bot] in #6002
• Feat/agentflow Support for Additional Load Methods by @j-sanaa in #6003
• feat(agentflow): implement deduplication for API client by @jocelynlin-wd in #6004
• feat(agentFlow) - Add support for listFlows by @j-sanaa in #6005
• Bugfix/Update qdrant dep by @HenryHengZJ in #6014
• Replace zai-glm-4.6 (deprecated) with zai-glm-4.7 cerebras by @sunnymodi21 in #6020
• fix(components): add missing opik key to returnIds in AnalyticHandler.onLLMStart by @wishhyt in #6006
• chore: Co-locate server / components unit tests and update Contributing.MD for testing by @jchui-wd in #6017
• FLOWISE-262 Add ConditionAgent ScenariosInput with dynamic output ports by @jocelynlin-wd in #6018
• chore: bump @flowiseai/agentflow to 0.0.0-dev.6 by @github-actions[bot] in #6022
• chore: update contributing.md with additional test options by @jchui-wd in #6023
• Feat/agentflow Add JSON, code, and SelectVariable input types to NodeInputHandler by @j-sanaa in #6016
• Feat/Add Markdown support to RichInput with Edit/Source toggle by @HenryHengZJ in #6021
• feat(agentflow): update behaviour for Start node, Http Node, and validation fixes (FLOWISE-265, FLOWISE-264) by @jocelynlin-wd in #6027
• chore: add OpenAI gpt-5.4-mini and gpt-5.4-nano models by @AsharibAli in #6028
• fix: disable Generate button when required fields are not filled by @mykh-hailo in #5927
• release/3.1.1 by @HenryHengZJ in #6037

New Contributors

• @aayushbaluni made their first contribution in #5993
• @wishhyt made their first contribution in #6006
• @jchui-wd made their first contribution in #6017
• @mykh-hailo made their first contribution in #5927

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.1.1

⚠️ Breaking Changes

HTTP security checks enabled by default

Flowise now enables HTTP security validation by default to prevent requests to unsafe or internal domains.

A built-in deny list blocks potentially dangerous domains (for example localhost, 127.0.0.1, and other internal addresses) to mitigate SSRF and similar attacks.

Two new environment variables control this behavior:

# Enable/disable built-in security checks (default: true)
HTTP_SECURITY_CHECK=true

# Additional domains to block
HTTP_DENY_LIST=localhost,127.0.0.1,internal.company.com

• HTTP_SECURITY_CHECK
  Enables the built-in domain security checks. It is enabled by default and can be disabled by setting it to false.

• HTTP_DENY_LIST
  Allows you to specify an additional custom list of domains to block. This list is empty by default.

⚠️ If your Flowise deployment previously accessed internal services or localhost endpoints, you may need to:

• disable the check (HTTP_SECURITY_CHECK=false), or
• adjust your configuration accordingly.

What's Changed

🚀 Core

• Reasoning support, LangChain v1 migration, and AI SDK/model upgrades (#5893)
• Add Azure Blob Storage support and storage refactor (#5604)
• Add AWS STS AssumeRole support for AWS credentials (#5731)
• Add Bearer Token Authentication and SSL certificate support for JIRA (#5674)
• Add Google Docs option to include tab content in get actions (#5883)
• Add nvmrc and Node engine support (#5770)
• Update environment and initialization logic (#5683)

🤖 AgentFlow

New Features

• Initial implementation of @flowiseai/agentflow SDK (#5733)
• Add ConditionBuilder with dynamic output ports (#5957)
• Add MessagesInput, StructuredOutputBuilder, ExpandTextDialog (#5965)
• Add async data fetching infrastructure (#5937)
• Add async input handlers (#5956)
• Add array input component (#5887)
• Add field visibility engine with conditional show/hide (#5890)
• Add requestInterceptor prop for API customization (#5936)

