The LLM extension 0.11 has been released.
This version includes security fixes, the highest severity being CVSS 7.4.
Additional changes:
- Collections over wiki pages check the caller's view right on each source page, with every rights-check method, and are re-indexed once at the first start after the upgrade
- Guest access to the MCP endpoint is opt-in: unauthenticated callers receive a 401 unless an administrator enables it for the wiki (LLMAI-182)
- A wiki's MCP configuration is applied only when an administrator saved it; the farm dashboard flags an untrusted configuration and offers to reset it
- Documents written through the collection API are attributed to the acting user
- "Clear index" clears the current wiki only, and hidden pages of a collection over wiki pages are no longer served over REST (LLMAI-206)
- Editing a page no longer removes unrelated documents from the search index (LLMAI-205)
- The chat script URL carries the page version, so browsers pick up the new version after an upgrade (LLMAI-216)
