Changelog
What shipped, and when
Releases of the open-source engine. SynapseOrch Cloud tracks the same engine, so a fix here reaches Cloud too — usually sooner, since Cloud deploys continuously.
v1.9.1
Latest- Closed an unauthenticated MCP stdio remote-code-execution issue (GHSA-3j67-x3j8-r32x)
- Gated the root /chat endpoint and stdio MCP spawning behind explicit sink gates
- Made the backend bind address configurable while keeping the open v1/v2 API reachable
- CI: lockfile-sync --check now reproduces a real run
v1.9.0
- Tabbed run tables on the orchestration landing page
- Runs tables list only openable runs, show the trigger, and gained a Back control
- Resumed runs checkpoint on resume, so they reappear as active immediately
- Journal replay no longer aborts at a mid-file terminal event
- Human-input notifications resolve once answered, and stale forms clear on progress
v1.8.6
- Dependency pinning is enforced by tests and scripts
- MCP SDK compatibility is validated in CI
v1.8.5
- Single-task runner for orchestration engine streams, with correct cancel-scope handling
- Fixed the Docker publish and restored npx in the published images
v1.8.4
- Maintenance and packaging fixes
v1.8.3
- Maintenance and packaging fixes
v1.8.2
- Maintenance and packaging fixes
v1.8.1
- Maintenance and packaging fixes