UI / Editor Improvements

• Improve node palette drawer and typography (#5806)
• Improve canvas node drag & drop behavior (#5774)
• Add node editing functionality (#5786)
• Improve flow date change & save handling (#5833)

Refactors

• Rename package to @flowiseai/agentflow (#5825)
• Simplify ReactFlow and context state synchronization (#5827)
• Strip server-only metadata from node data (#5966)
• Improve validation feedback system (#5915)
• Use design tokens for validation colors (#5934)

Testing / Tooling

• Add test infrastructure and unit tests (#5749)
• Improve test coverage and ESLint configuration (#5866)
• Remove console warnings in tests (#5878)
• Bump agentflow version to 0.0.0-dev.2 / dev.3 (#5920, #5952)

Bug Fixes

• Fix duplicate node and drag behavior (#5850)
• Fix duplicate node handling and tests (#5840)
• Fix async multi-rendering issues (#5964)
• Fix ConditionAgent silent failure (#5760)
• Fix streaming field default in chat model configs (#5856)
• Fix AgentFlow variable interpolation issue (#5818)
• Fix package.json sideEffects configuration (#5899)

🔌 Nodes

• Fix missing regex handler in Condition node (#5651)
• Improve form value resolution in executeNode (#5762)
• Extract loadNodesFromDir() from NodesPool for reuse (#5904)

🔒 Security

Major security hardening across the platform:

• Create default HTTP deny list (#5702)
• Always include default deny list values (#5708)
• Allow deny list configuration via environment variable (#5862)
• Enforce HTTPS for user-provided URLs (#5728)
• Remove ability to use unprotected HTTP modules (#5727)
• Implement proprietary path guardrails (#5703)
• Validate filepaths and path traversal protections (#5729, #5842)
• Sanitize code executed in Pyodide (#5701, #5836)
• Prevent LLM-generated code from adding imports (#5879)
• Sanitize DOM image URLs (#5779)
• Remove user-supplied values from responses (#5780)
• Add permissions check for generate-tool-desc route (#5837)
• Prevent IDOR takeover of DocumentStores (#5914)
• Fix mass assignment in account registration (#5689)
• Fix sensitive cookie transmission (#5809)
• Fix string escaping/encoding vulnerabilities (#5772)
• Fix regex vulnerabilities on user-controlled data (#5857)
• Fix unvalidated dynamic method call issue (#5746)

🐛 Bug Fixes

• Fix CORS handling for public chatflow requests (#5706)
• Fix hardcoded STT audio extension validation (#5737)
• Fix MySQLRecordManager type handling for indexes (#5726)
• Fix invalid workspaceId in TTS (#5917)
• Fix 401 error messaging for invalid API keys (#5808)
• Fix login method reading (#5805)
• Fix mime type validation when updating chatflow config (#5768)
• Fix Windows build command with --mode flag (#5841)
• Fix cross-env handling for Windows compatibility (#5835)
• Fix test coverage failures (#5839)
• Stop Axios throwing errors on non-2xx responses (#5832)

🧰 CI / Build / DevOps

• Add GitHub Actions workflow for publishing AgentFlow SDK (#5908)
• Use AWS OIDC to push images to ECR (#5784)
• Upgrade GitHub Actions for Node 24 compatibility (#5911)
• Upgrade GitHub Actions to latest versions (#5912)
• Fix workspace protocol error in AgentFlow publish workflow (#5946)
• Build AgentFlow without source maps in production (#5787)
• Fix Husky pre-commit hook executable issue (#5788)
• Improve Jest server test structure (#5909)

📚 Documentation & Policy

• Update security policy (#5781)

