LinkSense v0.3.7

What's Changed

• Fix model-channel creation and task submissions on ordinary HTTP origins using cryptographically secure UUIDs, while preserving existing submission and retry identifiers.
• Preserve knowledge upload sessions across navigation and keep reprocessing progress visible while the current document remains searchable.
• Increase the image-understanding request timeout to five minutes.
• Let unavailable or pending optional MCP servers remain non-blocking during task startup, prewarming and recovery, while retaining capability authorization checks.
• Require fast-jwt 6.3.1 for patched JWT verification and retain valid existing HS256 sessions.

Image Security Policy

External service-image vulnerabilities and vulnerabilities proven to be inherited from immutable runtime baselines are now recorded without blocking publication. Application-introduced HIGH/CRITICAL findings, invalid scans, source and dependency checks, and functional verification failures remain blocking.

Known external-image vulnerabilities remain in this release. This is an explicitly accepted policy change, not a remediation or a claim that these dependencies are vulnerability-free. See the image security policy and the retained workflow reports.

No external-image version upgrade or runtime-baseline rebuild was performed. Docling remains at 1.36.0.

Verification

CI, source security checks, both architecture image gates, storage preservation, and Core/Full installation, repair and upgrade verification passed on amd64 and arm64. All 21 published assets were downloaded and verified against the exact tested candidates.

Full Changelog: v0.3.6...v0.3.7