# promptflow-core package

## v1.18.2 (2026.4.21)

### Bugs fixed

- Resolving an RCE using PF_USE_SANDBOX_FOR_JINJA.

## v1.18.1 (2025.6.10)

### Bugs fixed

- Fixed a bug that could allow for arbitrary code execution

## v1.18.0 (2025.4.29)

### Bugs fixed

- Resolved an issue that allows an attacker to cause an RCE by setting specific environment variables

## v1.17.2 (2025.1.23)

### Bugs fixed
- Jinja template is going to use Sandbox Environment at rendering. With `PF_USE_SANDBOX_FOR_JINJA` set to false, sanbox environment is not used.

## v1.17.1 (2025.1.13)

### Others
- Promptflow Tracing feature is now disabled by default, with `PF_DISABLE_TRACING` set to true by default.

## v1.17.0 (2025.1.8)

### Improvements
- Dropped Python 3.8 support for security reasons.

## v1.16.0 (2024.09.30)
### Bugs fixed
- Fix promptflow serving app logged inputs out with default logging level.

## v1.15.0 (2024.08.15)

### Bugs fixed
- Fixed openai error handler not functioning for `AsyncPrompty`.

## v1.14.0 (2024.07.25)
### Improvements
- Remove dependency on docutils package.

## v1.13.0 (2024.06.28)

### Bug fixed
- Fix `AsyncFlow.load(source="path/to/prompty")` does not return a AsyncPrompty object.

## v1.12.0 (2024.06.11)

### Bugs fixed
- Fix ChatUI can't work in docker container when running image build with `pf flow build`.
- Fix [#3355](https://github.com/microsoft/promptflow/issues/3355) that IndexError is raised when generator is used in a flow and the flow is called inside another flow.

## v1.11.0 (2024.05.17)

### Features Added
- Support modifying the promptflow logger format through environment variables, reach [here](https://microsoft.github.io/promptflow/how-to-guides/faq.html#set-logging-format) for more details.
- Support async generator in flex flow.

## v1.10.0 (2024.04.26)

### Features Added
- Add prompty feature to simplify the development of prompt templates for customers, reach [here](https://microsoft.github.io/promptflow/how-to-guides/develop-a-prompty/index.html) for more details.

### Others
- Add fastapi serving engine support.

## v1.9.0 (2024.04.17)

### Others
- Connection default api version changed:
  - AzureOpenAIConnection: 2023-07-01-preview -> 2024-02-01
  - CognitiveSearchConnection: 2023-07-01-preview -> 2023-11-01