New Contributors

• @prd-hoang-doan made their first contribution in #5706
• @ginna-baker made their first contribution in #5770
• @jhead made their first contribution in #5802
• @j-sanaa made their first contribution in #5786
• @natan-hoppe-workday made their first contribution in #5784
• @sohaieb made their first contribution in #5841
• @rohan-patil2 made their first contribution in #5731
• @danielalanbates made their first contribution in #5818
• @bintocher made their first contribution in #5808
• @Aadil-Hasun made their first contribution in #5651
• @aviu16 made their first contribution in #5760
• @TravisP-Greener made their first contribution in #5764
• @tianwei-liu made their first contribution in #5856
• @salmanmkc made their first contribution in #5911
• @github-actions[bot] made their first contribution in #5952
• @RenzoMXD made their first contribution in #5883

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.1.0

What's Changed

Nodes

• Added global region for chatGoogleVertexAI by @chiragjagga in #5581
• feat: add Rerankers from Azure by @Psylockz in #5576
• feat: Enhance ChatCerebras integration (v3.0) by @sebastiand-cerebras in #5508
• Feat/add endpointhost to AWSChatBedrock by @HenryHengZJ in #5642
• Feature/ChatCloudflareWorkersAI by @udaykumar-dhokia in #5644
• Feature/Ollama Cloud by @HenryHengZJ in #5655
• feat: allow image uploads for ChatLitellm by @wggcch in #5697

Core

• Add MIME type and extension validation for file uploads by @jocelynlin-wd in #5596
• Feature/Add Permissions To API Keys by @yau-wd in #5590
• Chore/deprecating llamaindex by @HenryHengZJ in #5654
• Retain the original error as 404/400 when URI contains invalid ChatFlowId by @Abhinaya-P in #5648
• Add validation for Agentflow generation by @VanRitzOwen in #5607
• Chore/models update by @HenryHengZJ in #5656
• Increase salt rounds for new passwords, and update hash with more salt rounds for old passwords by @christopherholland-workday in #5665
• Enforce pnpm >= 10.26.0 by @christopherholland-workday in #5688
• Chore/Refactor login activity component by @yau-wd in #5679
• Add Input Validation to Password Reset by @christopherholland-workday in #5659

Bugfix

• Fix/variable not read in custom loader by @Nek-11 in #5558
• fix(postgres): restore sanitizeDocuments call removed in #5536 by @moona3k in #5566
• Bugfix/create postgresql table if not exists for vectorstore by @HenryHengZJ in #5573
• Fix: Disclosures by @0xi4o in #5562
• Composio tool auth fixes, no auth support and connected accounts selection. by @chiragjagga in #5614
• fix: allow Unicode characters in document store tool names by @doubleclip118 in #5599
• Fix: insecure data access by @0xi4o in #5652
• fix: return proper status codes for invalid/non-existent chatflow IDs by @aibysid in #5456
• Refactor/Update endpoint routing configuration by @yau-wd in #5645
• fix: route ordering in auth routes by @0xi4o in #5661
• Fix Mass Assignments in Leads Endpoint by @christopherholland-workday in #5668
• Fix: Fix DNS Rebinding/TOCTOU Vulernability by @christopherholland-workday in #5653
• Fix (OpenSearch 3.x Compatibility): Adds configurable vector search engine by @AhmedRaafat14 in #5676
• fixed incorrect ollama embedding api endpoint by @smartcoder0777 in #5658
• fix: update loginmethod endpoints by @0xi4o in #5681

New Contributors

• @jocelynlin-wd made their first contribution in #5596
• @chiragjagga made their first contribution in #5581
• @Psylockz made their first contribution in #5576
• @sebastiand-cerebras made their first contribution in #5508
• @yau-wd made their first contribution in #5590
• @doubleclip118 made their first contribution in #5599
• @udaykumar-dhokia made their first contribution in #5644
• @Abhinaya-P made their first contribution in #5648
• @VanRitzOwen made their first contribution in #5607
• @christopherholland-workday made their first contribution in #5659
• @AhmedRaafat14 made their first contribution in #5676
• @smartcoder0777 made their first contribution in #5658
• @wggcch made their first contribution in #5697

