- Text logs accept only .txt, .json and .log names; other endings are
rejected before any write.
- LoRA paths from workflows are approved by one shared rule: inside the
configured ComfyUI LoRA folders and .safetensors only, for loading and
for the Civitai metadata hashes alike. Metadata fails closed when the
folders are unknown.
- BV Remote LLM Provider no longer has an endpoint widget. The destination
is resolved by the backend from the provider catalog, the approved
API-key binding or the local settings file; the Configure dialog takes
the destination for custom bearer profiles and workflows saved before
this change drop the stale widget value on load.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>