v0.1.5
Release Notes (v0.1.5)
Features
Introspect
- Public Sharing for Oracle Reports: Users can now share Oracle reports with external stakeholders via public links that don't require authentication. A new visibility toggle allows you to easily switch reports between public and private status, making collaboration with clients and team members outside your organization seamless and secure.
Bug Fixes
This release includes important security and stability improvements across our repositories, with a focus on addressing critical vulnerabilities and enhancing thread safety.
Introspect
- Critical Security Enhancements: We've addressed two significant security vulnerabilities in the analysis tools functionality:
- Fixed a remote code execution vulnerability in custom tools by implementing proper validation of input models and restricting potentially dangerous built-in functions. This strengthens the security of the testing endpoint without changing how you use the feature. PR #501
- Resolved a code injection vulnerability (CWE-94) by restricting code execution capabilities and implementing validation for user-supplied code. This makes the application more secure when processing analysis requests while maintaining full functionality. PR #502
Defog-Python
- Improved Thread Safety: Database query helpers now properly manage connections and ensure they're safely closed after use. This prevents potential resource leaks and improves application stability, particularly in multi-threaded environments where multiple database queries are executed simultaneously. PR #89
These fixes enhance the overall security and reliability of our products while maintaining the same user experience you're accustomed to.
Maintenance Updates
Introspect
This release includes several important model upgrades and quality improvements to enhance the performance, reliability, and cost-effectiveness of the Introspect platform:
-
AI Model Upgrades: The planning model has been updated from Claude-3.7-Sonnet to Claude-4-Sonnet across the application, providing users with improved reasoning capabilities and more accurate responses.
-
Optimized Report Generation: The multi-agent report generation process now leverages o4-mini for initial report creation and gap analysis, while maintaining Claude 4 Sonnet for final output. This optimization delivers faster, more cost-effective, and more concise reports without sacrificing quality, improving your overall experience when generating analytical reports.