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.13

What's Changed

Nodes

• Chore/Disable Unstructure Folder by @HenryHengZJ in #5483
• feat: Add image upload support to ChatOpenRouter node by @aibysid in #5471
• feat: Add structured JSON output support to Agent Node by @aibysid in #5470
• feat/fix: Enhance ConversationalRetrievalToolAgent performance and fix bugs by @Nek-11 in #5507
• Chore/Opus 4.5 by @HenryHengZJ in #5520
• Feature/Gemini Nano Banana by @HenryHengZJ in #5529
• Chore/Remove freeSolo for update state by @HenryHengZJ in #5530
• Feature/Gemini Code Interpreter by @HenryHengZJ in #5531
• Chore/Update Chroma by @HenryHengZJ in #5537

Core

• Add workspaceId in options if not already there. by @mskitroot in #5503
• feat: Add sorting to role assigned users table (workspaces asc, users asc) by @naaa760 in #5486
• feat: handle 429 errors and redirect to rate-limited page by @0xi4o in #5440
• Feature: Add access to chat history and other useful variables in post-processing by @Nek-11 in #5511
• Fixed: Variable syntax highlighting lost after copy-paste from external editor in Agentflow V2 by @DebottamMandal123 in #5513
• Pin kill-port package version by @simon-song-wd in #5523
• chore(deps): bump multer from 1.4.5-lts.1 to 2.0.2 in /packages/server in the npm_and_yarn group across 1 directory by @dependabot[bot] in #5522
• chore(deps): bump nodemailer from 6.9.15 to 7.0.7 in /packages/server in the npm_and_yarn group across 1 directory by @dependabot[bot] in #5521
• Chore/update base command args by @HenryHengZJ in #5541

Bugfix

• fix: OpenAI Assistant tool call failures masked as success by @moona3k in #5504
• fix: agentflow list refresh after deletion (Issue #5360) by @aibysid in #5473
• fix: correct Lunary tool-error logging by @moona3k in #5505
• fix: add missing OpenTelemetry dependencies to components package by @KushagraaWadhwa in #5464
• fix: Upgrade Hugging Face Inference API to support Inference Providers by @aibysid in #5454
• fix: change DocumentStoreFileChunk columns to LONGTEXT by @KushagraaWadhwa in #5465
• fix: apply search filter to tools list view (#5469) by @Wanyi9988 in #5487
• redis_keep_alive fix on usagecachemanager using keyv/redis by @Nek-11 in #5519
• Bugfix/Remove postgres vector store data when deletion by @HenryHengZJ in #5536
• Fix missing flowData for CustomTemplate Tool during import by @chungyau97 in #5542
• Fix Agent node structured output not updating flow state variables by @AhmedMostafa16 in #5548
• Bugfix/Chroma Metadata by @HenryHengZJ in #5552
• Bugfix/Credential Filter by @HenryHengZJ in #5553

New Contributors

• @moona3k made their first contribution in #5504
• @mskitroot made their first contribution in #5503
• @aibysid made their first contribution in #5473
• @KushagraaWadhwa made their first contribution in #5464
• @naaa760 made their first contribution in #5486
• @Wanyi9988 made their first contribution in #5487
• @DebottamMandal123 made their first contribution in #5513
• @simon-song-wd made their first contribution in #5523
• @dependabot[bot] made their first contribution in #5522
• @AhmedMostafa16 made their first contribution in #5548

