v6.1.6

What's Changed

• [6.1] feat(ai): RuntimeOnly credential scope, and keep a failed stream's error classification by @jordanfanapour in #5120
• [lts/6.1] test(core-entities-server): templated CTE queries now extract their fields by @cadam11 in #5142
• [lts/6.1] docs(releases): add v6.1.5 release notes by @github-actions[bot] in #5150
• fix(metadata-sync): backport #4461 — pull backups, rollback, and missing-subclass warning (6.1.x) by @jordanfanapour in #5594
• [lts/6.1] fix(ai-gemini): stop sending sampling fields to Gemini 3.6+; remove unsent thinking config by @github-actions[bot] in #5617
• [lts/6.1] fix(ai-gemini): make effortLevel control Gemini and Vertex thinking (#5171) by @jordanfanapour in #5654
• fix(ai): backport #5647 — a cancelled prompt stops failover (6.1.x) by @jordanfanapour in #5657
• [lts/6.1] fix(server): sandbox template rendering and authorize template runs (security C2) by @github-actions[bot] in #5589
• [lts/6.1] fix(redis-provider): survive a Redis outage — reconnect, fail fast, report, reconcile by @github-actions[bot] in #5706
• [lts/6.1] fix(ai): classify a dropped provider connection as NetworkError, not Unknown (#2392) by @github-actions[bot] in #5709
• [lts/6.1] fix(ai-models): Grok Build 0.1 does not take an effort level by @github-actions[bot] in #5708
• fix(open-app-engine): backport #4780 — refresh SchemaName from the manifest on upgrade (6.1.x) by @jordanfanapour in #5705
• [lts/6.1] ci: run unit and integration CI on lts/** line PRs and pushes (#5702) by @cadam11 in #5714
• [lts/6.1] test(server): clear RunAction history between durable payload tests (#4765) by @cadam11 in #5715
• [lts/6.1] chore: version.generated.ts says 6.1.5, clearing the drift gate on line PRs by @cadam11 in #5717
• fix(core): backport #5004 — record names respect field-level security on every server lookup (6.1.x) by @jordanfanapour in #5707
• fix(cache): backport #5703 — stop schema-hash eviction loops (6.1.x) by @jordanfanapour in #5718
• [lts/6.1] Security hardening: data-layer injection & read-authorization fixes, CI supply-chain, container image (#4782) by @cadam11 in #5690
• [lts/6.1] fix(server): authorize RunAction per action and stop its actions running caller code (security C1) (#5271) by @cadam11 in #5686
• [lts/6.1] fix(server): screen RunView aggregate expressions before they reach SQL (security C4) (#5269) by @cadam11 in #5697
• [lts/6.1] fix(server): screen dataset ItemFilters and read datasets as the caller (security C6) (#5265) by @cadam11 in #5688
• [lts/6.1] fix(server): gate SQL data context items like ad-hoc SQL (security C7) (#5266) by @CaelebB-BC in #5739
• [lts/6.1] fix(server): screen every client RunView clause path, not only four GraphQL resolvers (security C8) (#5272) by @CaelebB-BC in #5740
• [lts/6.1] fix(server): require client filter fragments to be one balanced expression (security C9) (#5267) by @CaelebB-BC in #5741
• [lts/6.1] fix(server): read SQL the way the database does before screening it (security C10) (#5273) by @CaelebB-BC in #5742
• [lts/6.1] fix(server): stop trusting the owner-editable realtime session Config (security C3) (#5270) by @cadam11 in #5692
• [lts/6.1] fix(server): bind record-name keys, check key fields, apply RLS (security C5) (#5264) by @cadam11 in #5684
• fix(core): reach other processes' cache slots on a save to a shared store (lts/6.1 hand-port) by @jordanfanapour in #5767
• [lts/6.1] fix(core-entities-server): let role RLS filters with subqueries or shared entities be edited (#5752) by @jordanfanapour in #5772
• fix(ai-agents): backport #5769 — repair layout escapes in complete_task's payloadChangeRequest (6.1.x) by @jordanfanapour in #5773
• [lts/6.1] feat(react-linter): public semantic-validator API, and validators that can check an absent prop (#5753) by @jordanfanapour in #5774
• fix(explorer): backport #4989 — a url sync must not override a newer activation by @JosueGarcia-BC in #5710
• [lts/6.1] fix(ai, ai-prompts): replace six polynomial regexes CodeQL flags with linear scans (#4810) by @cadam11 in #5698
• [lts/6.1] fix: realtime sessions keep their tools; durable flows get data and storable outputs (#4963) by @rkihm-BC in #5085
• [lts/6.1] fix(isa): promotion over GraphQL inserted a duplicate parent; related panel stayed blank after a create-with-subtype save (#4368) by @bg-BC in #5127
• [lts/6.1] fix(server): withhold the record key from cacheInvalidation subscribers whose read is row-filtered (#5241) (#5242) by @cadam11 in #5696
• [lts/6.1] fix(codegen): record every table-level validator, not just the first (#5163) by @bg-BC in #5534
• [lts/6.1] feat(search): resolve record display names in preview and show entity display names (#4579) by @rkihm-BC in #5086
• [lts/6.1] fix(realtime-client): record the agent's voice on Gemini and other PCM-playback drivers (#5155) by @SDesai-BC in #5756
• [lts/6.1] fix(metadata-sync): push change detection after a pull and in dry runs by @github-actions[bot] in #5682
• [lts/6.1] fix(conversations-runtime): parse mentions in linear time (CodeQL #228, #231) by @github-actions[bot] in #5681
• [lts/6.1] Security hardening: SSRF guard on remaining raw-fetch actions + SQL filter literal escaping by @github-actions[bot] in #5680
• [lts/6.1] security: pin JWT algorithms on MCP Azure AD v1 path; block path traversal in integration run-artifact reader by @github-actions[bot] in #5588
• [lts/6.1] fix(installer): smoke-test cleanup kills listeners only, not the installer itself by @github-actions[bot] in #5495
• [lts/6.1] fix(storage): renew Box client-credentials tokens instead of throwing by @github-actions[bot] in #5186
• [lts/6.1] fix(ai-vector-dupe): stop holding the whole run in memory so large detections can finish (#4693) by @rkihm-BC in #5230
• [lts/6.1] fix(ai-vector-dupe): query with the same template text vector sync stored (#5198) (#5204) by @rkihm-BC in #5604
• [lts/6.1] fix(ai-vector-sync, ai-vector-dupe): apply the entity document's record filter (#5199) (#5205) by @rkihm-BC in #5605
• [lts/6.1] fix(server): run auth-flow and SyncData transactions on an isolated provider by @github-actions[bot] in #5781
• [lts/6.1] fix(provider): project NULL fields in the Create RLS check by @github-actions[bot] in #5784
• [lts/6.1] explorer-core: don't load hidden record tabs at boot by @github-actions[bot] in #5780
• [lts/6.1] fix(ai-vectors): wire colocated vector DBs when EntityVectorSyncer has no provider by @github-actions[bot] in #5782

Full Changelog: v6.1.5...v6.1.6