v1.4.0

Worker storage

• Worker images now run as uid 1000 (previously a system uid, ~999). If you run
  workers hand-rolled with a bind-mounted storage directory and you adjusted
  ownership for uid 999, either chown the storage tree back to uid 1000 or set
  user: on the worker services in your compose file.
• Worker scratch output (ComfyUI output staging, video cache, audio staging)
  has moved off the shared /workspace storage mount into container-local
  scratch (/var/tmp/studio-workers). Upgraded split installs keep stale
  ~/.studio/storage/data/ directories on the host; nothing writes to them
  anymore and they are safe to delete.

Platform

• The API image now ships a launch manifest declaring the split compose
  contract (runtime_user). Studio Console reads it before boot; console
  releases after 1.8.1 will refuse to start worker profiles on images older
  than this release.
• cryptography upgraded to 50.0.0 in the API image (CVE-2026-69247).

UI

• Workflows and AI Prompts list footers no longer double the plural
  ("8 workflows", not "8 workflowss").

Images

All 9 images published to GHCR with tags :1.4.0 and :latest.

docker pull ghcr.io/selfhosthub/studio-api:1.4.0
docker pull ghcr.io/selfhosthub/studio-ui:1.4.0
docker pull ghcr.io/selfhosthub/studio-worker-general:1.4.0
docker pull ghcr.io/selfhosthub/studio-worker-transfer:1.4.0
docker pull ghcr.io/selfhosthub/studio-worker-video:1.4.0
docker pull ghcr.io/selfhosthub/studio-worker-comfyui:1.4.0
docker pull ghcr.io/selfhosthub/studio-worker-audio:1.4.0
docker pull ghcr.io/selfhosthub/studio-core:1.4.0
docker pull ghcr.io/selfhosthub/studio-full:1.4.0

Operators normally pull these via studio-console rather than directly.

Baked tools

• studio-console 1.8.1 - baked into studio-core and studio-full images.