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.12

⚠️ Breaking Change ⚠️

The Read/Write File Tools functionality has been permanently removed. See PR

Alternative: Google Drive, Google Docs tools to write/read files

• Chore/split docker workflows by @HenryHengZJ in #5432
• chore: fix typos in docker/worker/Dockerfile by @khanhkhanhlele in #5435
• chore: fix typos in packages/components/nodes/agentflow/Condition/Condition.ts by @khanhkhanhlele in #5436
• chore: fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts by @khanhkhanhlele in #5437
• chore: fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts by @khanhkhanhlele in #5438
• docs: fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx by @khanhkhanhlele in #5444
• docs: fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts by @khanhkhanhlele in #5446
• docs: fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts by @khanhkhanhlele in #5447
• docs: fix typos in packages/server/README.md by @khanhkhanhlele in #5445
• Bugfix/Supervisor Node AzureChatOpenAI by @HenryHengZJ in #5448
• Chore/JSON Array by @HenryHengZJ in #5467
• Chore/Remove Deprecated File Path Unstructured by @HenryHengZJ in #5478
• feat(security): enhance file path validation and implement non-root D… by @taraka-vishnumolakala in #5474
• Chore/docker file non root by @HenryHengZJ in #5479
• remove read write file tools and imports by @HenryHengZJ in #5480
• Bugfix/Custom Function Libraries by @HenryHengZJ in #5472

New Contributors

• @taraka-vishnumolakala made their first contribution in #5474

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.11

What's Changed

Nodes

• Adding Teradata VectorStore support in DocumentStore by @sshekhar1 in #5159
• feat: Added acceptVariable to Qdrant Collection name by @HavardHomb in #5373
• Feat/add thinking budget to gemini by @HenryHengZJ in #5395
• Chore/remove teradatasql by @HenryHengZJ in #5430

Core

• Chore/product id telemetry by @HenryHengZJ in #5329
• Add organization filtering and error handling to login method controller by @chungyau97 in #5323
• Updated ChatMessage component to display calledTools by @HenryHengZJ in #5365
• Sanitize sensitive fields in request header and body in logger by @0xi4o in #5279
• Ensure proper cleanup of the database connection in createSchema by @cuca24 in #5315
• feat: support northflank deployment option by @AdeboyeDN in #5382
• Updates to change/reset password functionality by @0xi4o in #5294
• Chore/WorkspaceID Check by @HenryHengZJ in #5228
• feat: Improve node search with fuzzy matching and ranking by @HavardHomb in #5370
• chore: fix typos in packages/ui/src/ui-component/input/suggestionOption.js by @khanhkhanhlele in #5412
• chore: fix typos in packages/server/src/utils/index.ts by @khanhkhanhlele in #5413
• chore: fix typos in packages/server/src/utils/buildChatflow.ts by @khanhkhanhlele in #5414
• chore: fix typos in packages/components/src/agents.ts by @khanhkhanhlele in #5415
• chore: fix typos in packages/components/src/SecureFileStore.ts by @khanhkhanhlele in #5416
• chore: fix typos in packages/components/nodes/vectorstores/Meilisearch/Meilisearch.ts by @khanhkhanhlele in #5417
• chore: fix typos in packages/components/nodes/tools/MCP/core.ts by @khanhkhanhlele in #5418
• chore: fix typos in packages/components/nodes/sequentialagents/commonUtils.ts by @khanhkhanhlele in #5419
• chore: fix typos in packages/components/nodes/agents/AirtableAgent/AirtableAgent.ts by @khanhkhanhlele in #5420
• chore: fix typos in packages/components/nodes/chatmodels/ChatGoogleGenerativeAI/utils/common.ts by @khanhkhanhlele in #5421
• chore: fix typos in packages/components/nodes/documentloaders/Csv/CsvLoader.ts by @khanhkhanhlele in #5422
• docs: update contribution guidelines to reference main branch by @kirisame-wang in #5426
• Add multilingual response support for Generate Instructions by @sean2121 in #5397

Bugfix

• Fix: Container Filesystem Allows Unauthorized File Modifications and Malicious Downloads in metrics/otel/compose.yaml by @orbisai-sec in #5308
• Fix/variable resolution to support arrays of config objects by @HenryHengZJ in #5348
• Bugfix/Iteration blocks execution after resuming from human input by @HenryHengZJ in #5359
• fix: add missing log filter env variables to examples by @0xi4o in #5376
• Bugfix/shared credentials not showing on ui by @HenryHengZJ in #5383
• Bugfix/Sync Nodes Disconnect Edges by @HenryHengZJ in #5391
• Bugfix/Json parse metadata filter by @HenryHengZJ in #5392
• Bugfix/Zod Parsing by @HenryHengZJ in #5399
• Bugfix/Update anthropic package by @HenryHengZJ in #5408
• Fix: CORS-related issues by @0xi4o in #5310
• Bugfix/path traversal check on chatId by @HenryHengZJ in #5428

