Skip to main content

2 posts tagged with "release"

View All Tags

Closing the gap: prepared-statement coverage now spans every code path

· 3 min read
DataZoo Team
flAPI Development Team

flAPI v26.05.18 is out. This is a focused follow-up to v26.05.17's security roadmap. After yesterday's release, an internal audit caught that the prepared-statement bind was only wired into the GET executor — POST/PUT/PATCH writes and the Arrow-streaming endpoint still rendered Mustache templates as strings. This release closes that gap and adds the test corpus to prove it.

Security roadmap shipped — MCP RBAC, prepared statements, PBKDF2, audit log

· 4 min read
DataZoo Team
flAPI Development Team

flAPI v26.05.17 is out. This release answers a recurring question from operators evaluating flAPI for AI-agent access to real data warehouses: "Is this safe to expose to MCP-driven agents against production?"

The answer is now: yes, with single-line opt-insflapii project init demos still work without auth, and every production control is one YAML key away.

🍪 Cookie Settings