M-flow v0.3.4

M-flow v0.3.4

Critical Fixes

• Remove max_tokens parameter incompatible with GPT-5 series — all LLM calls were failing
• Fix session/conversation history crash — compress_text(str) type mismatch replaced with correct summarize_text(str)

High Priority Fixes

• Fix audio processing (create_transcript → transcribe_audio method name)
• Fix image processing (transcribe_image → describe_image method name)
• Fix UUID serialization in search results, cache adapters, and graph property encoding
• Fix _hash_sensitive dead code causing telemetry data corruption
• Fix CLI argparse dest keyword conflict preventing CLI from starting

Additional Fixes

• Fix ImageLoader JPEG extension mismatch
• Fix Bedrock adapter show_prompt import
• Fix describe_image and transcribe_audio blocking event loop (sync → async)
• Fix retry decorator across 14 adapters — excludes 400/401 from 120s retry
• Fix dedup tenant_id normalization
• Fix graph relationship ledger UUID collision on batch insert
• Fix PostgreSQL delete_database missing cache clear

Security

• Pin all GitHub Actions to commit SHA
• Add permissions: {contents: read} to 7 workflows
• Add Dependabot configuration
• Fix OpenSSF Scorecard compliance (135 → 28 findings)

Install

pip install mflow-ai==0.3.4
# or
docker pull flowelement/m_flow:0.3.4