New Contributors

• @orbisai-sec made their first contribution in #5308
• @sshekhar1 made their first contribution in #5159
• @cuca24 made their first contribution in #5315
• @AdeboyeDN made their first contribution in #5382
• @HavardHomb made their first contribution in #5373
• @sean2121 made their first contribution in #5397
• @khanhkhanhlele made their first contribution in #5412

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.10

What's Changed

Nodes

• Feat/Gemini Built In Tools by @HenryHengZJ in #5215
• Feature - add Teradata MCP server by @vilashjagani in #5002
• Feature/Update Loop Agentflow by @HenryHengZJ in #4957
• Add support for .default() on nested objects and arrays in SecureZodSchemaParser by @chungyau97 in #5269
• feat: extend OpenAPI Toolkit with loading the spec from URL, and tools selection by @MehdiCHEBBAH in #5237
• fix: OxylabsLoader request params and result processing by @oxy-rostyslav in #5286
• Ability to support variable in the URL for HTTP Node. by @ourdex in #5284
• Chore/read write tools update by @HenryHengZJ in #5275

Core

• Chore/Disable Available Dep By Default by @HenryHengZJ in #5231
• Feat/Enhance security validation for MCP configurations by @HenryHengZJ in #5232
• Chore/Remove Rehyperaw by @HenryHengZJ in #5235
• Update SSL-related env for database connections by @0xi4o in #5242
• Add environment variable control for trust proxy setting by @chungyau97 in #5226
• Chore/leave default timeout for sandbox execution by @HenryHengZJ in #5263
• Chore/allow axios node fetch by @HenryHengZJ in #5264
• Chore/Secure Cookies Env Variable by @HenryHengZJ in #5281
• Chore/Remove Previous Subscription by @HenryHengZJ in #5282
• Text to speech by @0xi4o in #5062
• Chore/Enhance file upload functionality in createAttachment by @HenryHengZJ in #5280
• Feature/Grid On Off by @HenryHengZJ in #5296

Bugfix

• fix: ensure Gemini always receives a non-empty contents array by @toi500 in #5229
• fix: update apify logo by @drobnikj in #5234
• Bugfix/Parse JSON correctly by @HenryHengZJ in #5220
• Address issue #2911 to allow additional path in the URL by @tiarebalbi in #5254
• Google Calendar Tool Missing sendUpdates Parameter by @kushalbhana in #5241
• fix: migration errors for text to speech and chatflow name index by @0xi4o in #5287

New Contributors

• @tiarebalbi made their first contribution in #5254
• @vilashjagani made their first contribution in #5002
• @ourdex made their first contribution in #5284

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.8

What's Changed

• Bugfix/add validation for file path by @HenryHengZJ in #5211
• Bugfix/Create Index Chatflow Name by @HenryHengZJ in #5213
• feat: add gpt-5-chat-latest and gpt-4.1-mini to Azure OpenAI Node by @marvikomo in #5212
• Release/3.0.7 by @HenryHengZJ in #5214

New Contributors

• @marvikomo made their first contribution in #5212

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.7

What's Changed

Nodes

• feat: add JSONPathExtractor tool by @anatolyburtsev in #5052
• Feature: Add SambaNova by @luisfucros in #4961
• Feat/aws kendra vector search by @anatolyburtsev in #5088
• Feat: add gpt oss models to aws bedrock by @anatolyburtsev in #5122
• feat: add config override for langwatch to allow passing metadata as well by @rogeriochaves in #5121
• feat: Enable Tracing Support For Self-Hosted & Cloud Phoenix Instance by @ialisaleh in #5114
• feat: add CometAPI integration with ChatCometAPI node by @tensornull in #5160
• feat: Add AWS DynamoDB KV Storage tool by @anatolyburtsev in #5111
• Chore/Accept Dynamic Variable From Metadata Filter by @HenryHengZJ in #5203

