[EnragedAntelope]

Security release. Existing installs must re-run setup.bat / ./setup.sh to pick up Gradio 6 and the new dependency floors.

Security

• Gradio 6.30. The <6 cap is removed; the stuck loading overlay that caused it does not occur on 6.30.
• Dependency floors raised past known CVEs: gradio, starlette, transformers, accelerate, pillow, python-dotenv, pytest. pip-audit -r requirements.txt now reports only Pillow 12.3. Its CVEs are fixed in Pillow 13, which Gradio 6.30 does not allow yet (pillow<13).
• DNS rebinding. Gradio only checks Origin when the Host is localhost, and allowed_paths covers every drive, so a hostile page could read local files, including .env. A Host allowlist (127.0.0.1, localhost) now rejects other hosts with 400.
• .env is in blocked_paths. Gradio 6 run history (which stores every input and output) is off.
• Pillow decodes only PNG/JPEG/WebP/BMP/TIFF. This drops EPS (which runs Ghostscript), JPEG2000 and the other decoders that most of the open Pillow 12 CVEs are in.

Fixes found while testing

• Quick build Finish and cli build ignored the saved Custom endpoint captioner and failed with "no endpoint URL" (since 0.20.0). cli build now checks the captioner before generating.
• Under Gradio 6, an empty Textbox reached handlers as None (③ Caption failed on .strip()).
• Gradio's bundled SemiBold font has only a few glyphs, so "API" drew its "A" in a different font.
• The test suite overwrote the developer's .cache/user_settings.json.

Testing

• pytest: 674 passed. ruff check .: clean.
• New tests: test_launch_security (Host check, .env blocked, bind and share settings), test_pillow_formats, test_gradio6_defaults, and a custom endpoint regression test for build_finish.
• Full UI test on Gradio 6.30 with no paid API calls:
  • Quick build Local (① preprocess and 24 ComfyUI shots);
  • picker click and shift-click;
  • ③ captioning against a local stub endpoint, and the caption editor;
  • ④ export with zip and the Idiot LoRa Builder hand-off;
  • ⑤ ai-toolkit config;
  • no console errors.