1.49.0

1.49.0 (2026-07-30)

What's Changed

Features

• feat: Allow disabling redis_rate_limiter via empty RATE_LIMIT_AUTH_WINDOWS by @tofarr in #97
• feat: Enforce CSP via middleware (OHE-2815) by @tofarr in #94

Bug Fixes

• fix: enforce cloud analytics consent from TOS by @malhotra5 in #79
• fix(ci): use private bot PAT for pr-artifacts cleanup job by @jlav in #88
• fix(enterprise): atomically migrate legacy empty tool settings by @simonrosenberg in #12
• fix(settings): accept legacy detached MCP configs by @neubig in #93

Maintenance

• chore: bump SDK packages to v1.39.1 by @tofarr in #105

New Contributors

• @malhotra5 made their first contribution in #79
• @jlav made their first contribution in #88
• @simonrosenberg made their first contribution in #12
• @neubig made their first contribution in #93
• @tofarr made their first contribution in #97

Full Changelog: 1.48.0...1.49.0

---

This PR was generated with Release Please. See documentation.