Core

• Chore/remove redundant loggers by @HenryHengZJ in #5067
• Chore/minor execution view ui fix by @HenryHengZJ in #5069
• Add support for nested objects and arrays in Zod schema parser by @chungyau97 in #5098
• Use ADC credentials on the gcs storage client by @Stono in #5102
• Secure password reset endpoints by @chungyau97 in #5167
• feat: execution filter by agentflow name by @anatolyburtsev in #5117
• Chore/Add telemetry for productId by @HenryHengZJ in #5188
• Chore/ChatflowID CamelCase by @HenryHengZJ in #5205

Bugfix

• Bugfix/unshift system message by @HenryHengZJ in #5080
• Fixes problematic json parsing in Iteration.ts by @PBJI in #5077
• Fix chatflow's type null or blank by @chungyau97 in #5065
• Bugfix/Upsert API for file loader by @HenryHengZJ in #5096
• Bugfix/Export all chat messages by @HenryHengZJ in #5169
• Fix Oxylabs documentloader API calls by @oxy-rostyslav in #5162
• Fix use case-insensitive email lookup and comparison during login by @chungyau97 in #5145
• Fixed background color of file upload box in Chat configuration by @kushalbhana in #5132
• Bugfix/Gsuite tool params by @HenryHengZJ in #5189
• Bugfix/Array Input Variables by @HenryHengZJ in #5196
• Bugfix/Securely Fetch Links by @HenryHengZJ in #5200
• Bugfix/JSON5 Parsing by @HenryHengZJ in #5201
• Bugfix/Human Input As First Node by @HenryHengZJ in #5202
• Bugfix/add path traversal check to chatId by @HenryHengZJ in #5208

New Contributors

• @PBJI made their first contribution in #5077
• @luisfucros made their first contribution in #4961
• @kushalbhana made their first contribution in #5132
• @tensornull made their first contribution in #5160

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.6

What's Changed

Nodes

• Feat/support image for grok 4 by @HenryHengZJ in #4869
• Added latest vertex models to models.json by @Stono in #4837
• Refactor the modelLoader and fix a small bug by @Stono in #4838
• Added region support to chatGoogleVertexAi by @Stono in #4839
• fix: normalize Milvus similarity scores for threshold filtering by @ejrtks1020 in #4880
• feat: Add header-based splitting to MarkdownTextSplitter by @Amrrx in #4861
• Added yaml as a file upload option by @Stono in #4872
• Feat/Implement caching for MCP toolkit in CachePool by @HenryHengZJ in #4897
• Refactor google credentials into a shared function by @Stono in #4893
• Chore/Patch OpenAI Nodes by @HenryHengZJ in #4958
• Chore/Custom MCP Validation by @HenryHengZJ in #4996
• Chore/Add CUSTOM_MCP_PROTOCOL by @HenryHengZJ in #5003
• Chore/Prevent invalid http redirect by @HenryHengZJ in #4990
• Enhance: Improve 'Strip New Lines' for Gemini/Vertex embedding effici… by @kpj2006 in #5010
• Puppeteer / Playwright web crawler bug fixes/improvements by @Mewyii in #4998
• feat: add AWS SNS tool for publishing messages to SNS topics by @anatolyburtsev in #5049

