Release 2026.10.24-1

Completes two security fixes on the cloud service, adds country and terms to sign-up, and makes the processing queue more robust.

Cloud, United States
Cloud, Australia
Self-hosted image
Not in this release

Security

  • The Brotli decoder’s Python binding updated, completing DAF-SA-2026-002 on the cloud service.
  • OpenTelemetry updated so a crafted trace context header can no longer stall the service. See DAF-SA-2026-003.
  • The rule editor’s HTML sanitizer updated.
  • A system model’s key given in the wrong place is refused rather than stored as typed.

This release was not published as a self-hosted image: the 2026.10.26-1 image carries every change on this page.

New

  • Sign-up on the cloud service asks for the country of business registration and acceptance of the Terms. Updated Privacy Policy and Terms of Service, effective 2026-10-25.
  • Azure models with the deployment’s identity: a deployment model on Azure can sign in with the deployment’s own identity instead of a key. See Model configuration.

Improved

  • The processing queue cannot lose a task when the queue store fails mid-move, and paused workflows back off as their provider asks.
  • Import says which files it could not convert, and fails when none converts.
  • Translate handles an amount written out in words.
  • The document viewer shows one tooltip on the page image.

Fixed

  • A business rule step stopped by a server restart runs again.
  • Moving a page uses its position, and a stale view is refused instead of moving the wrong page.
  • Agent Review’s input limit counts only new input.
  • A tenant’s default model must be one it can use.

API

  • da admin tenant update: change a tenant’s details, such as its country. See Tenants and sign-up.
  • da admin models update: change a deployment model, its key included, without a redeploy; the deployment administration tools for agents can now make the same changes. See Model configuration.

All releases