v1.0.0-beta.229
The Aglyn Team · Oct 2026Released to production on October 7, 2026 at 00:36 CDT. See every commit in this release on GitHub
Fixed
- Workflows: the webhook transport is lazy-loaded through the plugin's own module
- Workflows: a webhook step reaches only public addresses
- AI: a site's AI jobs list while its index builds, from the org's newest
- AI: a failed guided start says what failed, that it cost nothing, and reopens its answers
- AI: a site's search description is composed within its cap, never cut mid-phrase
- AI: a refusal after the re-ask gives back what the job spent, before anyone is told
- AI: a site's layout links its planned pages, written by the platform before the check
Security
The webhook fix in this release closes a server-side request forgery (SSRF) issue in workflow webhook steps: a webhook could be pointed at an internal address. It was reported to us privately by kta1kri. Thank you for the careful report and for coordinating the disclosure with us. Read the security advisory on GitHub.
Share this article
We're building the open web platform. Follow along as we ship — and tell us what you need.