v0.6.76: helm updates, media centering, lazy loading, security hardening#4576

Merged

waleedlatif1 merged 10 commits into

mainfrom

May 13, 2026

Commits on May 13, 2026

fix(security): harden findings — path traversal, SSRF, IDOR, file auth, credential access (#4571)
waleedlatif1
authored
fix(console): match child-workflow inner blocks by instanceId when reconciling dropped SSE events (#4575)
waleedlatif1
authored
fix(mothership): reconcile stuck conversation_id against Redis lock to clear stuck-yellow task tiles (#4556)

waleedlatif1
and
icecrasher321
authored
improvement(grafana): align tools and block with Grafana API spec (#4574)

waleedlatif1
and
claude
authored
feat(mothership): Add conversationId to mship block (#4577)
Sg312
authored
fix(event-buffer): re-compact the event with preserveUserFileBase64: false (#4579)
icecrasher321
authored