Added
- Vercel AI Gateway is a built-in provider: add its key and call its models from any app format (#537 (opens in a new tab))
Changed
- Dependencies updated (#522 (opens in a new tab))
Gateway
- A fresh install starts with models.dev's models and prices as of 30 October 2026 (#542 (opens in a new tab))
Fixed
- Names refuse invisible characters everywhere, and a NUL byte no longer causes a server error (#523 (opens in a new tab))
- The console says when the catalogue, aliases or a chart couldn't load, and charts add no invisible tab stops (#526 (opens in a new tab))
- Usage tiles say when they couldn't load, Add member shows its whole message, and docs tables get names of their own (#528 (opens in a new tab))
- Console and UI library: status not by colour alone, wrapping list rows on phones, a clean theme switch, Undo for key disables and a Save button for project names (#529 (opens in a new tab))
- Toast actions close their toast, errors don't pile up or outlive a retry, and list focus survives a removed row (#531 (opens in a new tab))
- The service account sheet keeps Rename on screen on phones, and tables no longer redraw every row while scrolling (#532 (opens in a new tab))
- Rate-limited answers say how long to wait in the right unit, and "1 minute" rather than "1 minutes" (#533 (opens in a new tab))
- Codex sessions with subagents work on Grok and every other non-OpenAI model, and a tool_choice without tools no longer reaches providers that refuse it (#535 (opens in a new tab))
- Settings pages share the phone bar's edges on tablets, and access rows, the timing bar and the providers table line up (#536 (opens in a new tab))
- After an upgrade that adds a built-in provider, its models.dev models appear at once instead of after models.dev next changes (#540 (opens in a new tab))
Gateway
- Keys expire on the date chosen, the Platform API refuses unknown fields, both log retentions shrink together, and unreadable settings are named (#521 (opens in a new tab))
- A replaced provider key is no longer used for up to 30 seconds after the change (#524 (opens in a new tab))
- Key expiry and organization deletion emails say the time, on the install's clock, instead of implying the whole day (#534 (opens in a new tab))
Console
- The System page keeps saying the status couldn't load while it refreshes, instead of flickering back to loading (#530 (opens in a new tab))
Security
- Invitations send one address at most five emails an hour (#527 (opens in a new tab))