Core

• Chore/patch dependencies by @HenryHengZJ in #4858
• Marketplace page UI/ UX enhancements by @anoopw3bdev in #4819
• Chore/Update s3 version by @HenryHengZJ in #4883
• Init the storagepath by @Stono in #4844
• Update README.md by @kr1shnasomani in #4870
• Feature/Excel and PPT File Uploads by @HenryHengZJ in #4896
• Chore/Safe Parse HTML by @HenryHengZJ in #4905
• Refractor/SecureZodSchemaParser by @HenryHengZJ in #4898
• Refactor/Update code execution sandbox implementation across components by @HenryHengZJ in #4904
• Improve infra as code support by @Stono in #4867
• Chore/add session regeneration when login by @HenryHengZJ in #4912
• Chore/Update GET to POST requests by @HenryHengZJ in #4924
• Chore/Add Deny List URLs by @HenryHengZJ in #4933
• Chore/deny list urls by @HenryHengZJ in #4938
• SSO token caching and retrieval in CachePool by @vinodkiran in #4931
• chore:variable by @chungyau97 in #4946
• Feature/Allow overrideconfig from executeflow node to take in variables by @HenryHengZJ in #4947
• Improve logging by @matekungl-byborg in #4921
• Chore/Prevent reading runtime vars for cloud by @HenryHengZJ in #4951
• Chore deprecate importChatflows method by @chungyau97 in #4965
• Feature/Add chatflowId To Config by @HenryHengZJ in #4950
• Chore/add http denylist checks by @HenryHengZJ in #4985
• Add logs by @0xi4o in #4977
• Feature update public-chatflow access control by @chungyau97 in #4978
• Chore/Patch dependencies by @HenryHengZJ in #4992
• Update README.md by @jakeasmith in #5033
• docs: refine Traditional Chinese README (zh-TW) by @x85432 in #5040
• docs: clarify Node.js heap memory instructions for cross-platform usage by @x85432 in #5041
• Chore/add deprecation notice for V1 by @HenryHengZJ in #5050

Bugfix

• Bugfix/Remove Redundant Distinct by @HenryHengZJ in #4865
• Bugfix/update workspaceId to vars by @HenryHengZJ in #4891
• Bugfix/empty vars by @HenryHengZJ in #4892
• Feature add http deny list by @chungyau97 in #4911
• Fix import chatMessageFeedback messageIDs unique violation by @chungyau97 in #4919
• Fix Chroma authentication by @philipithomas in #4936
• Bugfix/Add filePath sanitization by @HenryHengZJ in #4960
• Fix: ignored agentflow LLM structuredOutput keys by @russelj1 in #4982
• Bugfix/Custom MCP Security by @HenryHengZJ in #4963
• Bugfix/nvidia node name by @HenryHengZJ in #4986
• Fix: dot notation for nested output variable resolution by @russelj1 in #4983
• Bugfix/Follow up prompt for openai by @HenryHengZJ in #4987
• Bugfix/Overrideconfig SessionId by @HenryHengZJ in #4994
• Bugfix/agentflow v2 session id override by @HenryHengZJ in #4999
• Bugfix/Avoid throwing error when removing all chat messages if files do not exist by @HenryHengZJ in #5001
• Bugfix/Override State WhenStartPersistState by @HenryHengZJ in #5017
• Fix import null bytes error by @chungyau97 in #5036
• Feature/OpenAI Response API by @HenryHengZJ in #5014
• Fix output type for request tools - get, put, post, and delete by @0xi4o in #5044
• Fixes state interpolation when using {{ output }} by @corentin-hoareau in #5039
• Bugfix/Agent and llm nodes when chat models streaming is off by @HenryHengZJ in #5053
• Fix stripHTMLFromToolInput conversion escaping by @russelj1 in #4989

New Contributors

• @Stono made their first contribution in #4837
• @kr1shnasomani made their first contribution in #4870
• @Amrrx made their first contribution in #4861
• @philipithomas made their first contribution in #4936
• @matekungl-byborg made their first contribution in #4921
• @jakeasmith made their first contribution in #5033
• @kpj2006 made their first contribution in #5010
• @x85432 made their first contribution in #5040
• @Mewyii made their first contribution in #4998
• @anatolyburtsev made their first contribution in #5049

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.0.5