v0.6.74: security hardening, workers recycling, next-mdx-remote and opentelemetry updates, data drains to snowflake, blob, datadog, bigquery#4561

Open

waleedlatif1 wants to merge 14 commits into

mainfrom

Commits on May 11, 2026

fix(security): SSRF fixes (#4548)
waleedlatif1
authored
fix(security): close cross-tenant IDOR gaps in OAuth credential and execution auth (#4549)
waleedlatif1
authored
fix(oauth): persist rotated Microsoft refresh tokens (#4554)
waleedlatif1
authored
fix(security): authorize MCP subagent IDs, oauth workspace, credential admin demotion (#4551)
waleedlatif1
authored
fix(deps): patch next-mdx-remote and opentelemetry CVEs (#4557)
waleedlatif1
authored
feat(mothership): add superuser env selection (#4558)

Sg312
and
TheodoreSpeaks
authored